last executing test programs: 55.106825132s ago: executing program 3 (id=655): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x2, 0x2, 0x2, 0x100, 0x0, 0x8, {0x7, 0x9, 0x2, 0xd, 0x3, 0x0, 0x7fffffff, 0x58, 0x8000005, 0x8000, 0x9, r2, r3, 0x1, 0x2}}, {0x20000000000000, 0x537, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 54.16758541s ago: executing program 3 (id=671): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) chdir(&(0x7f0000000080)='./file0\x00') llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 53.892132552s ago: executing program 3 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0xffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 53.73693336s ago: executing program 3 (id=675): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x25d, &(0x7f0000000d80)="$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") mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) ftruncate(r0, 0x4a8e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe) listen(r2, 0x3) accept4$bt_l2cap(r2, 0x0, 0x0, 0x800) syz_clone(0x880000, 0x0, 0x0, 0x0, 0x0, 0x0) 52.804974968s ago: executing program 3 (id=685): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/103, 0x67}, {&(0x7f0000000640)=""/94, 0x5e}, {&(0x7f0000000500)=""/128, 0x80}, {&(0x7f0000000a80)=""/255, 0xff}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000004bc0)=""/4096, 0x1000}], 0x6}, 0xffffffff}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x810) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="2000000010000107000000000000000003"], 0x20}}, 0x4000084) 52.536279938s ago: executing program 3 (id=687): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f000004d000/0x2000)=nil, 0x2000, 0xb) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$inet6(0xa, 0x1, 0x5) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) 52.491717472s ago: executing program 32 (id=687): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f000004d000/0x2000)=nil, 0x2000, 0xb) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$inet6(0xa, 0x1, 0x5) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) 4.485765279s ago: executing program 0 (id=1235): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a}]}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 3.594339806s ago: executing program 0 (id=1244): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'team_slave_1\x00', 0x2}, 0x18) 3.459403354s ago: executing program 0 (id=1246): syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x801) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000f80)={{0x12, 0x1, 0x110, 0x32, 0x75, 0x2, 0x20, 0x4da, 0x250d, 0x1d43, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x9, 0x40, 0x9, "", [{{0x9, 0x4, 0x3, 0x8, 0x0, 0xda, 0x6e, 0x3a}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)=r1}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x6b82}], 0x2) 1.986472261s ago: executing program 0 (id=1263): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) 1.936195098s ago: executing program 0 (id=1265): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x8, &(0x7f0000000300)=@string={0x8, 0x3, "2b6c6a76fa84"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x263, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 1.789744925s ago: executing program 2 (id=1213): r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0xfff, 0x40840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f00000002c0)={0x1, 0x0, {0xffffffff, 0xffffff7d, 0x200004, 0x9}}) 1.769766214s ago: executing program 2 (id=1268): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000007fc0)={0x2020}, 0x2020) 1.65531348s ago: executing program 5 (id=1269): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x9, 0x1ff, 0x7d, 0x0, 0x8000, 0xffffffffffffffb6, 0x1}, 0x0, &(0x7f00000002c0)={0x3fb, 0x6, 0xffffffffffffffff, 0x9, 0x2, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.500311737s ago: executing program 1 (id=1270): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffe01, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.500070389s ago: executing program 1 (id=1271): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x20d}], 0x1}, 0x4048081) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x5}}, 0x30) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) 1.485378374s ago: executing program 1 (id=1272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 976.208278ms ago: executing program 4 (id=1275): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e0000", @ANYRES32, @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 976.136363ms ago: executing program 4 (id=1276): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() kcmp(r0, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) 967.483857ms ago: executing program 4 (id=1277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x4010090}, 0x0) 935.842471ms ago: executing program 5 (id=1278): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) keyctl$setperm(0x5, r0, 0x21081c22) 935.655834ms ago: executing program 4 (id=1279): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 893.581977ms ago: executing program 5 (id=1280): pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x8003, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 893.055711ms ago: executing program 2 (id=1281): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 816.303763ms ago: executing program 5 (id=1282): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffe01, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 816.000145ms ago: executing program 2 (id=1283): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendfile(r0, r0, 0x0, 0xc3) 815.795211ms ago: executing program 5 (id=1284): syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x88240) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0xb80}], 0x286, 0x0) 805.275623ms ago: executing program 2 (id=1285): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000001d40)="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", 0x1b1, 0x40880, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="85665d", 0x3, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x6) 777.322836ms ago: executing program 2 (id=1286): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r1, 0x0, 0x30120) 564.30386ms ago: executing program 1 (id=1287): openat$sysfs(0xffffffffffffff9c, 0x0, 0x4642, 0x181) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xcd, 0x4e, 0xc7, 0x8, 0x1b3d, 0x1eb, 0xaad9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0xe2, 0x10, 0x60, 0xbd, "", [{{0x9, 0x4, 0x79, 0x0, 0x1, 0xae, 0x9b, 0x36, 0x9, [], [{{0x9, 0x5, 0x8, 0x1c10c0a4c0ce15fe, 0x10, 0x7, 0xd3, 0x5}}]}}, {{0x9, 0x4, 0x2b, 0x7, 0x1, 0xa, 0x85, 0x49, 0x4, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x76, 0x8, 0xfd, [@generic={0x2, 0x21}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3}]}}]}}]}}]}}, 0x0) 438.446579ms ago: executing program 5 (id=1288): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r0, r0, 0x0, 0xfffa83) 193.018582ms ago: executing program 0 (id=1289): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x446, 0x21) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x9, 0x1ff, 0x7d, 0x0, 0x8000, 0xffffffffffffffb6, 0x1}, 0x0, &(0x7f00000002c0)={0x3fb, 0x6, 0xffffffffffffffff, 0x9, 0x2, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 57.580092ms ago: executing program 4 (id=1290): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000390425bd7000fbdbdf2500000000", @ANYRES32=r1, @ANYBLOB="81b80000000000004c0012800b000100697036746e6c00003c00028008000800010000001400030020010000000000000000000000000000050009"], 0x6c}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) 8.369837ms ago: executing program 1 (id=1291): r0 = memfd_create(0x0, 0x7) close_range(r0, r0, 0x2) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) 8.037729ms ago: executing program 1 (id=1292): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) io_setup(0x1, &(0x7f0000000b80)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x1}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {}, {0xfffc}, {0x0, 0x8}, {0xfffe}, {}, {}, {}, {0x0, 0xfb}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {0x0, 0x46}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2000}, {}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 0s ago: executing program 4 (id=1293): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x3e, r0, 0x2}) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x200000b, 0x12, r2, 0x0) getresgid(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): p0 maxpacket: 8 [ 60.529623][ T26] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 60.529679][ T26] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 60.529715][ T26] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 60.529734][ T26] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 60.529751][ T26] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 60.529767][ T26] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.529790][ T26] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 60.529805][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.685562][ T5612] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 60.869305][ T26] usb 1-1: GET_CAPABILITIES returned 0 [ 60.869350][ T26] usbtmc 1-1:16.0: can't read capabilities [ 60.877350][ T4707] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.917080][ T5614] hub 8-0:1.0: USB hub found [ 60.919583][ T5614] hub 8-0:1.0: 8 ports detected [ 61.028966][ T5625] FAT-fs (loop4): Directory bread(block 64) failed [ 61.029004][ T5625] FAT-fs (loop4): Directory bread(block 65) failed [ 61.029031][ T5625] FAT-fs (loop4): Directory bread(block 66) failed [ 61.029043][ T5625] FAT-fs (loop4): Directory bread(block 67) failed [ 61.029065][ T5625] FAT-fs (loop4): Directory bread(block 68) failed [ 61.029076][ T5625] FAT-fs (loop4): Directory bread(block 69) failed [ 61.029098][ T5625] FAT-fs (loop4): Directory bread(block 70) failed [ 61.029108][ T5625] FAT-fs (loop4): Directory bread(block 71) failed [ 61.029128][ T5625] FAT-fs (loop4): Directory bread(block 72) failed [ 61.029138][ T5625] FAT-fs (loop4): Directory bread(block 73) failed [ 61.036089][ T5625] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.070395][ T5627] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 61.075318][ T4801] usb 1-1: USB disconnect, device number 8 [ 61.355280][ T5633] xt_CONNSECMARK: invalid mode: 66 [ 61.587334][ T5635] bridge_slave_0: default FDB implementation only supports local addresses [ 61.587738][ T5635] bridge_slave_0: default FDB implementation only supports local addresses [ 61.618153][ T5637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.618364][ T5637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.839154][ T5641] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 61.873817][ T4713] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.906203][ T5647] EXT4-fs: Ignoring removed oldalloc option [ 61.906234][ T5647] EXT4-fs: Ignoring removed oldalloc option [ 61.906698][ T5647] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 61.917592][ T5647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.946504][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.126612][ T5666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.132856][ T5666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.158444][ T5668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 62.486130][ T5687] set_capacity_and_notify: 6 callbacks suppressed [ 62.486173][ T5687] loop0: detected capacity change from 0 to 1024 [ 62.487878][ T5687] EXT4-fs: inline encryption not supported [ 62.496007][ T5687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.579384][ T5690] loop2: detected capacity change from 0 to 256 [ 63.357331][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.446066][ T5694] loop4: detected capacity change from 0 to 1024 [ 63.492902][ T5694] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 63.492953][ T5694] System zones: 0-1, 3-8 [ 63.493534][ T5694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 63.494140][ T5698] binder: 5695:5698 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 63.494165][ T5698] binder: 5698 RLIMIT_NICE not set [ 63.544163][ T5707] binder: 5704:5707 unknown command 1074815763 [ 63.544194][ T5707] binder: 5704:5707 ioctl c0306201 20006240 returned -22 [ 63.549556][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 63.651007][ T5720] loop3: detected capacity change from 0 to 256 [ 63.670053][ T5720] FAT-fs (loop3): Directory bread(block 64) failed [ 63.670091][ T5720] FAT-fs (loop3): Directory bread(block 65) failed [ 63.670133][ T5720] FAT-fs (loop3): Directory bread(block 66) failed [ 63.670151][ T5720] FAT-fs (loop3): Directory bread(block 67) failed [ 63.670180][ T5720] FAT-fs (loop3): Directory bread(block 68) failed [ 63.670195][ T5720] FAT-fs (loop3): Directory bread(block 69) failed [ 63.670223][ T5720] FAT-fs (loop3): Directory bread(block 70) failed [ 63.670237][ T5720] FAT-fs (loop3): Directory bread(block 71) failed [ 63.670263][ T5720] FAT-fs (loop3): Directory bread(block 72) failed [ 63.670277][ T5720] FAT-fs (loop3): Directory bread(block 73) failed [ 64.029547][ T5732] loop2: detected capacity change from 0 to 4096 [ 64.048336][ T5732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.108171][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.227079][ T5749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.227273][ T5749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.312096][ T5754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 64.312193][ T5754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.362747][ T5757] mmap: syz.2.313 (5757) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.436814][ T5763] loop2: detected capacity change from 0 to 256 [ 64.437181][ T5763] vfat: Bad value for 'dmask' [ 64.461619][ T5763] loop2: detected capacity change from 0 to 2048 [ 64.512849][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.512914][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.514463][ T869] cfg80211: failed to load regulatory.db [ 64.541818][ T5763] Alternate GPT is invalid, using primary GPT. [ 64.543540][ T5763] loop2: p2 p3 p7 [ 64.551942][ T5766] loop3: detected capacity change from 0 to 512 [ 64.555601][ T5766] EXT4-fs: Conflicting test_dummy_encryption options [ 64.611402][ T5772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.318'. [ 64.640974][ T5219] udevd[5219]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 64.651572][ T5778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.651701][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 64.655786][ T5778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.664496][ T5213] udevd[5213]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 64.676576][ T5777] loop2: detected capacity change from 0 to 4096 [ 64.680304][ T5780] evm: overlay not supported [ 64.810423][ T5788] bridge0: port 3(veth1_macvtap) entered blocking state [ 64.810484][ T5788] bridge0: port 3(veth1_macvtap) entered disabled state [ 64.810557][ T5788] veth1_macvtap: entered allmulticast mode [ 64.811378][ T5788] veth1_macvtap: left allmulticast mode [ 65.689341][ T5790] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 65.786475][ T5794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.786697][ T5794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.824453][ T5796] loop0: detected capacity change from 0 to 4096 [ 65.828344][ T5796] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.835891][ T5796] EXT4-fs (loop0): Test dummy encryption mode enabled [ 65.837896][ T5800] EXT4-fs: Ignoring removed bh option [ 65.840934][ T5800] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 65.853137][ T5800] EXT4-fs (loop4): 1 truncate cleaned up [ 66.922202][ T5832] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 67.205031][ T5834] netlink: 20 bytes leftover after parsing attributes in process `syz.3.340'. [ 67.227838][ T5836] xt_hashlimit: size too large, truncated to 1048576 [ 67.258200][ T5838] EXT4-fs mount: 5 callbacks suppressed [ 67.258241][ T5838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.276621][ T5838] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.342: corrupted xattr block 33: invalid ea_ino [ 67.279264][ T5838] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.342: corrupted xattr block 33: invalid ea_ino [ 67.279474][ T5838] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.342: corrupted xattr block 33: invalid ea_ino [ 67.283637][ T5838] EXT4-fs error (device loop3): ext4_xattr_block_find:1881: inode #15: comm syz.3.342: corrupted xattr block 33: invalid ea_ino [ 67.304684][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.409861][ T30] audit: type=1326 audit(67.390:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5849 comm="syz.3.346" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf377b68 code=0x7ffc0000 [ 67.409909][ T30] audit: type=1326 audit(67.390:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5849 comm="syz.3.346" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf377b68 code=0x7ffc0000 [ 67.409929][ T30] audit: type=1326 audit(67.390:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5849 comm="syz.3.346" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=65 compat=0 ip=0xffffaf377b68 code=0x7ffc0000 [ 67.544349][ T30] audit: type=1326 audit(67.530:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5855 comm="syz.2.348" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3b77b68 code=0x7ffc0000 [ 67.545309][ T30] audit: type=1326 audit(67.530:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5855 comm="syz.2.348" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3b77b68 code=0x7ffc0000 [ 67.558566][ T30] audit: type=1326 audit(67.540:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5855 comm="syz.2.348" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3b77b68 code=0x7ffc0000 [ 67.558627][ T30] audit: type=1326 audit(67.540:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5855 comm="syz.2.348" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3b77b68 code=0x7ffc0000 [ 67.558662][ T30] audit: type=1326 audit(67.540:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5855 comm="syz.2.348" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=60 compat=0 ip=0xffffb3b77b68 code=0x7ffc0000 [ 67.581939][ T30] audit: type=1326 audit(67.560:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5855 comm="syz.2.348" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3b77b68 code=0x7ffc0000 [ 67.581994][ T30] audit: type=1326 audit(67.560:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5855 comm="syz.2.348" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3b77b68 code=0x7ffc0000 [ 67.670287][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.731905][ T5865] set_capacity_and_notify: 2 callbacks suppressed [ 67.731943][ T5865] loop4: detected capacity change from 0 to 256 [ 67.782712][ T5869] loop4: detected capacity change from 0 to 512 [ 67.783426][ T5869] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 67.919173][ T5869] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 68.030621][ T5869] System zones: 1-12 [ 68.034024][ T5869] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.037557][ T5869] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.354: invalid indirect mapped block 12 (level 1) [ 68.040479][ T5869] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.041905][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 68.041933][ C1] EXT4-fs (loop4): initial error at time 68: ext4_free_branches:1023: inode 11 [ 68.041973][ C1] EXT4-fs (loop4): last error at time 68: ext4_free_branches:1023: inode 11 [ 68.045892][ T5869] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.354: invalid indirect mapped block 2 (level 2) [ 68.045916][ T5869] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.053517][ T5869] EXT4-fs (loop4): 1 truncate cleaned up [ 68.058826][ T5869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 68.151998][ T4801] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 68.265057][ T5876] process 'syz.3.355' launched './file1' with NULL argv: empty string added [ 68.298785][ T5878] loop3: detected capacity change from 0 to 128 [ 68.302738][ T4801] usb 1-1: no configurations [ 68.302759][ T4801] usb 1-1: can't read configurations, error -22 [ 68.307960][ T5878] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 68.441905][ T4801] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 68.455072][ T5881] tmpfs: Unknown parameter 'fscontext' [ 68.604090][ T4801] usb 1-1: no configurations [ 68.604119][ T4801] usb 1-1: can't read configurations, error -22 [ 68.617606][ T5888] loop2: detected capacity change from 0 to 512 [ 68.630902][ T5888] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.359: bad orphan inode 15 [ 68.633260][ T5888] loop2: lost filesystem error report for type 5 error -117 [ 68.633944][ T5888] ext4_test_bit(bit=14, block=5) = 0 [ 68.636145][ T4801] usb usb1-port1: attempt power cycle [ 68.639018][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 68.639473][ T5888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.663039][ T5891] loop4: detected capacity change from 0 to 512 [ 68.665439][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.667062][ T5891] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.679395][ T5891] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #17: comm syz.4.360: corrupted in-inode xattr: e_name out of bounds [ 68.679440][ T5891] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 68.680034][ T5891] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.360: couldn't read orphan inode 17 (err -117) [ 68.680052][ T5891] loop4: lost filesystem error report for type 5 error -117 [ 68.680691][ T5891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.698696][ T5891] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #12: block 7: comm syz.4.360: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 68.717380][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.821656][ T5902] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 69.369757][ T4713] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.422561][ T4801] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 69.456934][ T4801] usb 1-1: no configurations [ 69.456967][ T4801] usb 1-1: can't read configurations, error -22 [ 69.583559][ T4801] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 69.613398][ T5916] loop2: detected capacity change from 0 to 512 [ 69.617539][ T5916] EXT4-fs: Ignoring removed nobh option [ 69.632271][ T4801] usb 1-1: no configurations [ 69.632299][ T4801] usb 1-1: can't read configurations, error -22 [ 69.632434][ T4801] usb usb1-port1: unable to enumerate USB device [ 69.639992][ T5918] xt_hashlimit: size too large, truncated to 1048576 [ 69.648376][ T5916] EXT4-fs (loop2): orphan cleanup on readonly fs [ 69.650537][ T5916] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.368: ea_inode file size=1535 entry size=6 [ 69.658830][ T5916] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 69.659133][ T5916] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.368: corrupted inode contents [ 69.659155][ T5916] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.662183][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 69.662201][ C1] EXT4-fs (loop2): initial error at time 69: ext4_do_update_inode:5690: inode 15 [ 69.662217][ C1] EXT4-fs (loop2): last error at time 69: ext4_do_update_inode:5690: inode 15 [ 69.672466][ T5916] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #15: comm syz.2.368: mark_inode_dirty error [ 69.672516][ T5916] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.675190][ T5916] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.368: corrupted inode contents [ 69.682015][ T5916] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.682583][ T5916] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.368: mark_inode_dirty error [ 69.682618][ T5916] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.687651][ T5916] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.368: mark inode dirty (error -117) [ 69.687690][ T5916] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.690427][ T5918] loop1: detected capacity change from 0 to 128 [ 69.693829][ T5916] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 69.693925][ T5916] EXT4-fs (loop2): 1 orphan inode deleted [ 69.697832][ T5916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 69.704869][ T5918] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 69.722513][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.734036][ T4706] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.054657][ T5931] loop1: detected capacity change from 0 to 128 [ 70.057743][ T5932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.061707][ T5932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.070235][ T5931] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 70.070297][ T5931] System zones: 1-3, 19-19, 35-36 [ 70.070890][ T5931] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 70.080826][ T5931] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 70.103737][ T4706] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.162208][ T5940] loop1: detected capacity change from 0 to 2048 [ 70.234898][ T5940] Alternate GPT is invalid, using primary GPT. [ 70.235005][ T5940] loop1: p2 p3 p7 [ 70.539590][ T5949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.539785][ T5949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.600588][ T5204] udevd[5204]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 70.607245][ T5213] udevd[5213]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 70.608515][ T5219] udevd[5219]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 70.626365][ T5204] udevd[5204]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 70.628092][ T5219] udevd[5219]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 70.629519][ T5213] udevd[5213]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 70.816035][ T5957] loop1: detected capacity change from 0 to 512 [ 70.825750][ T5957] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 70.842511][ T5958] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 70.862012][ T5957] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 70.862140][ T5957] EXT4-fs (loop1): orphan cleanup on readonly fs [ 70.865393][ T5957] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.381: Block bitmap for bg 0 marked uninitialized [ 70.868792][ T5957] loop1: lost filesystem error report for type 5 error -117 [ 70.871867][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 70.871899][ C0] EXT4-fs (loop1): initial error at time 70: ext4_read_block_bitmap_nowait:517 [ 70.871930][ C0] EXT4-fs (loop1): last error at time 70: ext4_read_block_bitmap_nowait:517 [ 70.884418][ T5957] EXT4-fs (loop1): Remounting filesystem read-only [ 70.884584][ T5957] EXT4-fs (loop1): 1 orphan inode deleted [ 70.885068][ T5957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 70.916209][ T4706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.970896][ T5963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.030364][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.036384][ T4920] Bluetooth: hci5: Frame reassembly failed (-84) [ 71.196366][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.198260][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.361348][ T5996] IPv6: NLM_F_CREATE should be specified when creating new route [ 71.401981][ T5998] EXT4-fs: Ignoring removed nobh option [ 71.403332][ T5998] EXT4-fs: Ignoring removed i_version option [ 71.422173][ T5998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.428328][ T5998] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 71.432871][ T5998] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 71.435531][ T5998] EXT4-fs (loop2): This should not happen!! Data will be lost [ 71.435531][ T5998] [ 71.437541][ T5998] EXT4-fs (loop2): Total free blocks count 0 [ 71.438798][ T5998] EXT4-fs (loop2): Free/Dirty block details [ 71.440057][ T5998] EXT4-fs (loop2): free_blocks=20480 [ 71.441180][ T5998] EXT4-fs (loop2): dirty_blocks=16 [ 71.442372][ T5998] EXT4-fs (loop2): Block reservation details [ 71.443645][ T5998] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 71.454375][ T4715] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 71.457240][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.489161][ T6002] usb usb8: usbfs: process 6002 (syz.2.399) did not claim interface 0 before use [ 71.728996][ T6011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.729190][ T6011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.878961][ T6029] FAT-fs (loop4): Directory bread(block 64) failed [ 71.878996][ T6029] FAT-fs (loop4): Directory bread(block 65) failed [ 71.879030][ T6029] FAT-fs (loop4): Directory bread(block 66) failed [ 71.879046][ T6029] FAT-fs (loop4): Directory bread(block 67) failed [ 71.879074][ T6029] FAT-fs (loop4): Directory bread(block 68) failed [ 71.879088][ T6029] FAT-fs (loop4): Directory bread(block 69) failed [ 71.879114][ T6029] FAT-fs (loop4): Directory bread(block 70) failed [ 71.879128][ T6029] FAT-fs (loop4): Directory bread(block 71) failed [ 71.879153][ T6029] FAT-fs (loop4): Directory bread(block 72) failed [ 71.879166][ T6029] FAT-fs (loop4): Directory bread(block 73) failed [ 72.276172][ T4920] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.324220][ T4720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.325821][ T4720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.327422][ T4720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.328104][ T4720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.328360][ T4720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.378836][ T4920] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.467439][ T4920] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.540489][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.540575][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.540781][ T6037] bridge_slave_0: entered allmulticast mode [ 72.541375][ T6037] bridge_slave_0: entered promiscuous mode [ 72.548514][ T4920] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.551396][ T6037] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.551813][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.553194][ T6037] bridge_slave_1: entered allmulticast mode [ 72.553968][ T6037] bridge_slave_1: entered promiscuous mode [ 72.562307][ T6037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.563365][ T6037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.570298][ T6037] team0: Port device team_slave_0 added [ 72.572633][ T6037] team0: Port device team_slave_1 added [ 72.579190][ T6037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.579485][ T6037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.579509][ T6037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.580179][ T6037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.580186][ T6037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.580198][ T6037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.599330][ T6037] hsr_slave_0: entered promiscuous mode [ 72.600773][ T6037] hsr_slave_1: entered promiscuous mode [ 72.604415][ T6037] debugfs: 'hsr0' already exists in 'hsr' [ 72.605663][ T6037] Cannot create hsr debugfs directory [ 72.892700][ T4920] bridge_slave_1: left allmulticast mode [ 72.892753][ T4920] bridge_slave_1: left promiscuous mode [ 72.893571][ T4920] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.899021][ T4920] bridge_slave_0: left allmulticast mode [ 72.900220][ T4920] bridge_slave_0: left promiscuous mode [ 72.901464][ T4920] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.988662][ T6073] set_capacity_and_notify: 3 callbacks suppressed [ 72.988706][ T6073] loop2: detected capacity change from 0 to 512 [ 72.995128][ T6073] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 72.995243][ T6073] EXT4-fs (loop2): orphan cleanup on readonly fs [ 73.000973][ T6073] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 73.004023][ T6073] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 73.005867][ T6073] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #16: comm syz.2.425: corrupted xattr block 31: invalid header [ 73.005905][ T6073] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 73.008480][ T6073] EXT4-fs (loop2): Remounting filesystem read-only [ 73.008530][ T6073] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 73.008574][ T6073] EXT4-fs (loop2): 1 orphan inode deleted [ 73.009132][ T6073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.022120][ T868] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 73.032496][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.053747][ T4720] Bluetooth: hci5: command 0x1003 tx timeout [ 73.053814][ T4710] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 73.122465][ T6081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.124185][ T6081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.126717][ T6082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.126972][ T6082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.146798][ T4920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.153911][ T4920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.171922][ T868] usb 1-1: Using ep0 maxpacket: 8 [ 73.173920][ T868] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 73.175897][ T868] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 73.177695][ T868] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 73.179578][ T868] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 73.179610][ T868] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 73.179630][ T868] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.179655][ T868] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.179671][ T868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.193347][ T4920] bond0 (unregistering): Released all slaves [ 73.388923][ T4395] 8021q: adding VLAN 0 to HW filter on device eth0 [ 73.401946][ T868] usb 1-1: GET_CAPABILITIES returned 0 [ 73.401986][ T868] usbtmc 1-1:16.0: can't read capabilities [ 73.512371][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.512564][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.552719][ T4920] hsr_slave_0: left promiscuous mode [ 73.553814][ T4920] hsr_slave_1: left promiscuous mode [ 73.554105][ T4920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.554124][ T4920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.555263][ T4920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.555275][ T4920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.560997][ T4920] veth1_macvtap: left promiscuous mode [ 73.561368][ T4920] veth0_macvtap: left promiscuous mode [ 73.561409][ T4920] veth1_vlan: left promiscuous mode [ 73.561446][ T4920] veth0_vlan: left promiscuous mode [ 73.601505][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 73.603513][ T6061] usbtmc 1-1:16.0: Unable to send data, error -71 [ 73.604482][ T869] usb 1-1: USB disconnect, device number 13 [ 73.698635][ T4920] team0 (unregistering): Port device team_slave_1 removed [ 73.712167][ T4920] team0 (unregistering): Port device team_slave_0 removed [ 73.741036][ T6134] loop2: detected capacity change from 0 to 512 [ 73.743377][ T6134] EXT4-fs (loop2): Test dummy encryption mode enabled [ 73.762161][ T6134] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.440: inode has both inline data and extents flags [ 73.762201][ T6134] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.764892][ T6134] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.440: couldn't read orphan inode 15 (err -117) [ 73.764914][ T6134] loop2: lost filesystem error report for type 5 error -117 [ 73.766990][ T6134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.775922][ T6134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.776092][ T6134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.944485][ T6037] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.947848][ T6037] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.949440][ T6037] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.951470][ T6037] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.956629][ T6037] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.959017][ T6037] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.961241][ T6037] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.963699][ T6037] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.999692][ T6037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.007052][ T6037] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.011373][ T4988] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.011422][ T4988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.018437][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.018500][ T3326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.035238][ T6037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.135524][ T6182] loop4: detected capacity change from 0 to 256 [ 74.171133][ T6037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.183580][ T6037] veth0_vlan: entered promiscuous mode [ 74.186708][ T6037] veth1_vlan: entered promiscuous mode [ 74.197254][ T6037] veth0_macvtap: entered promiscuous mode [ 74.199625][ T6037] veth1_macvtap: entered promiscuous mode [ 74.218990][ T6037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.224444][ T6037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.231474][ T4987] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.231612][ T4987] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.231679][ T4987] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.231747][ T4987] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.236985][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.237178][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.278238][ T6196] loop0: detected capacity change from 0 to 1024 [ 74.290101][ T6196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.303046][ T3326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.303083][ T3326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.314505][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.325408][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.346431][ T3268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.346467][ T3268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.355343][ T6203] loop2: detected capacity change from 0 to 256 [ 74.360728][ T6203] FAT-fs (loop2): Directory bread(block 1285) failed [ 74.360779][ T6203] FAT-fs (loop2): Directory bread(block 1286) failed [ 74.360796][ T6203] FAT-fs (loop2): Directory bread(block 1287) failed [ 74.360838][ T6203] FAT-fs (loop2): Directory bread(block 1288) failed [ 74.366166][ T6203] FAT-fs (loop2): Directory bread(block 1285) failed [ 74.366188][ T6203] FAT-fs (loop2): Directory bread(block 1286) failed [ 74.366204][ T6203] FAT-fs (loop2): Directory bread(block 1287) failed [ 74.366221][ T6203] FAT-fs (loop2): Directory bread(block 1288) failed [ 74.366257][ T6203] FAT-fs (loop2): Directory bread(block 1285) failed [ 74.366268][ T6203] FAT-fs (loop2): Directory bread(block 1286) failed [ 74.412057][ T4710] Bluetooth: hci3: command tx timeout [ 74.428011][ T6211] loop2: detected capacity change from 0 to 128 [ 74.517936][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.518141][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.539945][ T6223] loop2: detected capacity change from 0 to 512 [ 74.540256][ T6223] overlayfs: failed lookup in lower (newroot/108, name='bus', err=-40): overlapping layers [ 74.540361][ T6223] overlayfs: failed lookup in lower (newroot/108, name='bus', err=-40): overlapping layers [ 74.851141][ T6232] overlayfs: failed to get inode (-116) [ 74.852138][ T6232] overlayfs: failed to get inode (-116) [ 74.852582][ T6232] overlayfs: failed to get inode (-116) [ 74.920405][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.925096][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.930274][ T6237] binder: 6235:6237 tried to acquire reference to desc 0, got 1 instead [ 74.932526][ T6237] binder: 6235:6237 ioctl c0306201 0 returned -14 [ 74.933922][ T24] binder: release 6235:6237 transaction 21 out, still active [ 74.933951][ T24] binder: undelivered TRANSACTION_COMPLETE [ 74.944361][ T24] binder: send failed reply for transaction 21, target dead [ 74.975000][ T6241] tipc: Started in network mode [ 74.975036][ T6241] tipc: Node identity 4, cluster identity 4711 [ 74.975061][ T6241] tipc: Node number set to 4 [ 74.976001][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.458'. [ 74.983605][ T6244] loop0: detected capacity change from 0 to 512 [ 74.985186][ T6244] EXT4-fs: Ignoring removed oldalloc option [ 75.003305][ T6244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.035872][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.093716][ T6255] loop4: detected capacity change from 0 to 1024 [ 75.094158][ T6255] EXT4-fs: Ignoring removed oldalloc option [ 75.094176][ T6255] EXT4-fs: Ignoring removed bh option [ 75.107704][ T6255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.113821][ T6255] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.465: lblock 3 mapped to illegal pblock 3 (length 3) [ 75.117559][ T6255] EXT4-fs (loop4): Remounting filesystem read-only [ 75.148905][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.209117][ T6267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.209758][ T6267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.688009][ T6272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.689887][ T6272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.239458][ T6281] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 76.492110][ T4710] Bluetooth: hci3: command tx timeout [ 77.056886][ T6291] loop0: detected capacity change from 0 to 512 [ 77.065252][ T6291] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.475: inode has both inline data and extents flags [ 77.067726][ T6291] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.068058][ T6291] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.475: couldn't read orphan inode 15 (err -117) [ 77.071952][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 77.071972][ C0] EXT4-fs (loop0): initial error at time 77: ext4_orphan_get:1397: inode 15 [ 77.071989][ C0] EXT4-fs (loop0): last error at time 77: ext4_orphan_get:1397: inode 15 [ 77.080524][ T6291] loop0: lost filesystem error report for type 5 error -117 [ 77.088105][ T6291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.091307][ T6295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.091478][ T6295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.585944][ T6301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.592644][ T6301] EXT4-fs (loop2): shut down requested (1) [ 77.608620][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.634696][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.662266][ T6309] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.662296][ T6309] IPv6: NLM_F_CREATE should be set when creating new route [ 77.662374][ T6309] IPv6: NLM_F_CREATE should be set when creating new route [ 78.064915][ T868] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 78.582014][ T4710] Bluetooth: hci3: command tx timeout [ 78.666340][ T6326] set_capacity_and_notify: 2 callbacks suppressed [ 78.667823][ T6326] loop4: detected capacity change from 0 to 256 [ 78.742256][ T6330] loop4: detected capacity change from 0 to 1024 [ 78.742619][ T6330] EXT4-fs: inline encryption not supported [ 78.756265][ T868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 78.756304][ T868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.756333][ T868] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 78.756350][ T868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.764358][ T868] usb 1-1: config 0 descriptor?? [ 78.785988][ T6330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.797412][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.959203][ T868] hid_parser_main: 31 callbacks suppressed [ 79.960012][ T868] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 79.960036][ T868] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 79.960051][ T868] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 79.960064][ T868] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 79.960077][ T868] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 79.960089][ T868] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 79.960101][ T868] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 79.983559][ T868] isku 0003:1E7D:319C.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 80.602996][ T868] isku 0003:1E7D:319C.0003: couldn't init struct isku_device [ 80.603036][ T868] isku 0003:1E7D:319C.0003: couldn't install keyboard [ 80.618346][ T868] isku 0003:1E7D:319C.0003: probe with driver isku failed with error -71 [ 80.624547][ T868] usb 1-1: USB disconnect, device number 14 [ 80.629844][ T6386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.637752][ T6386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.652989][ T4710] Bluetooth: hci3: command tx timeout [ 80.810521][ T6415] loop2: detected capacity change from 0 to 1024 [ 80.822758][ T6415] EXT4-fs: Ignoring removed nobh option [ 80.823903][ T6415] EXT4-fs: Ignoring removed bh option [ 80.824793][ T6415] EXT4-fs: Ignoring removed nobh option [ 80.833815][ T6415] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 80.844457][ T6415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.859858][ T6400] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 80.866126][ T6420] syzkaller0: entered promiscuous mode [ 80.867259][ T6420] syzkaller0: entered allmulticast mode [ 80.880348][ T6417] veth1_to_bond: entered allmulticast mode [ 80.929553][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.093444][ T6433] loop0: detected capacity change from 0 to 128 [ 81.112057][ T6433] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 81.329851][ T6445] tmpfs: Unknown parameter 'fscontext' [ 81.564223][ T6402] veth1_to_bond: left allmulticast mode [ 81.659755][ T6451] loop4: detected capacity change from 0 to 512 [ 81.665525][ T6451] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.665564][ T6451] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.665574][ T6451] EXT4-fs (loop4): blocks per group (64) and clusters per group (32768) inconsistent [ 81.820774][ T6473] loop3: detected capacity change from 0 to 512 [ 81.831815][ T6477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.836110][ T6477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.836275][ T6473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.973953][ T4712] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.996500][ T6492] loop0: detected capacity change from 0 to 256 [ 82.021811][ T6037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.088624][ T6521] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 82.095685][ T6521] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 82.099875][ T6521] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 82.504684][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 82.790454][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'. [ 82.865758][ T6550] xt_hashlimit: size too large, truncated to 1048576 [ 82.931007][ T6554] netlink: 'syz.2.522': attribute type 12 has an invalid length. [ 82.931040][ T6554] netlink: 'syz.2.522': attribute type 29 has an invalid length. [ 82.931068][ T6554] netlink: 148 bytes leftover after parsing attributes in process `syz.2.522'. [ 83.229064][ T6569] loop3: detected capacity change from 0 to 128 [ 83.254424][ T6569] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 84.188446][ T6593] loop2: detected capacity change from 0 to 512 [ 84.199971][ T6593] EXT4-fs (loop2): Test dummy encryption mode enabled [ 84.210423][ T6593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.245140][ T6037] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.246883][ T6598] loop1: detected capacity change from 0 to 4096 [ 84.247270][ T6598] EXT4-fs: inline encryption not supported [ 84.255109][ T6605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.256895][ T6598] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.260926][ T6605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.266298][ T6598] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 84.267760][ T6598] System zones: 0-5 [ 84.268596][ T6607] loop0: detected capacity change from 0 to 512 [ 84.273957][ T6607] EXT4-fs: Ignoring removed orlov option [ 84.283732][ T6607] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.288853][ T6593] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 84.291317][ T6598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.298693][ T6618] loop3: detected capacity change from 0 to 1024 [ 84.299130][ T6618] EXT4-fs: Ignoring removed oldalloc option [ 84.299160][ T6618] EXT4-fs: Ignoring removed bh option [ 84.304960][ T6607] EXT4-fs (loop0): failed to initialize system zone (-117) [ 84.305060][ T6607] EXT4-fs (loop0): mount failed [ 84.314082][ T6618] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.320862][ T6618] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=4040e018, mo2=0000] [ 84.331305][ T6618] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.533: lblock 2 mapped to illegal pblock 2 (length 1) [ 84.335080][ T6618] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 84.335680][ T6618] __quota_error: 51 callbacks suppressed [ 84.339451][ T6618] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 84.339507][ T6618] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.533: lblock 0 mapped to illegal pblock 48 (length 1) [ 84.339539][ T6618] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 84.343395][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 84.343412][ C0] EXT4-fs (loop3): initial error at time 84: ext4_map_blocks:791: inode 3: block 2 [ 84.343431][ C0] EXT4-fs (loop3): last error at time 84: ext4_map_blocks:791: inode 3: block 48 [ 84.352640][ T6618] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 84.352682][ T6618] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.533: Failed to acquire dquot type 0 [ 84.352697][ T6618] loop3: lost filesystem error report for type 5 error -117 [ 84.352853][ T6618] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 84.352862][ T6618] loop3: lost filesystem error report for type 5 error -117 [ 84.352939][ T6618] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.533: mark_inode_dirty error [ 84.352950][ T6618] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 84.353022][ T6618] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 84.353055][ T6618] EXT4-fs (loop3): 1 orphan inode deleted [ 84.374713][ T4706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.375227][ T6618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.375455][ T4920] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.375482][ T4920] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 84.375578][ T4920] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 84.375591][ T4920] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 0 [ 84.375601][ T4920] loop3: lost filesystem error report for type 5 error -117 [ 84.380507][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.409224][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.409440][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.429187][ T6037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.429259][ T6037] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 84.429272][ T6037] loop3: lost filesystem error report for type 5 error -117 [ 84.430207][ T6037] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 84.430229][ T6037] loop3: lost filesystem error report for type 5 error -117 [ 84.430328][ T6037] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 84.430341][ T6037] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 84.587975][ T6667] loop2: detected capacity change from 0 to 2048 [ 84.620393][ T6667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.626104][ T6674] loop3: detected capacity change from 0 to 1024 [ 84.637123][ T6674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.642622][ T4989] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 5 vs 4156096517 free clusters [ 84.643497][ T4989] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 28 [ 84.643513][ T4989] EXT4-fs (loop2): This should not happen!! Data will be lost [ 84.643513][ T4989] [ 84.643520][ T4989] EXT4-fs (loop2): Total free blocks count 0 [ 84.643527][ T4989] EXT4-fs (loop2): Free/Dirty block details [ 84.643538][ T4989] EXT4-fs (loop2): free_blocks=66497544192 [ 84.643547][ T4989] EXT4-fs (loop2): dirty_blocks=16 [ 84.643553][ T4989] EXT4-fs (loop2): Block reservation details [ 84.643559][ T4989] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 84.644075][ T4715] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 84.644829][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.672965][ T6037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.674489][ T6683] loop2: detected capacity change from 0 to 128 [ 84.681391][ T6683] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 84.730676][ T4715] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.770872][ T30] audit: type=1326 audit(84.750:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6696 comm="syz.3.551" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96777b68 code=0x0 [ 84.969119][ T6714] netlink: 128 bytes leftover after parsing attributes in process `syz.4.555'. [ 84.969151][ T6714] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 84.994224][ T30] audit: type=1326 audit(84.980:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.4.556" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b77b68 code=0x7ffc0000 [ 84.997416][ T6718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.997897][ T6718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.998239][ T30] audit: type=1326 audit(84.980:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.4.556" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b77b68 code=0x7ffc0000 [ 84.998268][ T30] audit: type=1326 audit(84.980:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.4.556" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b77b68 code=0x7ffc0000 [ 84.998286][ T30] audit: type=1326 audit(84.980:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.4.556" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff88b5aa2c code=0x7ffc0000 [ 84.998302][ T30] audit: type=1326 audit(84.980:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.4.556" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff88b77790 code=0x7ffc0000 [ 84.998318][ T30] audit: type=1326 audit(84.980:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.4.556" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff88b77790 code=0x7ffc0000 [ 85.834316][ T6751] netlink: 148 bytes leftover after parsing attributes in process `syz.1.565'. [ 86.181256][ T6766] tipc: Started in network mode [ 86.181295][ T6766] tipc: Node identity 5f000000000000000000120000000001, cluster identity 4711 [ 86.181320][ T6766] tipc: Enabling of bearer rejected, failed to enable media [ 86.252818][ T6769] loop0: detected capacity change from 0 to 1024 [ 86.275289][ T6769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 86.303803][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 86.342456][ T6781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.342688][ T6781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.661480][ T40] Bluetooth: hci5: Frame reassembly failed (-84) [ 86.895260][ T6810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.895466][ T6810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.914378][ T6816] binder: 6814:6816 tried to acquire reference to desc 0, got 1 instead [ 86.914912][ T869] binder: undelivered TRANSACTION_COMPLETE [ 86.914939][ T869] binder: undelivered TRANSACTION_COMPLETE [ 86.935963][ T869] binder: undelivered transaction 33, process died. [ 86.936011][ T869] binder: undelivered transaction 32, process died. [ 86.957430][ T6820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.957642][ T6820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.015987][ T6827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.017214][ T6827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.570511][ T6841] loop4: detected capacity change from 0 to 2048 [ 87.602529][ T6841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.616041][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.786858][ T6854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.732849][ T4720] Bluetooth: hci5: command 0x1003 tx timeout [ 88.744337][ T4710] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 88.761303][ T6877] netlink: 128 bytes leftover after parsing attributes in process `syz.3.594'. [ 88.761341][ T6877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.594'. [ 88.848191][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.848405][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.887817][ T6897] tipc: Started in network mode [ 88.887857][ T6897] tipc: Node identity 2d000000000000000000120000000001, cluster identity 4711 [ 88.887880][ T6897] tipc: Enabling of bearer rejected, failed to enable media [ 89.221921][ T4801] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 89.373605][ T4801] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 89.373654][ T4801] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 89.373671][ T4801] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.375439][ T4801] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 89.375452][ T4801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 89.375462][ T4801] usb 1-1: Product: syz [ 89.375469][ T4801] usb 1-1: Manufacturer: syz [ 89.375475][ T4801] usb 1-1: SerialNumber: syz [ 89.499910][ T6925] loop4: detected capacity change from 0 to 1024 [ 89.501496][ T6925] EXT4-fs: Ignoring removed bh option [ 89.517443][ T6925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.606659][ T4801] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 89.988780][ T6953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.991720][ T6953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.063448][ T868] usb 1-1: USB disconnect, device number 15 [ 90.064822][ T868] usblp0: removed [ 90.143278][ T6979] loop3: detected capacity change from 0 to 512 [ 90.145008][ T6979] EXT4-fs: Ignoring removed oldalloc option [ 90.155580][ T6979] EXT4-fs (loop3): Test dummy encryption mode enabled [ 90.515946][ T6997] loop3: detected capacity change from 0 to 1024 [ 90.518504][ T6997] EXT4-fs: Ignoring removed orlov option [ 90.531435][ T6997] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2842c02c, mo2=0002] [ 90.531483][ T6997] System zones: 0-1, 3-12 [ 90.598276][ T7006] xt_hashlimit: size too large, truncated to 1048576 [ 90.661908][ T7006] loop3: detected capacity change from 0 to 2048 [ 90.914141][ T7017] netlink: 20 bytes leftover after parsing attributes in process `syz.3.616'. [ 91.027821][ T6962] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 91.041684][ T6962] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 91.085165][ T6962] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 91.087447][ T6962] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 91.088938][ T6962] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 91.091542][ T6962] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 91.093909][ T6962] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 91.094123][ T6962] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 91.097594][ T6962] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 91.100080][ T6962] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 91.100229][ T6962] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 91.103256][ T6962] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 91.104948][ T6962] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 91.105136][ T6962] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 91.107591][ T6962] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 91.110409][ T7016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.110629][ T7016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.134105][ T7034] loop0: detected capacity change from 0 to 128 [ 91.146717][ T7034] EXT4-fs (loop0): shut down requested (2) [ 91.148919][ T7034] fscrypt (loop0, inode 12): Error -5 getting encryption context [ 91.237141][ T7048] loop1: detected capacity change from 0 to 512 [ 91.447110][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 91.447303][ T30] audit: type=1326 audit(91.430:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7058 comm="syz.1.624" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffab777b68 code=0x0 [ 91.504543][ T7068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.506475][ T7068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.638904][ T7074] loop2: detected capacity change from 0 to 512 [ 91.645789][ T7074] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 91.648142][ T7074] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 91.653339][ T7074] EXT4-fs (loop2): 1 truncate cleaned up [ 92.093079][ T4710] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.094472][ T7084] loop0: detected capacity change from 0 to 512 [ 92.097019][ T7084] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.099917][ T7084] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.628: bg 0: block 384: padding at end of block bitmap is not set [ 92.099959][ T7084] loop0: lost filesystem error report for type 5 error -117 [ 92.103757][ T7084] EXT4-fs (loop0): Remounting filesystem read-only [ 92.104016][ T7084] EXT4-fs (loop0): 1 truncate cleaned up [ 93.263711][ T4710] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.263773][ T4710] Bluetooth: hci4: command 0x0c1a tx timeout [ 93.263810][ T4710] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.263837][ T4710] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.325203][ T6931] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 93.749587][ T7110] hub 8-0:1.0: USB hub found [ 93.750406][ T7110] hub 8-0:1.0: 8 ports detected [ 93.994820][ T7114] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.995340][ T7114] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.109910][ T7129] loop2: detected capacity change from 0 to 256 [ 94.172030][ T4720] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.399749][ T7129] FAT-fs (loop2): Directory bread(block 64) failed [ 94.399788][ T7129] FAT-fs (loop2): Directory bread(block 65) failed [ 94.399824][ T7129] FAT-fs (loop2): Directory bread(block 66) failed [ 94.399840][ T7129] FAT-fs (loop2): Directory bread(block 67) failed [ 94.399866][ T7129] FAT-fs (loop2): Directory bread(block 68) failed [ 94.399881][ T7129] FAT-fs (loop2): Directory bread(block 69) failed [ 94.399906][ T7129] FAT-fs (loop2): Directory bread(block 70) failed [ 94.399920][ T7129] FAT-fs (loop2): Directory bread(block 71) failed [ 94.399945][ T7129] FAT-fs (loop2): Directory bread(block 72) failed [ 94.399958][ T7129] FAT-fs (loop2): Directory bread(block 73) failed [ 94.504783][ T7139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.640'. [ 94.586562][ T7146] netlink: 'syz.0.642': attribute type 3 has an invalid length. [ 94.590060][ T7139] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 94.613815][ T7148] loop3: detected capacity change from 0 to 256 [ 94.631696][ T7150] loop0: detected capacity change from 0 to 1024 [ 94.649763][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 94.815366][ T3268] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm kworker/u8:7: lblock 3 mapped to illegal pblock 3 (length 3) [ 94.820082][ T3268] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 94.820131][ T3268] EXT4-fs (loop0): This should not happen!! Data will be lost [ 94.820131][ T3268] [ 94.832214][ T4712] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 94.958135][ T7175] loop2: detected capacity change from 0 to 512 [ 94.969713][ T7175] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.976532][ T7175] EXT4-fs (loop2): 1 truncate cleaned up [ 95.056690][ T7184] loop4: detected capacity change from 0 to 512 [ 95.063562][ T7184] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 95.067371][ T7184] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0102] [ 95.067420][ T7184] System zones: 1-12 [ 95.067546][ T7184] EXT4-fs (loop4): orphan cleanup on readonly fs [ 95.071636][ T7184] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.653: bg 0: block 361: padding at end of block bitmap is not set [ 95.071668][ T7184] loop4: lost filesystem error report for type 5 error -117 [ 95.074391][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 95.074402][ C1] EXT4-fs (loop4): initial error at time 95: ext4_validate_block_bitmap:441 [ 95.074414][ C1] EXT4-fs (loop4): last error at time 95: ext4_validate_block_bitmap:441 [ 95.080458][ T7184] EXT4-fs (loop4): Remounting filesystem read-only [ 95.082871][ T7184] EXT4-fs (loop4): 1 truncate cleaned up [ 95.285011][ T7201] loop0: detected capacity change from 0 to 512 [ 95.292274][ T4720] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.293460][ T4720] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.295210][ T4720] Bluetooth: hci4: command 0x0c1a tx timeout [ 95.295248][ T4720] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.305551][ T7206] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 95.306429][ T7206] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 95.324610][ T7201] EXT4-fs error (device loop0): __ext4_iget:5481: inode #11: block 1: comm syz.0.648: invalid block [ 95.324653][ T7201] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 95.324832][ T7201] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.648: couldn't read orphan inode 11 (err -117) [ 95.324846][ T7201] loop0: lost filesystem error report for type 5 error -117 [ 95.330857][ T7206] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 95.331110][ T7206] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 95.331356][ T7206] overlayfs: d_ino too big (139, ino=9223372036854776578, xinobits=3) [ 95.331502][ T7206] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 95.331590][ T7206] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 95.331705][ T7206] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 95.331792][ T7206] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 95.343824][ T7206] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 95.343994][ T7206] overlayfs: d_ino too big (dev, ino=4611686018427387923, xinobits=3) [ 95.344308][ T7206] overlayfs: d_ino too big (kernel, ino=4611686018427387911, xinobits=3) [ 95.357538][ T7216] loop1: detected capacity change from 0 to 512 [ 95.377140][ T7217] loop4: detected capacity change from 0 to 512 [ 95.420215][ T7232] binder: 7227:7232 ioctl 40046210 0 returned -14 [ 95.507915][ T7240] loop0: detected capacity change from 0 to 512 [ 95.762954][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.662'. [ 95.815398][ T7261] loop0: detected capacity change from 0 to 256 [ 96.076554][ T7278] loop1: detected capacity change from 0 to 256 [ 96.283576][ T4710] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.335872][ T7287] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 96.341478][ T7286] erspan0: entered promiscuous mode [ 96.348391][ T7286] macsec1: entered promiscuous mode [ 96.351111][ T7286] macsec1: entered allmulticast mode [ 96.354236][ T7286] erspan0: entered allmulticast mode [ 96.369372][ T7295] netlink: 68 bytes leftover after parsing attributes in process `syz.2.672'. [ 96.377204][ T7286] erspan0: left allmulticast mode [ 96.377302][ T7286] erspan0: left promiscuous mode [ 97.212769][ T7376] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.360272][ T7376] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.372515][ T4710] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.372557][ T4710] Bluetooth: hci4: command 0x0c1a tx timeout [ 97.372578][ T4710] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.372597][ T4710] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.810273][ T4920] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.906543][ T4710] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.908001][ T7401] netlink: 188 bytes leftover after parsing attributes in process `syz.0.690'. [ 97.908564][ T4710] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.910727][ T4710] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.920644][ T4710] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.922931][ T4710] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.954368][ T4920] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.963756][ T7415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.985186][ T7415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.058203][ T4920] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.061631][ T7448] xt_hashlimit: size too large, truncated to 1048576 [ 98.120940][ T4920] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.783651][ T4920] bridge_slave_1: left allmulticast mode [ 98.785029][ T4920] bridge_slave_1: left promiscuous mode [ 98.787551][ T4920] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.981001][ T4920] bridge_slave_0: left allmulticast mode [ 98.984110][ T4920] bridge_slave_0: left promiscuous mode [ 98.993286][ T4920] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.376052][ T4920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.403562][ T4920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.443371][ T4920] bond0 (unregistering): Released all slaves [ 99.590217][ T4920] tipc: Left network mode [ 99.643190][ T7598] set_capacity_and_notify: 3 callbacks suppressed [ 99.646360][ T7598] loop2: detected capacity change from 0 to 2048 [ 99.658914][ T7598] EXT4-fs mount: 29 callbacks suppressed [ 99.661198][ T7598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.677823][ T7597] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 99.678475][ T7597] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 99.678499][ T7597] EXT4-fs (loop2): This should not happen!! Data will be lost [ 99.678499][ T7597] [ 99.678519][ T7597] EXT4-fs (loop2): Total free blocks count 0 [ 99.678531][ T7597] EXT4-fs (loop2): Free/Dirty block details [ 99.678552][ T7597] EXT4-fs (loop2): free_blocks=4096 [ 99.678572][ T7597] EXT4-fs (loop2): dirty_blocks=16 [ 99.678583][ T7597] EXT4-fs (loop2): Block reservation details [ 99.678592][ T7597] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 99.706349][ T7396] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.706445][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.706804][ T7396] bridge_slave_0: entered allmulticast mode [ 99.707901][ T7396] bridge_slave_0: entered promiscuous mode [ 99.709796][ T7396] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.709828][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.709903][ T7396] bridge_slave_1: entered allmulticast mode [ 99.712569][ T7396] bridge_slave_1: entered promiscuous mode [ 99.738843][ T7396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.741576][ T7396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.770240][ T7396] team0: Port device team_slave_0 added [ 99.773867][ T7396] team0: Port device team_slave_1 added [ 99.775994][ T40] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 99.779810][ T4715] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 99.857044][ T7662] loop2: detected capacity change from 0 to 512 [ 99.858337][ T7662] EXT4-fs: Ignoring removed i_version option [ 99.859613][ T7662] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.868003][ T7396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.868036][ T7396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.868053][ T7396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.871769][ T7396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.871781][ T7396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.871796][ T7396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.894250][ T7662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.942846][ T4720] Bluetooth: hci3: command tx timeout [ 99.967495][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.147534][ T7396] hsr_slave_0: entered promiscuous mode [ 100.147895][ T7396] hsr_slave_1: entered promiscuous mode [ 100.194785][ T4395] 8021q: adding VLAN 0 to HW filter on device eth0 [ 100.217792][ T4920] hsr_slave_0: left promiscuous mode [ 100.220573][ T4920] hsr_slave_1: left promiscuous mode [ 100.220914][ T4920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.220926][ T4920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.226350][ T7696] loop4: detected capacity change from 0 to 8192 [ 100.228239][ T4920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.228275][ T4920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.241480][ T4920] veth1_macvtap: left promiscuous mode [ 100.241528][ T4920] veth0_macvtap: left promiscuous mode [ 100.241562][ T4920] veth1_vlan: left promiscuous mode [ 100.241587][ T4920] veth0_vlan: left promiscuous mode [ 100.374911][ T4920] team0 (unregistering): Port device team_slave_1 removed [ 100.380282][ T4920] team0 (unregistering): Port device team_slave_0 removed [ 100.748795][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.713'. [ 100.750628][ T7778] bridge_slave_0: default FDB implementation only supports local addresses [ 100.755012][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.713'. [ 100.756711][ T7778] bridge_slave_0: default FDB implementation only supports local addresses [ 100.781515][ T7780] loop4: detected capacity change from 0 to 4096 [ 100.784840][ T7780] EXT4-fs: quotafile must be on filesystem root [ 100.829864][ T7396] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 100.870608][ T7822] loop1: detected capacity change from 0 to 128 [ 100.884805][ T7396] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.887588][ T7396] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 100.899625][ T7822] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 100.905903][ T7396] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.906253][ T7396] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.160959][ T7396] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.163389][ T7396] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.166071][ T7396] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.237321][ T7396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.247426][ T7396] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.271032][ T4988] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.271087][ T4988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.279092][ T4988] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.279138][ T4988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.314059][ T7855] tmpfs: Unknown parameter 'fscontext' [ 101.401053][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.403839][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.460314][ T4395] 8021q: adding VLAN 0 to HW filter on device eth1 [ 102.011973][ T4720] Bluetooth: hci3: command tx timeout [ 102.486388][ T4706] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.562569][ T7396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.648482][ T7396] veth0_vlan: entered promiscuous mode [ 102.658155][ T7396] veth1_vlan: entered promiscuous mode [ 102.672975][ T7396] veth0_macvtap: entered promiscuous mode [ 102.678818][ T7396] veth1_macvtap: entered promiscuous mode [ 102.687599][ T4395] 8021q: adding VLAN 0 to HW filter on device eth2 [ 102.693793][ T7396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.698965][ T7396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.704780][ T15] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.706978][ T15] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.708784][ T15] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.708820][ T15] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.773937][ T4994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.773971][ T4994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.827683][ T4994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.827719][ T4994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.110415][ T4395] 8021q: adding VLAN 0 to HW filter on device eth3 [ 103.139972][ T7990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.149120][ T7990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.151118][ T7990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.289936][ T8004] loop1: detected capacity change from 0 to 128 [ 103.297872][ T8004] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 103.434048][ T8010] tmpfs: Unknown parameter 'fscontext' [ 103.523366][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.523804][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.092001][ T4720] Bluetooth: hci3: command tx timeout [ 104.393135][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.747'. [ 104.745102][ T4706] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.794085][ T8076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.794289][ T8076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.494369][ T4720] Bluetooth: hci3: command tx timeout [ 106.542552][ T8123] netlink: 44 bytes leftover after parsing attributes in process `syz.1.760'. [ 106.616538][ T8128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.763'. [ 106.847487][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 106.847599][ T8136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.855213][ T8136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.734149][ T8220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.734825][ T8220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.126877][ T8251] sch_tbf: burst 1023 is lower than device lo mtu (1550) ! [ 109.130337][ T8253] netlink: 20 bytes leftover after parsing attributes in process `syz.5.790'. [ 109.188410][ T8259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.188619][ T8259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.016302][ T8343] syz.5.819 uses obsolete (PF_INET,SOCK_PACKET) [ 110.031990][ T8341] loop2: detected capacity change from 0 to 512 [ 110.039324][ T8341] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 110.040084][ T8341] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 110.044375][ T8341] EXT4-fs (loop2): 1 truncate cleaned up [ 110.044864][ T8341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.061331][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.124945][ T8369] Bluetooth: MGMT ver 1.23 [ 110.126930][ T8369] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 110.328824][ T8403] tipc: Failed to remove unknown binding: 66,0,0/0:2411308462/2411308463 [ 110.330908][ T8403] tipc: Failed to remove unknown binding: 66,0,0/0:2411308462/2411308463 [ 110.350637][ T8406] netlink: 48 bytes leftover after parsing attributes in process `syz.2.838'. [ 111.143524][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.846'. [ 111.146854][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.846'. [ 111.310566][ T4889] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 111.375978][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 111.472013][ T4889] usb 1-1: Using ep0 maxpacket: 8 [ 111.726741][ T4889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.726782][ T4889] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.726806][ T4889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.738299][ T4889] usb 1-1: config 0 descriptor?? [ 111.954162][ T4889] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 112.145801][ T8531] loop4: detected capacity change from 0 to 512 [ 112.165095][ T8531] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 112.165144][ T8531] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 112.167153][ T8531] EXT4-fs (loop4): 1 truncate cleaned up [ 112.167649][ T8531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.225744][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.239786][ T8477] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.239816][ T8477] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 112.250149][ T4801] usb 1-1: USB disconnect, device number 16 [ 112.250255][ C1] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 112.257419][ T8477] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.257454][ T8477] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 112.283946][ T8477] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.283983][ T8477] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 112.302287][ T8477] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 112.302340][ T8477] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 112.748211][ T8586] binder: 8585:8586 tried to acquire reference to desc 0, got 1 instead [ 112.748541][ T8586] binder: 8585:8586 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 112.748552][ T8586] binder: 8586 RLIMIT_NICE not set [ 112.748563][ T8586] binder: 8586 RLIMIT_NICE not set [ 112.748792][ T8586] binder_alloc: 8585: binder_alloc_buf, no vma [ 112.748800][ T8586] binder: cannot allocate buffer: vma cleared, target dead or dying [ 112.748821][ T8586] binder: 8585:8586 transaction call to 8585:8586 failed 45/29189/-3, code 0 size 0-0 line 3393 [ 112.749025][ T4801] binder: release 8585:8586 transaction 38 out, still active [ 112.749036][ T4801] binder: undelivered TRANSACTION_COMPLETE [ 112.775027][ T4889] binder: release 8585:8586 transaction 38 in, still active [ 112.775067][ T4889] binder: send failed reply for transaction 38, target dead [ 112.775100][ T4889] binder: undelivered TRANSACTION_ERROR: 29189 [ 112.803093][ T8598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.803488][ T8598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.895181][ T8477] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.895215][ T8477] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 112.992416][ T8634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.994151][ T8634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.302062][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 113.353884][ T8683] loop2: detected capacity change from 0 to 512 [ 113.357115][ T8683] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 113.357153][ T8683] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 113.358971][ T8683] EXT4-fs (loop2): 1 truncate cleaned up [ 113.359421][ T8683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.452118][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 113.615259][ T24] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 113.615300][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 113.615332][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 113.615349][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 113.615365][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 113.615379][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.615400][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.615413][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.634608][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.675516][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 113.710045][ T8700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.714659][ T8700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.834186][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 113.834219][ T24] usbtmc 1-1:16.0: can't read capabilities [ 113.965188][ T8735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.968439][ T8735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.037517][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 114.037777][ T8645] usbtmc 1-1:16.0: Unable to send data, error -71 [ 114.038455][ T24] usb 1-1: USB disconnect, device number 17 [ 114.332269][ T8769] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 114.596748][ T8790] loop0: detected capacity change from 0 to 128 [ 114.601113][ T8790] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 114.903998][ T8790] tmpfs: Unknown parameter 'fscontext' [ 115.000346][ T8817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.049528][ T8824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.050397][ T8824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.404207][ T8867] netlink: 'syz.5.907': attribute type 2 has an invalid length. [ 115.406363][ T8867] netlink: 'syz.5.907': attribute type 2 has an invalid length. [ 115.480580][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 115.490533][ T4712] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.127547][ T8935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.132076][ T8935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.311971][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 116.465567][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.465607][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.465645][ T24] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 116.465662][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.500766][ T24] usb 1-1: config 0 descriptor?? [ 116.510390][ T8943] loop2: detected capacity change from 0 to 256 [ 116.870165][ T8964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.873704][ T8964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.916411][ T24] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 116.916454][ T24] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 116.916483][ T24] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 116.916501][ T24] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 116.916518][ T24] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 116.926713][ T24] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 117.115437][ T869] usb 1-1: USB disconnect, device number 18 [ 117.322977][ T8992] netlink: 580 bytes leftover after parsing attributes in process `syz.2.935'. [ 117.565934][ T9012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.567060][ T9012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.903397][ T9031] loop0: detected capacity change from 0 to 256 [ 118.124493][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.124730][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.137461][ T9043] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 119.050996][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.051457][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.446953][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.960'. [ 119.453484][ T9104] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 119.453563][ T9104] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 120.145375][ T9131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.145581][ T9131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.183847][ T9136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.184055][ T9136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.732819][ T9159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.734140][ T9159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.833572][ T9169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.836569][ T9169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.128667][ T9182] loop5: detected capacity change from 0 to 128 [ 121.139619][ T9182] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 121.359727][ T9201] tmpfs: Unknown parameter 'fscontext' [ 121.511484][ T9205] netlink: 'syz.4.982': attribute type 24 has an invalid length. [ 121.511514][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.982'. [ 121.511541][ T9205] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 121.641341][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.984'. [ 121.689122][ T9222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.691184][ T9222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.929750][ T9234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.933638][ T9234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.248141][ T7396] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.519134][ T9250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.521518][ T9250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.585222][ T9258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.993'. [ 122.587081][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 122.632237][ T869] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 122.804351][ T869] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 122.804713][ T869] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 122.874814][ T9275] loop1: detected capacity change from 0 to 4096 [ 122.875244][ T9275] EXT4-fs: Ignoring removed nobh option [ 122.893478][ T9275] EXT4-fs (loop1): Test dummy encryption mode enabled [ 123.020067][ T9275] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 123.020455][ T9275] System zones: 0-5 [ 123.034642][ T9275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.685609][ T869] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 123.685653][ T869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.685682][ T869] usb 1-1: Product: syz [ 123.685696][ T869] usb 1-1: Manufacturer: syz [ 123.685709][ T869] usb 1-1: SerialNumber: syz [ 123.692367][ T869] usb 1-1: config 0 descriptor?? [ 123.698617][ T9216] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 123.698705][ T9216] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 123.714124][ T4706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.740731][ T9284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.740972][ T9284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.806783][ T9298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.810478][ T9298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.124495][ T9216] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 124.124575][ T9216] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 124.421751][ T9327] netlink: 83 bytes leftover after parsing attributes in process `syz.2.1009'. [ 124.528957][ T869] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 124.880410][ T9339] loop4: detected capacity change from 0 to 4096 [ 124.884468][ T9339] EXT4-fs: Ignoring removed nobh option [ 125.061556][ T9339] EXT4-fs (loop4): Test dummy encryption mode enabled [ 125.097980][ T9339] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 125.098303][ T9339] System zones: 0-5 [ 125.112181][ T9339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.467466][ T869] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 125.487374][ T869] usb 1-1: USB disconnect, device number 19 [ 125.684923][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.736542][ T9365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.743215][ T9365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.756556][ T9361] binder: 9360:9361 tried to acquire reference to desc 0, got 1 instead [ 125.772088][ T869] binder: undelivered transaction 50, process died. [ 125.828611][ T9373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.830794][ T9373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.854787][ T9379] loop2: detected capacity change from 0 to 128 [ 125.880903][ T9379] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 125.944963][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.945010][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.089421][ T9398] tmpfs: Unknown parameter 'fscontext' [ 126.510004][ T9403] loop8: detected capacity change from 0 to 8 [ 126.514483][ T9403] Dev loop8: unable to read RDB block 8 [ 126.515682][ T9403] loop8: unable to read partition table [ 126.516757][ T9403] loop8: partition table beyond EOD, truncated [ 126.518044][ T9403] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 126.731655][ T9431] loop8: detected capacity change from 0 to 7 [ 127.073809][ T9436] loop0: detected capacity change from 0 to 4096 [ 127.077258][ T9436] EXT4-fs: Ignoring removed nobh option [ 127.093917][ T9436] EXT4-fs (loop0): Test dummy encryption mode enabled [ 127.111513][ T9436] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 127.111780][ T9436] System zones: 0-5 [ 127.119101][ T9436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.542393][ T9431] Dev loop8: unable to read RDB block 7 [ 127.542437][ T9431] loop8: unable to read partition table [ 127.542529][ T9431] loop8: partition table beyond EOD, truncated [ 127.542552][ T9431] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 127.739139][ T9450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1037'. [ 127.754757][ T4715] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.786978][ T4712] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.907422][ T9473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.909302][ T9473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.991668][ T9493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.993651][ T9493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.488552][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 128.781925][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 128.783028][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 128.785216][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 128.785243][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.785253][ T9] usb 1-1: Product: syz [ 128.785260][ T9] usb 1-1: Manufacturer: syz [ 128.785267][ T9] usb 1-1: SerialNumber: syz [ 128.788390][ T9] usb 1-1: config 0 descriptor?? [ 128.791445][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 128.791464][ T9] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 129.977335][ T9529] loop5: detected capacity change from 0 to 4096 [ 129.979911][ T9529] EXT4-fs: Ignoring removed nobh option [ 129.982968][ T9529] EXT4-fs (loop5): Test dummy encryption mode enabled [ 129.988297][ T9529] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 129.989823][ T9529] System zones: 0-5 [ 130.003951][ T9529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.629698][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 130.629910][ T9544] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 130.629934][ T9544] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 131.032427][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 131.074704][ T7396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.274529][ T9470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.408832][ T9575] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1059'. [ 131.543950][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 131.552246][ T9] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 131.552288][ T9] em28xx 1-1:0.0: board has no eeprom [ 131.646108][ T9604] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1069'. [ 131.777864][ T9609] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 132.577055][ T30] audit: type=1326 audit(132.560:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9616 comm="syz.4.1073" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b77b68 code=0x7ffc0000 [ 132.578034][ T30] audit: type=1326 audit(132.560:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9616 comm="syz.4.1073" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b77b68 code=0x7ffc0000 [ 132.578070][ T30] audit: type=1326 audit(132.560:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9616 comm="syz.4.1073" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b77b68 code=0x7ffc0000 [ 132.578089][ T30] audit: type=1326 audit(132.560:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9616 comm="syz.4.1073" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b77b68 code=0x7ffc0000 [ 132.578108][ T30] audit: type=1326 audit(132.560:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9616 comm="syz.4.1073" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff88b77b68 code=0x7ffc0000 [ 132.578126][ T30] audit: type=1326 audit(132.560:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9616 comm="syz.4.1073" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b77b68 code=0x7ffc0000 [ 132.578145][ T30] audit: type=1326 audit(132.560:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9616 comm="syz.4.1073" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88b77b68 code=0x7ffc0000 [ 132.578162][ T30] audit: type=1326 audit(132.560:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9616 comm="syz.4.1073" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff88b77b68 code=0x7ffc0000 [ 132.578180][ T30] audit: type=1326 audit(132.560:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9616 comm="syz.4.1073" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff88b77b68 code=0x7ffc0000 [ 132.617199][ T9470] em28xx 1-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 132.662088][ T9] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 132.662122][ T9] em28xx 1-1:0.0: dvb set to bulk mode. [ 132.666168][ T9] usb 1-1: USB disconnect, device number 20 [ 132.666777][ T9] em28xx 1-1:0.0: Disconnecting em28xx [ 132.669000][ T4800] em28xx 1-1:0.0: Binding DVB extension [ 132.685062][ T4800] em28xx 1-1:0.0: Registering input extension [ 132.686275][ T9] em28xx 1-1:0.0: Closing input extension [ 132.688221][ T9648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1079'. [ 132.701636][ T9] em28xx 1-1:0.0: Freeing device [ 132.766449][ T4720] block nbd0: Receive control failed (result -32) [ 133.593652][ T9715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1096'. [ 133.759499][ T9719] loop2: detected capacity change from 0 to 512 [ 133.805956][ T9719] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 133.807613][ T9719] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 133.810653][ T9719] EXT4-fs (loop2): 1 truncate cleaned up [ 133.813272][ T9719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.963118][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.136642][ T9739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.139732][ T9739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.009308][ T9763] tipc: Started in network mode [ 135.009349][ T9763] tipc: Node identity 7f000001, cluster identity 4711 [ 135.009919][ T9763] tipc: Enabled bearer , priority 10 [ 135.117289][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 135.836483][ T4720] block nbd1: Receive control failed (result -32) [ 135.840857][ T5219] block nbd1: shutting down sockets [ 136.023884][ T24] tipc: Node number set to 2130706433 [ 137.067444][ T9846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.069554][ T9846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.201918][ T4800] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 137.351869][ T4800] usb 1-1: Using ep0 maxpacket: 8 [ 137.353810][ T4800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.353846][ T4800] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 137.353856][ T4800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.363013][ T4800] usb 1-1: config 0 descriptor?? [ 137.557475][ T9853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.559286][ T9853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.580085][ T4800] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 137.822560][ T24] usb 1-1: USB disconnect, device number 21 [ 137.841661][ T9883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.842125][ T9883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.883840][ T9891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.885535][ T9891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.363795][ T9900] loop4: detected capacity change from 0 to 128 [ 138.374523][ T9900] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 138.378528][ T9908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.381024][ T9908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.602089][ T9926] tmpfs: Unknown parameter 'fscontext' [ 138.800020][ T9927] loop5: detected capacity change from 0 to 4096 [ 138.803763][ T9927] EXT4-fs: Ignoring removed nobh option [ 138.877460][ T9927] EXT4-fs (loop5): Test dummy encryption mode enabled [ 138.914202][ T9927] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 138.914490][ T9927] System zones: 0-5 [ 138.924585][ T9927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.850259][ T7396] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.940938][ T9952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.942990][ T9952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.055793][ T4707] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.170079][ T9976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.173284][ T9976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.555068][ T9993] syzkaller1: entered promiscuous mode [ 140.556279][ T9993] syzkaller1: entered allmulticast mode [ 140.586290][T10003] loop1: detected capacity change from 0 to 128 [ 140.593603][T10003] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 140.802866][T10023] tmpfs: Unknown parameter 'fscontext' [ 141.574481][ T4706] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.608054][T10077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1181'. [ 141.618767][T10088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.621634][T10088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.953286][T10109] netlink: 'syz.0.1186': attribute type 8 has an invalid length. [ 142.115969][T10125] loop5: detected capacity change from 0 to 128 [ 142.138307][T10125] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 142.381368][T10144] tmpfs: Unknown parameter 'fscontext' [ 142.651056][T10160] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 142.651105][T10160] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 142.664609][T10162] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 142.815760][T10174] loop1: detected capacity change from 0 to 512 [ 142.821619][T10174] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 142.824992][T10174] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 142.829328][T10174] EXT4-fs (loop1): 1 truncate cleaned up [ 142.831663][T10174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.864503][ T4706] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.925114][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'. [ 143.314306][T10202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.314512][T10202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.370059][ T7396] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.869172][ T4920] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.890768][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 143.890984][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 143.901479][T10233] loop4: detected capacity change from 0 to 512 [ 143.946286][T10233] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 143.948424][T10233] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 143.950778][T10233] EXT4-fs (loop4): 1 truncate cleaned up [ 143.954119][T10233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.972364][ T4710] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.974561][ T4710] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.976520][ T4710] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.978335][ T4710] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.980705][ T4710] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.083861][ T4720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.085529][ T4720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.088457][ T4720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.091132][ T4720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.094876][ T4720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.506253][ T4920] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.514488][ T4707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.617245][ T4920] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.767563][ T4920] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.825006][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.829306][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.941574][T10368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.944782][T10368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.102634][ T4920] bridge_slave_1: left allmulticast mode [ 145.102670][ T4920] bridge_slave_1: left promiscuous mode [ 145.102992][ T4920] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.106877][ T4920] bridge_slave_0: left allmulticast mode [ 145.106904][ T4920] bridge_slave_0: left promiscuous mode [ 145.106971][ T4920] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.257747][ T4920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.284245][ T4920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.313090][ T4920] bond0 (unregistering): Released all slaves [ 145.401528][ T4920] tipc: Disabling bearer [ 145.404330][ T4920] tipc: Left network mode [ 145.624794][T10238] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.624888][T10238] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.625057][T10238] bridge_slave_0: entered allmulticast mode [ 145.625591][T10238] bridge_slave_0: entered promiscuous mode [ 145.626752][ T4395] 8021q: adding VLAN 0 to HW filter on device eth4 [ 145.627381][T10238] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.627412][T10238] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.627526][T10238] bridge_slave_1: entered allmulticast mode [ 145.628860][T10238] bridge_slave_1: entered promiscuous mode [ 145.660472][T10238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.661493][T10238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.716693][T10238] team0: Port device team_slave_0 added [ 145.723292][T10238] team0: Port device team_slave_1 added [ 145.893142][T10514] netlink: 'syz.4.1232': attribute type 4 has an invalid length. [ 145.967519][T10544] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 145.970637][T10238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.970900][T10238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.970921][T10238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.972976][T10238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.972996][T10238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.973013][T10238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.000546][ T4395] 8021q: adding VLAN 0 to HW filter on device eth5 [ 146.009555][T10569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.011335][T10569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.035907][ T4920] hsr_slave_0: left promiscuous mode [ 146.037019][ T4920] hsr_slave_1: left promiscuous mode [ 146.037285][ T4920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.037297][ T4920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.043129][ T4920] veth1_macvtap: left promiscuous mode [ 146.044109][ T4920] veth0_macvtap: left promiscuous mode [ 146.045102][ T4920] veth1_vlan: left promiscuous mode [ 146.046199][ T4920] veth0_vlan: left promiscuous mode [ 146.178407][ T4710] Bluetooth: hci4: command tx timeout [ 146.190290][ T4920] team0 (unregistering): Port device team_slave_1 removed [ 146.199055][ T4920] team0 (unregistering): Port device team_slave_0 removed [ 146.640743][T10238] hsr_slave_0: entered promiscuous mode [ 146.642641][T10238] hsr_slave_1: entered promiscuous mode [ 146.644463][T10238] debugfs: 'hsr0' already exists in 'hsr' [ 146.645931][T10238] Cannot create hsr debugfs directory [ 147.008801][T10696] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 147.008838][T10696] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 147.061624][T10698] batadv_slave_0: entered promiscuous mode [ 147.133563][ T4800] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 147.375981][ T4800] usb 1-1: config 3 has an invalid interface number: 3 but max is 0 [ 147.376019][ T4800] usb 1-1: config 3 has no interface number 0 [ 147.376046][ T4800] usb 1-1: config 3 interface 3 has no altsetting 0 [ 147.391644][ T4800] usb 1-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43 [ 147.391682][ T4800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.391706][ T4800] usb 1-1: Product: syz [ 147.391720][ T4800] usb 1-1: Manufacturer: syz [ 147.391734][ T4800] usb 1-1: SerialNumber: syz [ 147.624356][ T4800] usb 1-1: USB disconnect, device number 22 [ 147.761412][T10696] batadv_slave_0: left promiscuous mode [ 147.816792][T10238] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 147.825141][T10238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.835807][T10238] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 147.859174][T10238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.861378][T10238] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 147.872426][T10238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.872921][T10238] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 147.877824][T10238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.926926][T10238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.932890][T10238] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.941332][ T4920] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.941381][ T4920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.942087][ T4920] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.942108][ T4920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.252715][ T4710] Bluetooth: hci4: command tx timeout [ 148.365259][T10839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1262'. [ 148.370403][T10238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.394128][T10842] syz.0.1263 (10842): /proc/10840/oom_adj is deprecated, please use /proc/10840/oom_score_adj instead. [ 148.409452][T10238] veth0_vlan: entered promiscuous mode [ 148.416195][T10238] veth1_vlan: entered promiscuous mode [ 148.441035][ T24] binder: undelivered death notification, 0000000000000000 [ 148.448624][T10238] veth0_macvtap: entered promiscuous mode [ 148.451790][T10238] veth1_macvtap: entered promiscuous mode [ 148.467400][T10238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.474829][T10238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.477288][ T4920] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.477349][ T4920] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.477378][ T4920] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.477400][ T4920] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.510738][ T3268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.510772][ T3268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.523803][ T4994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.523833][ T4994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.545721][T10866] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 148.711957][ T4714] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 148.714000][T10876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.716176][T10876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.882190][ T4714] usb 1-1: Using ep0 maxpacket: 16 [ 148.883560][ T4714] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 148.883825][ T4714] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.883857][ T4714] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.883884][ T4714] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 148.883901][ T4714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.885384][ T4714] usb 1-1: config 0 descriptor?? [ 148.889201][T10848] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 149.360205][T10903] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1275'. [ 149.362150][T10903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1275'. [ 149.405298][T10848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.406422][T10848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.410450][ T4714] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 149.414230][ T4714] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 149.415721][ T4714] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 149.417171][ T4714] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 149.419146][ T4714] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 149.421056][ T4714] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 149.421084][ T4714] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 149.421104][ T4714] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 149.421120][ T4714] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 149.421134][ T4714] samsung 0003:0419:0001.0005: unknown main item tag 0x0 [ 149.430716][ T4714] samsung 0003:0419:0001.0005: unexpected long global item [ 149.460370][ T4714] samsung 0003:0419:0001.0005: parse failed [ 149.462188][ T4714] samsung 0003:0419:0001.0005: probe with driver samsung failed with error -22 [ 149.624493][T10848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.626450][T10848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.629741][ T4714] usb 1-1: USB disconnect, device number 23 [ 149.778113][T10957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.780820][T10957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.324282][T10973] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1290'. [ 150.332131][ T4710] Bluetooth: hci4: command tx timeout [ 150.412022][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 150.441753][T10982] ------------[ cut here ]------------ [ 150.441769][T10982] WARNING: fs/exec.c:119 at path_noexec+0x1a4/0x1d4, CPU#0: syz.4.1293/10982 [ 150.444175][T10982] Modules linked in: [ 150.444858][T10982] CPU: 0 UID: 0 PID: 10982 Comm: syz.4.1293 Not tainted syzkaller #0 PREEMPT [ 150.446286][T10982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 150.447972][T10982] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 150.449294][T10982] pc : path_noexec+0x1a4/0x1d4 [ 150.450074][T10982] lr : path_noexec+0x1a4/0x1d4 [ 150.450895][T10982] sp : ffff800092cf7a50 [ 150.451623][T10982] x29: ffff800092cf7a50 x28: dfff800000000000 x27: ffff0000f21f3440 [ 150.452938][T10982] x26: 0000000000000012 x25: 000000000200000b x24: 0000000000000000 [ 150.454233][T10982] x23: 1fffe00019970bc1 x22: 1fffe00019970bc8 x21: dfff800000000000 [ 150.455511][T10982] x20: 0000000000000000 x19: ffff0000ccb85e40 x18: 0000000000000000 [ 150.456902][T10982] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 150.458263][T10982] x14: 0000000000000003 x13: 0000000000000004 x12: 0000000000000000 [ 150.459529][T10982] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000000105 [ 150.460806][T10982] x8 : ffff80009f6f7000 x7 : 0000000000000000 x6 : 0000000000000000 [ 150.462128][T10982] x5 : 0000000000000073 x4 : 0000000000000008 x3 : ffff800080c7ce88 [ 150.463376][T10982] x2 : 0000000000000000 x1 : ffff0000cba20000 x0 : 0000000000000001 [ 150.464668][T10982] Call trace: [ 150.465221][T10982] path_noexec+0x1a4/0x1d4 (P) [ 150.466075][T10982] do_mmap+0x874/0xf0c [ 150.466746][T10982] vm_mmap_pgoff+0x298/0x46c [ 150.467424][T10982] ksys_mmap_pgoff+0x364/0x5b4 [ 150.468241][T10982] __arm64_sys_mmap+0x108/0x120 [ 150.469039][T10982] invoke_syscall+0x98/0x244 [ 150.469766][T10982] el0_svc_common+0x19c/0x23c [ 150.470532][T10982] do_el0_svc+0x4c/0x5c [ 150.471165][T10982] el0_svc+0x64/0x260 [ 150.471836][T10982] el0t_64_sync_handler+0x48/0x148 [ 150.472709][T10982] el0t_64_sync+0x198/0x19c [ 150.473489][T10982] irq event stamp: 262 [ 150.474158][T10982] hardirqs last enabled at (261): [] el0_svc+0x54/0x260 [ 150.475534][T10982] hardirqs last disabled at (262): [] el1_brk64+0x20/0x54 [ 150.476892][T10982] softirqs last enabled at (256): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 150.478656][T10982] softirqs last disabled at (254): [] fpsimd_restore_current_state+0x44/0x9c8 [ 150.480255][T10982] ---[ end trace 0000000000000000 ]--- [ 150.562087][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 150.564293][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.566788][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 150.568622][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.584894][ T9] usb 1-1: config 0 descriptor?? [ 150.815209][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 150.821350][ T9] usb 1-1: USB disconnect, device number 24 [ 152.421907][ T4710] Bluetooth: hci4: command tx timeout