last executing test programs: 1m52.165143074s ago: executing program 1 (id=2207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r2, 0x0, 0x0) 1m51.061784829s ago: executing program 1 (id=2211): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) write$tun(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x11, 0x71, 0x10, 0x33}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1m49.001690914s ago: executing program 1 (id=2214): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020}, 0x2020) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r3, &(0x7f0000000180)=""/158, 0x9e) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) 1m47.679054312s ago: executing program 1 (id=2218): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x32, 0x32, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1}}, @func_proto, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "921c"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000006c0)=""/196, 0x50, 0xc4, 0x1}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r5, 0x3a, 0x24, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f00000000c0)={0x1, 0x4, 0x100}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x3, 0x100}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000002540)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x40c040, &(0x7f0000002500)={[{@data_journal}]}, 0x3e, 0x53a, &(0x7f00000000c0)="$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") 1m46.339683268s ago: executing program 1 (id=2221): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000000)={0x6, {"e512864f2c63b42b1e937260904ce544", "b80b00", "98fed86df169f801002f69ff0008e800"}, 0x3ff, 0x5}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {0x0}, 0x6}) write(r0, 0x0, 0x0) 1m44.722621567s ago: executing program 1 (id=2225): syz_emit_ethernet(0xc2, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbb87ede9580d3286dd60f4adf7008c2c0020010000000000000000000000000001ff0200000000000000000000000000013e0e02030000000000000000000000000000000000000000fc000000000000000000000000000000ff010000f80000000000000000000001fe880000000000000000000000000001fc020000000000000000000000000001fe8000000000000000000000000080bbd9b20c8983033296ff0200000000000000000000000000018700907800000000000000000000000000000001"], 0x0) r0 = inotify_init1(0x0) socket(0xa, 0x2400000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xd666) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x7) inotify_add_watch(r0, &(0x7f00000004c0)='./file0\x00', 0x79d) 1m29.161475138s ago: executing program 32 (id=2225): syz_emit_ethernet(0xc2, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbb87ede9580d3286dd60f4adf7008c2c0020010000000000000000000000000001ff0200000000000000000000000000013e0e02030000000000000000000000000000000000000000fc000000000000000000000000000000ff010000f80000000000000000000001fe880000000000000000000000000001fc020000000000000000000000000001fe8000000000000000000000000080bbd9b20c8983033296ff0200000000000000000000000000018700907800000000000000000000000000000001"], 0x0) r0 = inotify_init1(0x0) socket(0xa, 0x2400000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xd666) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x7) inotify_add_watch(r0, &(0x7f00000004c0)='./file0\x00', 0x79d) 32.766157984s ago: executing program 3 (id=2387): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r0, &(0x7f0000002180)={0x50, 0x0, r2, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x80, 0x2404}}, 0x50) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3, {0x403, 0x4, 0x8, 0xfff}}, 0x20) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0x1, 0x0, 0x3, 0x9, 0x200000002, 0xfff, 0x800, 0x0, 0x0, 0x6000, 0xbca4, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r1, 0x0, 0x20000) 32.413665724s ago: executing program 3 (id=2391): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 30.765379748s ago: executing program 3 (id=2394): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f000000ad00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f000000ae00)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@grpquota}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@errors_remount}, {@usrquota}, {@nodiscard}, {@errors_remount}, {@nointegrity}, {@errors_remount}]}, 0x24, 0x6260, &(0x7f0000000340)="$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") creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x81, 0x0) 26.975335563s ago: executing program 3 (id=2399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x2000) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r9, 0x3, &(0x7f0000000340)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r3, 0x0}, 0x0, 0x0]) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000d80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB='\f\x00-'], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x8000) 25.106870959s ago: executing program 3 (id=2403): r0 = socket(0x10, 0x803, 0x2) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x20202, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[], 0x2c) mlockall(0x2) io_setup(0x3ff, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000200), 0x400000, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="392c00001300034700bb5be1c3e4feff06000000010000004500e03fd8", 0x1d}], 0x1) 24.09856537s ago: executing program 3 (id=2405): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB='dots,dots,dots,check=normal,fmask=00000000000000000000017,nodots,time_offset=0x00000000000004db,nodots,dots,nodots,nodots,check=strict,nodots,nocase,nodots,nodots,nodots,nodots,dots,umask=00000000000000000104104,nfs=stale_rw,nocase,dots,\x00'/253], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xfe, 0x0, 0x0, 0xfffffff8, 0x3e, 0x0, 0x0, 0x0, 0x0, 0xff, 0x40, 0x0, 0x0, 0x480000, 0x0, 0x2, 0x7}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000500)={"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"}) 10.924112292s ago: executing program 4 (id=2441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800a00010071756f7461000000100002800c00014000000000000004003c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c00008008000340000000021400"], 0xe0}}, 0x20008844) 10.787499609s ago: executing program 4 (id=2442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x23ebd572}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x48000) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000a00002000ff1100000000000000000000000000060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 5.988090424s ago: executing program 4 (id=2449): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x32, 0x32, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1}}, @func_proto, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "921c"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000006c0)=""/196, 0x50, 0xc4, 0x1}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r4, 0x3a, 0x24, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f00000000c0)={0x1, 0x4, 0x100}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x3, 0x100}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000002540)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x40c040, &(0x7f0000002500)={[{@data_journal}]}, 0x3e, 0x53a, &(0x7f00000000c0)="$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") 5.762877956s ago: executing program 0 (id=2450): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f000000ad00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f000000ae00)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@grpquota}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@errors_remount}, {@usrquota}, {@nodiscard}, {@errors_remount}, {@nointegrity}, {@errors_remount}]}, 0x24, 0x6260, &(0x7f0000000340)="$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") 5.36809095s ago: executing program 4 (id=2452): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x4100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x3, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0xce7c, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0x2, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0x7, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0x2, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x7, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x3ff, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x7f, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 3.381446437s ago: executing program 0 (id=2453): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001400)="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", 0xff8}], 0x2, &(0x7f0000002400)=[{0x10, 0x1, 0x8}, {0x38, 0x108, 0x2, "d1cb48e1ba3f7b288450fd50ef072eb1dd2d3d71fdbd35d588ac369a778a8af9ac"}, {0x100, 0x114, 0x3, "14de4e11cc1b7b9c87cb283c35ed2161798d1ff02f43f9040dbd96a4a31979463a557b963633819542a4dbff22946796f56173f2dcfa3a07ab17cf12afccbad562e51b8730a884d42aec71e6a411d62fd76b05b7baf008f6b781fa2c381c42907a2298b01b9341a64fcba61b45edd16e32a049db6f7531740ee2cc5bdd533d3aae7f3c911dba00a82d4dc36159c1ea023056cb6ec7379e6c33461a2422a3e1639c833116b5480f74d4cf5b59450ec4f14c278f029e60700638a59e224a42760a4deac19e6f5ed15c79802ab0c7202996abfa04d7f13e7160dfeaae2f58574d96cf8a405acc4b885829"}], 0x148}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 3.313422215s ago: executing program 2 (id=2454): r0 = socket(0x2c, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0xfe2f], [0x0, 0x0, 0x3], [0x0, 0x0, 0x2800000000, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) 3.164679421s ago: executing program 4 (id=2455): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 2.998673963s ago: executing program 0 (id=2456): socket$inet6(0xa, 0x1, 0x84) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.988900062s ago: executing program 2 (id=2457): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x9, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0xfc, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 2.773512285s ago: executing program 4 (id=2458): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc0e632700029e"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) 1.835404638s ago: executing program 2 (id=2459): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) shutdown(r0, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e20, 0x7, @loopback, 0x8}}, 0x0, 0x0, 0x27, 0x0, "bb353738626e3fc7c9f1cf53b6a7b4e24740bd4c0b42a25d7214bf92594925208a0e2f964e654dc534a6b24d4993fcf19b2d07ee818a118a7c49462189316d556d2ccd00"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 1.618352262s ago: executing program 2 (id=2460): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@mmap={0x0, 0x1, 0x4, 0x100000, 0x9, {}, {0x4, 0x0, 0x8, 0x2, 0x8, 0x7, "2622bf50"}, 0x1, 0x1, {}, 0xffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0xa, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 1.237177848s ago: executing program 2 (id=2461): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$sndseq(0xffffffffffffffff, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @addr}, {0x1, 0x0, 0x0, 0x9, @tick=0x5, {}, {}, @result}, {0x81, 0x0, 0x0, 0x0, @tick, {0x6}, {0x5, 0x7}, @control={0x0, 0x4}}, {0x0, 0x0, 0x0, 0x0, @tick=0x5a5, {0x0, 0xf9}, {0x0, 0xff}, @note={0x0, 0x1, 0x3, 0x1, 0x3}}], 0x70) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x4001, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.220585955s ago: executing program 0 (id=2462): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@mmap={0x0, 0x1, 0x4, 0x100000, 0x9, {}, {0x4, 0x0, 0x8, 0x2, 0x8, 0x7, "2622bf50"}, 0x1, 0x1, {}, 0xffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0xa, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 906.276522ms ago: executing program 0 (id=2463): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001400)="9e74720b4949dd14b726badb57f016c3874d42340685e5af37d9d352ac739667546ab1897ec0f2fca33e402e62684d6f1f7bd3b281c17ff2b9575e88ed0264d35a6a10a5635b3b95fdd129d8a7f19bfc456f92098237f0e6fadce260d131a520b26d86390dbb99fcfbb9c5716a8134f0e1df76c45f10c57c8c658c3b76a7f84ff9d6d0964edecac3bc88d2b73051513a74ac758e7bb09e11f4cf999a486c5a8c34406d79ce51b790ac546521582bc2a9ad6167d7c5b9edd962d693e080a314bd31180ff59d7ec6b77bd6036817ab9e6f175736046c9f1d0997b9902c1a1201a446bf707bd2af47ec19dc8c97dfa73e532cada9a36f3bee55f1008ead64c640830d5eb5f047ad731713100ee3aa8d7c1fb0619c254d98ac0267df6e1dd3838cb31020af60b073376c1a08800fdf3d35720041f2aa74795ed3dbdb87631bfaddbb2da8f08fcde8d868070fbe7776073fe53b582e60b2bc1a84ba46c13227852dc9a65944e9186b7278973a36d17afa6181a2cc7539b32bfb64baceffbe3fd05efc088099d1ac62d2d5b062ecb3dc9dfdae20400a0ac09418013f02eeb3407e816534b4179810e59b4382cc59b86171586b1790257fed1b9ff27748a7d90d9407380e85a21faf357ac75a5821c581b34ca0a5531d527676f4e377f056a6dd574c7ac05d16fed626083bd8206ed32289bf5d94c3ba54f9c611ba2bbfc0cc66c0aee6bd32af449860a3969680bed537c3afe4128aa9984db297894bd01b69b1ffff4c86abdb946349deb1ee92013afd9d08d933431e41dd86648bd57965e6d9452542bd09411954ea4b0c27fe46203c8fcd8a1dc462d95003420f170bed4f4353ffde59ad6378aa90d1d2aa752218233d49b416e98d4a6ffd1baa526a8ce3451162b5eb5355f3faa6289ea2fbfd61278d407e77dc321b922c548c2d0eebd9b64071581830e66d65fb2a16d268db95a4db7bc7d4c7bd9ad000cb9520642c2bea06910ad99eca323b86189aab3db9125b4285e818854a012f74b2062de694986c7a03457775e96b30403ab06c4aa786f82e92c02635ec91ae7437fc0b71bbb73f7d15f39e023c88a5b156bd0f91e119f729695c48250975fe853a056c2a603f794b80e0fc22804616136912604e3833154f6f16a4bdaf48338152756a7fbf1b4cff414e98a4bff1f024727e676210448d189952ef67acb055433f3d0cb5abaae77c12dbe9d3b4a986c31b562025ef97dcc073b03ff6d3b010569238b11892f59caff159d4c54a3ebda66936b2d37a6c207a8362f7defeca6d5879037a2a5f195c04486d27686bff036b955c9beb8561e1f625acb04791992a8080e45c939a021bd2a4212018b0d605437962cf5736a7264b8734d74ed87e5e36ebd369aafbf9e2ba3f8d69b156f763024a6268199a70356a2824868180a9ff494179b35afde7047a94c7753dcefd7649b8b9c8642a1c2998e82d83c4812aa445a3ce06b76befadfe6278e1ea44b9ab784d945e8df0e2f3c6ec25341975f6bc0af7e102b6f5168b62c92f74babb856e3bbd2a96d952e1a40c5dd61252f8b9b701df9e3d272e77043cff57849fac4511f8d9d6bdcb8be26d96612565926b025c1d4d66263c8fa097dc0dfa5b1b8a36f9ef0881cbb3538f93a488259df30727c422313faf17ba54b246bd416b38f853b4b965a101c04a9ba8298f66318a41bc03467bac68893bc9b5e1d47f5913bf3b29fb522a597facbd406486bb0bae631fd321eecccc5c3a7bb8880073882c42d22487d58ece660c23862239b7699ccde923b88f777053f351b1a6c241546cefe6a52a6013e18ef0a2c37f41688e33d79efe41dfd81df58f1423baa3c1cc4ef7bcb1bde04e0bc0c9c63233e77afd2ceb742e5e7e7a7af2265c5cf70c639b1d84a637f7bb632baa3cee451e23f065614c6afaa637c89c5191925ebafffcd84fdb9e6a0ebfee2f1f4026a16e98477c8e15aacb4bfe45011e0a052eee775d48e6d88216c52fadb55f6fa4ef07f3b1b70b63beb74c6473008bcfa08fd4f320c95de4f74c37a098a1c05c486c4b98ada818e94d96f4f67257ad6a3218ba047839e634c8801e9c9bd157211889299114752cc3cf92bc340443eb74486d32be5b8055ed20c53d58a0a047c85bf63ceaf75286f6af2b9e8a50b82d7f6828cf90611fd59cd155b8152b63f6b5d447d6527288e5051966250ebda77c910b7468a162813f09dde277a4ae30539db55fabee7a10a4cc55f39c9049f907baac8171c0502c54234f7679c1e79415635cc6851b92e51cc784f078706ebe29924169d9e5982d335ec2b4b35f002cc66eba2b47e883c05a7980e30dddc6a59a0fee2403e77a31c147c12319e05cd3f101fecb1a14ab77bddd958d0da63263aa75fb07b936686c7391d1f97576fb4d526d73acecab0573c2179cf92bd5dec0d03861846ca31d4c555efa4670cab43de38fd8c979e06a0ba5e990e5cd84c3d760f8b8f59623ed2f0063bdbe9b3d00b7967b08edf6575c4f887db243f77d07b85a9b7aa2b37d562f4adaab6891408c1003c82891b736c2eb61919f17d0657eb49fbf6bb51c56ac8547212f15b950683c533ad170fb23ac11e55eddffd044710a6bcf563e601e77a75277f1dcc92a5fb0052b41cebb282aecf93d460706f1323b8766140389c66ffed5026daf508c52fcaecb55c1aa4273cb05d25d04938c7df6bcda9174cf08b4d2b7172a3dc45ce9866e6141210c7ee5a61d35751fa2945a4ff94e5df5d77eb0c9fc63148c4871d2dca098bb192aa99ccab8dd8b78313d124cdfe5cc2eabe884554f6081abb91904fe01f6d9d01cb320ab62002a4644b5ccd248e8bec740d72851e328ff55157b39234705e8bfe947daf892be1a09230f3d8b86360adce01621ba347fc9e9e4901fc815a208c63a60266f1998709f5f03983a7b35e0e2963070a91f2912beb46c36d6d5b748944630ccd84917b3eb4abd9353b19ca8042f57a401fe05241b5771e4b8d3c7c592295771fe9e02a2906719e38d306e53105f1c48ff88cb93ff1d315428f15baeeb56fb4f5504ef6993bd0d33ce8dba40be620dc4b2d5e3b5d5a941bcd194723a3c634a19599e0d0bc7ce0d55f1411ae3b2e25caa39c96cacefe08a2870b25615e3106a64cc9181548cfcb62ffc6fe10294fec2d7d0297b913fd7326ad8bb991113172fa8dececf448f887fbf9f0def1bddb796e5e1f323234326a089bed346b3d8dcec4ee52e78b50dfc48dee499420ca1f652b34d8a64b890801e5c90f8fae2f688e68ae3d1d079f4bfc350ef007626746958ad7bcd13dee16913407bc953ff5ac3013b1592b00fdf43784497ce8eaddfb7345fcd3b07d64e284a7529cfb9899e5b8ca62c7eb1491b985f2a3f544d6978107f87bcd8496a34d0f429e65558000b472108a99028e263649be5f3e75c10ca4102819776330423e3264a87095f2b3be20e1ea911b2e285191a4c27a0eab19a5bdbf26bd08fead4f22ebe5b1c82e99edb0c49a4770f74b2e012c5b0d6c6599eaa7f6939cffe30a4184fb3dec8c5a2acd6718edda3867f25cb552926b34c0ee01ccc0160f6f90d08eb72062d014e11285b9c3d02176942c6d881ef830c313b8b578cb54a494205fe7ecf257f7d545c374b931c6c2b15dceacd926b3b76c5298edf0c3bd943537c320ec4c151e6d94743288a030f7cf759229736e68963871b3f31eb521f3e9106255a7c9b8b9db64e9627922df28b5610fa5d66d6fc5fd9966ab57c46daac489b2dabb7273fe15c14a4d837efa05449e8ca37682ea41c363b963cb7ca27d3a2e697d09b71bbab30f157fb0edbcaaf291e4ee0777afb24b1645b9286101daf36cd3af7fed31fee657ddaf2cdd9906d732051eed5bbeec96f9348ba230bd26f0a0f91e3353ab70c85b1af9af9d56d283992eeb24c1e4199088305ba9b2463c0585b28678726bd99ee89722a3525a06d01c0dc1641634748e401f38506d5066ec458235001f1a1d921154cf5bb5946cb9dcf02b5adcb94607fe95af9226346e7bd55b41d376b27d587d840be88eb0aa988e205b1cd63ce4102b7feda0d6bf632a03b80c320f4bacf1660f72c7fd18098f39e026d396135ceaa5844e8dae0b75644e69019baf7cff642d01e503f6017ab253d5af0fca728b608d17dfc86b3bcb4332a52de77e3f8f81b90fe9877cc5cd8e382290f1433404a5810a88c5bdb16d28578479956a049b4ad4fbfe739b38fcef8516699213d276d58de8e5a7989b1dad8a7f04617bb1146c97bda69c2cd9cfa526d742dc92822131d50f2b11b914ba02d5c7614fcd327a1c4446513d9443615a3de7543b3aec7a84a88e54d1ca1f53057d6b30ad49d7fc93282dc00ceab4d16e376383516b1c86732bfbfcc5ef52945fb42e751688c9359032cbfcc870006cc66e22009465e1e74e367f50cc0e8e103b690ce77b8fb641d522a129b1710835f75661301b2a300ec0ba1b883e1ca1ac39df11dd292b8df892ae1a3d705460bcd332fb42385f66d9420d1af2a8b19a36a27584c1eb24e8d02fd4bf907ff952fb30e55c188c4014680145bc2e9ea970beede08dda6aba0d0f698ee373bb94e666de280d6ad6f5200224a18053c2d1360d76926fd1dc1611e8481fcb7c6491addfbc2a2de5975bcd8478260b79134eaa13fe1e93e109f85d45305744b008de64075bf7b3ded8ef7f7d9051fd7ec24f6f36ce3ddd57316d39d2d25257bb226ad0e6950a9c488c5c366ef5c7b3d000ba11b5725755a6d70cdbd4d18e259b9a1cb1e62d8eaf4346faa259cdc09e75bf1ebc05e288f49a73004f80dfd56922a326055e3c492a70fda0044491e46af19711d7e47b898b614f3547d2201579774dd2896b892a0a6ca9e27195e7285dac63b4b2dc922e74ceb8eacccf46c618f381595c22c4d2c091a82808f8fb9fc260773f6c8cfef8e18e27d7fd05de10b8741ba6b2ffe8ce1761708e06f7a4eddd7121b70a4ab54739990a43e4842f36968449c45be8515c417fac4e9172756fef83d7906ce10261581563c6eb5f3d880f82f5e90c284c20bf95343dfcf2c63ad00a7dca4b8c6ed0614938ed7aca529c50610a0b3c5ecbe4977f6b13e40f50bb47ff53bd887e71040f0dc44d60a306a37e400cea89c6dc59aa2249693e0da9d0b94754aec6c4bbf4efef108974ceae0421dc09f2700643c9dd2fd56f7ac4296e3a3afcb2790adb9779c7bad5aca76ccfb467ec4be3462bef0ceccc5bbbbb0e1c124f569066d92fa7af10f5731801d8b325162c6411794ab42f1924aad20af5c626e4f20f79978bc1ba4c215e79ee2bacc973e17f6563e360290cb867e6bdcff998f690cd52ecdf0a9b308cfe7699a5bf2b5dc58273dd8da08961e8712d26913a394f45d40b0e6dd61e2c94851eb15725006f8d3a9badc66e79e465783eec94f9a6ae2c6697ea18d9fb1a4f314d6671b9ae8b9f543119b46c3b483e58efaf7bd2e023423008b2f12bb663958d0c2c1f1c37ac90f19d44a8aef9a65981c1e8c9122c818eb6fe77d5703aa42a96ae6e54fe90c215b8b622bc6fc3c8ce8ff715209b72f41b79293e4411211e9d0f324d2671196ca5dda91e0567d00623e144927f109fb521fe01559d7185e3f998309d4923b7ac5c18869467cefae61ba7cce5d26728d424d87a03f24f5e9219642ba1e06ee8ca0af76da5d0b642b7ec25a30bc2969e5085c963d0ed6ec16831f03a06d34960d6c91a38dc06d97745130e945dc1f36b8f02786f05fbf26f425ca53063fcaa3dbaa8a1f6cfd13e77b644ad7", 0xff8}], 0x2, &(0x7f0000002400)=[{0x10, 0x1, 0x8}, {0x38, 0x108, 0x2, "d1cb48e1ba3f7b288450fd50ef072eb1dd2d3d71fdbd35d588ac369a778a8af9ac"}, {0x100, 0x114, 0x3, "14de4e11cc1b7b9c87cb283c35ed2161798d1ff02f43f9040dbd96a4a31979463a557b963633819542a4dbff22946796f56173f2dcfa3a07ab17cf12afccbad562e51b8730a884d42aec71e6a411d62fd76b05b7baf008f6b781fa2c381c42907a2298b01b9341a64fcba61b45edd16e32a049db6f7531740ee2cc5bdd533d3aae7f3c911dba00a82d4dc36159c1ea023056cb6ec7379e6c33461a2422a3e1639c833116b5480f74d4cf5b59450ec4f14c278f029e60700638a59e224a42760a4deac19e6f5ed15c79802ab0c7202996abfa04d7f13e7160dfeaae2f58574d96cf8a405acc4b885829"}], 0x148}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 61.57531ms ago: executing program 0 (id=2464): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x24, r3, 0x1, 0x3, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 2 (id=2465): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x32, 0x32, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1}}, @func_proto, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "921c"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000006c0)=""/196, 0x50, 0xc4, 0x1}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r6, 0x3a, 0x24, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f00000000c0)={0x1, 0x4, 0x100}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x3, 0x100}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000002540)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x40c040, &(0x7f0000002500)={[{@data_journal}]}, 0x3e, 0x53a, &(0x7f00000000c0)="$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") kernel console output (not intermixed with test programs): ounted with checkpoint version = 48b305e5 [ 649.445572][T11067] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 649.451800][T11067] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 649.465852][T11067] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 649.745231][T11073] loop2: detected capacity change from 0 to 4096 [ 649.812249][T11076] loop3: detected capacity change from 0 to 256 [ 649.836030][T11073] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 649.892941][T11073] ntfs3: loop2: Failed to load $Extend (-22). [ 649.919798][T11073] ntfs3: loop2: Failed to initialize $Extend. [ 650.247516][T11087] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1675'. [ 650.257053][T11087] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1675'. [ 650.345604][ T8] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 650.395774][ T27] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 650.525616][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 650.533682][ T8] usb 1-1: config 0 has no interfaces? [ 650.544326][ T8] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 650.553748][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.562053][ T8] usb 1-1: Product: syz [ 650.566484][ T8] usb 1-1: Manufacturer: syz [ 650.571226][ T8] usb 1-1: SerialNumber: syz [ 650.585143][ T8] usb 1-1: config 0 descriptor?? [ 650.585873][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 650.621839][ T27] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 650.658724][ T27] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 650.672890][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.681620][ T27] usb 2-1: Product: syz [ 650.686475][ T27] usb 2-1: Manufacturer: syz [ 650.692380][ T27] usb 2-1: SerialNumber: syz [ 650.700511][ T27] usb 2-1: config 0 descriptor?? [ 650.812016][T11079] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1672'. [ 650.823433][ T8] usb 1-1: USB disconnect, device number 35 [ 651.437753][T11101] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 651.448076][T11101] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 651.454478][T11101] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 653.125155][ T9] usb 2-1: USB disconnect, device number 24 [ 653.339784][ T9880] Bluetooth: hci3: command 0x0c1a tx timeout [ 653.495639][ T9880] Bluetooth: hci1: command 0x0c1a tx timeout [ 653.506291][ T9880] Bluetooth: hci2: command 0x0c1a tx timeout [ 653.784751][T11120] loop2: detected capacity change from 0 to 4096 [ 653.937732][T11120] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 653.989189][T11120] ntfs3: loop2: Failed to load $Extend (-22). [ 654.040740][T11120] ntfs3: loop2: Failed to initialize $Extend. [ 654.385709][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 655.425598][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 655.462900][ T9] usb 4-1: config 0 has no interfaces? [ 655.493275][ T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 655.529957][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.554432][ T9] usb 4-1: Product: syz [ 655.562216][ T9] usb 4-1: Manufacturer: syz [ 655.567401][ T9] usb 4-1: SerialNumber: syz [ 655.584615][ T9] usb 4-1: config 0 descriptor?? [ 655.704781][T11144] loop0: detected capacity change from 0 to 512 [ 655.715147][T11141] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 655.723176][T11144] EXT4-fs: Ignoring removed bh option [ 655.732359][T11141] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 655.746653][T11144] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 655.755280][T11141] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 655.850045][T11144] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.1691: corrupted in-inode xattr: e_value size too large [ 655.898111][T11128] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1688'. [ 655.926007][T11144] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.1691: couldn't read orphan inode 15 (err -117) [ 655.944988][ T9] usb 4-1: USB disconnect, device number 41 [ 655.986925][T11144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 656.046335][T11144] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 656.133750][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.575108][T11153] loop2: detected capacity change from 0 to 512 [ 656.682274][T11153] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 656.691902][T11153] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 656.702120][T11153] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 656.711315][T11153] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (fffc1829) [ 656.721027][T11153] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 657.568709][T11162] overlay: filesystem on ./file0 not supported as upperdir [ 657.746791][ T9880] Bluetooth: hci2: command 0x0c1a tx timeout [ 657.753118][ T9880] Bluetooth: hci3: command 0x0c1a tx timeout [ 657.815557][ T5083] Bluetooth: hci1: command 0x0c1a tx timeout [ 659.485774][T11182] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 659.508932][T11182] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 659.525813][T11182] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 660.219358][T11193] loop0: detected capacity change from 0 to 512 [ 660.253594][T11193] EXT4-fs: Ignoring removed bh option [ 660.281571][T11193] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 660.307093][T11195] loop3: detected capacity change from 0 to 256 [ 660.367882][T11193] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.1703: corrupted in-inode xattr: e_value size too large [ 660.432121][T11195] FAT-fs (loop3): Directory bread(block 64) failed [ 660.447194][T11193] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.1703: couldn't read orphan inode 15 (err -117) [ 660.469791][T11195] FAT-fs (loop3): Directory bread(block 65) failed [ 660.488602][T11195] FAT-fs (loop3): Directory bread(block 66) failed [ 660.497899][T11195] FAT-fs (loop3): Directory bread(block 67) failed [ 660.504656][T11195] FAT-fs (loop3): Directory bread(block 68) failed [ 660.511326][T11193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.622627][T11195] FAT-fs (loop3): Directory bread(block 69) failed [ 660.658195][T11193] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 660.686469][T11195] FAT-fs (loop3): Directory bread(block 70) failed [ 660.710941][T11195] FAT-fs (loop3): Directory bread(block 71) failed [ 660.721189][T11195] FAT-fs (loop3): Directory bread(block 72) failed [ 660.736130][ T8] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 660.741099][T11195] FAT-fs (loop3): Directory bread(block 73) failed [ 660.851173][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.965970][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 660.969820][ T8] usb 3-1: config 0 has no interfaces? [ 660.972551][ T8] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 661.024333][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.215644][ T5083] Bluetooth: hci3: command 0x0c1a tx timeout [ 662.217462][ T9880] Bluetooth: hci1: command 0x0c1a tx timeout [ 662.222463][ T5083] Bluetooth: hci2: command 0x0c1a tx timeout [ 662.280767][ T8] usb 3-1: Product: syz [ 662.285011][ T8] usb 3-1: Manufacturer: syz [ 662.299678][T11206] netlink: 'syz.0.1706': attribute type 4 has an invalid length. [ 662.349681][ T8] usb 3-1: SerialNumber: syz [ 662.354463][T11210] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 662.382272][ T8] usb 3-1: config 0 descriptor?? [ 662.636067][T11199] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1705'. [ 662.667537][ T8] usb 3-1: USB disconnect, device number 36 [ 662.845353][T11216] loop1: detected capacity change from 0 to 2048 [ 663.505628][ T27] psmouse serio22: Failed to reset mouse on : -5 [ 663.526256][T11222] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 663.540257][T11222] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 663.556538][T11222] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 663.584321][T11214] loop0: detected capacity change from 0 to 32768 [ 663.606821][T11214] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.1708 (11214) [ 663.688132][T11214] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 663.738048][T11214] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 663.762766][T11214] BTRFS info (device loop0): enabling disk space caching [ 663.782908][T11214] BTRFS info (device loop0): force clearing of disk cache [ 663.813061][T11214] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 663.838009][T11214] BTRFS info (device loop0): use zstd compression, level 3 [ 663.853975][T11214] BTRFS info (device loop0): disk space caching is enabled [ 663.961153][T11243] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1714'. [ 663.978367][T11243] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1714'. [ 664.030127][T11214] BTRFS info (device loop0): enabling ssd optimizations [ 664.085078][T11249] loop2: detected capacity change from 0 to 512 [ 664.112026][T11214] BTRFS info (device loop0): auto enabling async discard [ 664.147080][T11249] EXT4-fs: Ignoring removed bh option [ 664.168393][T11214] BTRFS info (device loop0): rebuilding free space tree [ 664.175782][T11249] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 664.321410][T11249] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.1715: corrupted in-inode xattr: e_value size too large [ 664.419590][T11214] BTRFS info (device loop0): disabling free space tree [ 664.438668][T11214] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 664.450593][T11249] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.1715: couldn't read orphan inode 15 (err -117) [ 664.463942][T11214] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 664.516803][T11249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.569808][T11253] netlink: 'syz.1.1716': attribute type 4 has an invalid length. [ 664.627747][T11249] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 664.722827][ T8062] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.868749][ T5776] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 665.495979][T11208] Bluetooth: hci3: command 0x0c1a tx timeout [ 665.576394][T11208] Bluetooth: hci1: command 0x0c1a tx timeout [ 665.582603][ T5786] Bluetooth: hci2: command 0x0c1a tx timeout [ 665.950598][T11255] loop2: detected capacity change from 0 to 32768 [ 666.630567][T11257] loop1: detected capacity change from 0 to 40427 [ 666.666304][T11266] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 666.678599][T11266] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 666.699946][T11266] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 666.751159][T11257] F2FS-fs (loop1): invalid crc value [ 666.771256][T11257] F2FS-fs (loop1): Found nat_bits in checkpoint [ 666.857159][T11257] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 667.007927][ T5772] syz-executor: attempt to access beyond end of device [ 667.007927][ T5772] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 667.017822][T11264] loop2: detected capacity change from 0 to 32768 [ 667.032257][ T5772] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 667.046381][T11264] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1720 (11264) [ 667.075588][ T27] misc userio: Buffer overflowed, userio client isn't keeping up [ 667.095978][T11264] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 667.125654][T11264] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 667.134386][T11264] BTRFS info (device loop2): enabling auto defrag [ 667.156846][T11264] BTRFS info (device loop2): use no compression [ 667.163221][T11264] BTRFS info (device loop2): force clearing of disk cache [ 667.189807][T11264] BTRFS info (device loop2): max_inline at 4096 [ 667.197449][T11264] BTRFS info (device loop2): disabling free space tree [ 667.289876][T11264] BTRFS info (device loop2): enabling ssd optimizations [ 667.298064][T11264] BTRFS info (device loop2): auto enabling async discard [ 667.324073][T11264] BTRFS info (device loop2): rebuilding free space tree [ 667.385296][T11264] BTRFS info (device loop2): disabling free space tree [ 667.406344][T11264] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 667.460405][T11264] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 667.822107][T11296] loop1: detected capacity change from 0 to 1024 [ 667.857885][T11296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.932331][ T8062] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 667.984383][T11301] loop0: detected capacity change from 0 to 128 [ 668.012022][T11301] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 668.103747][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.347223][T11305] loop2: detected capacity change from 0 to 512 [ 668.369236][ T27] input: PS/2 Generic Mouse as /devices/serio22/input/input21 [ 668.374095][T11305] EXT4-fs: Ignoring removed bh option [ 668.408697][T11307] netlink: 'syz.1.1727': attribute type 4 has an invalid length. [ 668.417968][T11305] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 668.484470][T11305] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.1725: corrupted in-inode xattr: e_value size too large [ 668.526095][T11305] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.1725: couldn't read orphan inode 15 (err -117) [ 668.580236][T11305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.586912][ T5785] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 668.615831][ T27] psmouse serio22: Failed to enable mouse on [ 668.617139][T11208] Bluetooth: hci3: command 0x0c1a tx timeout [ 668.682524][T11305] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 668.696018][T11208] Bluetooth: hci2: command 0x0c1a tx timeout [ 668.785552][T11208] Bluetooth: hci1: command 0x0c1a tx timeout [ 668.816234][ T5785] usb 1-1: Using ep0 maxpacket: 32 [ 668.861681][ T5785] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 668.899744][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.924697][ T5785] usb 1-1: Product: syz [ 668.930162][ T5785] usb 1-1: Manufacturer: syz [ 668.935203][ T5785] usb 1-1: SerialNumber: syz [ 668.959947][ T8062] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.976759][ T5785] usb 1-1: config 0 descriptor?? [ 668.998990][T11317] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1731'. [ 669.033054][T11317] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1731'. [ 669.198052][T11314] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 669.204913][T11314] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 669.219044][T11314] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 669.234006][ T5785] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 669.253111][ T5785] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -32) [ 669.366292][ T5785] peak_usb: probe of 1-1:0.0 failed with error -32 [ 669.478351][T11330] loop1: detected capacity change from 0 to 256 [ 669.776568][T11338] loop1: detected capacity change from 0 to 512 [ 669.805047][T11338] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 669.842239][T11338] EXT4-fs (loop1): 1 truncate cleaned up [ 669.857015][T11338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.872256][T11341] loop3: detected capacity change from 0 to 512 [ 669.902227][T11341] EXT4-fs: Ignoring removed bh option [ 669.944683][T11341] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 669.979299][T11341] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.1740: corrupted in-inode xattr: e_value size too large [ 670.003784][T11341] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.1740: couldn't read orphan inode 15 (err -117) [ 670.053121][T11341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.104382][T11341] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 670.113220][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.237767][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.851315][T11351] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 670.914666][T11351] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 671.012075][T11351] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 671.380442][ T5785] usb 1-1: USB disconnect, device number 36 [ 671.497030][T11365] loop3: detected capacity change from 0 to 512 [ 671.504631][T11365] EXT4-fs: Ignoring removed bh option [ 671.512220][T11365] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 671.556449][T11365] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.1750: corrupted in-inode xattr: e_value size too large [ 671.739087][T11365] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.1750: couldn't read orphan inode 15 (err -117) [ 671.806602][T11365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.615714][T11208] Bluetooth: hci3: command 0x0c1a tx timeout [ 672.703140][T11365] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 672.735073][T11381] loop1: detected capacity change from 0 to 1024 [ 672.744665][T11381] EXT4-fs: Ignoring removed nomblk_io_submit option [ 672.822367][T11381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.950686][T11208] Bluetooth: hci2: command 0x0c1a tx timeout [ 672.979015][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.017469][T11208] Bluetooth: hci1: command 0x0c1a tx timeout [ 673.603290][T11381] syz.1.1752 (11381) used greatest stack depth: 20688 bytes left [ 673.878300][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.942475][T11395] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1757'. [ 674.175710][ T5785] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 674.380239][ T5785] usb 3-1: Using ep0 maxpacket: 32 [ 674.410292][ T5785] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 674.430105][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.450807][ T5785] usb 3-1: Product: syz [ 674.465503][ T5785] usb 3-1: Manufacturer: syz [ 674.470274][ T5785] usb 3-1: SerialNumber: syz [ 674.498586][ T5785] usb 3-1: config 0 descriptor?? [ 674.562333][T11412] loop0: detected capacity change from 0 to 512 [ 674.587798][T11412] EXT4-fs: Ignoring removed bh option [ 674.632121][T11412] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 674.681052][T11412] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.1764: corrupted in-inode xattr: e_value size too large [ 674.727411][T11412] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.1764: couldn't read orphan inode 15 (err -117) [ 674.746293][ T5785] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 674.765629][ T5785] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -32) [ 674.791220][T11412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.841086][T11412] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 674.850368][ T5785] peak_usb: probe of 3-1:0.0 failed with error -32 [ 674.945349][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.970056][T11405] loop3: detected capacity change from 0 to 32768 [ 675.008531][T11416] serio: Serial port ptm0 [ 675.031487][T11405] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 675.145671][T11405] XFS (loop3): Ending clean mount [ 675.306749][ T5773] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 676.019736][T11437] loop0: detected capacity change from 0 to 512 [ 676.072592][T11437] EXT4-fs (loop0): filesystem is read-only [ 676.080183][T11437] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 676.148829][T11437] EXT4-fs (loop0): filesystem is read-only [ 676.154836][T11437] EXT4-fs (loop0): orphan cleanup on readonly fs [ 676.174607][T11437] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1768: bg 0: block 64: padding at end of block bitmap is not set [ 676.205278][T11437] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6651: Corrupt filesystem [ 676.223134][T11437] EXT4-fs (loop0): 1 orphan inode deleted [ 676.238840][T11437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 677.633410][ T6035] usb 3-1: USB disconnect, device number 37 [ 679.134883][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.201925][T11450] loop3: detected capacity change from 0 to 512 [ 679.231173][T11450] EXT4-fs: Ignoring removed bh option [ 679.273481][T11450] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 679.498769][T11450] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.1773: corrupted in-inode xattr: e_value size too large [ 679.536203][T11450] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.1773: couldn't read orphan inode 15 (err -117) [ 679.571373][T11450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.634730][T11450] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 679.722387][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.928472][T11461] loop3: detected capacity change from 0 to 1024 [ 680.063838][ T3446] hfsplus: b-tree write err: -5, ino 25 [ 680.082581][ T3446] hfsplus: b-tree write err: -5, ino 4 [ 680.099796][ T3446] hfsplus: b-tree write err: -5, ino 2 [ 680.120144][ T3446] hfsplus: b-tree write err: -5, ino 26 [ 680.569899][T11471] loop0: detected capacity change from 0 to 512 [ 680.595993][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 680.712184][T11471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.750593][T11459] loop2: detected capacity change from 0 to 32768 [ 680.813334][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 680.831374][ T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 680.840532][T11459] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 680.863489][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.052135][ T9] usb 4-1: Product: syz [ 681.151005][ T9] usb 4-1: Manufacturer: syz [ 681.271587][T11459] XFS (loop2): Ending clean mount [ 681.288269][ T9] usb 4-1: SerialNumber: syz [ 681.481603][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.512773][ T9] usb 4-1: config 0 descriptor?? [ 681.684209][T11485] loop1: detected capacity change from 0 to 512 [ 681.726204][ T8062] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 681.746521][T11485] EXT4-fs: Ignoring removed bh option [ 681.756757][T11485] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 681.788270][ T9] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 681.805579][ T9] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -32) [ 681.861703][T11485] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.1783: corrupted in-inode xattr: e_value size too large [ 681.912198][T11485] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.1783: couldn't read orphan inode 15 (err -117) [ 681.946041][T11485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.986013][ T9] peak_usb: probe of 4-1:0.0 failed with error -32 [ 682.366061][T11485] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 682.783644][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.977292][T11497] loop0: detected capacity change from 0 to 1024 [ 683.089660][T11492] hfsplus: b-tree write err: -5, ino 25 [ 683.104633][T11492] hfsplus: b-tree write err: -5, ino 4 [ 683.111053][T11492] hfsplus: b-tree write err: -5, ino 2 [ 683.117243][T11492] hfsplus: b-tree write err: -5, ino 26 [ 683.512820][ T5785] usb 4-1: USB disconnect, device number 42 [ 683.594245][T11508] netlink: 'syz.0.1790': attribute type 4 has an invalid length. [ 684.584162][T11513] loop0: detected capacity change from 0 to 128 [ 684.647683][T11513] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 684.660396][T11513] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.040093][T11523] loop3: detected capacity change from 0 to 512 [ 686.196078][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.202474][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.519220][T11523] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 686.543367][T11523] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 686.553320][T11523] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 686.562456][T11523] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (fffc1829) [ 686.572097][T11523] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 686.593175][T11522] loop1: detected capacity change from 0 to 4096 [ 686.654466][ T5776] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 686.755758][T11522] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 688.817681][T11522] ntfs3: loop1: Failed to read $UpCase (-4). [ 689.335859][ T8] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 692.800055][ T8] usb 4-1: device not accepting address 43, error -71 [ 692.889380][T11556] netlink: 'syz.1.1805': attribute type 4 has an invalid length. [ 693.023518][T11550] loop0: detected capacity change from 0 to 32768 [ 693.057505][T11550] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1803 (11550) [ 693.097946][T11550] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 693.119123][T11550] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 693.146037][T11550] BTRFS info (device loop0): setting nodatasum [ 693.154440][T11550] BTRFS info (device loop0): force zlib compression, level 3 [ 693.182981][T11550] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 693.205609][T11550] BTRFS info (device loop0): use lzo compression, level 0 [ 693.229490][T11550] BTRFS info (device loop0): turning on flush-on-commit [ 693.239359][T11550] BTRFS info (device loop0): enabling auto defrag [ 693.251369][T11550] BTRFS info (device loop0): max_inline at 4096 [ 693.261064][T11550] BTRFS info (device loop0): using free space tree [ 693.300792][T11564] loop2: detected capacity change from 0 to 4096 [ 693.381967][T11564] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 693.382763][T11550] BTRFS info (device loop0): enabling ssd optimizations [ 693.464332][T11564] ntfs3: loop2: Failed to load $Extend (-22). [ 693.488631][T11564] ntfs3: loop2: Failed to initialize $Extend. [ 693.702741][ T5776] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 694.542260][ T28] audit: type=1326 audit(1772789653.646:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04679c799 code=0x7ffc0000 [ 694.892962][ T28] audit: type=1326 audit(1772789653.646:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04679c799 code=0x7ffc0000 [ 694.916048][ T28] audit: type=1326 audit(1772789653.656:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fd04679c799 code=0x7ffc0000 [ 695.020606][ T28] audit: type=1326 audit(1772789653.656:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04679c799 code=0x7ffc0000 [ 695.049588][T11590] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 695.175652][ T28] audit: type=1326 audit(1772789653.656:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04679c799 code=0x7ffc0000 [ 695.207378][ T28] audit: type=1326 audit(1772789653.656:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd04679c799 code=0x7ffc0000 [ 695.285680][ T28] audit: type=1326 audit(1772789653.666:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04679c799 code=0x7ffc0000 [ 695.351802][ T28] audit: type=1326 audit(1772789653.666:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04679c799 code=0x7ffc0000 [ 695.425314][ T28] audit: type=1326 audit(1772789653.676:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd04679c799 code=0x7ffc0000 [ 695.470571][ T28] audit: type=1326 audit(1772789653.676:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.2.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04679c799 code=0x7ffc0000 [ 695.493503][T11601] overlayfs: missing 'lowerdir' [ 695.556882][T11603] netlink: 'syz.0.1815': attribute type 4 has an invalid length. [ 695.953440][T11611] loop0: detected capacity change from 0 to 4096 [ 697.535235][T11611] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 697.888776][T11616] loop2: detected capacity change from 0 to 32768 [ 697.909445][T11616] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1820 (11616) [ 697.995341][T11611] ntfs3: loop0: Failed to load $Extend (-22). [ 698.002362][T11616] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 698.016904][T11611] ntfs3: loop0: Failed to initialize $Extend. [ 698.044392][T11616] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 698.066797][T11616] BTRFS info (device loop2): setting nodatasum [ 698.073139][T11616] BTRFS info (device loop2): force zlib compression, level 3 [ 698.095759][T11616] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 699.257285][T11616] BTRFS info (device loop2): use lzo compression, level 0 [ 699.287035][T11616] BTRFS info (device loop2): turning on flush-on-commit [ 699.301332][T11616] BTRFS info (device loop2): enabling auto defrag [ 699.416435][T11616] BTRFS info (device loop2): max_inline at 4096 [ 699.462910][T11616] BTRFS info (device loop2): using free space tree [ 699.493436][T11616] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 699.549416][T11616] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 699.604524][T11616] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 699.714755][T11616] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 699.746391][T11616] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 699.791013][T11616] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 699.876670][T11616] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 699.926594][T11616] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 699.971283][T11616] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 700.006248][T11616] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 700.036046][T11616] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 700.087242][T11616] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 700.168391][T11616] BTRFS error (device loop2): open_ctree failed: -12 [ 701.298823][T11656] netlink: 'syz.0.1827': attribute type 4 has an invalid length. [ 701.674872][T11665] overlay: filesystem on ./file0 not supported as upperdir [ 704.264906][T11682] loop0: detected capacity change from 0 to 32768 [ 704.280404][T11682] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1836 (11682) [ 704.334805][T11682] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 704.359110][T11682] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 704.380003][T11682] BTRFS info (device loop0): setting nodatasum [ 704.388129][T11682] BTRFS info (device loop0): force zlib compression, level 3 [ 704.397223][T11682] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 704.417343][T11682] BTRFS info (device loop0): use lzo compression, level 0 [ 704.425350][T11682] BTRFS info (device loop0): turning on flush-on-commit [ 704.458170][T11682] BTRFS info (device loop0): enabling auto defrag [ 704.464829][T11682] BTRFS info (device loop0): max_inline at 4096 [ 704.486913][T11682] BTRFS info (device loop0): using free space tree [ 704.816602][T11682] BTRFS info (device loop0): enabling ssd optimizations [ 704.882545][T11684] loop2: detected capacity change from 0 to 32768 [ 704.950720][T11684] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 705.129357][T11684] XFS (loop2): Ending clean mount [ 705.277521][ T8062] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 705.352443][ T5776] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 705.589505][T11729] loop3: detected capacity change from 0 to 1024 [ 705.656359][T11729] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 705.694097][T11729] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 705.716171][T11729] System zones: 0-1, 3-36 [ 705.837080][T11729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.934804][T11729] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.1846: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 706.041546][T11734] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.1846: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 706.231189][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.450063][T11739] netlink: 'syz.3.1847': attribute type 4 has an invalid length. [ 708.349866][T11741] loop2: detected capacity change from 0 to 40427 [ 708.381023][T11751] loop0: detected capacity change from 0 to 32768 [ 708.428450][T11741] F2FS-fs (loop2): invalid crc value [ 708.445331][T11751] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1853 (11751) [ 708.463960][T11741] F2FS-fs (loop2): Found nat_bits in checkpoint [ 708.493492][T11751] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 708.516471][T11751] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 708.544279][T11751] BTRFS info (device loop0): setting nodatasum [ 708.573601][T11751] BTRFS info (device loop0): force zlib compression, level 3 [ 708.587794][T11751] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 708.609981][T11741] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 708.626545][T11751] BTRFS info (device loop0): use lzo compression, level 0 [ 708.633775][T11751] BTRFS info (device loop0): turning on flush-on-commit [ 708.663881][T11751] BTRFS info (device loop0): enabling auto defrag [ 708.705652][T11751] BTRFS info (device loop0): max_inline at 4096 [ 708.719811][T11751] BTRFS info (device loop0): using free space tree [ 709.036004][T11751] BTRFS info (device loop0): enabling ssd optimizations [ 709.335161][ T5776] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 709.784885][T11785] loop3: detected capacity change from 0 to 4096 [ 709.926970][T11790] loop0: detected capacity change from 32768 to 1 [ 709.965740][T11785] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 710.046056][T11785] ntfs3: loop3: Failed to load $Extend (-22). [ 710.052237][T11785] ntfs3: loop3: Failed to initialize $Extend. [ 711.865523][ T788] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 712.085549][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 712.116126][ T788] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 712.125260][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.154227][ T788] usb 4-1: Product: syz [ 712.164348][ T788] usb 4-1: Manufacturer: syz [ 712.173675][ T788] usb 4-1: SerialNumber: syz [ 712.188902][ T788] usb 4-1: config 0 descriptor?? [ 712.231967][T11803] loop0: detected capacity change from 0 to 40427 [ 712.270481][T11803] F2FS-fs (loop0): invalid crc value [ 712.306200][T11803] F2FS-fs (loop0): Found nat_bits in checkpoint [ 712.452056][T11803] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 712.597513][T11809] loop2: detected capacity change from 0 to 32768 [ 712.615796][ T788] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 712.624139][ T788] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 712.647872][T11809] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1870 (11809) [ 712.698367][T11809] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 712.721353][T11809] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 712.734747][ T788] peak_usb: probe of 4-1:0.0 failed with error -32 [ 712.769082][T11809] BTRFS info (device loop2): setting nodatasum [ 712.790396][ T788] usb 4-1: USB disconnect, device number 45 [ 712.797086][T11809] BTRFS info (device loop2): force zlib compression, level 3 [ 712.804537][T11809] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 712.846294][T11809] BTRFS info (device loop2): use lzo compression, level 0 [ 712.853519][T11809] BTRFS info (device loop2): turning on flush-on-commit [ 712.891496][T11809] BTRFS info (device loop2): enabling auto defrag [ 712.910751][T11809] BTRFS info (device loop2): max_inline at 4096 [ 712.925993][T11809] BTRFS info (device loop2): using free space tree [ 713.160934][T11809] BTRFS info (device loop2): enabling ssd optimizations [ 713.331443][T11832] netlink: 'syz.0.1872': attribute type 4 has an invalid length. [ 713.524433][ T8062] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 713.574032][T11833] loop3: detected capacity change from 0 to 4096 [ 713.812178][T11833] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 713.918545][T11833] ntfs3: loop3: Failed to load $Extend (-22). [ 713.934999][T11833] ntfs3: loop3: Failed to initialize $Extend. [ 714.268701][T11845] loop0: detected capacity change from 0 to 256 [ 714.718043][T11851] loop3: detected capacity change from 0 to 512 [ 714.822734][T11851] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 714.832438][T11851] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 714.842492][T11851] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 714.851708][T11851] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (fffc1829) [ 714.861676][T11851] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 715.536307][T11859] netlink: 'syz.0.1884': attribute type 4 has an invalid length. [ 715.555654][ T27] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 715.785592][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 715.800755][ T27] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 715.831245][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.850020][ T27] usb 2-1: Product: syz [ 715.854324][ T27] usb 2-1: Manufacturer: syz [ 715.875615][ T27] usb 2-1: SerialNumber: syz [ 715.886800][ T27] usb 2-1: config 0 descriptor?? [ 716.112454][T11850] loop2: detected capacity change from 0 to 40427 [ 716.146667][T11850] F2FS-fs (loop2): invalid crc value [ 716.161390][T11850] F2FS-fs (loop2): Found nat_bits in checkpoint [ 716.168763][T11857] loop3: detected capacity change from 0 to 32768 [ 716.187707][T11857] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1883 (11857) [ 716.277270][T11857] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 716.319235][T11857] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 716.329910][ T27] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 716.361421][T11850] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 716.367054][ T27] peak_usb 2-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 716.377867][T11857] BTRFS info (device loop3): setting nodatasum [ 716.388457][T11857] BTRFS info (device loop3): force zlib compression, level 3 [ 716.418040][T11857] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 716.444726][T11857] BTRFS info (device loop3): use lzo compression, level 0 [ 716.501149][T11857] BTRFS info (device loop3): turning on flush-on-commit [ 716.525673][T11857] BTRFS info (device loop3): enabling auto defrag [ 716.555590][T11857] BTRFS info (device loop3): max_inline at 4096 [ 716.603210][T11857] BTRFS info (device loop3): using free space tree [ 716.706067][ T27] peak_usb: probe of 2-1:0.0 failed with error -32 [ 716.727846][ T27] usb 2-1: USB disconnect, device number 25 [ 716.997261][T11884] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 717.010540][T11884] F2FS-fs (loop2): Stopped filesystem due to reason: 4 [ 717.325910][T11857] BTRFS info (device loop3): enabling ssd optimizations [ 718.827537][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 719.010599][T11904] loop0: detected capacity change from 0 to 512 [ 719.143688][T11904] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 719.153589][T11904] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 719.163695][T11904] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 719.172868][T11904] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (fffc1829) [ 719.182780][T11904] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 719.882265][T11867] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (11867) [ 719.930802][T11912] loop0: detected capacity change from 0 to 64 [ 720.037907][T11913] netlink: 'syz.3.1894': attribute type 4 has an invalid length. [ 721.517505][ T5785] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 721.518702][T11920] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 721.537653][T11932] loop3: detected capacity change from 0 to 64 [ 721.547326][T11920] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 721.554304][T11920] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 721.725672][ T5785] usb 2-1: Using ep0 maxpacket: 8 [ 721.736227][ T5785] usb 2-1: unable to get BOS descriptor or descriptor too short [ 721.747437][ T5785] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 721.768459][ T5785] usb 2-1: New USB device found, idVendor=0499, idProduct=1042, bcdDevice= 0.40 [ 721.778275][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.795605][ T5785] usb 2-1: Product: syz [ 721.800173][ T5785] usb 2-1: Manufacturer: syz [ 721.804830][ T5785] usb 2-1: SerialNumber: syz [ 722.043594][ T5785] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 722.123857][ T5785] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 722.144967][ T5785] usb 2-1: USB disconnect, device number 26 [ 722.203831][ T8747] udevd[8747]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 722.406865][ T12] kworker/u4:1: attempt to access beyond end of device [ 722.406865][ T12] loop3: rw=1, sector=65, nr_sectors = 1 limit=64 [ 722.424848][T11936] loop0: detected capacity change from 0 to 32768 [ 722.433389][T11936] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 722.444908][ T12] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 722.456025][ T12] kworker/u4:1: attempt to access beyond end of device [ 722.456025][ T12] loop3: rw=1, sector=66, nr_sectors = 1 limit=64 [ 722.485491][ T12] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 722.504624][ T12] kworker/u4:1: attempt to access beyond end of device [ 722.504624][ T12] loop3: rw=1, sector=67, nr_sectors = 1 limit=64 [ 722.535511][ T12] Buffer I/O error on dev loop3, logical block 67, lost async page write [ 722.554409][ T12] kworker/u4:1: attempt to access beyond end of device [ 722.554409][ T12] loop3: rw=1, sector=68, nr_sectors = 1 limit=64 [ 722.595600][ T12] Buffer I/O error on dev loop3, logical block 68, lost async page write [ 722.609500][ T12] kworker/u4:1: attempt to access beyond end of device [ 722.609500][ T12] loop3: rw=1, sector=72, nr_sectors = 1 limit=64 [ 722.625956][ T12] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 722.634751][ T12] kworker/u4:1: attempt to access beyond end of device [ 722.634751][ T12] loop3: rw=1, sector=73, nr_sectors = 1 limit=64 [ 722.654912][ T12] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 722.674058][ T12] kworker/u4:1: attempt to access beyond end of device [ 722.674058][ T12] loop3: rw=1, sector=76, nr_sectors = 1 limit=64 [ 722.704362][ T12] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 722.734405][ T12] kworker/u4:1: attempt to access beyond end of device [ 722.734405][ T12] loop3: rw=1, sector=77, nr_sectors = 1 limit=64 [ 722.761104][ T12] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 722.823415][ T8747] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 722.840983][ T12] kworker/u4:1: attempt to access beyond end of device [ 722.840983][ T12] loop3: rw=1, sector=78, nr_sectors = 2056 limit=64 [ 722.866446][T11939] loop2: detected capacity change from 0 to 32768 [ 722.911041][T11939] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1905 (11939) [ 722.954073][ T12] kworker/u4:1: attempt to access beyond end of device [ 722.954073][ T12] loop3: rw=1, sector=2134, nr_sectors = 2032 limit=64 [ 722.996435][T11939] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 723.012275][ T12] Buffer I/O error on dev loop3, logical block 4166, lost async page write [ 723.025999][T11939] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 723.053279][ T12] Buffer I/O error on dev loop3, logical block 4167, lost async page write [ 723.056465][T11939] BTRFS info (device loop2): enabling auto defrag [ 723.110855][T11939] BTRFS info (device loop2): use no compression [ 723.136988][T11939] BTRFS info (device loop2): force clearing of disk cache [ 723.178838][T11939] BTRFS info (device loop2): max_inline at 4096 [ 723.185807][T11208] Bluetooth: hci3: command 0x0c1a tx timeout [ 723.196341][T11939] BTRFS info (device loop2): disabling free space tree [ 723.334996][T11939] BTRFS info (device loop2): enabling ssd optimizations [ 723.506165][T11939] BTRFS info (device loop2): auto enabling async discard [ 723.604472][T11208] Bluetooth: hci2: command 0x0c1a tx timeout [ 723.604491][ T5786] Bluetooth: hci1: command 0x0c1a tx timeout [ 723.627416][T11939] BTRFS info (device loop2): rebuilding free space tree [ 723.683856][T11939] BTRFS info (device loop2): disabling free space tree [ 723.699434][T11939] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 723.724293][T11939] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 723.754234][T11969] loop0: detected capacity change from 0 to 512 [ 723.764984][T11969] EXT4-fs: Ignoring removed nobh option [ 723.777876][T11969] EXT4-fs: Ignoring removed nobh option [ 723.783530][T11969] EXT4-fs: Ignoring removed orlov option [ 725.437030][ T8062] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 725.950647][T11981] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 725.967984][T11981] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 726.009659][T11981] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 727.216929][T11999] serio: Serial port ptm0 [ 727.334992][T11984] loop3: detected capacity change from 0 to 32768 [ 727.746355][T11984] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 727.792114][T11984] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 727.815696][T11208] Bluetooth: hci3: command 0x0c1a tx timeout [ 727.859744][T11984] BTRFS info (device loop3): setting nodatasum [ 727.887932][T11984] BTRFS info (device loop3): force zlib compression, level 3 [ 727.913388][T11984] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 727.925573][T11984] BTRFS info (device loop3): use lzo compression, level 0 [ 727.932774][T11984] BTRFS info (device loop3): turning on flush-on-commit [ 727.974585][T11984] BTRFS info (device loop3): enabling auto defrag [ 728.215390][T11208] Bluetooth: hci1: command 0x0c1a tx timeout [ 728.221646][T11208] Bluetooth: hci2: command 0x0c1a tx timeout [ 728.276908][T11984] BTRFS info (device loop3): max_inline at 4096 [ 728.283243][T11984] BTRFS info (device loop3): using free space tree [ 728.331060][T12008] loop1: detected capacity change from 0 to 512 [ 728.982671][T11984] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 729.041520][T11984] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 729.098569][T12008] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 729.117329][T12008] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 729.127649][T12008] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 729.136912][T12008] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (fffc1829) [ 729.146594][T12008] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 729.178520][T11984] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 729.189996][T11984] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 729.211247][T11984] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 729.246628][T11984] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 729.256545][T11984] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 729.268645][T11984] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 729.288598][T11984] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 729.298105][T11984] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 729.325780][T11984] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 729.344765][T12016] overlayfs: missing 'workdir' [ 729.379938][T11984] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 729.380693][T11984] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 729.458175][T11984] BTRFS error (device loop3): open_ctree failed: -12 [ 730.329268][T12043] fuse: Bad value for 'fd' [ 730.494203][T12034] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 730.609453][T12034] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 730.648902][T12034] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 730.859388][T12047] loop2: detected capacity change from 0 to 512 [ 730.867047][T12047] EXT4-fs: Ignoring removed orlov option [ 730.887851][T12047] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 731.021013][T12047] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 731.049101][T12050] loop0: detected capacity change from 0 to 256 [ 731.057943][T12047] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.1929: corrupted in-inode xattr: e_value size too large [ 731.094309][T12047] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.1929: couldn't read orphan inode 15 (err -117) [ 731.134770][T12050] FAT-fs (loop0): Directory bread(block 64) failed [ 731.156091][T12050] FAT-fs (loop0): Directory bread(block 65) failed [ 731.164287][T12050] FAT-fs (loop0): Directory bread(block 66) failed [ 731.182758][T12047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.203607][T12050] FAT-fs (loop0): Directory bread(block 67) failed [ 731.220839][T12050] FAT-fs (loop0): Directory bread(block 68) failed [ 731.246735][T12050] FAT-fs (loop0): Directory bread(block 69) failed [ 731.262060][T12050] FAT-fs (loop0): Directory bread(block 70) failed [ 731.345609][T12050] FAT-fs (loop0): Directory bread(block 71) failed [ 731.475996][T12050] FAT-fs (loop0): Directory bread(block 72) failed [ 732.825723][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout [ 732.832000][ T5786] Bluetooth: hci2: command 0x0c1a tx timeout [ 732.840087][ T5786] Bluetooth: hci1: command 0x0c1a tx timeout [ 732.914426][T12050] FAT-fs (loop0): Directory bread(block 73) failed [ 733.361079][ T8062] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.989942][T12071] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 734.009092][T12071] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 734.200818][T12073] loop1: detected capacity change from 0 to 512 [ 734.240209][T12073] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 734.250202][T12073] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 734.260340][T12073] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 734.269533][T12073] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (fffc1829) [ 734.279345][T12073] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 735.255370][ T8747] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 735.288070][T12066] loop0: detected capacity change from 0 to 32768 [ 735.300211][T12066] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1933 (12066) [ 735.538016][T12066] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 735.601461][T12066] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 735.661832][T12066] BTRFS info (device loop0): setting nodatasum [ 735.712093][T12066] BTRFS info (device loop0): force zlib compression, level 3 [ 735.755528][T12066] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 735.802066][T12066] BTRFS info (device loop0): use lzo compression, level 0 [ 735.830842][T12066] BTRFS info (device loop0): turning on flush-on-commit [ 735.855186][T12066] BTRFS info (device loop0): enabling auto defrag [ 735.922968][T12066] BTRFS info (device loop0): max_inline at 4096 [ 735.961623][T12066] BTRFS info (device loop0): using free space tree [ 736.122330][T12085] loop3: detected capacity change from 0 to 4096 [ 736.255961][T12066] BTRFS info (device loop0): enabling ssd optimizations [ 736.275366][T12085] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 736.505769][ T5785] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 736.691988][T12085] ntfs3: loop3: Failed to load $Extend (-22). [ 736.745612][ T5785] usb 3-1: Using ep0 maxpacket: 32 [ 736.781190][T12085] ntfs3: loop3: Failed to initialize $Extend. [ 736.844144][ T5785] usb 3-1: config index 0 descriptor too short (expected 6701, got 45) [ 737.004747][ T5785] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.101660][ T5785] usb 3-1: config 0 has no interfaces? [ 737.106943][ T8] IPVS: starting estimator thread 0... [ 737.167321][ T5776] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 737.201594][ T5785] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 737.217932][T12109] IPVS: using max 17 ests per chain, 40800 per kthread [ 737.274432][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.360600][ T5785] usb 3-1: config 0 descriptor?? [ 738.383575][T12117] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 738.392698][T12117] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 739.827178][ T8] usb 3-1: USB disconnect, device number 38 [ 740.157929][T12139] loop3: detected capacity change from 0 to 512 [ 740.169908][T12139] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 740.179530][T12139] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 740.190360][T12139] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 740.199569][T12139] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (fffc1829) [ 740.209195][T12139] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 742.235993][ T5785] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 742.843456][ T5785] usb 4-1: Using ep0 maxpacket: 32 [ 744.369819][ T5785] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 744.389423][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.421442][ T5785] usb 4-1: Product: syz [ 744.436305][T12164] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 744.445125][ T5785] usb 4-1: Manufacturer: syz [ 744.476215][T12164] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 744.496929][ T5785] usb 4-1: config 0 descriptor?? [ 744.510514][ T5785] usb 4-1: can't set config #0, error -71 [ 744.545713][ T5785] usb 4-1: USB disconnect, device number 46 [ 744.777707][T12170] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1960'. [ 745.502988][T12166] loop3: detected capacity change from 0 to 32768 [ 745.527431][T12166] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1959 (12166) [ 745.574960][T12166] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 745.589047][T12166] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 745.601162][T12166] BTRFS info (device loop3): setting nodatasum [ 745.609747][T12166] BTRFS info (device loop3): force zlib compression, level 3 [ 745.618830][T12166] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 745.630072][T12166] BTRFS info (device loop3): use lzo compression, level 0 [ 745.637377][T12166] BTRFS info (device loop3): turning on flush-on-commit [ 745.644691][T12166] BTRFS info (device loop3): enabling auto defrag [ 745.653063][T12166] BTRFS info (device loop3): max_inline at 4096 [ 745.663803][T12166] BTRFS info (device loop3): using free space tree [ 745.748449][T12166] BTRFS info (device loop3): enabling ssd optimizations [ 746.255318][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 747.586139][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.403414][ T8747] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (8747) [ 749.665568][ T5785] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 749.845539][ T5785] usb 4-1: Using ep0 maxpacket: 32 [ 749.887564][T12224] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1973'. [ 749.952978][T12225] netlink: 'syz.1.1973': attribute type 5 has an invalid length. [ 749.981126][T12225] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.990186][T12225] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.998953][T12225] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.007707][T12225] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.825321][ T5785] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 750.835502][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.844012][ T5785] usb 4-1: Product: syz [ 750.848646][ T5785] usb 4-1: Manufacturer: syz [ 750.853317][ T5785] usb 4-1: SerialNumber: syz [ 750.866400][ T5785] usb 4-1: config 0 descriptor?? [ 750.899710][T12225] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.909527][T12225] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.918778][T12225] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.927766][T12225] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.061234][T12226] netlink: 'syz.1.1973': attribute type 5 has an invalid length. [ 751.089955][T12226] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.099453][T12226] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.108805][T12226] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.117835][T12226] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.137586][T12226] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.147409][T12226] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.156649][T12226] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.165752][T12226] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.233784][T12228] netlink: 'syz.2.1974': attribute type 4 has an invalid length. [ 751.431257][ T5785] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 751.456332][ T5785] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 751.526169][ T5785] peak_usb: probe of 4-1:0.0 failed with error -32 [ 751.565641][ T5785] usb 4-1: USB disconnect, device number 47 [ 751.773996][T12235] overlayfs: missing 'lowerdir' [ 753.282722][T12261] netlink: 'syz.2.1983': attribute type 4 has an invalid length. [ 753.527245][T12266] overlayfs: missing 'lowerdir' [ 753.961008][T12275] loop3: detected capacity change from 0 to 512 [ 754.042116][T12275] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 754.053434][T12275] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 754.063595][T12275] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 754.072930][T12275] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (fffc1829) [ 754.082726][T12275] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 754.669286][ T5785] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 755.185641][ T5785] usb 3-1: Using ep0 maxpacket: 32 [ 755.203039][ T5785] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 755.978601][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.986933][ T5785] usb 3-1: Product: syz [ 755.991158][ T5785] usb 3-1: Manufacturer: syz [ 755.996744][ T5785] usb 3-1: SerialNumber: syz [ 756.004120][ T5785] usb 3-1: config 0 descriptor?? [ 756.422262][ T5785] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 756.462923][ T5785] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 756.561963][ T5785] peak_usb: probe of 3-1:0.0 failed with error -32 [ 756.581325][ T5785] usb 3-1: USB disconnect, device number 39 [ 756.780751][T12304] overlayfs: missing 'lowerdir' [ 759.193187][T12351] netlink: 'syz.1.2013': attribute type 4 has an invalid length. [ 759.384333][T12354] 9pnet_fd: p9_fd_create_tcp (12354): problem connecting socket to 127.0.0.1 [ 760.514240][T12367] fuse: Bad value for 'fd' [ 762.499623][T12407] fuse: Bad value for 'fd' [ 763.239245][ T1191] kworker/dying (1191) used greatest stack depth: 19504 bytes left [ 769.953667][T12450] serio: Serial port ptm0 [ 770.834713][T12454] loop3: detected capacity change from 0 to 32768 [ 770.853315][T12454] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 770.872101][T12454] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 770.883122][T12454] BTRFS info (device loop3): setting nodatasum [ 770.903780][T12462] loop2: detected capacity change from 0 to 512 [ 770.914604][T12462] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 770.924250][T12462] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 770.934290][T12462] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 770.943957][T12462] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (fffc1829) [ 770.953634][T12462] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 770.991689][T12454] BTRFS info (device loop3): force zlib compression, level 3 [ 771.031997][T12454] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 771.108662][T12454] BTRFS info (device loop3): use lzo compression, level 0 [ 771.242442][T12454] BTRFS info (device loop3): turning on flush-on-commit [ 771.633210][T12454] BTRFS info (device loop3): enabling auto defrag [ 771.708290][T12454] BTRFS info (device loop3): max_inline at 4096 [ 771.714642][T12454] BTRFS info (device loop3): using free space tree [ 771.778256][ T8735] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 771.961755][T12472] input: syz1 as /devices/virtual/input/input22 [ 772.257565][T12454] BTRFS info (device loop3): enabling ssd optimizations [ 773.555858][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 775.959244][T12519] serio: Serial port ptm0 [ 779.218421][T12543] loop1: detected capacity change from 0 to 4 [ 779.262691][T12543] Dev loop1: unable to read RDB block 4 [ 779.288656][T12543] loop1: unable to read partition table [ 779.299493][T12527] loop2: detected capacity change from 0 to 32768 [ 779.308354][T12543] loop1: partition table beyond EOD, truncated [ 779.314737][T12527] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2060 (12527) [ 779.426174][T12543] loop_reread_partitions: partition scan of loop1 (þ被xü—ŸÑà– ) failed (rc=-5) [ 780.134145][T12527] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 780.271599][T12527] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 780.352994][T12527] BTRFS info (device loop2): setting nodatasum [ 780.427640][T12527] BTRFS info (device loop2): force zlib compression, level 3 [ 780.524005][T12527] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 780.630448][T12527] BTRFS info (device loop2): use lzo compression, level 0 [ 780.720932][T12527] BTRFS info (device loop2): turning on flush-on-commit [ 780.800301][T12527] BTRFS info (device loop2): enabling auto defrag [ 780.876526][T12527] BTRFS info (device loop2): max_inline at 4096 [ 780.952056][T12527] BTRFS info (device loop2): using free space tree [ 781.042197][T12527] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 781.054163][T12527] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 781.063984][T12527] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 781.073961][T12527] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 781.084402][T12527] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 781.094336][T12527] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 781.104206][T12527] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 781.114660][T12527] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 781.126385][T12527] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 781.135933][T12527] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 781.146664][T12527] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 781.157452][T12527] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 781.168180][T12527] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 781.179674][T12527] BTRFS error (device loop2): open_ctree failed: -12 [ 781.215625][T12548] loop0: detected capacity change from 0 to 8192 [ 781.325900][T12548] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 781.807776][T12577] serio: Serial port ptm0 [ 782.484725][T12581] kernel profiling enabled (shift: 9) [ 786.858682][T12606] loop2: detected capacity change from 0 to 32768 [ 786.871440][T12606] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2079 (12606) [ 786.912147][T12606] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 786.923474][T12606] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 786.932483][T12606] BTRFS info (device loop2): setting nodatasum [ 786.940228][T12606] BTRFS info (device loop2): force zlib compression, level 3 [ 786.948974][T12606] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 786.958609][T12606] BTRFS info (device loop2): use lzo compression, level 0 [ 786.965981][T12606] BTRFS info (device loop2): turning on flush-on-commit [ 786.973278][T12606] BTRFS info (device loop2): enabling auto defrag [ 786.979956][T12606] BTRFS info (device loop2): max_inline at 4096 [ 786.987127][T12606] BTRFS info (device loop2): using free space tree [ 787.036497][T12606] BTRFS info (device loop2): enabling ssd optimizations [ 787.214140][ T8062] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 788.096703][T12640] syz.0.2084 (12640): drop_caches: 2 [ 789.532872][T12653] loop1: detected capacity change from 0 to 64 [ 796.087697][T12699] loop3: detected capacity change from 0 to 32768 [ 797.251264][T12699] JBD2: Ignoring recovery information on journal [ 797.386494][T12699] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 798.432913][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 798.893797][T12734] loop0: detected capacity change from 0 to 32768 [ 798.909340][T12734] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2114 (12734) [ 799.889703][T12734] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 799.900561][T12734] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 799.909406][T12734] BTRFS info (device loop0): setting nodatasum [ 799.915897][T12734] BTRFS info (device loop0): force zlib compression, level 3 [ 799.923496][T12734] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 799.944118][T12734] BTRFS info (device loop0): use lzo compression, level 0 [ 799.995625][T12734] BTRFS info (device loop0): turning on flush-on-commit [ 800.045493][T12734] BTRFS info (device loop0): enabling auto defrag [ 800.052073][T12734] BTRFS info (device loop0): max_inline at 4096 [ 800.125501][T12734] BTRFS info (device loop0): using free space tree [ 800.310877][T12760] serio: Serial port ptm0 [ 800.905829][T12734] BTRFS info (device loop0): enabling ssd optimizations [ 801.242559][ T5776] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 803.144875][ T8747] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (8747) [ 805.483597][T12806] serio: Serial port ptm0 [ 808.517568][T12830] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2139'. [ 809.084852][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.525814][T12838] serio: Serial port ptm0 [ 810.230306][T12844] 9pnet_fd: Insufficient options for proto=fd [ 812.533141][T12869] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2149'. [ 812.893778][T12875] 9pnet_fd: Insufficient options for proto=fd [ 815.768748][T12908] 9pnet_fd: Insufficient options for proto=fd [ 816.331274][ T11] Bluetooth: (null): Invalid header checksum [ 816.464520][ T11] Bluetooth: (null): Invalid header checksum [ 818.365499][ T788] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 818.856824][ T788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.907465][ T788] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 819.002651][ T788] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 819.040335][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.085062][ T788] usb 3-1: Product: syz [ 819.098798][ T788] usb 3-1: Manufacturer: syz [ 819.135434][ T788] usb 3-1: SerialNumber: syz [ 819.150259][ T788] cdc_mbim 3-1:1.0: skipping garbage [ 819.493407][T12924] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 820.821050][ T788] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 820.827459][ T788] cdc_mbim 3-1:1.0: bind() failure [ 820.836562][ T788] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 820.843522][ T788] cdc_ncm 3-1:1.1: bind() failure [ 820.855727][ T788] usb 3-1: USB disconnect, device number 40 [ 821.055914][T12939] loop3: detected capacity change from 0 to 4096 [ 830.714557][T12988] loop3: detected capacity change from 0 to 32768 [ 830.765898][T12988] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 830.798260][T13004] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2191'. [ 831.116004][ T8747] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 834.878033][T13043] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2200'. [ 837.194893][T13041] loop3: detected capacity change from 0 to 32768 [ 837.235687][T13063] input: syz1 as /devices/virtual/input/input26 [ 837.251902][T13041] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 837.561039][ T8747] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 840.176119][T13078] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2212'. [ 841.429933][T13088] loop2: detected capacity change from 0 to 128 [ 841.615616][T13088] loop2: detected capacity change from 128 to 1 [ 841.627490][T13093] bio_check_eod: 71 callbacks suppressed [ 841.627509][T13093] syz.2.2215: attempt to access beyond end of device [ 841.627509][T13093] loop2: rw=2049, sector=6, nr_sectors = 2 limit=1 [ 841.683085][T13093] buffer_io_error: 62 callbacks suppressed [ 841.683102][T13093] Buffer I/O error on dev loop2, logical block 3, lost sync page write [ 841.729708][T13093] syz.2.2215: attempt to access beyond end of device [ 841.729708][T13093] loop2: rw=0, sector=6, nr_sectors = 2 limit=1 [ 841.766072][T13093] FAT-fs (loop2): Directory bread(block 3) failed [ 841.791758][T13093] syz.2.2215: attempt to access beyond end of device [ 841.791758][T13093] loop2: rw=2049, sector=8, nr_sectors = 2 limit=1 [ 841.850431][T13093] Buffer I/O error on dev loop2, logical block 4, lost sync page write [ 842.067658][T13099] loop1: detected capacity change from 0 to 512 [ 842.115580][T13099] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 842.125056][T13099] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 842.134986][T13099] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 842.144224][T13099] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (fffc1829) [ 842.154101][T13099] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 843.465608][T13090] loop3: detected capacity change from 0 to 32768 [ 843.580194][T13090] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 844.677800][ T8747] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 845.347085][T13114] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2224'. [ 845.627754][T13120] loop0: detected capacity change from 0 to 128 [ 845.758295][T13120] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 845.811331][T13120] ext4 filesystem being mounted at /593/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 846.768643][ T5776] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 847.662496][T13139] loop0: detected capacity change from 0 to 32768 [ 847.968386][T13139] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 848.214690][T13139] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 848.368102][T13139] BTRFS info (device loop0): setting nodatasum [ 848.478801][T13139] BTRFS info (device loop0): force zlib compression, level 3 [ 848.580849][T13139] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 848.761041][T13139] BTRFS info (device loop0): use lzo compression, level 0 [ 848.883547][T13139] BTRFS info (device loop0): turning on flush-on-commit [ 848.995099][T13139] BTRFS info (device loop0): enabling auto defrag [ 849.024752][T13139] BTRFS info (device loop0): max_inline at 4096 [ 849.035539][T13139] BTRFS info (device loop0): using free space tree [ 849.552987][T13139] BTRFS info (device loop0): enabling ssd optimizations [ 851.103828][ T5776] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 851.446995][T13181] fuse: Bad value for 'fd' [ 855.447404][T13197] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 857.840926][T13203] loop2: detected capacity change from 0 to 32768 [ 857.851791][T13203] XFS (loop2): Invalid device [./bus], error=-15 [ 859.543588][ T139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.698700][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 859.716832][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 859.729198][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 859.740082][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 859.748427][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 859.769611][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 859.807947][ T139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.069193][ T139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.113413][T13211] loop2: detected capacity change from 0 to 32768 [ 860.167027][T13211] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2249 (13211) [ 860.226856][T13211] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 860.269977][T13211] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 860.295638][T13211] BTRFS info (device loop2): setting nodatasum [ 860.302694][T13211] BTRFS info (device loop2): force zlib compression, level 3 [ 860.328662][ T139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.345418][T13211] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 860.354801][T13211] BTRFS info (device loop2): use lzo compression, level 0 [ 860.381054][T13211] BTRFS info (device loop2): turning on flush-on-commit [ 860.409398][T13211] BTRFS info (device loop2): enabling auto defrag [ 860.427161][T13211] BTRFS info (device loop2): max_inline at 4096 [ 860.445510][T13211] BTRFS info (device loop2): using free space tree [ 860.664922][T13211] BTRFS info (device loop2): enabling ssd optimizations [ 860.802844][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 860.816985][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 860.827185][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 860.827882][T13239] 9pnet: Could not find request transport: fd0x0000000000000005 [ 860.866545][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 860.881668][ T5786] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 860.890442][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 861.241860][ T8062] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 861.938448][ T5786] Bluetooth: hci3: command tx timeout [ 862.234561][T13220] chnl_net:caif_netlink_parms(): no params data found [ 863.025662][ T5786] Bluetooth: hci4: command tx timeout [ 863.152333][T13258] loop3: detected capacity change from 0 to 32768 [ 863.176172][T13258] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2257 (13258) [ 863.251736][T13258] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 863.285507][T13258] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 863.316117][T13258] BTRFS info (device loop3): setting nodatasum [ 863.322465][T13258] BTRFS info (device loop3): force zlib compression, level 3 [ 863.345627][T13258] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 863.388654][T13258] BTRFS info (device loop3): use lzo compression, level 0 [ 863.395918][T13258] BTRFS info (device loop3): turning on flush-on-commit [ 863.403743][T13258] BTRFS info (device loop3): enabling auto defrag [ 863.414008][T13258] BTRFS info (device loop3): max_inline at 4096 [ 863.435860][T13258] BTRFS info (device loop3): using free space tree [ 863.634487][T13258] BTRFS info (device loop3): enabling ssd optimizations [ 863.935306][T13220] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.961118][T13220] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.975739][ T5786] Bluetooth: hci3: command tx timeout [ 863.988614][T13220] bridge_slave_0: entered allmulticast mode [ 864.016362][T13220] bridge_slave_0: entered promiscuous mode [ 864.123992][T13220] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.133691][T13220] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.185657][T13220] bridge_slave_1: entered allmulticast mode [ 864.193540][T13220] bridge_slave_1: entered promiscuous mode [ 864.217763][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 864.286536][T13244] chnl_net:caif_netlink_parms(): no params data found [ 864.437268][T13305] serio: Serial port ptm0 [ 864.588155][T13220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.630819][T13220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.641785][T13307] 9pnet: Could not find request transport: fd0x0000000000000005 [ 865.024388][T13220] team0: Port device team_slave_0 added [ 865.067141][T13220] team0: Port device team_slave_1 added [ 865.095532][ T5786] Bluetooth: hci4: command tx timeout [ 865.297769][T13220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.315006][T13220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.395755][T13220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.464808][T13244] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.495597][T13244] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.506163][T13244] bridge_slave_0: entered allmulticast mode [ 865.524285][T13244] bridge_slave_0: entered promiscuous mode [ 865.577701][T13312] loop3: detected capacity change from 0 to 32768 [ 865.602934][T13312] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2262 (13312) [ 865.650062][T13312] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 865.662368][T13220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.669752][T13220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.700115][T13312] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 865.711437][T13312] BTRFS info (device loop3): setting nodatasum [ 865.718140][T13312] BTRFS info (device loop3): force zlib compression, level 3 [ 865.745552][T13312] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 865.754848][T13312] BTRFS info (device loop3): use lzo compression, level 0 [ 865.762621][T13220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.804591][T13312] BTRFS info (device loop3): turning on flush-on-commit [ 865.832529][T13312] BTRFS info (device loop3): enabling auto defrag [ 865.846737][T13312] BTRFS info (device loop3): max_inline at 4096 [ 865.853087][T13312] BTRFS info (device loop3): using free space tree [ 865.875666][T13244] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.890429][T13244] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.916759][T13244] bridge_slave_1: entered allmulticast mode [ 865.947240][T13244] bridge_slave_1: entered promiscuous mode [ 866.044025][T13312] BTRFS info (device loop3): enabling ssd optimizations [ 866.055895][ T5786] Bluetooth: hci3: command tx timeout [ 866.384092][T13244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.485088][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 866.552226][T13220] hsr_slave_0: entered promiscuous mode [ 866.626572][T13220] hsr_slave_1: entered promiscuous mode [ 866.648703][T13220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.675507][T13220] Cannot create hsr debugfs directory [ 866.688017][ C1] vkms_vblank_simulate: vblank timer overrun [ 866.693242][T13244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.801836][ T8747] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (8747) [ 867.107648][T13244] team0: Port device team_slave_0 added [ 867.175797][ T5786] Bluetooth: hci4: command tx timeout [ 868.251364][ T5786] Bluetooth: hci3: command tx timeout [ 869.129921][T13357] syz.3.2266 (13357): drop_caches: 2 [ 869.259930][ T5786] Bluetooth: hci4: command tx timeout [ 869.484980][ T139] hsr_slave_0: left promiscuous mode [ 869.526532][T13363] 9pnet_fd: Insufficient options for proto=fd [ 869.568348][ T139] hsr_slave_1: left promiscuous mode [ 869.661585][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.712244][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.736713][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.767630][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.855273][ T139] bridge_slave_1: left allmulticast mode [ 869.863569][ T139] bridge_slave_1: left promiscuous mode [ 870.481524][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.620454][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.781386][ T139] bridge_slave_0: left allmulticast mode [ 870.847205][ T139] bridge_slave_0: left promiscuous mode [ 870.926630][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.402802][ T139] veth1_macvtap: left promiscuous mode [ 871.408663][ T139] veth0_macvtap: left promiscuous mode [ 871.414403][ T139] veth1_vlan: left promiscuous mode [ 871.421721][ T139] veth0_vlan: left promiscuous mode [ 871.989021][T13376] loop3: detected capacity change from 0 to 32768 [ 872.021109][T13376] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 872.036096][T13376] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 872.044982][T13376] BTRFS info (device loop3): setting nodatasum [ 872.067869][T13376] BTRFS info (device loop3): force zlib compression, level 3 [ 872.075335][T13376] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 872.108612][T13376] BTRFS info (device loop3): use lzo compression, level 0 [ 872.116933][T13376] BTRFS info (device loop3): turning on flush-on-commit [ 872.124001][T13376] BTRFS info (device loop3): enabling auto defrag [ 872.131233][T13376] BTRFS info (device loop3): max_inline at 4096 [ 872.137996][T13376] BTRFS info (device loop3): using free space tree [ 872.273982][T13376] BTRFS info (device loop3): enabling ssd optimizations [ 872.510923][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 873.186503][ T139] team0 (unregistering): Port device team_slave_1 removed [ 873.280361][ T139] team0 (unregistering): Port device team_slave_0 removed [ 873.364737][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.464177][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.293437][ T139] bond0 (unregistering): Released all slaves [ 874.443563][T13244] team0: Port device team_slave_1 added [ 874.591487][T13401] 9pnet_fd: Insufficient options for proto=fd [ 875.222823][T13244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.303243][T13244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.458320][T13244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.563797][T13244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.613829][T13244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.640211][T13244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.903550][T13407] Cannot find add_set index 0 as target [ 875.946267][T13244] hsr_slave_0: entered promiscuous mode [ 875.966568][T13244] hsr_slave_1: entered promiscuous mode [ 877.935280][ T139] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.203492][T13434] 9pnet_fd: Insufficient options for proto=fd [ 878.280792][ T139] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.476589][ T139] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.578918][T13421] loop2: detected capacity change from 0 to 32768 [ 878.617344][T13421] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2280 (13421) [ 878.645509][T13421] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 878.665791][T13421] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 878.697425][T13421] BTRFS info (device loop2): setting nodatasum [ 878.703707][T13421] BTRFS info (device loop2): force zlib compression, level 3 [ 878.717660][ T139] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.745480][T13421] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 878.754841][T13421] BTRFS info (device loop2): use lzo compression, level 0 [ 878.795483][T13421] BTRFS info (device loop2): turning on flush-on-commit [ 878.802582][T13421] BTRFS info (device loop2): enabling auto defrag [ 878.838001][T13421] BTRFS info (device loop2): max_inline at 4096 [ 878.844344][T13421] BTRFS info (device loop2): using free space tree [ 878.868863][T13446] loop3: detected capacity change from 0 to 128 [ 878.917986][T13446] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 878.947229][T13446] ext4 filesystem being mounted at /565/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 878.954075][T13220] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 878.979533][ C0] vkms_vblank_simulate: vblank timer overrun [ 879.021855][T13220] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 879.069074][T13220] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 879.108364][T13421] BTRFS info (device loop2): enabling ssd optimizations [ 879.341337][T13220] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 880.004960][ T8062] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 880.032024][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 880.073972][T13244] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 880.122120][T13244] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 880.221221][T13244] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 880.311581][T13244] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 880.782338][T13220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.064568][T13486] serio: Serial port ptm0 [ 881.082694][T13485] 9pnet_fd: Insufficient options for proto=fd [ 881.397996][T13220] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.459828][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.468449][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.500257][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.507567][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.813833][T13244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.030998][T13244] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.211023][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.218311][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.263291][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.270577][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.543264][ T139] hsr_slave_0: left promiscuous mode [ 882.553799][ T139] hsr_slave_1: left promiscuous mode [ 882.570224][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.596063][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.626752][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.634246][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.686784][ T139] bridge_slave_1: left allmulticast mode [ 882.692520][ T139] bridge_slave_1: left promiscuous mode [ 882.710340][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.731140][ T139] bridge_slave_0: left allmulticast mode [ 882.748279][ T139] bridge_slave_0: left promiscuous mode [ 882.754116][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.872637][ T139] veth1_macvtap: left promiscuous mode [ 882.878404][ T139] veth0_macvtap: left promiscuous mode [ 882.884098][ T139] veth1_vlan: left promiscuous mode [ 882.899855][ T139] veth0_vlan: left promiscuous mode [ 883.022638][T13529] 9pnet_fd: Insufficient options for proto=fd [ 885.157296][T13556] input: syz1 as /devices/virtual/input/input29 [ 885.581633][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 885.850484][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.793889][ T139] bond0 (unregistering): Released all slaves [ 886.855454][ T5785] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 886.992980][T13244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 887.075544][ T5785] usb 3-1: Using ep0 maxpacket: 8 [ 887.094723][ T5785] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.125313][ T5785] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 887.134829][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.204530][ T5785] usb 3-1: Product: syz [ 887.211215][ T5785] usb 3-1: Manufacturer: syz [ 887.245916][ T5785] usb 3-1: SerialNumber: syz [ 887.263513][ T5785] usb 3-1: config 0 descriptor?? [ 887.271055][T13220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.290229][ T5785] cdc_phonet: probe of 3-1:0.0 failed with error -22 [ 887.518760][T13220] veth0_vlan: entered promiscuous mode [ 887.541076][ T9] usb 3-1: USB disconnect, device number 41 [ 887.606994][T13220] veth1_vlan: entered promiscuous mode [ 888.458996][ T139] IPVS: stop unused estimator thread 0... [ 888.563352][T13220] veth0_macvtap: entered promiscuous mode [ 888.618390][T13220] veth1_macvtap: entered promiscuous mode [ 888.718525][T13220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.741839][T13220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.845057][T13220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.872843][T13220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.891387][T13220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.904753][T13220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.932408][T13244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.950473][T13593] loop3: detected capacity change from 0 to 512 [ 888.974546][T13593] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 888.984130][T13593] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 888.994249][T13593] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 889.003512][T13593] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (fffc1829) [ 889.013243][T13593] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 889.794459][T13220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.860105][T13220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.912985][T13220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.922608][T13220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.629612][T10342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.650460][T10342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.828618][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.898576][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.088941][T13618] syzkaller0: entered promiscuous mode [ 891.094507][T13618] syzkaller0: entered allmulticast mode [ 891.158249][T13628] serio: Serial port ptm0 [ 891.272809][T13244] veth0_vlan: entered promiscuous mode [ 892.901446][T13655] hub 8-0:1.0: USB hub found [ 892.921348][T13655] hub 8-0:1.0: 1 port detected [ 895.296348][T13244] veth1_vlan: entered promiscuous mode [ 895.433805][T13244] veth0_macvtap: entered promiscuous mode [ 895.508538][T13244] veth1_macvtap: entered promiscuous mode [ 895.557886][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.588710][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.610798][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.642036][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.668390][T13244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.861502][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.991674][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.129515][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.202370][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.300221][T13244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.472011][T13244] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.509880][T13244] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.529047][T13244] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.574176][T13244] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.818100][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.855534][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.983343][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.004234][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.566990][T13601] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 897.797964][T13601] usb 1-1: Using ep0 maxpacket: 16 [ 897.805787][T13601] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 897.830345][T13601] usb 1-1: config 251 has 0 interfaces, different from the descriptor's value: 1 [ 897.857702][T13601] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 897.877563][T13601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.908186][T13601] usb 1-1: Product: syz [ 897.912438][T13601] usb 1-1: Manufacturer: syz [ 897.942220][T13601] usb 1-1: SerialNumber: syz [ 898.175214][ T8] usb 1-1: USB disconnect, device number 37 [ 899.929646][T13720] fuse: Unknown parameter 'grou00000000000000000000' [ 900.200115][T13733] loop2: detected capacity change from 0 to 256 [ 900.276925][T13733] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 900.604291][T13741] loop0: detected capacity change from 0 to 512 [ 900.627818][T13740] loop4: detected capacity change from 0 to 4096 [ 900.674211][T13741] EXT4-fs: Ignoring removed bh option [ 900.773164][T13741] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 900.862842][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 900.862900][ T28] audit: type=1800 audit(1772789859.936:29): pid=13733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2335" name="file1" dev="loop2" ino=1048616 res=0 errno=0 [ 901.600017][T13741] EXT4-fs (loop0): 1 truncate cleaned up [ 901.677401][T13741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 902.164943][T13741] overlayfs: upper fs needs to support d_type. [ 902.222119][T13741] overlayfs: upper fs does not support tmpfile. [ 902.493743][T13220] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.538722][T13759] loop4: detected capacity change from 0 to 512 [ 902.550463][T13759] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 902.560053][T13759] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 902.570063][T13759] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 902.579539][T13759] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (fffc1829) [ 902.589413][T13759] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 902.649028][ T8747] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 902.946279][T13771] fuse: Unknown parameter 'grou00000000000000000000' [ 903.223282][T13775] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2346'. [ 903.502294][T13788] loop0: detected capacity change from 0 to 512 [ 903.579737][T13788] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.2350: bg 0: block 4: invalid block bitmap [ 903.719260][T13788] EXT4-fs (loop0): Remounting filesystem read-only [ 903.756000][T13788] EXT4-fs (loop0): 1 truncate cleaned up [ 903.796337][T13788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 904.245499][T13611] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 904.296188][T13808] fuse: Unknown parameter 'grou00000000000000000000' [ 904.473192][T13611] usb 1-1: unable to get BOS descriptor or descriptor too short [ 904.522146][T13611] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 904.574366][T13611] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 904.621913][T13611] usb 1-1: config 63 has no interface number 0 [ 904.638906][T13611] usb 1-1: config 63 interface 66 has no altsetting 0 [ 905.234988][T13821] xfrm1: entered promiscuous mode [ 905.347262][T13611] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 905.593071][T13611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.623469][T13611] usb 1-1: Product: syz [ 905.645446][T13611] usb 1-1: Manufacturer: syz [ 905.662677][T13611] usb 1-1: SerialNumber: syz [ 906.062638][T13611] usb 1-1: Found UVC 0.07 device syz (174f:8acf) [ 906.088944][T13611] usb 1-1: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 906.123920][T13611] usb 1-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 906.154414][T13611] usb 1-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 906.196095][T13611] usb 1-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 906.222506][T13611] usb 1-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 906.242087][T13611] usb 1-1: No streaming interface found for terminal 29. [ 906.252134][T13611] uvcvideo 1-1:63.66: Entity type for entity Output 5 was not initialized! [ 906.305789][T13611] usb 1-1: USB disconnect, device number 38 [ 906.429498][T13828] kvm: kvm [13826]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x100001043 [ 906.439455][T13828] kvm: kvm [13826]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 906.449976][T13828] kvm: kvm [13826]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xd160 [ 906.474004][T13828] kvm: kvm [13826]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x613d [ 906.486205][T13828] kvm_intel: kvm [13826]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x820a [ 906.508269][T13828] kvm: kvm [13826]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x615c [ 906.528548][T13828] kvm: kvm [13826]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xa276 [ 906.725626][T13611] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 906.978398][T13611] usb 1-1: unable to get BOS descriptor or descriptor too short [ 907.108667][T13611] usb 1-1: not running at top speed; connect to a high speed hub [ 907.466491][T13611] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 907.503782][T13220] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.559721][T13611] usb 1-1: can't read configurations, error -71 [ 907.924521][T13854] fuse: Unknown parameter 'group_i00000000000000000000' [ 910.423817][T13866] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 911.481750][T13871] serio: Serial port ptm0 [ 912.569022][T13894] loop3: detected capacity change from 0 to 1024 [ 912.730984][T13894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 912.850346][T13905] fuse: Unknown parameter 'group_i00000000000000000000' [ 913.089706][ T5786] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 913.099428][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.797414][T13921] loop4: detected capacity change from 0 to 512 [ 913.924087][T13921] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 913.933788][T13921] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 913.943992][T13921] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 913.953189][T13921] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (fffc1829) [ 913.963255][T13921] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 914.377193][T13918] serio: Serial port ptm0 [ 914.853708][T13924] loop7: detected capacity change from 0 to 1 [ 914.882408][T13924] autofs4:pid:13924:autofs_fill_super: called with bogus options [ 915.425646][T13924] loop7: detected capacity change from 1 to 0 [ 916.596843][T13946] fuse: Unknown parameter 'group_i00000000000000000000' [ 917.099668][T13954] loop0: detected capacity change from 0 to 32768 [ 917.123667][T13954] (syz.0.2390,13954,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 917.143709][T13954] (syz.0.2390,13954,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 917.236712][T13960] kAFS: No cell specified [ 917.358594][T13954] (syz.0.2390,13954,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 917.384024][T13954] (syz.0.2390,13954,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 917.409458][T13954] JBD2: Ignoring recovery information on journal [ 917.719665][T13954] (syz.0.2390,13954,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 917.737631][T13954] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 917.758049][T13954] (syz.0.2390,13954,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 917.781288][T13954] (syz.0.2390,13954,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 917.989498][T13954] (syz.0.2390,13954,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 918.019515][T13954] (syz.0.2390,13954,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 918.033747][T13954] (syz.0.2390,13954,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 918.046583][T13954] (syz.0.2390,13954,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 918.056957][T13954] (syz.0.2390,13954,0):ocfs2_quota_read:201 ERROR: status = -5 [ 918.064593][T13954] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 5 [ 918.074231][T13954] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 918.083750][T13954] (syz.0.2390,13954,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 918.094926][T13954] (syz.0.2390,13954,0):ocfs2_mknod:314 ERROR: status = -5 [ 918.102350][T13954] (syz.0.2390,13954,0):ocfs2_mknod:502 ERROR: status = -5 [ 918.110430][T13954] (syz.0.2390,13954,0):ocfs2_create:676 ERROR: status = -5 [ 920.167922][T13982] loop4: detected capacity change from 0 to 32768 [ 920.182024][T13982] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.2396 (13982) [ 920.210187][T13982] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 920.220781][T13982] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 920.229590][T13982] BTRFS info (device loop4): enabling disk space caching [ 920.236696][T13982] BTRFS info (device loop4): force clearing of disk cache [ 920.243830][T13982] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 920.253254][T13982] BTRFS info (device loop4): use zstd compression, level 3 [ 920.260657][T13982] BTRFS info (device loop4): disk space caching is enabled [ 921.608956][T13220] ocfs2: Unmounting device (7,0) on (node local) [ 921.643782][T13978] loop3: detected capacity change from 0 to 32768 [ 922.262239][T13982] BTRFS info (device loop4): enabling ssd optimizations [ 922.269500][T13982] BTRFS info (device loop4): auto enabling async discard [ 922.283989][T13982] BTRFS info (device loop4): rebuilding free space tree [ 922.344569][T13982] BTRFS info (device loop4): disabling free space tree [ 922.351753][T13982] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 922.362262][T13982] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 923.394155][T13244] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 923.452902][T14021] serio: Serial port ptm1 [ 924.244604][T14028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2400'. [ 924.254065][T14028] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2400'. [ 924.297327][T14032] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 925.250343][T14041] loop3: detected capacity change from 0 to 256 [ 925.407014][T14046] fuse: Unknown parameter 'group_id00000000000000000000' [ 926.315742][T14052] loop2: detected capacity change from 0 to 256 [ 926.422690][T14052] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 926.486663][T14058] bad cache= option: lo [ 926.486663][T14058] [ 926.493358][T14058] CIFS: VFS: bad cache= option: lo [ 929.464451][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 929.478685][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 929.489264][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 929.513729][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 929.524321][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 929.532334][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 931.576142][ T5786] Bluetooth: hci0: command tx timeout [ 931.890637][T14092] chnl_net:caif_netlink_parms(): no params data found [ 931.915773][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.264718][T14092] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.285594][T14092] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.293359][T14092] bridge_slave_0: entered allmulticast mode [ 932.304027][T14092] bridge_slave_0: entered promiscuous mode [ 932.392432][T14092] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.416798][T14092] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.437814][T14092] bridge_slave_1: entered allmulticast mode [ 932.462700][T14092] bridge_slave_1: entered promiscuous mode [ 932.968670][T14092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.023398][T14092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.676516][ T5786] Bluetooth: hci0: command tx timeout [ 935.013219][T14092] team0: Port device team_slave_0 added [ 935.069456][T14092] team0: Port device team_slave_1 added [ 935.228697][T14092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.241023][T14092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.283688][T14092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.342369][T14092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.357070][T14092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.397648][T14092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.537271][T14151] loop4: detected capacity change from 0 to 32768 [ 935.579607][T14151] (syz.4.2429,14151,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 935.637821][T14151] (syz.4.2429,14151,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 935.703367][T14092] hsr_slave_0: entered promiscuous mode [ 935.740421][T14092] hsr_slave_1: entered promiscuous mode [ 935.755498][ T5786] Bluetooth: hci0: command tx timeout [ 935.769513][T14092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 935.792001][T14151] JBD2: Ignoring recovery information on journal [ 935.816667][T14092] Cannot create hsr debugfs directory [ 935.998011][T14176] kAFS: No cell specified [ 936.122026][T14151] JBD2: journal reset failed [ 936.333117][T14151] (syz.4.2429,14151,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 936.474232][T14151] (syz.4.2429,14151,0):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 936.556902][ T33] hsr_slave_0: left promiscuous mode [ 936.573682][ T33] hsr_slave_1: left promiscuous mode [ 936.585197][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.639896][ T33] bridge_slave_1: left allmulticast mode [ 936.664591][ T33] bridge_slave_1: left promiscuous mode [ 936.671647][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.716481][ T33] bridge_slave_0: left allmulticast mode [ 936.722241][ T33] bridge_slave_0: left promiscuous mode [ 936.744611][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.826093][ T5786] Bluetooth: hci0: command tx timeout [ 938.673192][T14209] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 939.859029][ T33] team0 (unregistering): Port device team_slave_1 removed [ 939.968154][ T33] team0 (unregistering): Port device team_slave_0 removed [ 940.070264][T14228] kAFS: No cell specified [ 940.454057][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.648589][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.864681][ T33] bond0 (unregistering): Released all slaves [ 942.320667][T14241] trusted_key: encrypted_key: insufficient parameters specified [ 942.452700][T14241] loop0: detected capacity change from 0 to 2048 [ 942.521925][T14241] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 942.549676][T14241] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 943.268401][T14250] loop2: detected capacity change from 0 to 128 [ 943.340480][T14250] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 943.392525][T14250] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 943.581956][T14252] loop4: detected capacity change from 0 to 512 [ 943.590085][T14252] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 943.599747][T14252] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 943.609705][T14252] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 943.618883][T14252] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (fffc1829) [ 943.628683][T14252] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 943.698610][T11867] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 944.027070][ T8062] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 945.214077][T14261] syzkaller0: entered promiscuous mode [ 945.249808][T14261] syzkaller0: entered allmulticast mode [ 945.256700][T14257] loop0: detected capacity change from 0 to 32768 [ 947.403757][T14092] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 947.458946][T14092] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 947.485722][T13601] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 947.503065][T14092] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 947.549778][T14092] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 947.695516][T13601] usb 5-1: Using ep0 maxpacket: 32 [ 947.706294][T13601] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 947.721614][T13601] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 947.749676][T13601] usb 5-1: config 0 has no interface number 0 [ 947.759966][T13601] usb 5-1: too many endpoints for config 0 interface 188 altsetting 14: 99, using maximum allowed: 30 [ 947.780015][T13601] usb 5-1: config 0 interface 188 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 99 [ 947.795885][T13601] usb 5-1: config 0 interface 188 has no altsetting 0 [ 947.820099][T13601] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 947.838765][T13601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.865500][T13601] usb 5-1: Product: syz [ 947.872169][T13601] usb 5-1: Manufacturer: syz [ 947.883354][T13601] usb 5-1: SerialNumber: syz [ 947.920770][T13601] usb 5-1: config 0 descriptor?? [ 947.931104][T14092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.996985][T14092] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.042186][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.049430][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.116723][T11492] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.123979][T11492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.410821][T13601] asix: probe of 5-1:0.188 failed with error -22 [ 949.041655][T13601] usb 5-1: USB disconnect, device number 2 [ 949.337503][T14325] loop2: detected capacity change from 0 to 512 [ 949.353196][T14326] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2464'. [ 949.362456][T14326] ------------[ cut here ]------------ [ 949.368149][T14326] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 949.410144][T14325] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 949.420198][T14325] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 949.430238][T14325] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 949.439552][T14325] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (fffc1829) [ 949.449240][T14325] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 949.504918][T14326] WARNING: CPU: 1 PID: 14326 at net/sched/cls_u32.c:855 u32_change+0x1c5a/0x24f0 [ 949.514402][T14326] Modules linked in: [ 949.518695][T14326] CPU: 1 PID: 14326 Comm: syz.0.2464 Not tainted syzkaller #0 [ 949.526328][T14326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 949.536510][T14326] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 949.541870][T14326] Code: f8 eb 59 e8 78 4f d9 f8 c6 05 51 c9 c7 05 01 b9 10 00 00 00 48 c7 c7 40 4f c7 8b 4c 89 f6 48 c7 c2 c0 4f c7 8b e8 96 09 a3 f8 <0f> 0b e9 86 f0 ff ff e8 4a 4f d9 f8 eb 24 e8 43 4f d9 f8 c6 05 f4 [ 949.561519][ C1] vkms_vblank_simulate: vblank timer overrun [ 949.568079][T14326] RSP: 0018:ffffc9000455ed40 EFLAGS: 00010246 [ 949.574217][T14326] RAX: d6e7b11e8d147f00 RBX: ffff88805d08b000 RCX: 0000000000080000 [ 949.582432][T14326] RDX: ffffc9001354d000 RSI: 0000000000005a7a RDI: 0000000000005a7b [ 949.590522][T14326] RBP: ffffc9000455eef8 R08: ffffc9000455e947 R09: 1ffff920008abd28 [ 949.599158][T14326] R10: dffffc0000000000 R11: fffff520008abd29 R12: ffff88805d089400 [ 949.607439][T14326] R13: ffff88805d0894e8 R14: 0000000000000020 R15: ffff888050501dc0 [ 949.615883][T14326] FS: 00007f61912046c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 949.624962][T14326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 949.631833][T14326] CR2: 00007f397c169000 CR3: 00000000635da000 CR4: 00000000003506e0 [ 949.639938][T14326] Call Trace: [ 949.643308][T14326] [ 949.646331][T14326] ? tc_new_tfilter+0x8c6/0x1640 [ 949.651352][T14326] ? u32_get+0x370/0x370 [ 949.655799][T14326] tc_new_tfilter+0xe4f/0x1640 [ 949.660695][T14326] ? tcf_proto_signal_destroying+0x240/0x240 [ 949.666806][T14326] ? rcu_read_unlock+0x8c/0xa0 [ 949.671639][T14326] ? tcf_proto_signal_destroying+0x240/0x240 [ 949.677797][T14326] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 949.682959][T14326] ? tcf_proto_signal_destroying+0x240/0x240 [ 949.689049][T14326] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 949.694075][T14326] ? lockdep_hardirqs_on+0x98/0x150 [ 949.699807][T14326] ? rtnetlink_bind+0x80/0x80 [ 949.704558][T14326] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 949.710723][T14326] ? lock_chain_count+0x20/0x20 [ 949.715762][T14326] ? __local_bh_enable_ip+0x13a/0x1c0 [ 949.721199][T14326] ? lockdep_hardirqs_on+0x98/0x150 [ 949.726554][T14326] ? __local_bh_enable_ip+0x13a/0x1c0 [ 949.731975][T14326] ? _local_bh_enable+0xa0/0xa0 [ 949.736996][T14326] ? __dev_queue_xmit+0x265/0x3660 [ 949.742221][T14326] ? __dev_queue_xmit+0x265/0x3660 [ 949.747553][T14326] ? __dev_queue_xmit+0x1b2c/0x3660 [ 949.752835][T14326] ? __dev_queue_xmit+0x265/0x3660 [ 949.758102][T14326] ? ref_tracker_free+0x690/0x840 [ 949.763242][T14326] netlink_rcv_skb+0x241/0x4d0 [ 949.768133][T14326] ? rtnetlink_bind+0x80/0x80 [ 949.772876][T14326] ? netlink_ack+0x1180/0x1180 [ 949.777912][T14326] ? __lock_acquire+0x7d40/0x7d40 [ 949.783004][T14326] ? netlink_deliver_tap+0x2e/0x1b0 [ 949.788331][T14326] netlink_unicast+0x751/0x8d0 [ 949.793218][T14326] netlink_sendmsg+0x8d0/0xbf0 [ 949.798156][T14326] ? netlink_getsockopt+0x590/0x590 [ 949.803815][T14326] ? aa_sock_msg_perm+0x94/0x150 [ 949.808987][T14326] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 949.814340][T14326] ? security_socket_sendmsg+0x80/0xa0 [ 949.820754][T14326] ? netlink_getsockopt+0x590/0x590 [ 949.826292][T14326] ____sys_sendmsg+0x5ba/0x960 [ 949.831136][T14326] ? __asan_memset+0x22/0x40 [ 949.835898][T14326] ? __sys_sendmsg_sock+0x30/0x30 [ 949.840974][T14326] ? __import_iovec+0x5f2/0x850 [ 949.845978][T14326] ? import_iovec+0x73/0xa0 [ 949.850575][T14326] ___sys_sendmsg+0x2a6/0x360 [ 949.855380][T14326] ? __sys_sendmsg+0x2a0/0x2a0 [ 949.860291][T14326] __sys_sendmmsg+0x2ca/0x510 [ 949.865036][T14326] ? __ia32_sys_sendmsg+0x90/0x90 [ 949.870176][T14326] ? __ia32_sys_get_robust_list+0x110/0x110 [ 949.876281][T14326] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 949.882328][T14326] ? lock_chain_count+0x20/0x20 [ 949.887340][T14326] __x64_sys_sendmmsg+0xa0/0xb0 [ 949.892283][T14326] do_syscall_64+0x55/0xa0 [ 949.896929][T14326] ? clear_bhb_loop+0x40/0x90 [ 949.902026][T14326] ? clear_bhb_loop+0x40/0x90 [ 949.906907][T14326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 949.912896][T14326] RIP: 0033:0x7f619039c799 [ 949.917466][T14326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.937255][T14326] RSP: 002b:00007f6191204028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 949.945843][T14326] RAX: ffffffffffffffda RBX: 00007f6190616090 RCX: 00007f619039c799 [ 949.953902][T14326] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 949.962038][T14326] RBP: 00007f6190432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 949.970151][T14326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.978493][T14326] R13: 00007f6190616128 R14: 00007f6190616090 R15: 00007ffcb5b88058 [ 949.986764][T14326] [ 949.989828][T14326] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 949.997147][T14326] CPU: 1 PID: 14326 Comm: syz.0.2464 Not tainted syzkaller #0 [ 950.004744][T14326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 950.014843][T14326] Call Trace: [ 950.018165][T14326] [ 950.021140][T14326] dump_stack_lvl+0x18c/0x250 [ 950.025875][T14326] ? show_regs_print_info+0x20/0x20 [ 950.031141][T14326] ? load_image+0x400/0x400 [ 950.035700][T14326] panic+0x2dc/0x730 [ 950.039647][T14326] ? bpf_jit_dump+0xd0/0xd0 [ 950.044214][T14326] __warn+0x2e0/0x470 [ 950.048239][T14326] ? u32_change+0x1c5a/0x24f0 [ 950.052972][T14326] ? u32_change+0x1c5a/0x24f0 [ 950.057690][T14326] report_bug+0x2be/0x4f0 [ 950.062054][T14326] ? u32_change+0x1c5a/0x24f0 [ 950.066778][T14326] ? u32_change+0x1c5a/0x24f0 [ 950.071590][T14326] ? u32_change+0x1c5c/0x24f0 [ 950.076316][T14326] handle_bug+0xcf/0x120 [ 950.080698][T14326] exc_invalid_op+0x1a/0x50 [ 950.085258][T14326] asm_exc_invalid_op+0x1a/0x20 [ 950.090150][T14326] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 950.095478][T14326] Code: f8 eb 59 e8 78 4f d9 f8 c6 05 51 c9 c7 05 01 b9 10 00 00 00 48 c7 c7 40 4f c7 8b 4c 89 f6 48 c7 c2 c0 4f c7 8b e8 96 09 a3 f8 <0f> 0b e9 86 f0 ff ff e8 4a 4f d9 f8 eb 24 e8 43 4f d9 f8 c6 05 f4 [ 950.115130][T14326] RSP: 0018:ffffc9000455ed40 EFLAGS: 00010246 [ 950.121255][T14326] RAX: d6e7b11e8d147f00 RBX: ffff88805d08b000 RCX: 0000000000080000 [ 950.129273][T14326] RDX: ffffc9001354d000 RSI: 0000000000005a7a RDI: 0000000000005a7b [ 950.137298][T14326] RBP: ffffc9000455eef8 R08: ffffc9000455e947 R09: 1ffff920008abd28 [ 950.145395][T14326] R10: dffffc0000000000 R11: fffff520008abd29 R12: ffff88805d089400 [ 950.153582][T14326] R13: ffff88805d0894e8 R14: 0000000000000020 R15: ffff888050501dc0 [ 950.161611][T14326] ? tc_new_tfilter+0x8c6/0x1640 [ 950.166629][T14326] ? u32_get+0x370/0x370 [ 950.171029][T14326] tc_new_tfilter+0xe4f/0x1640 [ 950.175878][T14326] ? tcf_proto_signal_destroying+0x240/0x240 [ 950.181927][T14326] ? rcu_read_unlock+0x8c/0xa0 [ 950.186754][T14326] ? tcf_proto_signal_destroying+0x240/0x240 [ 950.192801][T14326] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 950.197968][T14326] ? tcf_proto_signal_destroying+0x240/0x240 [ 950.204013][T14326] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 950.209005][T14326] ? lockdep_hardirqs_on+0x98/0x150 [ 950.214254][T14326] ? rtnetlink_bind+0x80/0x80 [ 950.218985][T14326] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 950.225020][T14326] ? lock_chain_count+0x20/0x20 [ 950.229919][T14326] ? __local_bh_enable_ip+0x13a/0x1c0 [ 950.235353][T14326] ? lockdep_hardirqs_on+0x98/0x150 [ 950.240606][T14326] ? __local_bh_enable_ip+0x13a/0x1c0 [ 950.246019][T14326] ? _local_bh_enable+0xa0/0xa0 [ 950.250931][T14326] ? __dev_queue_xmit+0x265/0x3660 [ 950.256112][T14326] ? __dev_queue_xmit+0x265/0x3660 [ 950.261272][T14326] ? __dev_queue_xmit+0x1b2c/0x3660 [ 950.266547][T14326] ? __dev_queue_xmit+0x265/0x3660 [ 950.271717][T14326] ? ref_tracker_free+0x690/0x840 [ 950.276767][T14326] netlink_rcv_skb+0x241/0x4d0 [ 950.281550][T14326] ? rtnetlink_bind+0x80/0x80 [ 950.286238][T14326] ? netlink_ack+0x1180/0x1180 [ 950.291022][T14326] ? __lock_acquire+0x7d40/0x7d40 [ 950.296102][T14326] ? netlink_deliver_tap+0x2e/0x1b0 [ 950.301368][T14326] netlink_unicast+0x751/0x8d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 950.306204][T14326] netlink_sendmsg+0x8d0/0xbf0 [ 950.311046][T14326] ? netlink_getsockopt+0x590/0x590 [ 950.316318][T14326] ? aa_sock_msg_perm+0x94/0x150 [ 950.321508][T14326] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 950.326864][T14326] ? security_socket_sendmsg+0x80/0xa0 [ 950.332372][T14326] ? netlink_getsockopt+0x590/0x590 [ 950.338073][T14326] ____sys_sendmsg+0x5ba/0x960 [ 950.342895][T14326] ? __asan_memset+0x22/0x40 [ 950.347551][T14326] ? __sys_sendmsg_sock+0x30/0x30 [ 950.352638][T14326] ? __import_iovec+0x5f2/0x850 [ 950.357548][T14326] ? import_iovec+0x73/0xa0 [ 950.362090][T14326] ___sys_sendmsg+0x2a6/0x360 [ 950.366804][T14326] ? __sys_sendmsg+0x2a0/0x2a0 [ 950.371633][T14326] __sys_sendmmsg+0x2ca/0x510 [ 950.376357][T14326] ? __ia32_sys_sendmsg+0x90/0x90 [ 950.381417][T14326] ? __ia32_sys_get_robust_list+0x110/0x110 [ 950.387350][T14326] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 950.393359][T14326] ? lock_chain_count+0x20/0x20 [ 950.398243][T14326] __x64_sys_sendmmsg+0xa0/0xb0 [ 950.403200][T14326] do_syscall_64+0x55/0xa0 [ 950.407665][T14326] ? clear_bhb_loop+0x40/0x90 [ 950.412467][T14326] ? clear_bhb_loop+0x40/0x90 [ 950.417183][T14326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 950.423214][T14326] RIP: 0033:0x7f619039c799 [ 950.427660][T14326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.447472][T14326] RSP: 002b:00007f6191204028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 950.455926][T14326] RAX: ffffffffffffffda RBX: 00007f6190616090 RCX: 00007f619039c799 [ 950.463944][T14326] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 950.471941][T14326] RBP: 00007f6190432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 950.479971][T14326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 950.487975][T14326] R13: 00007f6190616128 R14: 00007f6190616090 R15: 00007ffcb5b88058 [ 950.496033][T14326] [ 950.499671][T14326] Kernel Offset: disabled [ 950.504011][T14326] Rebooting in 86400 seconds..