last executing test programs: 4m14.129802552s ago: executing program 4 (id=628): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x3, 0x34e, &(0x7f0000000900)="$eJzs3U9oHGUUAPC3nc1uWqjJQSgKwuhN0NBGPOgpoaRQzEVl8c9BXGyqko2FLC6mh2zjRTwKHtWLNw967FkERbx58GoFqYoH7a1gcWR3ZrOz2U2aCtsa/P0Oy+v73tvvm+6QnUyyX15divULM3Hxxo3rMTtbierS2aW4WYn5SGLgSoyrTcgBAEfDzSyLP7PcIVsqU14SADBl/ff/10+WMu9+fVB95t0fAI684vv/4wfVzO43cGkqSwIApmzs/v8jI8O10R/1V0u/FQAAHFXPv/TyM8urEc+l6WzExnudRqcRTw/Hly/Gm9GKtTgdc3ErIr9Q6D1U+o/nzq+unE7TtBu/zEej19FpRGx0O438SmE56ffX40zMxXzRX1xtZFmWnPskItK+iLjS7c8fG5VOYyZOFPP/eCLWYjHSuH+sP+L86spiWjxBY2PQ343YGd636K1/Iebi+9fiUrTiQvR6B5c1qyvbZ9L0bLY60t9p1Pt1uX3vgAAAAAAAAAAAAAAAAAAAAAAAwL+ykO6a393/Jhvu37OwMGG8vz9O3l/sD7ST7w+U1bPIsj/eebzxfhIj+wPt3Z+n06jGsXt76AAAAAAAAAAAAAAAAAAAAPCf0d6qRbPVWttsb11eLwfdzfbWsYjoZd769vOvjsd4zW2CajFHaSgtUpfXm1kyKM6SkZoiSHqTDzKfXd1dcbmmvnsUE5dR33+o1Tr58M8fDTMPJYNn/ntYk8TkA0z2LKMcbNyXL+lO/qN2g8Xb1FzLsmy/9u1XxruiElG98xfu4CDrBd9cf+OBJ9qnnuxnvsxyjz4298K1Dz/9bb3Z6s0c/Vewttm+la03i39PPtn2D5LS+VOJPKiUz4TqQe07o5lm8sPvLz74wXeHmz0rZ96eUJPkh/PF3qFaHvSWuWfo+KS5Ziac/FMITn281Ly6/dOvh+0qfZGwUQcAAAAAAAAAAAAAAAAAANwVpc+KF4oP+84c1PXUs9NfGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcPcO//18KdsYyhwn+6sb4UH1tsx1Ru9eHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9w/AQAA///AXG2i") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) 4m11.158789734s ago: executing program 4 (id=636): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clock_adjtime(0xffc99a3b, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000", @ANYRES32, @ANYBLOB="c13585f5b800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') r5 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) 4m7.384910599s ago: executing program 4 (id=642): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff66d70ff68165f101b2ddab49ecffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 4m6.085530277s ago: executing program 4 (id=645): syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000005c0)={[{@namecase}, {@gid}, {@utf8}, {@gid}, {@errors_continue}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@time_offset={'time_offset', 0x3d, 0xc}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp737'}}]}, 0x1, 0x152a, &(0x7f00000037c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x1010401, 0x0) 4m2.784375002s ago: executing program 4 (id=652): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clock_adjtime(0xffc99a3b, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000", @ANYRES32, @ANYBLOB="c13585f5b800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') r5 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) 3m59.336641486s ago: executing program 4 (id=660): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000007c0)={@multicast1, @empty}, &(0x7f0000000800)=0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) 3m58.091377196s ago: executing program 32 (id=660): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000007c0)={@multicast1, @empty}, &(0x7f0000000800)=0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) 2m52.733453248s ago: executing program 3 (id=814): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8, @any, 0x0, 0x105b871f7bda3738}, 0xe) 2m52.428272298s ago: executing program 3 (id=815): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x2, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000780), 0xfe, 0x4f7, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) getrlimit(0x6, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m49.628934528s ago: executing program 3 (id=819): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000006b40)=ANY=[@ANYBLOB="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"], 0x80, 0x350, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 2m48.451527839s ago: executing program 3 (id=825): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x4a5, &(0x7f0000000bc0)="$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") socket(0x22, 0x2, 0x8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf5, 0x20000}, 0x20) 2m45.214644436s ago: executing program 3 (id=832): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clock_adjtime(0xffc99a3b, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="c13585f5b800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') r5 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) 2m43.968487157s ago: executing program 3 (id=842): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x64, 0x0, 0x0) umount2(0x0, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000008, 0x8013, r0, 0xf6690000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)="5514377d925cfac68fa5e905ccd2593d6d0f37d8422f54e9fbc8881033b7e59b0ce2a896d5c195741b964850ca7444d0926630715341d8ef0611e595745d05bb0484b65adfe33ed3639e7722ef74b92df54d886779faf3deee20a0724362221a9fc4a7f86a07042dd5875131ff0d57107a01db1964be5dd15d8d3be6fd3209f87210f2e9de528884797a1c43157c6f56349e263c79cb13df66409f7cd33b9ebb000fd19d5521eab9eb89ad56a45108afd3179077413d0e16044c0f", 0xbb}, {&(0x7f0000001540)="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", 0xf45}], 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/159, 0xfffffffffffffeff, 0x0, 0x0}, &(0x7f0000000380)=0x40) 2m43.434748705s ago: executing program 33 (id=842): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x64, 0x0, 0x0) umount2(0x0, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000008, 0x8013, r0, 0xf6690000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)="5514377d925cfac68fa5e905ccd2593d6d0f37d8422f54e9fbc8881033b7e59b0ce2a896d5c195741b964850ca7444d0926630715341d8ef0611e595745d05bb0484b65adfe33ed3639e7722ef74b92df54d886779faf3deee20a0724362221a9fc4a7f86a07042dd5875131ff0d57107a01db1964be5dd15d8d3be6fd3209f87210f2e9de528884797a1c43157c6f56349e263c79cb13df66409f7cd33b9ebb000fd19d5521eab9eb89ad56a45108afd3179077413d0e16044c0f", 0xbb}, {&(0x7f0000001540)="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", 0xf45}], 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/159, 0xfffffffffffffeff, 0x0, 0x0}, &(0x7f0000000380)=0x40) 21.619374208s ago: executing program 0 (id=1285): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f000001e180)=[{{&(0x7f0000002340)=@hci, 0x80, &(0x7f000001b900)=[{&(0x7f00000023c0)=""/109, 0x6d}, {&(0x7f000001e240)=""/15, 0xf}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000002440)=""/10, 0xa}, {&(0x7f0000002480)=""/246, 0xf6}, {&(0x7f0000002580)=""/130, 0x82}, {&(0x7f000001b700)=""/249, 0xf9}, {&(0x7f0000002640)=""/100, 0x64}, {&(0x7f000001b800)=""/210, 0xd2}], 0x9, &(0x7f000001b9c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f000001c9c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f000001ddc0)=[{&(0x7f000001ca40)=""/239, 0xef}, {&(0x7f000001cb40)=""/199, 0xc7}, {&(0x7f000001cc40)=""/16, 0x10}, {&(0x7f000001cc80)=""/6, 0x6}, {&(0x7f000001ccc0)=""/4096, 0x1000}, {&(0x7f000001dcc0)=""/185, 0xb9}, {&(0x7f000001dd80)=""/58, 0x3a}], 0x7, &(0x7f000001de40)=""/219, 0xdb}, 0xab}, {{&(0x7f000001df40)=@x25={0x9, @remote}, 0x80, &(0x7f000001e0c0)=[{&(0x7f000001dfc0)=""/199, 0xc7}], 0x1, &(0x7f000001e100)=""/72, 0x48}, 0x5}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r6, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x9, 0x100001}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xc001) sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r6, 0x0, 0x0, 0x400000000000000) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7f, 0x1002, 0x5c8, 0x80000003, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 20.665229251s ago: executing program 0 (id=1291): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 19.452400907s ago: executing program 0 (id=1292): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x120) r1 = getpid() setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_open_dev$amidi(0x0, 0x3, 0x14080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @broadcast}, 0x10) 15.15870026s ago: executing program 0 (id=1302): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 14.53226744s ago: executing program 5 (id=1310): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @multicast}) write$tun(r4, &(0x7f0000000340)={@val={0x0, 0x1b}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x0, 0x14, 0x68, 0x0, 0x9, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}}}, 0x26) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0xfffffffffffffffe, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x1, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 14.111979455s ago: executing program 2 (id=1312): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x120) r1 = getpid() setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_open_dev$amidi(0x0, 0x3, 0x14080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @broadcast}, 0x10) 12.760908208s ago: executing program 2 (id=1315): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f00000002c0), 0xfb, 0x4a0, &(0x7f0000000e00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) 10.844558435s ago: executing program 5 (id=1316): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @multicast}) write$tun(r4, &(0x7f0000000340)={@val={0x0, 0x1b}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x0, 0x14, 0x68, 0x0, 0x9, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}}}, 0x26) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0xfffffffffffffffe, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x1, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 10.752570856s ago: executing program 6 (id=1317): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f000001e180)=[{{&(0x7f0000002340)=@hci, 0x80, &(0x7f000001b900)=[{&(0x7f00000023c0)=""/109, 0x6d}, {&(0x7f000001e240)=""/15, 0xf}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000002440)=""/10, 0xa}, {&(0x7f0000002480)=""/246, 0xf6}, {&(0x7f0000002580)=""/130, 0x82}, {&(0x7f000001b700)=""/249, 0xf9}, {&(0x7f0000002640)=""/100, 0x64}, {&(0x7f000001b800)=""/210, 0xd2}], 0x9, &(0x7f000001b9c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f000001c9c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f000001ddc0)=[{0x0}, {&(0x7f000001ca40)=""/239, 0xef}, {&(0x7f000001cb40)=""/199, 0xc7}, {&(0x7f000001cc40)=""/16, 0x10}, {&(0x7f000001cc80)=""/6, 0x6}, {&(0x7f000001ccc0)=""/4096, 0x1000}, {&(0x7f000001dcc0)=""/185, 0xb9}, {&(0x7f000001dd80)=""/58, 0x3a}], 0x8, &(0x7f000001de40)=""/219, 0xdb}, 0xab}, {{&(0x7f000001df40)=@x25={0x9, @remote}, 0x80, &(0x7f000001e0c0)=[{&(0x7f000001dfc0)=""/199, 0xc7}], 0x1, &(0x7f000001e100)=""/72, 0x48}, 0x5}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r6, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x9, 0x100001}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xc001) sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r6, 0x0, 0x0, 0x400000000000000) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7f, 0x1002, 0x5c8, 0x80000003, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 9.181161419s ago: executing program 0 (id=1318): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000300)=ANY=[], 0x1, 0x5505, &(0x7f00000079c0)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 9.042883387s ago: executing program 6 (id=1319): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x10a, 0x2000000000000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 8.770949212s ago: executing program 6 (id=1321): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x35}, @in6=@private0, 0x4e20, 0x6, 0x4e22, 0xfc00, 0x2, 0x20, 0x0, 0x1d, 0x0, 0xee01}, {0x3, 0x0, 0x3, 0x0, 0x5, 0x1, 0x83a, 0x4}, {0x8, 0x7, 0x5, 0x7}, 0x100, 0x6e6bb0, 0x2, 0x0, 0x1}, {{@in=@loopback, 0x4d4, 0xd4}, 0x0, @in6=@mcast1, 0x0, 0x4, 0x2, 0xee, 0x1, 0x80000001, 0x2}}, 0xe8) 8.603868853s ago: executing program 5 (id=1322): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2202) write$evdev(r0, &(0x7f0000000100)=[{{}, 0x14, 0x2}], 0x18) 8.500480877s ago: executing program 1 (id=1323): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f00000006c0)={'lo\x00', 0xfffffffffffffffa, 0x80000000}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x3, 0x2) gettid() timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10681, 0x189}}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x20044002) 8.500249467s ago: executing program 6 (id=1324): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x8c082) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x6) 8.369646783s ago: executing program 5 (id=1325): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x120) r1 = getpid() setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_open_dev$amidi(0x0, 0x3, 0x14080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @broadcast}, 0x10) 7.350752365s ago: executing program 1 (id=1326): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000640)={{{@in, @in6=@remote}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000003680)="$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") chdir(&(0x7f0000000200)='./file0\x00') truncate(&(0x7f0000000140)='./file0\x00', 0x8001) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x21081c22) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r5, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, r6) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) 7.350475185s ago: executing program 5 (id=1327): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @multicast}) write$tun(r4, &(0x7f0000000340)={@val={0x0, 0x1b}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x0, 0x14, 0x68, 0x0, 0x9, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}}}, 0x26) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0xfffffffffffffffe, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x1, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 7.292499232s ago: executing program 6 (id=1328): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 2.228746464s ago: executing program 6 (id=1329): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@nobh}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) 2.006417503s ago: executing program 1 (id=1330): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f000001e180)=[{{&(0x7f0000002340)=@hci, 0x80, &(0x7f000001b900)=[{&(0x7f00000023c0)=""/109, 0x6d}, {&(0x7f000001e240)=""/15, 0xf}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000002440)=""/10, 0xa}, {&(0x7f0000002480)=""/246, 0xf6}, {&(0x7f0000002580)=""/130, 0x82}, {&(0x7f000001b700)=""/249, 0xf9}, {&(0x7f0000002640)=""/100, 0x64}, {&(0x7f000001b800)=""/210, 0xd2}], 0x9, &(0x7f000001b9c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f000001c9c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f000001ddc0)=[{0x0}, {&(0x7f000001ca40)=""/239, 0xef}, {&(0x7f000001cb40)=""/199, 0xc7}, {&(0x7f000001cc40)=""/16, 0x10}, {&(0x7f000001cc80)=""/6, 0x6}, {&(0x7f000001ccc0)=""/4096, 0x1000}, {&(0x7f000001dcc0)=""/185, 0xb9}, {&(0x7f000001dd80)=""/58, 0x3a}], 0x8, &(0x7f000001de40)=""/219, 0xdb}, 0xab}, {{&(0x7f000001df40)=@x25={0x9, @remote}, 0x80, &(0x7f000001e0c0)=[{&(0x7f000001dfc0)=""/199, 0xc7}], 0x1, &(0x7f000001e100)=""/72, 0x48}, 0x5}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r6, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x9, 0x100001}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xc001) sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r6, 0x0, 0x0, 0x400000000000000) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7f, 0x1002, 0x5c8, 0x80000003, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.892601997s ago: executing program 2 (id=1331): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x10a, 0x2000000000000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 1.530688304s ago: executing program 2 (id=1332): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1.397404851s ago: executing program 2 (id=1333): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @multicast}) write$tun(r4, &(0x7f0000000340)={@val={0x0, 0x1b}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x0, 0x14, 0x68, 0x0, 0x9, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}}}, 0x26) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0xfffffffffffffffe, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x1, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 902.488194ms ago: executing program 1 (id=1334): syz_io_uring_setup(0x31e3, &(0x7f0000000080)={0x0, 0x1840, 0x10, 0x3, 0x30d}, &(0x7f0000000100), &(0x7f0000000140)) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081", 0x5b, r0) 644.598148ms ago: executing program 1 (id=1335): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 385.458741ms ago: executing program 0 (id=1336): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f00000006c0)={'lo\x00', 0xfffffffffffffffa, 0x80000000}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x3, 0x2) gettid() timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10681, 0x189}}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x20044002) 348.379056ms ago: executing program 1 (id=1337): syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x380000a, &(0x7f0000000800), 0x3f, 0x540, &(0x7f0000000100)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x14c0348, 0x200, 0x1, 0xfffffffe, 0xec, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 148.563542ms ago: executing program 5 (id=1338): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x120) r1 = getpid() setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_open_dev$amidi(0x0, 0x3, 0x14080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a0000000400000006"], 0x48) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @broadcast}, 0x10) 0s ago: executing program 2 (id=1339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008180800000002008"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): sing dummy_hcd [ 285.906514][ T4693] device hsr_slave_0 left promiscuous mode [ 285.919826][ T4693] device hsr_slave_1 left promiscuous mode [ 285.928958][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.937080][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.966222][ T4693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.974736][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.995773][ T4693] device bridge_slave_1 left promiscuous mode [ 286.007362][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.037850][ T4693] device bridge_slave_0 left promiscuous mode [ 286.048932][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.065621][ T126] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 286.094262][ T126] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 286.129174][ T126] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 286.148728][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.170749][ T6556] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 286.986964][ T4693] device veth1_macvtap left promiscuous mode [ 287.023316][ T4693] device veth0_macvtap left promiscuous mode [ 287.059263][ T4693] device veth1_vlan left promiscuous mode [ 287.087141][ T4693] device veth0_vlan left promiscuous mode [ 287.229652][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 288.542781][ T6579] netlink: 132 bytes leftover after parsing attributes in process `syz.0.678'. [ 289.004967][ T6290] usb 3-1: USB disconnect, device number 5 [ 289.329083][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 290.447436][ T6596] loop0: detected capacity change from 0 to 512 [ 290.460178][ T6596] EXT4-fs: Ignoring removed mblk_io_submit option [ 290.509349][ T6596] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 290.534820][ T6596] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.680: attempt to clear invalid blocks 2 len 1 [ 290.549867][ T6596] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 290.592486][ T6596] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.680: invalid indirect mapped block 1819239214 (level 0) [ 290.614304][ T6596] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.680: invalid indirect mapped block 1819239214 (level 1) [ 290.644523][ T6596] EXT4-fs (loop0): 1 truncate cleaned up [ 290.654505][ T6596] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 292.013918][ T4693] team0 (unregistering): Port device team_slave_1 removed [ 292.095421][ T4693] team0 (unregistering): Port device team_slave_0 removed [ 292.199296][ T4693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.279909][ T4693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.982454][ T4693] bond0 (unregistering): Released all slaves [ 293.181630][ T6504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.315461][ T6603] device erspan0 entered promiscuous mode [ 293.342928][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 293.446919][ T6504] team0: Port device team_slave_0 added [ 293.482886][ T6504] team0: Port device team_slave_1 added [ 293.584509][ T6608] loop0: detected capacity change from 0 to 1024 [ 293.602537][ T6504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.630641][ T6608] EXT4-fs: inline encryption not supported [ 293.639350][ T6504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.783433][ T6612] fuse: root generation should be zero [ 293.942301][ T6608] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 294.066804][ T6504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.262653][ T6504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.279383][ T6504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.338100][ T6608] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3852: comm syz.0.686: Allocating blocks 497-513 which overlap fs metadata [ 294.359080][ T6504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.387949][ T6608] EXT4-fs (loop0): Remounting filesystem read-only [ 294.406985][ T6608] EXT4-fs (loop0): pa ffff888073fd70e0: logic 256, phys. 385, len 8 [ 294.415731][ T6608] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 294.540967][ T6608] EXT4-fs (loop0): Remounting filesystem read-only [ 295.076312][ T6628] netlink: 132 bytes leftover after parsing attributes in process `syz.3.689'. [ 295.683681][ T6504] device hsr_slave_0 entered promiscuous mode [ 295.825795][ T6504] device hsr_slave_1 entered promiscuous mode [ 295.833639][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 296.089319][ T6504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.101087][ T6504] Cannot create hsr debugfs directory [ 298.024118][ T6657] loop0: detected capacity change from 0 to 512 [ 298.051053][ T6657] EXT4-fs: Ignoring removed mblk_io_submit option [ 298.092343][ T6657] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 298.143848][ T6657] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.695: attempt to clear invalid blocks 2 len 1 [ 298.182598][ T6504] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 298.240323][ T6657] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 298.268142][ T6504] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 298.324355][ T6657] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.695: invalid indirect mapped block 1819239214 (level 0) [ 298.340241][ T6504] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 298.382061][ T6504] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 298.383348][ T6657] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.695: invalid indirect mapped block 1819239214 (level 1) [ 298.465395][ T6657] EXT4-fs (loop0): 1 truncate cleaned up [ 298.476087][ T6657] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 298.606640][ T6672] loop2: detected capacity change from 0 to 512 [ 298.713981][ T6672] EXT4-fs: Ignoring removed i_version option [ 298.793147][ T6672] EXT4-fs: Ignoring removed bh option [ 299.351459][ T6504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.375906][ T6504] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.458183][ T6504] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 299.471643][ T6504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.534805][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.585559][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 299.665619][ T6672] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 299.818413][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.973432][ T6672] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 300.046910][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.320982][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.558568][ T5338] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.565839][ T5338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.977006][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.246368][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.464791][ T5338] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.472051][ T5338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.889219][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 302.139611][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 302.452504][ T6701] netlink: 132 bytes leftover after parsing attributes in process `syz.0.700'. [ 303.245426][ T26] audit: type=1800 audit(1768804798.209:37): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.698" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 303.403311][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 303.597667][ T26] audit: type=1800 audit(1768804798.229:38): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.698" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 303.630265][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.775912][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.951750][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.124895][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.310130][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.319222][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 304.328004][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.382635][ T6694] device vlan2 entered promiscuous mode [ 304.388296][ T6694] device bridge0 entered promiscuous mode [ 304.417196][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 304.494939][ T6694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 304.558746][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.609836][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.640653][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 304.679454][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 305.559231][ T6721] loop2: detected capacity change from 0 to 2048 [ 305.717937][ T6721] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 305.758331][ T6721] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.851528][ T6721] fs-verity: sha512 using implementation "sha512-avx2" [ 305.955755][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.985469][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.047637][ T6504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.174668][ T6736] loop1: detected capacity change from 0 to 1024 [ 306.190092][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 306.282952][ T6736] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 306.341402][ T6736] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 307.171636][ T6736] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 307.223030][ T6736] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 307.259363][ T6736] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 307.849576][ T6748] netlink: 132 bytes leftover after parsing attributes in process `syz.1.710'. [ 308.984038][ T6756] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 309.349777][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 309.379760][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 309.508603][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 310.071528][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.079977][ T6767] fuse: Unknown parameter 'group_id00000000000000000000' [ 310.142779][ T6504] device veth0_vlan entered promiscuous mode [ 310.166896][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.176025][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.209921][ T6504] device veth1_vlan entered promiscuous mode [ 310.288022][ T6772] loop0: detected capacity change from 0 to 512 [ 310.311486][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 310.328704][ T6772] EXT4-fs: Ignoring removed mblk_io_submit option [ 310.359797][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 310.415879][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 310.450407][ T6772] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 310.461022][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.481522][ T6772] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.709: attempt to clear invalid blocks 2 len 1 [ 310.482077][ T6504] device veth0_macvtap entered promiscuous mode [ 310.508424][ T6504] device veth1_macvtap entered promiscuous mode [ 310.538378][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.554283][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.566291][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.577277][ T6772] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 310.666820][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.676071][ T6772] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.709: invalid indirect mapped block 1819239214 (level 0) [ 310.691956][ T6772] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.709: invalid indirect mapped block 1819239214 (level 1) [ 310.714815][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.727228][ T6772] EXT4-fs (loop0): 1 truncate cleaned up [ 310.736683][ T6772] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 310.761309][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.824591][ T6782] blktrace: Concurrent blktraces are not allowed on loop2 [ 310.829090][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.879061][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.910701][ T6504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.935425][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 310.962407][ T5038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.998632][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.029784][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.062692][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.096268][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.126481][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.162229][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.194925][ T6504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.228931][ T6504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.290625][ T6504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.300981][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 311.337230][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.375839][ T6504] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.402102][ T6504] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.495246][ T6504] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.505411][ T6504] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.389943][ T5038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.438542][ T5038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.482290][ T4702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.259522][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 313.339153][ T4702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.392639][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 313.641885][ T6815] fuse: Bad value for 'user_id' [ 314.562770][ T6826] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 314.569342][ T6826] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 314.577263][ T6826] vhci_hcd vhci_hcd.0: Device attached [ 314.603193][ T6826] device syzkaller1 entered promiscuous mode [ 314.619824][ T6826] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 315.109337][ T4341] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 315.272371][ T6827] vhci_hcd: connection reset by peer [ 315.300835][ T4401] vhci_hcd: stop threads [ 315.305773][ T4401] vhci_hcd: release socket [ 315.410412][ T4401] vhci_hcd: disconnect device [ 316.224865][ T6836] binder: 6835:6836 ioctl 4018620d 0 returned -22 [ 316.258159][ T6839] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 316.312576][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 318.158100][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.164481][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.306276][ T6859] blktrace: Concurrent blktraces are not allowed on loop6 [ 318.862043][ T6868] fuse: Bad value for 'user_id' [ 319.855977][ T6874] loop3: detected capacity change from 0 to 512 [ 319.902960][ T6874] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.964550][ T6874] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 320.012335][ T6874] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.738: attempt to clear invalid blocks 2 len 1 [ 320.029670][ T6874] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 320.095014][ T6874] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.738: invalid indirect mapped block 1819239214 (level 0) [ 320.133288][ T6874] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.738: invalid indirect mapped block 1819239214 (level 1) [ 320.195119][ T6874] EXT4-fs (loop3): 1 truncate cleaned up [ 320.234191][ T6874] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 320.269322][ T4341] vhci_hcd: vhci_device speed not set [ 320.463086][ T6885] binder: 6884:6885 ioctl 4018620d 0 returned -22 [ 321.209365][ T6290] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 321.424285][ T6290] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.678438][ T6290] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 321.760037][ T6902] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 321.766645][ T6902] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 321.777180][ T6902] vhci_hcd vhci_hcd.0: Device attached [ 321.815151][ T6905] device syzkaller1 entered promiscuous mode [ 321.833599][ T6905] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 321.869134][ T6290] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 322.096756][ T6290] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 322.132981][ T6903] vhci_hcd: connection closed [ 322.133924][ T4512] vhci_hcd: stop threads [ 322.192713][ T4512] vhci_hcd: release socket [ 322.247928][ T6290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.268091][ T4512] vhci_hcd: disconnect device [ 322.381674][ T6290] usb 3-1: Product: syz [ 323.404219][ T6290] usb 3-1: Manufacturer: syz [ 323.408967][ T6290] usb 3-1: SerialNumber: syz [ 323.483078][ T6290] usb 3-1: config 0 descriptor?? [ 323.699931][ T6290] usb 3-1: Found UVC 34.00 device syz (8086:0b5b) [ 323.708367][ T6290] usb 3-1: No valid video chain found. [ 323.740134][ T6290] usb 3-1: USB disconnect, device number 6 [ 324.248540][ T6919] netlink: 'syz.0.745': attribute type 46 has an invalid length. [ 324.277885][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.745'. [ 324.574337][ T6925] fuse: Bad value for 'user_id' [ 325.266981][ T6931] binder: 6929:6931 ioctl 4018620d 0 returned -22 [ 325.961970][ T6938] loop5: detected capacity change from 0 to 1024 [ 325.981154][ T6940] loop1: detected capacity change from 0 to 128 [ 325.994540][ T6938] EXT4-fs: Ignoring removed orlov option [ 326.044525][ T6940] EXT4-fs: Ignoring removed nobh option [ 326.077958][ T6938] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 326.102172][ T6940] ext4: Unknown parameter 'appraise_type' [ 327.383584][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 327.509151][ T6290] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 327.530027][ T6938] EXT4-fs (loop5): Online defrag not supported with bigalloc [ 327.661516][ T6504] EXT4-fs (loop5): unmounting filesystem. [ 327.699255][ T6290] usb 2-1: Using ep0 maxpacket: 16 [ 327.710862][ T6290] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.731704][ T6290] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.799919][ T6290] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.838058][ T6290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.867465][ T6290] usb 2-1: Product: syz [ 327.881391][ T6290] usb 2-1: Manufacturer: syz [ 327.891686][ T6290] usb 2-1: SerialNumber: syz [ 328.120184][ T6290] usb 2-1: 0:2 : does not exist [ 328.211704][ T6290] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 328.439829][ T6290] usb 2-1: USB disconnect, device number 9 [ 328.733720][ T5575] udevd[5575]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.752296][ T6977] blktrace: Concurrent blktraces are not allowed on loop0 [ 328.761923][ T6976] binder: 6975:6976 ioctl c0306201 0 returned -14 [ 329.151740][ T6989] device syzkaller1 entered promiscuous mode [ 329.169866][ T6989] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 330.446903][ T6985] loop1: detected capacity change from 0 to 512 [ 330.509764][ T6985] EXT4-fs: Ignoring removed mblk_io_submit option [ 330.590360][ T6985] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 330.631368][ T6985] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.764: attempt to clear invalid blocks 2 len 1 [ 330.704102][ T6985] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 330.806589][ T6985] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.764: invalid indirect mapped block 1819239214 (level 0) [ 330.965471][ T6985] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.764: invalid indirect mapped block 1819239214 (level 1) [ 331.004778][ T6985] EXT4-fs (loop1): 1 truncate cleaned up [ 331.024681][ T6985] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 331.625553][ T4765] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 331.881023][ T4765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.923526][ T4765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.969473][ T4765] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 331.993804][ T4765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.027849][ T4765] usb 3-1: config 0 descriptor?? [ 332.232354][ T4332] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 332.439316][ T4332] usb 1-1: Using ep0 maxpacket: 16 [ 332.450638][ T4332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.463016][ T4765] steelseries_srws1 0003:1038:1410.0006: item fetching failed at offset 5/7 [ 332.475402][ T4332] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 332.498885][ T4332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.520210][ T4765] steelseries_srws1 0003:1038:1410.0006: parse failed [ 332.527126][ T4765] steelseries_srws1: probe of 0003:1038:1410.0006 failed with error -22 [ 332.532820][ T4332] usb 1-1: config 0 descriptor?? [ 332.583150][ T4332] usb 1-1: Found UVC 0.00 device (10c4:ea90) [ 332.602341][ T4332] usb 1-1: No valid video chain found. [ 332.670946][ T4765] usb 3-1: USB disconnect, device number 7 [ 332.788197][ T4332] usb 1-1: USB disconnect, device number 5 [ 332.868809][ T26] audit: type=1326 audit(1768804827.829:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.5.774" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f0f6df94ad7 code=0x0 [ 333.601062][ T7050] blktrace: Concurrent blktraces are not allowed on loop0 [ 334.016574][ T7057] binder: 7056:7057 ioctl c0306201 0 returned -14 [ 334.129285][ T4309] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 334.340019][ T7062] device syzkaller1 entered promiscuous mode [ 334.355247][ T7062] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 334.494699][ T4309] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.589128][ T4309] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 335.640088][ T4309] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 335.659330][ T4309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 335.667394][ T4309] usb 3-1: SerialNumber: syz [ 335.751152][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 335.922215][ T4309] usb 3-1: 0:2 : does not exist [ 335.927363][ T4309] usb 3-1: unit 128 not found! [ 336.199932][ T4309] usb 3-1: USB disconnect, device number 8 [ 336.787017][ T5575] udevd[5575]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.808918][ T7092] loop2: detected capacity change from 0 to 128 [ 336.871601][ T7092] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 336.935333][ T7092] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 337.359257][ T7102] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 338.549265][ T4765] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 338.641735][ T7110] loop5: detected capacity change from 0 to 512 [ 338.735125][ T7112] loop3: detected capacity change from 0 to 512 [ 338.750876][ T7112] EXT4-fs: Ignoring removed mblk_io_submit option [ 338.763487][ T4765] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 338.774001][ T4765] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 338.784572][ T4765] usb 3-1: config 1 interface 0 has no altsetting 0 [ 338.792499][ T7112] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 338.793878][ T4765] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 338.806076][ T7110] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 338.810042][ T4765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.828643][ T4765] usb 3-1: Product: syz [ 338.832937][ T4765] usb 3-1: Manufacturer: syz [ 338.837724][ T4765] usb 3-1: SerialNumber: syz [ 338.843364][ T7110] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.856934][ T7090] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 338.862795][ T7117] loop1: detected capacity change from 0 to 256 [ 338.871411][ T7112] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.791: attempt to clear invalid blocks 2 len 1 [ 338.884741][ T7090] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 338.900037][ T7112] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 338.935158][ T7112] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.791: invalid indirect mapped block 1819239214 (level 0) [ 338.956873][ T7112] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.791: invalid indirect mapped block 1819239214 (level 1) [ 338.964198][ T7117] exfat: Deprecated parameter 'namecase' [ 339.006697][ T7112] EXT4-fs (loop3): 1 truncate cleaned up [ 339.026951][ T7112] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 339.039647][ T7110] loop5: detected capacity change from 512 to 1 [ 339.057573][ T7117] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 339.123583][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 339.131602][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 339.154092][ T7117] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 339.169882][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 339.177369][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 339.185004][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 339.192647][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 339.200781][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 339.208406][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 339.216607][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 339.224251][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 339.232096][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 339.239944][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 339.247693][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 339.265416][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 339.329871][ T6504] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5933: Out of memory [ 339.362844][ T4765] rtl8150 3-1:1.0: couldn't reset the device [ 339.373231][ T6504] EXT4-fs error (device loop5): ext4_dirty_inode:6137: inode #2: comm syz-executor: mark_inode_dirty error [ 339.381007][ T4765] rtl8150: probe of 3-1:1.0 failed with error -5 [ 339.437743][ T6504] EXT4-fs (loop5): unmounting filesystem. [ 339.489257][ T4765] usb 3-1: USB disconnect, device number 9 [ 339.524513][ T7113] kmmpd-loop5: attempt to access beyond end of device [ 339.524513][ T7113] loop5: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 339.618720][ T7113] Buffer I/O error on dev loop5, logical block 12, lost sync page write [ 339.945033][ T7128] device syzkaller1 entered promiscuous mode [ 339.960330][ T7128] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 340.124106][ T7126] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 340.130864][ T7126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 340.138804][ T7126] vhci_hcd vhci_hcd.0: Device attached [ 340.653307][ T7127] vhci_hcd: connection closed [ 340.655544][ T4401] vhci_hcd: stop threads [ 341.218010][ T4401] vhci_hcd: release socket [ 341.226176][ T4401] vhci_hcd: disconnect device [ 341.586611][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 341.726210][ T7144] loop1: detected capacity change from 0 to 512 [ 341.849984][ T7144] EXT4-fs: Ignoring removed i_version option [ 341.875689][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 341.910790][ T7144] EXT4-fs: Ignoring removed oldalloc option [ 341.948075][ T7144] EXT4-fs (loop1): Test dummy encryption mode enabled [ 342.027057][ T7144] EXT4-fs (loop1): 1 truncate cleaned up [ 342.033348][ T7144] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 342.130054][ T7144] EXT4-fs error (device loop1): ext4_ind_map_blocks:604: inode #15: comm syz.1.797: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 342.206798][ T7155] loop3: detected capacity change from 0 to 256 [ 342.298852][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 342.705408][ T7171] loop3: detected capacity change from 0 to 512 [ 342.730092][ T7171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 342.751563][ T7171] EXT4-fs: Ignoring removed bh option [ 342.796264][ T7171] EXT4-fs error (device loop3): mb_free_blocks:1826: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 342.878323][ T7171] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #11: comm syz.3.807: corrupted inode contents [ 342.921122][ T7160] loop5: detected capacity change from 0 to 40427 [ 342.947346][ T7171] EXT4-fs error (device loop3): ext4_dirty_inode:6137: inode #11: comm syz.3.807: mark_inode_dirty error [ 342.959216][ T4341] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 342.969283][ T7160] F2FS-fs (loop5): invalid crc value [ 342.991689][ T7171] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.807: invalid indirect mapped block 1 (level 1) [ 343.011749][ T7171] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #11: comm syz.3.807: corrupted inode contents [ 343.026077][ T7160] F2FS-fs (loop5): Found nat_bits in checkpoint [ 343.065568][ T7171] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 343.119349][ T7171] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #11: comm syz.3.807: corrupted inode contents [ 343.146828][ T7171] EXT4-fs error (device loop3): ext4_truncate:4318: inode #11: comm syz.3.807: mark_inode_dirty error [ 343.169967][ T7160] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 343.180975][ T4341] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 343.200936][ T7171] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 343.203120][ T4341] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 343.249646][ T4341] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 343.259271][ T7163] loop0: detected capacity change from 0 to 40427 [ 343.264698][ T7171] EXT4-fs (loop3): 1 truncate cleaned up [ 343.269883][ T4341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.303414][ T7163] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 343.305366][ T7171] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 343.355117][ T7163] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 343.366739][ T7169] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 343.478686][ T7171] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.807: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 343.488759][ T7163] F2FS-fs (loop0): invalid crc value [ 343.528498][ T7163] F2FS-fs (loop0): Found nat_bits in checkpoint [ 343.576866][ T6504] syz-executor: attempt to access beyond end of device [ 343.576866][ T6504] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 343.744368][ T4341] usb 2-1: USB disconnect, device number 10 [ 343.839754][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 343.924616][ T7163] F2FS-fs (loop0): Start checkpoint disabled! [ 343.994153][ T7163] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 344.516165][ T4512] kworker/u4:10: attempt to access beyond end of device [ 344.516165][ T4512] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 344.544334][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'. [ 344.846133][ T7204] loop5: detected capacity change from 0 to 512 [ 344.882950][ T7204] EXT4-fs: Ignoring removed mblk_io_submit option [ 344.923728][ T7206] loop3: detected capacity change from 0 to 512 [ 344.927378][ T7204] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 345.022643][ T7204] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.809: attempt to clear invalid blocks 2 len 1 [ 345.120706][ T7212] device syzkaller1 entered promiscuous mode [ 345.136324][ T7212] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 345.431665][ T7210] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 345.438404][ T7210] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 345.446296][ T7210] vhci_hcd vhci_hcd.0: Device attached [ 346.715457][ T7204] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 346.763628][ T7206] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 346.822424][ T7214] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 346.843224][ T7206] EXT4-fs (loop3): orphan cleanup on readonly fs [ 346.859242][ T7204] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.809: invalid indirect mapped block 1819239214 (level 0) [ 346.949692][ T7204] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.809: invalid indirect mapped block 1819239214 (level 1) [ 346.959142][ T7206] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 347.035487][ T7211] vhci_hcd: connection reset by peer [ 347.041230][ T5338] vhci_hcd: stop threads [ 347.045502][ T5338] vhci_hcd: release socket [ 347.062235][ T7204] EXT4-fs (loop5): 1 truncate cleaned up [ 347.069479][ T7206] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 347.089297][ T7206] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.815: Failed to acquire dquot type 1 [ 347.099307][ T5338] vhci_hcd: disconnect device [ 347.118097][ T7204] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 347.174539][ T7206] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.815: bg 0: block 40: padding at end of block bitmap is not set [ 347.238975][ T7206] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 347.276650][ T7206] EXT4-fs (loop3): 1 truncate cleaned up [ 347.309314][ T7206] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 347.493835][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 347.706078][ T7230] loop3: detected capacity change from 0 to 256 [ 347.837411][ T7230] FAT-fs (loop3): Directory bread(block 64) failed [ 347.888106][ T7230] FAT-fs (loop3): Directory bread(block 65) failed [ 347.936281][ T7230] FAT-fs (loop3): Directory bread(block 66) failed [ 347.979096][ T7230] FAT-fs (loop3): Directory bread(block 67) failed [ 348.014669][ T7230] FAT-fs (loop3): Directory bread(block 68) failed [ 348.041870][ T7230] FAT-fs (loop3): Directory bread(block 69) failed [ 348.048859][ T7230] FAT-fs (loop3): Directory bread(block 70) failed [ 348.114334][ T7230] FAT-fs (loop3): Directory bread(block 71) failed [ 348.134839][ T7230] FAT-fs (loop3): Directory bread(block 72) failed [ 348.154601][ T7230] FAT-fs (loop3): Directory bread(block 73) failed [ 348.419342][ T6504] EXT4-fs (loop5): unmounting filesystem. [ 348.670246][ T7249] netlink: 'syz.1.823': attribute type 3 has an invalid length. [ 348.773330][ T7252] loop3: detected capacity change from 0 to 512 [ 348.946660][ T7261] xt_policy: neither incoming nor outgoing policy selected [ 349.204183][ T7252] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.825: inode has both inline data and extents flags [ 349.632496][ T7252] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.825: couldn't read orphan inode 15 (err -117) [ 349.684775][ T7252] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 349.703982][ T7263] loop1: detected capacity change from 0 to 2048 [ 349.820736][ T7263] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 350.079334][ T7233] loop0: detected capacity change from 0 to 40427 [ 350.178822][ T7283] device syzkaller1 entered promiscuous mode [ 350.196570][ T7281] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 350.203142][ T7281] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 350.211534][ T7281] vhci_hcd vhci_hcd.0: Device attached [ 350.229781][ T7281] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 350.314521][ T7233] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 350.489299][ T4381] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 350.507633][ T7233] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 350.765003][ T7233] F2FS-fs (loop0): invalid crc value [ 350.941130][ T7233] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 351.291758][ T7282] vhci_hcd: connection reset by peer [ 351.298716][ T33] vhci_hcd: stop threads [ 351.304974][ T33] vhci_hcd: release socket [ 351.388094][ T33] vhci_hcd: disconnect device [ 351.562759][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 351.949161][ T7214] vhci_hcd: vhci_device speed not set [ 352.164224][ T7294] loop2: detected capacity change from 0 to 128 [ 352.285164][ T7294] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 353.004709][ T7273] EXT4-fs (loop3): unmounting filesystem. [ 353.156669][ T33] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.472072][ T33] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.668440][ T33] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.772702][ T7327] loop2: detected capacity change from 0 to 256 [ 353.834969][ T7332] loop5: detected capacity change from 0 to 512 [ 353.842660][ T7327] exfat: Deprecated parameter 'namecase' [ 353.865935][ T7327] exfat: Deprecated parameter 'utf8' [ 353.885409][ T33] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.058967][ T7332] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 354.111538][ T7333] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 354.118160][ T7333] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 354.126223][ T7333] vhci_hcd vhci_hcd.0: Device attached [ 354.253798][ T7327] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 354.332887][ T7332] EXT4-fs (loop5): 1 truncate cleaned up [ 354.338802][ T7332] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 354.399103][ T126] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 354.588964][ T7345] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 354.726702][ T7334] vhci_hcd: connection reset by peer [ 354.732851][ T5338] vhci_hcd: stop threads [ 354.737441][ T5338] vhci_hcd: release socket [ 354.839809][ T5338] vhci_hcd: disconnect device [ 355.553179][ T7328] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 355.628022][ T7355] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 355.634684][ T7355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 355.642598][ T7355] vhci_hcd vhci_hcd.0: Device attached [ 355.694419][ T7328] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 355.760524][ T7360] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 356.029268][ T4280] Bluetooth: hci0: command 0x0c1a tx timeout [ 356.353048][ T7356] vhci_hcd: connection reset by peer [ 356.361155][ T5067] vhci_hcd: stop threads [ 356.366859][ T5067] vhci_hcd: release socket [ 356.476124][ T5067] vhci_hcd: disconnect device [ 356.557878][ T7328] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 356.732411][ T7328] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 356.881491][ T7328] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 356.958233][ T7328] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 357.040670][ T7328] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 357.057195][ T7328] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 357.105303][ T7328] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 357.318820][ T7328] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 357.327295][ T7328] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 357.372689][ T7328] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 357.464571][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.476099][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.485182][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.496581][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.525604][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 357.536111][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.810049][ T7366] lo speed is unknown, defaulting to 1000 [ 357.981719][ T7375] loop1: detected capacity change from 0 to 512 [ 357.999341][ T6290] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 358.001831][ T7375] EXT4-fs: Ignoring removed mblk_io_submit option [ 358.109431][ T4273] Bluetooth: hci0: command 0x0406 tx timeout [ 358.127656][ T7375] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 358.172097][ T7375] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.852: attempt to clear invalid blocks 2 len 1 [ 358.200977][ T6290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.223949][ T6290] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 358.269105][ T6290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.300964][ T6290] usb 3-1: config 0 descriptor?? [ 358.377394][ T7375] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 358.461636][ T7375] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.852: invalid indirect mapped block 1819239214 (level 0) [ 358.603167][ T7375] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.852: invalid indirect mapped block 1819239214 (level 1) [ 358.708951][ T7375] EXT4-fs (loop1): 1 truncate cleaned up [ 358.749284][ T4273] Bluetooth: hci2: command 0x0c1a tx timeout [ 358.891976][ T7375] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 359.069438][ T4273] Bluetooth: hci4: command 0x0c1a tx timeout [ 359.176008][ T7366] chnl_net:caif_netlink_parms(): no params data found [ 359.389248][ T4280] Bluetooth: hci3: command 0x0c1a tx timeout [ 359.592790][ T4273] Bluetooth: hci1: command 0x0409 tx timeout [ 359.600133][ T126] vhci_hcd: vhci_device speed not set [ 359.797962][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 359.977002][ T6290] magicmouse 0003:05AC:0265.0007: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 360.169951][ T7214] usb 3-1: USB disconnect, device number 10 [ 360.386956][ T7397] fido_id[7397]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 360.470001][ T7366] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.578033][ T7366] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.608918][ T7409] loop1: detected capacity change from 0 to 128 [ 360.630199][ T7366] device bridge_slave_0 entered promiscuous mode [ 360.707844][ T7409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 360.829578][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 360.872130][ T7409] EXT4-fs (loop1): Test dummy encryption mode enabled [ 360.980222][ T7409] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 361.039602][ T7409] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 361.114794][ T7366] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.139205][ T7366] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.149098][ T4273] Bluetooth: hci4: command 0x0406 tx timeout [ 361.199697][ T7366] device bridge_slave_1 entered promiscuous mode [ 361.469124][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 361.605073][ T7428] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 361.629123][ T4273] Bluetooth: hci1: command 0x041b tx timeout [ 361.853734][ T7422] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 361.860358][ T7422] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 361.868741][ T7422] vhci_hcd vhci_hcd.0: Device attached [ 362.105897][ T7423] vhci_hcd: connection closed [ 362.108210][ T4447] vhci_hcd: stop threads [ 362.149243][ T4332] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 362.675889][ T33] device hsr_slave_0 left promiscuous mode [ 362.693135][ T4447] vhci_hcd: release socket [ 362.700215][ T33] device hsr_slave_1 left promiscuous mode [ 362.730470][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.749182][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.760306][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.777217][ T4447] vhci_hcd: disconnect device [ 362.777876][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.801358][ T33] device bridge_slave_1 left promiscuous mode [ 362.807677][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.887124][ T33] device bridge_slave_0 left promiscuous mode [ 362.932349][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.228606][ T7409] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 363.709199][ T4273] Bluetooth: hci1: command 0x040f tx timeout [ 363.719671][ T7417] loop2: detected capacity change from 0 to 40427 [ 363.749137][ T7417] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 363.768115][ T33] device veth1_macvtap left promiscuous mode [ 363.780282][ T7417] F2FS-fs (loop2): invalid crc value [ 363.780346][ T33] device veth0_macvtap left promiscuous mode [ 363.792034][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 363.799998][ T33] device veth1_vlan left promiscuous mode [ 363.848972][ T33] device veth0_vlan left promiscuous mode [ 363.921652][ T7417] F2FS-fs (loop2): Found nat_bits in checkpoint [ 365.064235][ T33] bond1 (unregistering): Released all slaves [ 365.333981][ T7446] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 365.340533][ T7446] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 365.348664][ T7446] vhci_hcd vhci_hcd.0: Device attached [ 365.639481][ T4310] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 365.789300][ T4273] Bluetooth: hci1: command 0x0419 tx timeout [ 366.031914][ T7447] vhci_hcd: connection reset by peer [ 366.040434][ T5208] vhci_hcd: stop threads [ 366.045107][ T5208] vhci_hcd: release socket [ 366.083795][ T5208] vhci_hcd: disconnect device [ 367.710183][ T6504] EXT4-fs (loop5): unmounting filesystem. [ 367.799497][ T4332] vhci_hcd: vhci_device speed not set [ 368.052160][ T7456] loop5: detected capacity change from 0 to 512 [ 368.081745][ T7456] EXT4-fs: Ignoring removed mblk_io_submit option [ 368.156064][ T7456] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 368.215184][ T7456] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.864: attempt to clear invalid blocks 2 len 1 [ 368.245014][ T7456] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 368.325065][ T33] team0 (unregistering): Port device team_slave_1 removed [ 368.336300][ T7456] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.864: invalid indirect mapped block 1819239214 (level 0) [ 368.368635][ T7456] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.864: invalid indirect mapped block 1819239214 (level 1) [ 368.427438][ T7456] EXT4-fs (loop5): 1 truncate cleaned up [ 368.433526][ T7456] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 368.447899][ T33] team0 (unregistering): Port device team_slave_0 removed [ 368.959762][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.066159][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.586572][ T33] bond0 (unregistering): Released all slaves [ 369.773954][ T7425] device syzkaller1 entered promiscuous mode [ 369.793843][ T4317] lo speed is unknown, defaulting to 1000 [ 369.978925][ T6504] EXT4-fs (loop5): unmounting filesystem. [ 370.060625][ T7366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.142099][ T7366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.190325][ T5186] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 370.256884][ T7366] team0: Port device team_slave_0 added [ 370.309651][ T7366] team0: Port device team_slave_1 added [ 370.374621][ T7366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.384522][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.868'. [ 370.407737][ T5186] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 370.431940][ T5186] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 370.452075][ T7366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.498593][ T5186] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 370.518186][ T5186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.564718][ T7463] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 370.579668][ T7366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.638321][ T7366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.249937][ T4310] vhci_hcd: vhci_device speed not set [ 371.278896][ T5186] usb 2-1: USB disconnect, device number 11 [ 371.403083][ T7366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.462795][ T7366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.161609][ T7490] fuse: Bad value for 'fd' [ 372.801591][ T7366] device hsr_slave_0 entered promiscuous mode [ 372.869870][ T7366] device hsr_slave_1 entered promiscuous mode [ 372.899384][ T7366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.907027][ T7366] Cannot create hsr debugfs directory [ 373.596022][ T7366] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 373.654309][ T7366] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 373.701510][ T7366] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 373.746231][ T7366] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 373.876801][ T7513] loop1: detected capacity change from 0 to 512 [ 373.901995][ T7513] EXT4-fs: Ignoring removed mblk_io_submit option [ 373.964790][ T7513] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 373.984664][ T7513] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.875: attempt to clear invalid blocks 2 len 1 [ 374.044267][ T7513] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 374.068741][ T7366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.110582][ T7513] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.875: invalid indirect mapped block 1819239214 (level 0) [ 374.126018][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 374.140676][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 374.160561][ T7513] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.875: invalid indirect mapped block 1819239214 (level 1) [ 374.178746][ T7366] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.203168][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 374.220127][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 374.242424][ T7513] EXT4-fs (loop1): 1 truncate cleaned up [ 374.248585][ T7513] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 374.268659][ T4693] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.275865][ T4693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.405419][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 374.442415][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 374.496852][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 374.505713][ T4693] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.513038][ T4693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.521171][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 374.539259][ T7214] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 374.695101][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 374.832956][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 374.881408][ T7214] usb 6-1: unable to get BOS descriptor or descriptor too short [ 374.898442][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 374.910484][ T7214] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1088, setting to 1024 [ 374.968831][ T7366] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 375.012591][ T7214] usb 6-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 375.049179][ T7214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.053648][ T7366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 375.075613][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 375.101771][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 375.113099][ T7214] usb 6-1: Product: syz [ 375.117309][ T7214] usb 6-1: Manufacturer: syz [ 375.135723][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 375.159703][ T7214] usb 6-1: SerialNumber: syz [ 375.176105][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 375.195493][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 375.216300][ T7523] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 375.285573][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 375.306716][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 375.331039][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 375.798616][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 376.730191][ T7214] usbhid 6-1:1.0: can't add hid device: -71 [ 376.736291][ T7214] usbhid: probe of 6-1:1.0 failed with error -71 [ 377.054609][ T7553] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 377.694373][ T7214] usb 6-1: USB disconnect, device number 2 [ 377.896463][ T7552] device syzkaller1 entered promiscuous mode [ 377.939788][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 377.948067][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 378.954166][ T7366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.991926][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.998281][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.739424][ T4310] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 380.960836][ T4310] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 381.637617][ T4310] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 381.702313][ T4310] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 381.739173][ T4310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.788311][ T7575] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 381.837564][ T7589] loop5: detected capacity change from 0 to 512 [ 381.886237][ T7589] EXT4-fs: Ignoring removed mblk_io_submit option [ 381.914715][ T7589] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 381.941388][ T7589] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.885: attempt to clear invalid blocks 2 len 1 [ 381.975249][ T7589] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 382.036713][ T4317] usb 1-1: USB disconnect, device number 6 [ 382.078994][ T7589] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.885: invalid indirect mapped block 1819239214 (level 0) [ 382.155574][ T7589] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.885: invalid indirect mapped block 1819239214 (level 1) [ 382.233486][ T7589] EXT4-fs (loop5): 1 truncate cleaned up [ 382.250442][ T7589] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 383.136182][ T7607] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 383.142923][ T7607] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 383.151624][ T7607] vhci_hcd vhci_hcd.0: Device attached [ 383.158919][ T7609] device syzkaller1 entered promiscuous mode [ 383.619683][ T4310] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 383.826895][ T7608] vhci_hcd: connection reset by peer [ 383.835065][ T4447] vhci_hcd: stop threads [ 383.844850][ T4447] vhci_hcd: release socket [ 383.918917][ T4447] vhci_hcd: disconnect device [ 384.577481][ T7616] binder_alloc: 7615: pid 7615 spamming oneway? 2 buffers allocated for a total size of 5120 [ 384.703128][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 384.765935][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 384.851067][ T7366] device veth0_vlan entered promiscuous mode [ 384.877483][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 384.902339][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 384.977437][ T7366] device veth1_vlan entered promiscuous mode [ 385.004768][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 385.045740][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 385.076409][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 385.165697][ T7619] 9pnet_fd: Insufficient options for proto=fd [ 385.182705][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 385.194826][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 385.234067][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 385.288322][ T7366] device veth0_macvtap entered promiscuous mode [ 385.344350][ T7366] device veth1_macvtap entered promiscuous mode [ 386.068312][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.189144][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.213638][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.232469][ T7631] loop1: detected capacity change from 0 to 128 [ 386.248671][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.289860][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.318552][ T7631] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 386.358003][ T7631] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 386.385048][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.441508][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.495378][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.546653][ T7366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.585122][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 386.604734][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 386.613788][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 386.623220][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 386.663764][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.716592][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.757562][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.778661][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.797856][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.817549][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.836975][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.878856][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.923042][ T7366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.952924][ T7366] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.974832][ T7366] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.984043][ T7366] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.999918][ T7366] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.011566][ T6504] EXT4-fs (loop5): unmounting filesystem. [ 387.011903][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 387.060745][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 387.095290][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 388.521937][ T5067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.562044][ T5067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.692272][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 388.736741][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.769440][ T4310] vhci_hcd: vhci_device speed not set [ 389.000758][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.036472][ T6094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 389.432236][ T7675] xt_hashlimit: size too large, truncated to 1048576 [ 390.341960][ T7672] device vlan2 entered promiscuous mode [ 390.347533][ T7672] device bridge0 entered promiscuous mode [ 390.353859][ T7672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 390.370245][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 390.547825][ T7685] loop5: detected capacity change from 0 to 512 [ 390.581152][ T7685] EXT4-fs (loop5): Test dummy encryption mode enabled [ 390.588186][ T7685] EXT4-fs (loop5): invalid inodes per group: 33619980 [ 390.588186][ T7685] [ 392.323175][ T7697] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 392.329749][ T7697] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 392.379234][ T7697] vhci_hcd vhci_hcd.0: Device attached [ 392.404739][ T7702] vhci_hcd: connection closed [ 392.406958][ T33] vhci_hcd: stop threads [ 392.414242][ T7699] loop2: detected capacity change from 0 to 512 [ 392.433958][ T33] vhci_hcd: release socket [ 392.473638][ T33] vhci_hcd: disconnect device [ 392.496642][ T7699] EXT4-fs: Ignoring removed mblk_io_submit option [ 392.539341][ T4317] vhci_hcd: vhci_device speed not set [ 392.600251][ T7699] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 392.726725][ T7699] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.903: attempt to clear invalid blocks 2 len 1 [ 392.854083][ T7699] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 393.192587][ T7699] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.903: invalid indirect mapped block 1819239214 (level 0) [ 393.238632][ T7699] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.903: invalid indirect mapped block 1819239214 (level 1) [ 393.290778][ T7699] EXT4-fs (loop2): 1 truncate cleaned up [ 393.430353][ T7699] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 394.509114][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 395.227729][ T7745] netlink: 132 bytes leftover after parsing attributes in process `syz.0.908'. [ 395.412703][ T7759] loop6: detected capacity change from 0 to 512 [ 395.498186][ T7759] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 395.519777][ T7759] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.634791][ T7759] EXT4-fs warning (device loop6): verify_group_input:151: Cannot add at group 0 (only 1 groups) [ 395.788163][ T7366] EXT4-fs (loop6): unmounting filesystem. [ 396.009748][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.920'. [ 397.097233][ T7777] loop5: detected capacity change from 0 to 512 [ 397.100950][ T7750] loop2: detected capacity change from 0 to 40427 [ 397.129528][ T7777] EXT4-fs: Ignoring removed mblk_io_submit option [ 397.150808][ T7750] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 397.421662][ T7777] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 397.429244][ T7750] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 397.689827][ T7777] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.922: attempt to clear invalid blocks 2 len 1 [ 397.720781][ T7750] F2FS-fs (loop2): invalid crc value [ 397.740496][ T7790] loop1: detected capacity change from 0 to 256 [ 397.760995][ T7777] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 397.768394][ T7750] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 397.904791][ T7777] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.922: invalid indirect mapped block 1819239214 (level 0) [ 397.982149][ T7777] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.922: invalid indirect mapped block 1819239214 (level 1) [ 398.748319][ T7777] EXT4-fs (loop5): 1 truncate cleaned up [ 398.809372][ T7777] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 398.855200][ T7790] FAT-fs (loop1): Directory bread(block 64) failed [ 398.997442][ T7790] FAT-fs (loop1): Directory bread(block 65) failed [ 399.039189][ T7790] FAT-fs (loop1): Directory bread(block 66) failed [ 399.045797][ T7790] FAT-fs (loop1): Directory bread(block 67) failed [ 399.051300][ T7750] F2FS-fs (loop2): recover fsync data on readonly fs [ 399.099358][ T7790] FAT-fs (loop1): Directory bread(block 68) failed [ 399.123690][ T7790] FAT-fs (loop1): Directory bread(block 69) failed [ 399.158045][ T7750] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 399.194078][ T7790] FAT-fs (loop1): Directory bread(block 70) failed [ 399.219759][ T7750] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 399.249218][ T7790] FAT-fs (loop1): Directory bread(block 71) failed [ 399.309716][ T7790] FAT-fs (loop1): Directory bread(block 72) failed [ 399.319379][ T7790] FAT-fs (loop1): Directory bread(block 73) failed [ 399.442930][ T7790] syz.1.926: attempt to access beyond end of device [ 399.442930][ T7790] loop1: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 399.534995][ T7790] syz.1.926: attempt to access beyond end of device [ 399.534995][ T7790] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 399.629112][ T26] audit: type=1800 audit(1768804894.589:40): pid=7790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.926" name="file1" dev="loop1" ino=1048626 res=0 errno=0 [ 399.940013][ T7817] fuse: Bad value for 'rootmode' [ 401.261701][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.937'. [ 401.498468][ T6504] EXT4-fs (loop5): unmounting filesystem. [ 402.869044][ T7852] lo speed is unknown, defaulting to 1000 [ 402.876133][ T7852] lo speed is unknown, defaulting to 1000 [ 402.896675][ T7852] lo speed is unknown, defaulting to 1000 [ 403.229166][ T7852] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 403.430344][ T7852] lo speed is unknown, defaulting to 1000 [ 403.504374][ T7852] lo speed is unknown, defaulting to 1000 [ 403.615317][ T7852] lo speed is unknown, defaulting to 1000 [ 403.772299][ T7852] lo speed is unknown, defaulting to 1000 [ 403.803062][ T7852] lo speed is unknown, defaulting to 1000 [ 403.813821][ T7863] loop6: detected capacity change from 0 to 2048 [ 403.907695][ T7863] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 403.932443][ T7846] netlink: 132 bytes leftover after parsing attributes in process `syz.5.939'. [ 403.948654][ T26] audit: type=1800 audit(1768804898.909:41): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.941" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 404.097210][ T7863] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 404.214082][ T7863] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 404.298350][ T7863] EXT4-fs (loop6): This should not happen!! Data will be lost [ 404.298350][ T7863] [ 404.336307][ T7863] EXT4-fs (loop6): Total free blocks count 0 [ 404.382900][ T7863] EXT4-fs (loop6): Free/Dirty block details [ 404.408092][ T7863] EXT4-fs (loop6): free_blocks=66060288 [ 404.436888][ T7863] EXT4-fs (loop6): dirty_blocks=32 [ 404.459221][ T7863] EXT4-fs (loop6): Block reservation details [ 404.487774][ T7877] fuse: Bad value for 'rootmode' [ 404.985056][ T7863] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 405.162824][ T7366] EXT4-fs (loop6): unmounting filesystem. [ 406.189203][ T5186] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 406.912350][ T5186] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.942270][ T5186] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 406.982993][ T5186] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.989246][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 407.055052][ T7908] loop5: detected capacity change from 0 to 512 [ 407.061714][ T5186] usb 7-1: Product: syz [ 407.065951][ T5186] usb 7-1: Manufacturer: syz [ 407.102082][ T7908] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 407.114447][ T5186] usb 7-1: SerialNumber: syz [ 407.278814][ T7908] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 407.401356][ T6504] EXT4-fs (loop5): unmounting filesystem. [ 407.466785][ T7915] loop1: detected capacity change from 0 to 256 [ 407.518307][ T7918] fuse: Unknown parameter 'use00000000000000000000' [ 408.037061][ T7915] exfat: Deprecated parameter 'utf8' [ 408.044629][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 408.102532][ T7917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.953'. [ 408.118916][ T7915] exfat: Deprecated parameter 'namecase' [ 408.166002][ T7915] exfat: Deprecated parameter 'utf8' [ 408.196810][ T7925] loop5: detected capacity change from 0 to 512 [ 408.204983][ T7915] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 408.319366][ T7925] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 2: comm syz.5.954: invalid block [ 408.434640][ T7925] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.954: invalid indirect mapped block 10 (level 1) [ 408.563012][ T7925] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.954: invalid indirect mapped block 8 (level 1) [ 408.613379][ T7925] EXT4-fs (loop5): 1 truncate cleaned up [ 408.623407][ T5186] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 408.639286][ T5186] cdc_ncm 7-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 408.649140][ T7925] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 408.657636][ T5186] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 408.824412][ T5186] cdc_ncm 7-1:1.0: setting tx_max = 88 [ 408.885191][ T5186] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 409.371748][ T7941] siw: device registration error -23 [ 410.039310][ T5186] usb 7-1: USB disconnect, device number 2 [ 410.045743][ T5186] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 410.116456][ T6504] EXT4-fs (loop5): unmounting filesystem. [ 411.550599][ T7958] netlink: 132 bytes leftover after parsing attributes in process `syz.6.962'. [ 411.893198][ T7968] loop0: detected capacity change from 0 to 1024 [ 412.154793][ T7968] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 412.589199][ T4765] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 412.802415][ T7962] loop2: detected capacity change from 0 to 40427 [ 412.816142][ T4765] usb 1-1: config 0 has an invalid interface number: 145 but max is 0 [ 412.849112][ T4765] usb 1-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 412.873591][ T7962] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 412.924651][ T4765] usb 1-1: config 0 has no interface number 0 [ 412.930127][ T7962] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 412.978269][ T4765] usb 1-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=a1.f1 [ 412.991087][ T7962] F2FS-fs (loop2): invalid crc value [ 413.021745][ T7962] F2FS-fs (loop2): Found nat_bits in checkpoint [ 413.050545][ T4765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.102116][ T4765] usb 1-1: config 0 descriptor?? [ 413.162202][ T4765] usb 1-1: NDI device with a latency value of 1 [ 413.289617][ T7962] F2FS-fs (loop2): Start checkpoint disabled! [ 413.351841][ T7962] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 413.360131][ T26] audit: type=1800 audit(1768804908.329:42): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.966" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 413.394993][ T7968] EXT4-fs error (device loop0): ext4_iget_extra_inode:4756: inode #12: comm syz.0.966: corrupted in-inode xattr [ 413.441292][ T7990] loop1: detected capacity change from 0 to 8192 [ 413.444647][ T7996] loop6: detected capacity change from 0 to 512 [ 413.522013][ T26] audit: type=1804 audit(1768804908.349:43): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.966" name="/newroot/182/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 413.643039][ T7962] F2FS-fs (loop2) : inject no more block in inc_valid_block_count of __allocate_data_block+0x460/0xaa0 [ 414.007312][ T7962] F2FS-fs (loop2) : inject no more block in inc_valid_block_count of __allocate_data_block+0x460/0xaa0 [ 414.026775][ T4765] ftdi_sio 1-1:0.145: FTDI USB Serial Device converter detected [ 414.059439][ T4765] ftdi_sio ttyUSB0: unknown device type: 0xa1f1 [ 414.105784][ T4765] usb 1-1: USB disconnect, device number 7 [ 414.213013][ T4765] ftdi_sio 1-1:0.145: device disconnected [ 414.938130][ T8016] loop1: detected capacity change from 0 to 512 [ 414.941153][ T7996] EXT4-fs (loop6): Test dummy encryption mode enabled [ 414.979338][ T7996] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 415.050069][ T8016] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 415.128216][ T8016] EXT4-fs (loop1): 1 truncate cleaned up [ 415.138844][ T7996] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.972: bad orphan inode 131083 [ 415.161258][ T8016] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 415.245170][ T7996] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 415.252057][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 415.269296][ T8016] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 415.441002][ T5067] kworker/u4:18: attempt to access beyond end of device [ 415.441002][ T5067] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 415.510595][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 415.525384][ T7366] EXT4-fs (loop6): unmounting filesystem. [ 415.833151][ T8022] loop0: detected capacity change from 0 to 512 [ 415.970059][ T8022] EXT4-fs: Ignoring removed bh option [ 416.177771][ T8022] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 416.575952][ T8022] EXT4-fs (loop0): 1 truncate cleaned up [ 416.615590][ T8022] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 416.757715][ T8040] loop5: detected capacity change from 0 to 1024 [ 416.782866][ T26] audit: type=1800 audit(1768804911.749:44): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.978" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 416.951972][ T8040] EXT4-fs: Ignoring removed bh option [ 417.058242][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 417.067872][ T8048] loop2: detected capacity change from 0 to 1024 [ 417.135024][ T8048] EXT4-fs: Ignoring removed oldalloc option [ 417.232496][ T8048] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 417.271978][ T8040] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 417.402668][ T8048] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 417.641638][ T8040] Invalid argument reading file caps for ./file0 [ 417.817601][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 417.850765][ T8042] netlink: 132 bytes leftover after parsing attributes in process `syz.1.983'. [ 418.231660][ T8067] loop2: detected capacity change from 0 to 512 [ 418.242906][ T8065] syz.0.986 (8065): attempted to duplicate a private mapping with mremap. This is not supported. [ 418.292831][ T6504] EXT4-fs (loop5): unmounting filesystem. [ 418.335291][ T8067] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 418.502948][ T8067] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 418.691121][ T8067] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 419.127048][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 422.343726][ T8105] loop1: detected capacity change from 0 to 128 [ 422.605916][ T8109] loop5: detected capacity change from 0 to 256 [ 422.637624][ T8105] lo speed is unknown, defaulting to 1000 [ 423.209462][ T8119] device erspan0 entered promiscuous mode [ 423.536343][ T8122] loop6: detected capacity change from 0 to 256 [ 425.119225][ T22] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 425.851181][ T8116] netlink: 132 bytes leftover after parsing attributes in process `syz.0.998'. [ 425.920766][ T22] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 425.944280][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.978801][ T22] usb 6-1: Product: syz [ 426.017633][ T22] usb 6-1: Manufacturer: syz [ 426.028034][ T22] usb 6-1: SerialNumber: syz [ 426.263201][ T8122] FAT-fs (loop6): Directory bread(block 64) failed [ 426.389221][ T8122] FAT-fs (loop6): Directory bread(block 65) failed [ 426.399334][ T7214] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 426.469532][ T8122] FAT-fs (loop6): Directory bread(block 66) failed [ 426.603767][ T7214] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.688705][ T7214] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.742026][ T7214] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.751732][ T8122] FAT-fs (loop6): Directory bread(block 67) failed [ 426.758613][ T8122] FAT-fs (loop6): Directory bread(block 68) failed [ 426.817613][ T7214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.838656][ T22] rtl8150 6-1:1.0: couldn't reset the device [ 426.870350][ T22] rtl8150: probe of 6-1:1.0 failed with error -5 [ 426.880947][ T7214] usb 2-1: Product: syz [ 426.885671][ T7214] usb 2-1: Manufacturer: syz [ 426.943138][ T22] usb 6-1: USB disconnect, device number 3 [ 426.949184][ T7214] usb 2-1: SerialNumber: syz [ 427.057815][ T8122] FAT-fs (loop6): Directory bread(block 69) failed [ 427.199305][ T8122] FAT-fs (loop6): Directory bread(block 70) failed [ 427.209902][ T7214] usb 2-1: 0:2 : does not exist [ 427.256514][ T7214] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 427.339544][ T8122] FAT-fs (loop6): Directory bread(block 71) failed [ 427.346487][ T8122] FAT-fs (loop6): Directory bread(block 72) failed [ 427.409188][ T7214] usb 2-1: USB disconnect, device number 12 [ 427.469198][ T8122] FAT-fs (loop6): Directory bread(block 73) failed [ 427.474212][ T5575] udevd[5575]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.987712][ T8146] loop0: detected capacity change from 0 to 512 [ 428.182123][ T8151] loop1: detected capacity change from 0 to 1024 [ 428.325269][ T8151] EXT4-fs: Ignoring removed orlov option [ 428.450872][ T8151] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 429.182440][ T8169] device syzkaller1 entered promiscuous mode [ 429.200795][ T8169] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 429.957521][ T8174] loop2: detected capacity change from 0 to 512 [ 430.041847][ T8174] EXT4-fs: Ignoring removed orlov option [ 430.108890][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 430.172465][ T8174] EXT4-fs error (device loop2): ext4_quota_enable:7043: inode #3: comm syz.2.1012: iget: checksum invalid [ 430.247483][ T8174] EXT4-fs error (device loop2): ext4_quota_enable:7046: comm syz.2.1012: Bad quota inode: 3, type: 0 [ 430.317215][ T8174] EXT4-fs warning (device loop2): ext4_enable_quotas:7087: Failed to enable quota tracking (type=0, err=-74, ino=3). Please run e2fsck to fix. [ 431.520864][ T8174] EXT4-fs (loop2): mount failed [ 431.575129][ T8172] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1010'. [ 431.778053][ T8185] loop0: detected capacity change from 0 to 512 [ 431.828922][ T8187] input: syz1 as /devices/virtual/input/input8 [ 431.864212][ T8185] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 431.988467][ T8185] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 432.509479][ T8195] siw: device registration error -23 [ 433.531902][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 433.914829][ T8210] loop0: detected capacity change from 0 to 256 [ 434.329847][ T8210] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 434.340774][ T8210] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 434.392097][ T8210] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 434.582072][ T8210] exFAT-fs (loop0): hint_cluster is invalid (17) [ 435.999609][ T8218] device syzkaller1 entered promiscuous mode [ 436.017517][ T8218] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 437.751942][ T8222] loop2: detected capacity change from 0 to 40427 [ 437.787114][ T8222] F2FS-fs (loop2): invalid crc value [ 437.841984][ T8222] F2FS-fs (loop2): Found nat_bits in checkpoint [ 437.849153][ T4309] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 438.017402][ T8222] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 438.060941][ T4309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.099556][ T4309] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 438.130914][ T4309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.162483][ T4309] usb 1-1: config 0 descriptor?? [ 438.416956][ T4270] syz-executor: attempt to access beyond end of device [ 438.416956][ T4270] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 438.578609][ T4309] lenovo 0003:17EF:6047.0008: unknown main item tag 0x2 [ 438.593913][ T4309] lenovo 0003:17EF:6047.0008: item fetching failed at offset 4/5 [ 438.604396][ T4309] lenovo 0003:17EF:6047.0008: hid_parse failed [ 438.644345][ T4309] lenovo: probe of 0003:17EF:6047.0008 failed with error -22 [ 438.784771][ T4309] usb 1-1: USB disconnect, device number 8 [ 438.843678][ T8261] loop1: detected capacity change from 0 to 1024 [ 438.868269][ T8263] loop5: detected capacity change from 0 to 1024 [ 438.875871][ T8261] EXT4-fs: inline encryption not supported [ 438.916848][ T8261] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 439.010255][ T8261] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 439.019146][ T8263] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 439.073288][ T8261] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3852: comm syz.1.1037: Allocating blocks 385-513 which overlap fs metadata [ 439.090799][ T8265] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1015'. [ 439.208379][ T8261] EXT4-fs (loop1): pa ffff888073fda0e0: logic 16, phys. 129, len 24 [ 439.217020][ T8261] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 8 [ 439.298056][ T26] audit: type=1107 audit(1768804934.259:45): pid=8274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='˥ھ' [ 439.419645][ T4309] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 439.469979][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 439.567254][ T8279] overlayfs: './file0' not a directory [ 439.630625][ T4309] usb 6-1: config 0 has an invalid interface number: 145 but max is 0 [ 439.644108][ T4309] usb 6-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 439.712446][ T4309] usb 6-1: config 0 has no interface number 0 [ 439.731950][ T8281] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 439.732591][ T8286] device syzkaller1 entered promiscuous mode [ 439.738487][ T8281] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 439.749826][ T8286] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 439.752879][ T8281] vhci_hcd vhci_hcd.0: Device attached [ 439.805887][ T4309] usb 6-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=a1.f1 [ 439.842861][ T4309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.868835][ T8289] loop0: detected capacity change from 0 to 512 [ 439.876997][ T4309] usb 6-1: config 0 descriptor?? [ 440.000707][ T4309] usb 6-1: NDI device with a latency value of 1 [ 440.209297][ T126] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 440.689231][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.695642][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.783249][ T8282] vhci_hcd: connection reset by peer [ 440.790395][ T5338] vhci_hcd: stop threads [ 440.805163][ T8289] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 440.823434][ T5338] vhci_hcd: release socket [ 440.825638][ T26] audit: type=1800 audit(1768804935.789:46): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1038" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 440.848522][ T8289] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.861836][ T8295] EXT4-fs error (device loop5): ext4_iget_extra_inode:4756: inode #12: comm syz.5.1038: corrupted in-inode xattr [ 440.993796][ T5338] vhci_hcd: disconnect device [ 441.013991][ T8289] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.1044: path /199/file1: bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 441.046970][ T4309] ftdi_sio 6-1:0.145: FTDI USB Serial Device converter detected [ 441.067067][ T4309] ftdi_sio ttyUSB0: unknown device type: 0xa1f1 [ 441.096971][ T4309] usb 6-1: USB disconnect, device number 4 [ 441.127482][ T4309] ftdi_sio 6-1:0.145: device disconnected [ 441.193153][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 441.490561][ T8313] loop2: detected capacity change from 0 to 512 [ 441.519509][ T8313] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 441.600765][ T8313] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 441.614749][ T8314] loop6: detected capacity change from 0 to 4096 [ 441.645326][ T6504] EXT4-fs (loop5): unmounting filesystem. [ 441.745437][ T8314] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 441.835000][ T51] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 441.996172][ T8314] EXT4-fs (loop6): shut down requested (0) [ 442.675829][ T8337] loop0: detected capacity change from 0 to 512 [ 442.998863][ T8343] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 443.005493][ T8343] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 443.013356][ T8343] vhci_hcd vhci_hcd.0: Device attached [ 443.592788][ T8343] device syzkaller1 entered promiscuous mode [ 443.610104][ T8343] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 443.646205][ T8337] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 443.737651][ T8337] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.772459][ T8345] vhci_hcd: connection closed [ 443.773738][ T51] vhci_hcd: stop threads [ 443.809440][ T51] vhci_hcd: release socket [ 443.844774][ T7366] EXT4-fs (loop6): unmounting filesystem. [ 443.855709][ T51] vhci_hcd: disconnect device [ 443.870803][ T8337] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.1058: path /203/file1: bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 444.153718][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 444.857626][ T8375] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1068'. [ 445.709210][ T126] vhci_hcd: vhci_device speed not set [ 446.190892][ T8390] loop1: detected capacity change from 0 to 512 [ 446.314950][ T8390] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 446.339266][ T8390] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.401990][ T8390] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.1074: path /228/file1: bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 446.515945][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1077'. [ 446.615995][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 449.661525][ T8427] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 449.668084][ T8427] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 449.674172][ T8429] device syzkaller1 entered promiscuous mode [ 449.675789][ T8427] vhci_hcd vhci_hcd.0: Device attached [ 449.685038][ T8429] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 449.923078][ T8431] vhci_hcd: connection closed [ 449.923625][ T9] vhci_hcd: stop threads [ 449.936017][ T9] vhci_hcd: release socket [ 449.949625][ T4309] usb 37-1: new low-speed USB device number 6 using vhci_hcd [ 449.957910][ T9] vhci_hcd: disconnect device [ 450.046485][ T8446] loop5: detected capacity change from 0 to 512 [ 450.097689][ T8446] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 450.124300][ T8446] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 450.170265][ T5186] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 450.215215][ T8446] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #2: comm syz.5.1090: corrupted inode contents [ 450.279435][ T8446] EXT4-fs error (device loop5): ext4_dirty_inode:6137: inode #2: comm syz.5.1090: mark_inode_dirty error [ 450.300490][ T8446] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #2: comm syz.5.1090: corrupted inode contents [ 450.334422][ T8446] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.1090: mark_inode_dirty error [ 450.375220][ T5186] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 450.399906][ T5186] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.453026][ T5186] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 450.480387][ T5186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.542571][ T6504] EXT4-fs (loop5): unmounting filesystem. [ 451.410471][ T5186] usb 1-1: GET_CAPABILITIES returned 0 [ 451.416101][ T5186] usbtmc 1-1:16.0: can't read capabilities [ 451.450027][ T8450] loop1: detected capacity change from 0 to 40427 [ 451.491236][ T8450] F2FS-fs (loop1): invalid crc value [ 451.571017][ T8450] F2FS-fs (loop1): Found nat_bits in checkpoint [ 451.806697][ T4381] usb 1-1: USB disconnect, device number 9 [ 451.871830][ T8450] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 452.603691][ T8491] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 452.680137][ T8491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 453.045451][ T8504] loop1: detected capacity change from 0 to 256 [ 453.665942][ T8504] FAT-fs (loop1): Directory bread(block 64) failed [ 453.861048][ T8504] FAT-fs (loop1): Directory bread(block 65) failed [ 453.991485][ T8504] FAT-fs (loop1): Directory bread(block 66) failed [ 453.998191][ T8504] FAT-fs (loop1): Directory bread(block 67) failed [ 454.014783][ T8504] FAT-fs (loop1): Directory bread(block 68) failed [ 454.022477][ T8504] FAT-fs (loop1): Directory bread(block 69) failed [ 454.029270][ T8504] FAT-fs (loop1): Directory bread(block 70) failed [ 454.036005][ T8504] FAT-fs (loop1): Directory bread(block 71) failed [ 454.049499][ T8504] FAT-fs (loop1): Directory bread(block 72) failed [ 454.056065][ T8504] FAT-fs (loop1): Directory bread(block 73) failed [ 455.074153][ T4309] vhci_hcd: vhci_device speed not set [ 456.396960][ T8539] capability: warning: `syz.1.1110' uses 32-bit capabilities (legacy support in use) [ 456.552033][ T8542] loop5: detected capacity change from 0 to 512 [ 456.633162][ T8542] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 456.680808][ T8542] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 456.767860][ T8514] loop0: detected capacity change from 0 to 40427 [ 456.889409][ T8514] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 456.974162][ T8514] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 457.028604][ T8514] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 458.917962][ T8582] loop6: detected capacity change from 0 to 512 [ 458.975794][ T8582] EXT4-fs: Ignoring removed i_version option [ 458.995473][ T8582] EXT4-fs: Ignoring removed bh option [ 459.082475][ T8582] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 459.135152][ T8582] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 459.433285][ T7366] EXT4-fs (loop6): unmounting filesystem. [ 459.528855][ T8598] loop0: detected capacity change from 0 to 4096 [ 459.542228][ T8598] EXT4-fs (loop0): Test dummy encryption mode enabled [ 459.561586][ T8598] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 459.621576][ T8598] System zones: 0-5 [ 459.630809][ T8598] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 460.375356][ T8606] overlayfs: failed index dir cleanup (-512) [ 460.394122][ T8606] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 460.609206][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 460.923141][ T8633] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 460.929812][ T8633] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 460.937585][ T8633] vhci_hcd vhci_hcd.0: Device attached [ 461.012403][ T8633] device syzkaller1 entered promiscuous mode [ 461.023962][ T8633] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 461.234904][ T7214] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 461.371508][ T8634] vhci_hcd: connection reset by peer [ 461.389682][ T33] vhci_hcd: stop threads [ 461.420256][ T33] vhci_hcd: release socket [ 461.444261][ T33] vhci_hcd: disconnect device [ 461.505274][ T8649] loop5: detected capacity change from 0 to 128 [ 461.586620][ T8649] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 461.602513][ T8649] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 461.822009][ T6504] EXT4-fs (loop5): unmounting filesystem. [ 462.925531][ T8668] loop0: detected capacity change from 0 to 256 [ 463.113059][ T8673] loop6: detected capacity change from 0 to 512 [ 463.206852][ T8673] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 463.352188][ T8673] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 463.983777][ T7366] EXT4-fs (loop6): unmounting filesystem. [ 464.353466][ T8655] loop5: detected capacity change from 0 to 40427 [ 464.483554][ T8655] F2FS-fs (loop5): invalid crc value [ 464.543619][ T8694] loop2: detected capacity change from 0 to 256 [ 464.961548][ T8655] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4) [ 465.096288][ T8698] binder: 8697:8698 ioctl c0306201 0 returned -14 [ 465.098775][ T8694] FAT-fs (loop2): Directory bread(block 64) failed [ 465.189146][ T8694] FAT-fs (loop2): Directory bread(block 65) failed [ 465.195981][ T8694] FAT-fs (loop2): Directory bread(block 66) failed [ 465.229193][ T8694] FAT-fs (loop2): Directory bread(block 67) failed [ 465.235908][ T8694] FAT-fs (loop2): Directory bread(block 68) failed [ 465.267342][ T8694] FAT-fs (loop2): Directory bread(block 69) failed [ 465.358162][ T8694] FAT-fs (loop2): Directory bread(block 70) failed [ 465.379197][ T8694] FAT-fs (loop2): Directory bread(block 71) failed [ 465.437000][ T8694] FAT-fs (loop2): Directory bread(block 72) failed [ 465.499185][ T8694] FAT-fs (loop2): Directory bread(block 73) failed [ 466.400987][ T8720] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 466.429287][ T7214] vhci_hcd: vhci_device speed not set [ 466.544774][ T8720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 466.753157][ T8733] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 467.419670][ T8733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 467.746624][ T8744] kvm: emulating exchange as write [ 468.016830][ T8752] binder: 8751:8752 ioctl c0306201 0 returned -14 [ 468.458521][ T8716] loop0: detected capacity change from 0 to 40427 [ 468.736526][ T8763] lo speed is unknown, defaulting to 1000 [ 470.876799][ T8797] binder: 8796:8797 ioctl c0306201 0 returned -14 [ 471.014651][ T8799] loop0: detected capacity change from 0 to 512 [ 471.132110][ T8799] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 471.227174][ T8799] EXT4-fs (loop0): 1 truncate cleaned up [ 471.300481][ T8799] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 471.534295][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 471.584416][ T22] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 471.670227][ T8769] loop6: detected capacity change from 0 to 40427 [ 471.747085][ T8769] F2FS-fs (loop6): invalid crc value [ 471.790250][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 471.808191][ T8769] F2FS-fs (loop6): Found nat_bits in checkpoint [ 471.847912][ T22] usb 2-1: unable to get BOS descriptor or descriptor too short [ 471.884894][ T8822] loop0: detected capacity change from 0 to 256 [ 471.926372][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 69, changing to 10 [ 472.009429][ T8822] FAT-fs (loop0): Directory bread(block 64) failed [ 472.016741][ T8822] FAT-fs (loop0): Directory bread(block 65) failed [ 472.054276][ T22] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 472.097502][ T8822] FAT-fs (loop0): Directory bread(block 66) failed [ 472.119157][ T22] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 472.160152][ T8822] FAT-fs (loop0): Directory bread(block 67) failed [ 472.187627][ T22] usb 2-1: language id specifier not provided by device, defaulting to English [ 472.214923][ T8822] FAT-fs (loop0): Directory bread(block 68) failed [ 472.243042][ T8822] FAT-fs (loop0): Directory bread(block 69) failed [ 472.284443][ T22] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 472.330898][ T8822] FAT-fs (loop0): Directory bread(block 70) failed [ 472.342636][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.385841][ T8822] FAT-fs (loop0): Directory bread(block 71) failed [ 472.431969][ T22] usb 2-1: Product: syz [ 472.436448][ T22] usb 2-1: Manufacturer: 喙໪撩෰ [ 472.439467][ T8822] FAT-fs (loop0): Directory bread(block 72) failed [ 472.479786][ T8822] FAT-fs (loop0): Directory bread(block 73) failed [ 472.493920][ T22] usb 2-1: SerialNumber: syz [ 473.039321][ T22] cdc_ncm 2-1:1.0: bind() failure [ 473.048656][ T22] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 473.143277][ T22] cdc_ncm 2-1:1.1: bind() failure [ 473.265136][ T22] usb 2-1: USB disconnect, device number 13 [ 474.756500][ T8862] loop1: detected capacity change from 0 to 4096 [ 474.956428][ T8862] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 475.285862][ T8883] loop0: detected capacity change from 0 to 256 [ 475.394153][ T8883] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 475.496172][ T8883] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 475.558606][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 475.893077][ T8892] loop2: detected capacity change from 0 to 128 [ 476.132025][ T8892] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 476.155726][ T8892] ext4 filesystem being mounted at /232/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 476.157503][ T8897] netlink: 'syz.6.1201': attribute type 2 has an invalid length. [ 476.252893][ T8892] EXT4-fs warning (device loop2): __ext4_ioctl:1246: Setting inode version is not supported with metadata_csum enabled. [ 476.644814][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 477.376195][ T8913] loop0: detected capacity change from 0 to 512 [ 477.502585][ T8913] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 477.561393][ T8913] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.785770][ T8913] loop0: detected capacity change from 512 to 1 [ 478.050358][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 478.089686][ T4381] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 478.364235][ T8916] kmmpd-loop0: attempt to access beyond end of device [ 478.364235][ T8916] loop0: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 478.550305][ T8916] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 478.550419][ T4381] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.774975][ T4381] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 478.816073][ T4381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.870028][ T4381] usb 3-1: config 0 descriptor?? [ 479.102861][ T8947] blktrace: Concurrent blktraces are not allowed on loop2 [ 480.402303][ T4381] usbhid 3-1:0.0: can't add hid device: -71 [ 480.419443][ T4381] usbhid: probe of 3-1:0.0 failed with error -71 [ 480.490040][ T4381] usb 3-1: USB disconnect, device number 11 [ 480.802938][ T4412] Bluetooth: hci5: Frame reassembly failed (-84) [ 480.903006][ T8937] loop6: detected capacity change from 0 to 40427 [ 481.029295][ T8937] F2FS-fs (loop6): Found nat_bits in checkpoint [ 481.190386][ T8937] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 481.206379][ T8946] loop5: detected capacity change from 0 to 40427 [ 481.254571][ T8946] F2FS-fs (loop5): invalid crc value [ 481.319470][ T8946] F2FS-fs (loop5): Found nat_bits in checkpoint [ 481.449779][ T8946] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 481.600816][ T8946] syz.5.1216: attempt to access beyond end of device [ 481.600816][ T8946] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 482.224657][ T8993] loop0: detected capacity change from 0 to 1024 [ 482.295118][ T6504] syz-executor: attempt to access beyond end of device [ 482.295118][ T6504] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 482.362971][ T8993] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 482.759300][ T7214] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 482.828375][ T9006] loop6: detected capacity change from 0 to 2048 [ 482.839403][ T4273] Bluetooth: hci5: command 0x1003 tx timeout [ 482.847891][ T4280] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 482.986889][ T9006] Alternate GPT is invalid, using primary GPT. [ 483.004804][ T7214] usb 1-1: config 0 has an invalid interface number: 145 but max is 0 [ 483.014412][ T7214] usb 1-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 483.015714][ T9006] loop6: p1 p2 p3 [ 483.025878][ T7214] usb 1-1: config 0 has no interface number 0 [ 483.036522][ T7214] usb 1-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=a1.f1 [ 483.046287][ T7214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.057538][ T7214] usb 1-1: config 0 descriptor?? [ 483.063380][ T9010] loop1: detected capacity change from 0 to 1024 [ 483.074224][ T7214] usb 1-1: NDI device with a latency value of 1 [ 483.135489][ T9010] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 483.178936][ T4260] udevd[4260]: incorrect ext4 checksum on /dev/loop1 [ 483.276783][ T26] audit: type=1800 audit(1768804978.236:47): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1228" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 483.318111][ T8993] EXT4-fs error (device loop0): ext4_iget_extra_inode:4756: inode #12: comm syz.0.1228: corrupted in-inode xattr [ 483.479381][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 483.579888][ T26] audit: type=1804 audit(1768804978.266:48): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1228" name="/newroot/247/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 483.617957][ T7214] ftdi_sio 1-1:0.145: FTDI USB Serial Device converter detected [ 483.641283][ T7214] ftdi_sio ttyUSB0: unknown device type: 0xa1f1 [ 483.686047][ T7214] usb 1-1: USB disconnect, device number 10 [ 483.712724][ T7214] ftdi_sio 1-1:0.145: device disconnected [ 483.766206][ T9022] loop2: detected capacity change from 0 to 2048 [ 483.830044][ T9022] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 483.938020][ T9022] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.1236: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 484.068048][ T9022] EXT4-fs (loop2): Remounting filesystem read-only [ 484.629344][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 484.849388][ T9043] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.1236: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 484.970457][ T9044] overlayfs: failed to resolve './file1': -2 [ 485.251097][ T9043] EXT4-fs (loop2): Remounting filesystem read-only [ 485.457991][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 486.909429][ T9074] loop0: detected capacity change from 0 to 1024 [ 486.957936][ T9076] blktrace: Concurrent blktraces are not allowed on loop4 [ 486.995723][ T9074] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 487.354442][ T4332] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 487.381902][ T9088] loop1: detected capacity change from 0 to 512 [ 488.031282][ T9088] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 488.046685][ T9088] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.072183][ T4332] usb 1-1: config 0 has an invalid interface number: 145 but max is 0 [ 488.148472][ T4332] usb 1-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 488.206945][ T9100] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.1255: path /257/file1: bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 488.283200][ T4332] usb 1-1: config 0 has no interface number 0 [ 488.387291][ T4332] usb 1-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=a1.f1 [ 488.458611][ T4332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.655615][ T4332] usb 1-1: config 0 descriptor?? [ 488.765248][ T4332] usb 1-1: NDI device with a latency value of 1 [ 488.829146][ T9088] loop1: detected capacity change from 512 to 1 [ 489.378971][ T26] audit: type=1800 audit(1768804984.336:49): pid=9074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1250" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 489.399896][ T9111] EXT4-fs error (device loop0): ext4_iget_extra_inode:4756: inode #12: comm syz.0.1250: corrupted in-inode xattr [ 489.441599][ T26] audit: type=1804 audit(1768804984.346:50): pid=9109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1250" name="/newroot/251/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 489.467446][ T4266] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Out of memory [ 489.492779][ T4266] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #2: comm syz-executor: mark_inode_dirty error [ 489.511769][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 489.552512][ T4332] ftdi_sio 1-1:0.145: FTDI USB Serial Device converter detected [ 489.569345][ T4332] ftdi_sio ttyUSB0: unknown device type: 0xa1f1 [ 489.586176][ T4332] usb 1-1: USB disconnect, device number 11 [ 489.593160][ T4332] ftdi_sio 1-1:0.145: device disconnected [ 489.637391][ T9096] kmmpd-loop1: attempt to access beyond end of device [ 489.637391][ T9096] loop1: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 489.677134][ T9096] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 489.694394][ T9114] loop2: detected capacity change from 0 to 128 [ 489.748605][ T9114] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 489.801922][ T9114] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.822659][ T9114] overlayfs: upper fs needs to support d_type. [ 489.845343][ T9119] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 489.906405][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 489.942205][ T9122] loop6: detected capacity change from 0 to 128 [ 490.926438][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 491.284170][ T9143] loop1: detected capacity change from 0 to 512 [ 491.376536][ T9143] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 491.389270][ T9143] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.449300][ T9143] loop1: detected capacity change from 512 to 1 [ 491.658313][ T4266] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Out of memory [ 491.687803][ T4266] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #2: comm syz-executor: mark_inode_dirty error [ 491.763551][ T9150] loop0: detected capacity change from 0 to 128 [ 491.804042][ T9150] EXT4-fs (loop0): Test dummy encryption mode enabled [ 492.439080][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 492.525650][ T9150] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 492.545141][ T9150] ext4 filesystem being mounted at /253/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 493.255458][ T9144] kmmpd-loop1: attempt to access beyond end of device [ 493.255458][ T9144] loop1: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 493.256537][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 493.279138][ T9144] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 495.187321][ T9172] loop1: detected capacity change from 0 to 512 [ 495.320660][ T9172] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 495.356781][ T9172] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.531992][ T9172] loop1: detected capacity change from 512 to 1 [ 495.730813][ T4266] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Out of memory [ 495.754933][ T9183] blktrace: Concurrent blktraces are not allowed on loop0 [ 495.763910][ T4266] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #2: comm syz-executor: mark_inode_dirty error [ 495.796337][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 495.849476][ T9178] kmmpd-loop1: attempt to access beyond end of device [ 495.849476][ T9178] loop1: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 495.877524][ T9178] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 496.000895][ T6290] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 496.211128][ T6290] usb 3-1: config 0 has an invalid interface number: 70 but max is 0 [ 496.226316][ T6290] usb 3-1: config 0 has no interface number 0 [ 496.249928][ T6290] usb 3-1: config 0 interface 70 has no altsetting 0 [ 496.267389][ T6290] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 496.282581][ T6290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.305790][ T6290] usb 3-1: config 0 descriptor?? [ 496.490715][ T9202] loop6: detected capacity change from 0 to 256 [ 497.704593][ T9202] FAT-fs (loop6): Directory bread(block 64) failed [ 497.734295][ T9202] FAT-fs (loop6): Directory bread(block 65) failed [ 497.754635][ T9202] FAT-fs (loop6): Directory bread(block 66) failed [ 497.774820][ T9202] FAT-fs (loop6): Directory bread(block 67) failed [ 497.795204][ T9202] FAT-fs (loop6): Directory bread(block 68) failed [ 497.802117][ T9202] FAT-fs (loop6): Directory bread(block 69) failed [ 497.819153][ T9202] FAT-fs (loop6): Directory bread(block 70) failed [ 497.825771][ T9202] FAT-fs (loop6): Directory bread(block 71) failed [ 497.849180][ T9202] FAT-fs (loop6): Directory bread(block 72) failed [ 497.861249][ T6290] uclogic 0003:5543:0781.0009: No inputs registered, leaving [ 497.879609][ T9202] FAT-fs (loop6): Directory bread(block 73) failed [ 497.886761][ T6290] uclogic 0003:5543:0781.0009: hidraw0: USB HID v1.01 Device [HID 5543:0781] on usb-dummy_hcd.2-1/input70 [ 498.060846][ T4317] usb 3-1: USB disconnect, device number 12 [ 498.113767][ T9195] loop1: detected capacity change from 0 to 40427 [ 498.150833][ T9195] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 498.189386][ T9195] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 498.226086][ T9207] fido_id[9207]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 498.251372][ T9195] F2FS-fs (loop1): invalid crc value [ 498.297631][ T9215] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 498.332722][ T9195] F2FS-fs (loop1): Found nat_bits in checkpoint [ 498.442212][ T9195] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 498.462781][ T9195] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 498.666835][ T9195] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 498.732648][ T9195] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 501.912159][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.918533][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.993500][ T9238] blktrace: Concurrent blktraces are not allowed on loop10 [ 502.344799][ T9248] bridge0: port 1(bridge_slave_0) entered listening state [ 502.827269][ T9260] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 506.592676][ T9286] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 506.646239][ T9283] blktrace: Concurrent blktraces are not allowed on loop12 [ 508.207062][ T9295] loop1: detected capacity change from 0 to 512 [ 508.321675][ T9295] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 508.372200][ T9295] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.532499][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 509.684086][ T9312] loop2: detected capacity change from 0 to 512 [ 509.809542][ T9312] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2749: inode #11: comm syz.2.1315: corrupted xattr block 95 [ 509.839853][ T9312] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1315: bg 0: block 7: invalid block bitmap [ 509.994251][ T9312] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 510.029760][ T9312] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2915: inode #11: comm syz.2.1315: corrupted xattr block 95 [ 510.095697][ T9312] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 510.108194][ T9312] EXT4-fs (loop2): 1 orphan inode deleted [ 510.119645][ T9312] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 510.682728][ T9317] siw: device registration error -23 [ 510.697275][ T9321] loop1: detected capacity change from 0 to 256 [ 514.820098][ T9321] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 514.830937][ T9321] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 514.854455][ T9321] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 515.181229][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 515.366802][ T9327] blktrace: Concurrent blktraces are not allowed on loop2 [ 515.948483][ T9338] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 516.020755][ T9337] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 516.027439][ T9337] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 516.055202][ T9337] vhci_hcd vhci_hcd.0: Device attached [ 516.063039][ T9324] loop0: detected capacity change from 0 to 40427 [ 516.086442][ T9324] F2FS-fs (loop0): invalid crc value [ 516.112472][ T9324] F2FS-fs (loop0): Found nat_bits in checkpoint [ 516.126046][ T9333] device syzkaller1 entered promiscuous mode [ 516.191367][ T9333] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 516.322095][ T9324] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 516.329241][ T4309] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 516.371696][ T9339] vhci_hcd: connection reset by peer [ 516.389321][ T51] vhci_hcd: stop threads [ 516.393887][ T51] vhci_hcd: release socket [ 516.411757][ T51] vhci_hcd: disconnect device [ 516.461693][ T9351] loop1: detected capacity change from 0 to 16 [ 516.480865][ T6094] kworker/u4:21: attempt to access beyond end of device [ 516.480865][ T6094] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 516.521943][ T9351] erofs: (device loop1): mounted with root inode @ nid 36. [ 516.577756][ T9351] syz.1.1335: attempt to access beyond end of device [ 516.577756][ T9351] loop1: rw=0, sector=296, nr_sectors = 32 limit=16 [ 516.609700][ T9351] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 516.768986][ T9353] loop6: detected capacity change from 0 to 4096 [ 516.807452][ T9353] EXT4-fs: Ignoring removed nobh option [ 516.838055][ T9353] EXT4-fs (loop6): Test dummy encryption mode enabled [ 516.886107][ T9353] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 516.890267][ T9355] loop1: detected capacity change from 0 to 512 [ 517.074111][ T9355] [ 517.076516][ T9355] ====================================================== [ 517.083559][ T9355] WARNING: possible circular locking dependency detected [ 517.090608][ T9355] syzkaller #0 Not tainted [ 517.095037][ T9355] ------------------------------------------------------ [ 517.102235][ T9355] syz.1.1337/9355 is trying to acquire lock: [ 517.108216][ T9355] ffff8880546b20a0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x323/0x1b70 [ 517.117782][ T9355] [ 517.117782][ T9355] but task is already holding lock: [ 517.125137][ T9355] ffff88801fe6e208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 517.134969][ T9355] [ 517.134969][ T9355] which lock already depends on the new lock. [ 517.134969][ T9355] [ 517.145726][ T9355] [ 517.145726][ T9355] the existing dependency chain (in reverse order) is: [ 517.154753][ T9355] [ 517.154753][ T9355] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 517.162839][ T9355] down_read+0x42/0x2d0 [ 517.167526][ T9355] v2_read_dquot+0x4a/0x110 [ 517.172558][ T9355] dquot_acquire+0x152/0x520 [ 517.177671][ T9355] ext4_acquire_dquot+0x2d9/0x4a0 [ 517.183239][ T9355] dqget+0x778/0xeb0 [ 517.187762][ T9355] __dquot_initialize+0x3c3/0xcd0 [ 517.193373][ T9355] ext4_create+0x92/0x470 [ 517.198252][ T9355] path_openat+0x1181/0x2ee0 [ 517.203455][ T9355] do_filp_open+0x1f1/0x430 [ 517.208576][ T9355] do_sys_openat2+0x150/0x4b0 [ 517.213773][ T9355] __x64_sys_creat+0x8c/0xb0 [ 517.218878][ T9355] do_syscall_64+0x4c/0xa0 [ 517.223927][ T9355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 517.230358][ T9355] [ 517.230358][ T9355] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 517.238018][ T9355] __mutex_lock+0x12d/0xaf0 [ 517.243168][ T9355] dquot_commit+0x5a/0x410 [ 517.248173][ T9355] ext4_write_dquot+0x1f0/0x360 [ 517.253668][ T9355] mark_all_dquot_dirty+0xf9/0x400 [ 517.259302][ T9355] __dquot_alloc_space+0x5fc/0xe60 [ 517.265026][ T9355] ext4_mb_new_blocks+0xf8d/0x4760 [ 517.270683][ T9355] ext4_ext_map_blocks+0x195b/0x6810 [ 517.276527][ T9355] ext4_map_blocks+0x9de/0x1b70 [ 517.282276][ T9355] ext4_getblk+0x1cc/0x6f0 [ 517.287230][ T9355] ext4_bread+0x26/0x170 [ 517.291998][ T9355] ext4_append+0x2be/0x560 [ 517.297026][ T9355] ext4_init_new_dir+0x2b8/0x570 [ 517.302572][ T9355] ext4_mkdir+0x4fb/0xce0 [ 517.307719][ T9355] vfs_mkdir+0x387/0x570 [ 517.312518][ T9355] ovl_mkdir_real+0xc2/0x2a0 [ 517.317649][ T9355] ovl_workdir_create+0x33c/0x760 [ 517.323199][ T9355] ovl_get_indexdir+0x210/0x5e0 [ 517.328655][ T9355] ovl_fill_super+0x1b17/0x2a30 [ 517.334037][ T9355] mount_nodev+0x52/0xe0 [ 517.338793][ T9355] legacy_get_tree+0xe6/0x180 [ 517.343991][ T9355] vfs_get_tree+0x88/0x270 [ 517.349011][ T9355] do_new_mount+0x24a/0xa40 [ 517.354073][ T9355] __se_sys_mount+0x2e3/0x3d0 [ 517.359278][ T9355] do_syscall_64+0x4c/0xa0 [ 517.364403][ T9355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 517.370823][ T9355] [ 517.370823][ T9355] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 517.378661][ T9355] __lock_acquire+0x2d07/0x7d10 [ 517.384036][ T9355] lock_acquire+0x1bb/0x4a0 [ 517.389185][ T9355] down_read+0x42/0x2d0 [ 517.393908][ T9355] ext4_map_blocks+0x323/0x1b70 [ 517.399279][ T9355] ext4_getblk+0x1cc/0x6f0 [ 517.404276][ T9355] ext4_bread+0x26/0x170 [ 517.409046][ T9355] ext4_quota_write+0x236/0x580 [ 517.414423][ T9355] get_free_dqblk+0x312/0x660 [ 517.419620][ T9355] do_insert_tree+0x22b/0x1040 [ 517.424905][ T9355] do_insert_tree+0x9eb/0x1040 [ 517.430264][ T9355] do_insert_tree+0x9eb/0x1040 [ 517.435543][ T9355] do_insert_tree+0x9eb/0x1040 [ 517.440824][ T9355] qtree_write_dquot+0x49d/0x5d0 [ 517.446377][ T9355] v2_write_dquot+0x108/0x190 [ 517.451595][ T9355] dquot_acquire+0x2d5/0x520 [ 517.456782][ T9355] ext4_acquire_dquot+0x2d9/0x4a0 [ 517.462334][ T9355] dqget+0x778/0xeb0 [ 517.466849][ T9355] __dquot_initialize+0x3c3/0xcd0 [ 517.472395][ T9355] ext4_process_orphan+0x54/0x300 [ 517.478032][ T9355] ext4_orphan_cleanup+0xbeb/0x1420 [ 517.483763][ T9355] ext4_fill_super+0x7829/0x7dc0 [ 517.489223][ T9355] get_tree_bdev+0x3f1/0x610 [ 517.494338][ T9355] vfs_get_tree+0x88/0x270 [ 517.499532][ T9355] do_new_mount+0x24a/0xa40 [ 517.504544][ T9355] __se_sys_mount+0x2e3/0x3d0 [ 517.509820][ T9355] do_syscall_64+0x4c/0xa0 [ 517.514749][ T9355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 517.521150][ T9355] [ 517.521150][ T9355] other info that might help us debug this: [ 517.521150][ T9355] [ 517.531387][ T9355] Chain exists of: [ 517.531387][ T9355] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 517.531387][ T9355] [ 517.545476][ T9355] Possible unsafe locking scenario: [ 517.545476][ T9355] [ 517.552936][ T9355] CPU0 CPU1 [ 517.558297][ T9355] ---- ---- [ 517.563651][ T9355] lock(&s->s_dquot.dqio_sem); [ 517.568584][ T9355] lock(&dquot->dq_lock); [ 517.575626][ T9355] lock(&s->s_dquot.dqio_sem); [ 517.583057][ T9355] lock(&ei->i_data_sem/2); [ 517.587656][ T9355] [ 517.587656][ T9355] *** DEADLOCK *** [ 517.587656][ T9355] [ 517.595978][ T9355] 3 locks held by syz.1.1337/9355: [ 517.601081][ T9355] #0: ffff88801fe6e0e0 (&type->s_umount_key#27/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930 [ 517.611175][ T9355] #1: ffff88807179ace8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520 [ 517.620782][ T9355] #2: ffff88801fe6e208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 517.630875][ T9355] [ 517.630875][ T9355] stack backtrace: [ 517.636765][ T9355] CPU: 0 PID: 9355 Comm: syz.1.1337 Not tainted syzkaller #0 [ 517.644135][ T9355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 517.654204][ T9355] Call Trace: [ 517.657511][ T9355] [ 517.660525][ T9355] dump_stack_lvl+0x188/0x24e [ 517.665203][ T9355] ? load_image+0x400/0x400 [ 517.669703][ T9355] ? show_regs_print_info+0x12/0x12 [ 517.674903][ T9355] ? print_circular_bug+0x12b/0x1a0 [ 517.680103][ T9355] check_noncircular+0x296/0x330 [ 517.685052][ T9355] ? add_chain_block+0x940/0x940 [ 517.689984][ T9355] ? lockdep_lock+0xf1/0x1f0 [ 517.694570][ T9355] ? mark_lock+0x94/0x320 [ 517.698896][ T9355] ? _find_first_zero_bit+0xcf/0x100 [ 517.704185][ T9355] __lock_acquire+0x2d07/0x7d10 [ 517.709049][ T9355] ? verify_lock_unused+0x140/0x140 [ 517.714256][ T9355] ? verify_lock_unused+0x140/0x140 [ 517.719465][ T9355] ? verify_lock_unused+0x140/0x140 [ 517.724768][ T9355] lock_acquire+0x1bb/0x4a0 [ 517.729284][ T9355] ? ext4_map_blocks+0x323/0x1b70 [ 517.734320][ T9355] ? mark_lock+0x94/0x320 [ 517.738676][ T9355] ? __might_sleep+0xd0/0xd0 [ 517.743277][ T9355] ? read_lock_is_recursive+0x10/0x10 [ 517.748641][ T9355] ? rcu_is_watching+0x11/0xa0 [ 517.753406][ T9355] down_read+0x42/0x2d0 [ 517.757652][ T9355] ? ext4_map_blocks+0x323/0x1b70 [ 517.762684][ T9355] ext4_map_blocks+0x323/0x1b70 [ 517.767562][ T9355] ? ext4_issue_zeroout+0x250/0x250 [ 517.772777][ T9355] ? kasan_set_track+0x60/0x70 [ 517.777635][ T9355] ? kasan_set_track+0x4b/0x70 [ 517.782397][ T9355] ? __kasan_kmalloc+0x8e/0xa0 [ 517.787279][ T9355] ? __kmalloc+0xb0/0x240 [ 517.791607][ T9355] ? get_free_dqblk+0x45/0x660 [ 517.796365][ T9355] ? do_insert_tree+0x22b/0x1040 [ 517.801292][ T9355] ? do_insert_tree+0x9eb/0x1040 [ 517.806237][ T9355] ? do_insert_tree+0x9eb/0x1040 [ 517.811171][ T9355] ext4_getblk+0x1cc/0x6f0 [ 517.815604][ T9355] ? vfs_get_tree+0x88/0x270 [ 517.820285][ T9355] ? do_new_mount+0x24a/0xa40 [ 517.825036][ T9355] ? ext4_get_block_unwritten+0x100/0x100 [ 517.830765][ T9355] ext4_bread+0x26/0x170 [ 517.835024][ T9355] ext4_quota_write+0x236/0x580 [ 517.839981][ T9355] ? ext4_quota_read+0x380/0x380 [ 517.845048][ T9355] ? rcu_is_watching+0x11/0xa0 [ 517.849993][ T9355] get_free_dqblk+0x312/0x660 [ 517.854664][ T9355] ? ext4_quota_read+0x380/0x380 [ 517.859618][ T9355] do_insert_tree+0x22b/0x1040 [ 517.864375][ T9355] ? get_free_dqblk+0x45e/0x660 [ 517.869300][ T9355] do_insert_tree+0x9eb/0x1040 [ 517.874057][ T9355] do_insert_tree+0x9eb/0x1040 [ 517.878810][ T9355] do_insert_tree+0x9eb/0x1040 [ 517.883576][ T9355] qtree_write_dquot+0x49d/0x5d0 [ 517.888532][ T9355] ? qtree_entry_unused+0xe0/0xe0 [ 517.893563][ T9355] ? rwsem_write_trylock+0x135/0x1c0 [ 517.898853][ T9355] ? trace_contention_end+0x5f/0x170 [ 517.904131][ T9355] v2_write_dquot+0x108/0x190 [ 517.908816][ T9355] dquot_acquire+0x2d5/0x520 [ 517.913413][ T9355] ext4_acquire_dquot+0x2d9/0x4a0 [ 517.918470][ T9355] dqget+0x778/0xeb0 [ 517.922376][ T9355] __dquot_initialize+0x3c3/0xcd0 [ 517.927402][ T9355] ? dquot_initialize+0x20/0x20 [ 517.932246][ T9355] ? ext4_get_projid+0x140/0x140 [ 517.937176][ T9355] ext4_process_orphan+0x54/0x300 [ 517.942340][ T9355] ext4_orphan_cleanup+0xbeb/0x1420 [ 517.947565][ T9355] ? ext4_orphan_del+0xbf0/0xbf0 [ 517.952543][ T9355] ? errseq_check_and_advance+0x62/0x120 [ 517.958210][ T9355] ext4_fill_super+0x7829/0x7dc0 [ 517.963153][ T9355] ? bdev_name+0x2c1/0x3f0 [ 517.967564][ T9355] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 517.973792][ T9355] ? set_blocksize+0x1d0/0x470 [ 517.978561][ T9355] ? sb_set_blocksize+0xa5/0xe0 [ 517.983403][ T9355] get_tree_bdev+0x3f1/0x610 [ 517.988010][ T9355] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 517.994365][ T9355] vfs_get_tree+0x88/0x270 [ 517.998793][ T9355] do_new_mount+0x24a/0xa40 [ 518.003299][ T9355] __se_sys_mount+0x2e3/0x3d0 [ 518.008275][ T9355] ? __x64_sys_mount+0xc0/0xc0 [ 518.013049][ T9355] ? lockdep_hardirqs_on+0x94/0x140 [ 518.018244][ T9355] ? __x64_sys_mount+0x1c/0xc0 [ 518.023203][ T9355] do_syscall_64+0x4c/0xa0 [ 518.027632][ T9355] ? clear_bhb_loop+0x60/0xb0 [ 518.032304][ T9355] ? clear_bhb_loop+0x60/0xb0 [ 518.036980][ T9355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.042868][ T9355] RIP: 0033:0x7ff36b59bf4a [ 518.047293][ T9355] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.066990][ T9355] RSP: 002b:00007ff36c3c6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 518.075445][ T9355] RAX: ffffffffffffffda RBX: 00007ff36c3c6ee0 RCX: 00007ff36b59bf4a [ 518.083533][ T9355] RDX: 00002000000006c0 RSI: 0000200000000640 RDI: 00007ff36c3c6ea0 [ 518.091606][ T9355] RBP: 00002000000006c0 R08: 00007ff36c3c6ee0 R09: 000000000380000a [ 518.099584][ T9355] R10: 000000000380000a R11: 0000000000000246 R12: 0000200000000640 [ 518.107564][ T9355] R13: 00007ff36c3c6ea0 R14: 0000000000000540 R15: 0000200000000800 [ 518.115537][ T9355] [ 518.151633][ T9355] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #16: comm syz.1.1337: corrupted inode contents [ 518.719646][ T9355] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #16: comm syz.1.1337: mark_inode_dirty error [ 518.735435][ T7366] EXT4-fs (loop6): unmounting filesystem. [ 518.809455][ T9355] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #16: comm syz.1.1337: corrupted inode contents [ 518.849245][ T9355] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.1337: mark_inode_dirty error [ 518.879611][ T9355] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #16: comm syz.1.1337: corrupted inode contents [ 518.892763][ T9355] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 518.902691][ T9355] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #16: comm syz.1.1337: corrupted inode contents [ 518.915413][ T9355] EXT4-fs error (device loop1): ext4_truncate:4318: inode #16: comm syz.1.1337: mark_inode_dirty error [ 518.927569][ T9355] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 518.937731][ T9355] EXT4-fs (loop1): 1 truncate cleaned up [ 518.944923][ T9355] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 518.954419][ T9355] ext4 filesystem being mounted at /274/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.954455][ T4348] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 519.009284][ T4348] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:5: Failed to release dquot type 1 [ 519.037938][ T9355] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 3: comm syz.1.1337: bad entry in directory: inode out of bounds - offset=44, inode=12, rec_len=16, size=4096 fake=0 [ 519.118227][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 521.469208][ T4309] vhci_hcd: vhci_device speed not set