last executing test programs: 3m19.735538868s ago: executing program 0 (id=354): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x62, 0x5, 0x518, 0x0, 0x188, 0xffffffff, 0xe0, 0x388, 0x480, 0x480, 0xffffffff, 0x480, 0x480, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'veth0_to_bond\x00', 'wg1\x00', {}, {}, 0x0, 0x0, 0x2e}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1f, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'pimreg0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x62, 0x2, 0x7f}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @port=0x4e20, @icmp_id=0x68}}}}, {{@ip={@broadcast, @multicast1, 0xff, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x1c8, 0x200, 0x0, {}, [@common=@inet=@recent1={{0x108}, {0x120, 0x80000000, 0x8, 0x1, 'syz1\x00', 0x5, [0x0, 0xffffff00, 0xff, 0xffffffff]}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @remote, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x578) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000280)='./control\x00') 3m11.453376939s ago: executing program 0 (id=369): socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) write$binfmt_script(r3, &(0x7f0000005e80)={'#! ', './file0'}, 0xb) 3m6.756308174s ago: executing program 0 (id=380): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x62, 0x5, 0x518, 0x0, 0x188, 0xffffffff, 0xe0, 0x388, 0x480, 0x480, 0xffffffff, 0x480, 0x480, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'veth0_to_bond\x00', 'wg1\x00', {}, {}, 0x0, 0x0, 0x2e}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1f, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'pimreg0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x62, 0x2, 0x7f}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @port=0x4e20, @icmp_id=0x68}}}}, {{@ip={@broadcast, @multicast1, 0xff, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x1c8, 0x200, 0x0, {}, [@common=@inet=@recent1={{0x108}, {0x120, 0x80000000, 0x8, 0x1, 'syz1\x00', 0x5, [0x0, 0xffffff00, 0xff, 0xffffffff]}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @remote, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x578) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000280)='./control\x00') 3m2.664087138s ago: executing program 0 (id=390): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file2\x00', 0x800018, &(0x7f00000000c0)={[{@autodefrag}, {@clear_cache}, {@barrier}, {@max_inline={'max_inline', 0x3d, [0x65]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@space_cache_v2}, {@nospace_cache}]}, 0x1, 0x55a3, &(0x7f000000ac40)="$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") mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) creat(&(0x7f00000001c0)='./file2\x00', 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m0.804699161s ago: executing program 0 (id=399): mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r0, r0, 0x0, 0x800000009) 3m0.080402024s ago: executing program 0 (id=401): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x1, 0x3, {0x61efbc0f, @struct={0x5, 0x4}, 0x0, 0x0, 0x8000000000000001, 0xfffffffffffffff8, 0x6, 0xfffffffffffffff2, 0xa0, @usage=0xfffffffffffffffb, 0xc94, 0x8, [0x4, 0xfffffffffffffff8, 0x7fffffffffffffff, 0x4f, 0x3, 0x80]}, {0x8000000000000001, @struct={0x9, 0x80000001}, 0x0, 0xf, 0x2, 0x4, 0x9, 0xffffffffffffff97, 0x10, @struct={0x1, 0x3}, 0x8000, 0x0, [0x1, 0x7, 0x3, 0x40, 0x9, 0x8000000000000001]}, {0x0, @usage=0x7, 0x0, 0x6c2, 0xb, 0x7, 0x46c89e81, 0x8, 0x4, @struct={0x3, 0xffffffff}, 0xffff8000, 0x9, [0x7, 0x101, 0x2, 0x0, 0x7, 0x3]}, {0x315f, 0x1}}) fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = dup(r1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x40000000000001a3, &(0x7f0000000580), 0x0, 0x2}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x20048054) 2m59.414840321s ago: executing program 32 (id=401): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x1, 0x3, {0x61efbc0f, @struct={0x5, 0x4}, 0x0, 0x0, 0x8000000000000001, 0xfffffffffffffff8, 0x6, 0xfffffffffffffff2, 0xa0, @usage=0xfffffffffffffffb, 0xc94, 0x8, [0x4, 0xfffffffffffffff8, 0x7fffffffffffffff, 0x4f, 0x3, 0x80]}, {0x8000000000000001, @struct={0x9, 0x80000001}, 0x0, 0xf, 0x2, 0x4, 0x9, 0xffffffffffffff97, 0x10, @struct={0x1, 0x3}, 0x8000, 0x0, [0x1, 0x7, 0x3, 0x40, 0x9, 0x8000000000000001]}, {0x0, @usage=0x7, 0x0, 0x6c2, 0xb, 0x7, 0x46c89e81, 0x8, 0x4, @struct={0x3, 0xffffffff}, 0xffff8000, 0x9, [0x7, 0x101, 0x2, 0x0, 0x7, 0x3]}, {0x315f, 0x1}}) fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = dup(r1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x40000000000001a3, &(0x7f0000000580), 0x0, 0x2}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x20048054) 2m41.279328274s ago: executing program 1 (id=442): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$eJzs3c9vFFUcAPDvbFt+FaUkhKgH04SDGGRLW39g4gGPRokkesdNOzSkW5Z0t4RWEuEgFy+GmBgjifEP8O6R+A/4V5AoCTGk0YOXNbOdhaXdH6UsdGU/n2TgvXmzvHkz8328t283G8DQmsz+KES8GhHfJhGHWspGIy+c3Dhu/cG1uWxLol7/7K8kknxf8/gk/3s8z7wSEb99HXGisLXe6uraYqlcTpfz/FRt6fJUdXXt5MWl0kK6kF6amZ09/c7szPvvvbv1xXt31tY3z/3zw6d3Pjr9zbH173+5d/hWEmfiYF7W2o6ncL01MxmT+TUZizObDpzuQ2WDJNntE2BHRvI4H4usDzgUI3nUAy++ryKiDgypRPzDkGqOA5pz+67z4PqLN8u7/+HGBGhr+5ON90ZiX2NudGA9eWxmlF2JiT7Un9Xx65+3b2Vb9O99CICert+IiFOjo4/1fy9HS/+3c6e2cczmOvR/8PzcycY/b+1tM/4pPBz/RJvxz3ib2N2J3vFfuNeHajrKxn8ftB3/Ply0mhjJcy81xnxjyYWL5TTr27Ju8niM7c3y3dZzTq/frXcqax3/ZVtWf3MsmJ/HvdFN613zpVrpadrc6v6NiNd6jH+TNvc/ux7ntlnH0fT2653Kerf/2ar/HPFG2/v/aK6TdF+fnGo8D1PNp2Krv28e/b1T/bvd/uz+H+je/omkdb22+uR1/LTv37RT2WSSL5o+4fO/J/m8kd6T77taqtWWpyP2JJ9s3T/z6LXNfPP4rP3Hj7WP/27P//6I+GKb7b955GbHQwfh/s8/0f3vkKgnHYvufvzlj53q317/93YjdTzfs53+r8uZPpZ4mmsHAAAAAAAAg6YQEQcjKRQfpguFYnHj8x1H4kChXKnWTlyorFyaj8Z3ZSdirNBc6R5v+TzEdP552GZ+ZlN+NiIOR8R3I/sb+eJcpTy/240HAAAAAAAAAAAAAAAAAACAATHe4fv/mT9GdvvsgGfOT37D8OoZ//34pSdgIPn/H4aX+IfhJf5heIl/GF7iH4aX+IfhJf5heIl/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KtzZ89mW339wbW5LD9/ZXVlsXLl5HxaXSwurcwV5yrLl4sLlcpCOS3OVZZ6/XvlSuXy9EysXJ2qpUltqrq6dn6psnKpdv7iUmkhPZ+OPZdWAQAAAAAAAAAAAAAAAAAAwP9LdXVtsVQup8sSEjtKjA7GaUj0ObHbPRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPJfAAAA//9j0zaD") syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x24c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000400), 0x0}, 0x20) getresuid(0x0, 0x0, &(0x7f000000db40)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000100)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@nobarrier}, {@norecovery}, {@noacl}]}, 0x1, 0x4b4, &(0x7f0000000c80)="$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") bind$inet6(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) chdir(&(0x7f0000000140)='./file0\x00') 2m38.393238148s ago: executing program 1 (id=448): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)='H\x00', 0x2}], 0x1) 2m38.1664881s ago: executing program 1 (id=449): modify_ldt$write(0x1, &(0x7f0000000240)={0x0, 0x0, 0x1000}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m37.892371923s ago: executing program 1 (id=450): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0], 0x3, 0xa80, &(0x7f0000000500)="$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") mknod$loop(0x0, 0x0, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m37.137722337s ago: executing program 1 (id=452): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) 2m35.796370069s ago: executing program 1 (id=455): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) write$tun(0xffffffffffffffff, 0x0, 0xffe) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES32], 0x47, 0xc15, &(0x7f0000001940)="$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") ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f\t\x00\x00\x00 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05\x06\x00\x00\x00\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdcGp\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]') 2m20.434543345s ago: executing program 33 (id=455): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) write$tun(0xffffffffffffffff, 0x0, 0xffe) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES32], 0x47, 0xc15, &(0x7f0000001940)="$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") ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f\t\x00\x00\x00 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05\x06\x00\x00\x00\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdcGp\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]') 55.81802687s ago: executing program 5 (id=642): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x11e, 0x15, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd73"], &(0x7f0000000100)='GPL\x00'}, 0x94) 54.829137584s ago: executing program 5 (id=644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4084024) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 50.642305549s ago: executing program 5 (id=651): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$hfs(&(0x7f00000002c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303030342c747970653d7763e6ef2c756d61736b3d30303030303030303030303030303030303030303030342c6469725f756d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d69736f383835392d382c004b35b28f8cad0b105adbf86df7514b180ea1cef9ef09ba2a82127ea3050d7fd500ad048b959efdb75029d8f93d07be1c27524bb0fe77621219a4745cac5531636761ca83f2412d1f607e9a48fcfd9002fb41024932205e2176fc5b"], 0x4, 0x2fe, &(0x7f0000001100)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000011140125080003000000000008004b00"], 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0xc4) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/251, 0xfb}], 0x1, 0x6, 0x3) socket(0x2, 0x2, 0x1) 49.637081042s ago: executing program 5 (id=653): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa0e, 0xffffffff}, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800002, &(0x7f0000000100)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec590d6e84de0249d09f31ef580c3d00000000", @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32], 0x1, 0x1b0, &(0x7f0000000700)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8880, 0x85) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000000)) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x400) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000004c0)) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000f80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x50, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="3c0cd51bb0fc11a4f376a341b959d8e5c46cb5192dcb0119e70d1869684244d6", @ANYRES32], 0x13, 0x6b2, &(0x7f0000000280)="$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") r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 48.554040442s ago: executing program 5 (id=656): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000280)) accept4$inet6(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000815}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) 42.579721598s ago: executing program 5 (id=670): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x24c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000400), 0x0}, 0x20) getresuid(0x0, 0x0, &(0x7f000000db40)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000100)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@nobarrier}, {@norecovery}, {@noacl}]}, 0x1, 0x4b4, &(0x7f0000000c80)="$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") bind$inet6(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) chdir(&(0x7f0000000140)='./file0\x00') rmdir(&(0x7f0000000080)='./file0\x00') 26.536554367s ago: executing program 34 (id=670): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x24c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000400), 0x0}, 0x20) getresuid(0x0, 0x0, &(0x7f000000db40)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000100)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@nobarrier}, {@norecovery}, {@noacl}]}, 0x1, 0x4b4, &(0x7f0000000c80)="$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") bind$inet6(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) chdir(&(0x7f0000000140)='./file0\x00') rmdir(&(0x7f0000000080)='./file0\x00') 12.357178759s ago: executing program 2 (id=738): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x48012) r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x40045731, 0xfffffffffffffffe) 11.239999632s ago: executing program 6 (id=742): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) ioctl$TIOCVHANGUP(r0, 0x80045440, 0x200000000000000) 8.90812629s ago: executing program 2 (id=745): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x1ffffe, 0x10100, 0x1, 0xfffffffd, 0x0, r1}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) 8.905707592s ago: executing program 4 (id=746): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) dup3(r1, r0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x8000) 8.719337951s ago: executing program 6 (id=747): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x1ffffe, 0x10100, 0x1, 0xfffffffd, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) 7.668376323s ago: executing program 2 (id=750): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0x8d33, 0x800, 0x0, 0x300}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendto$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, "1dc8b045db3f40966b9dcb5235da4a69b1b741ecf71832c4748ad07254c8fb67598aaa30dbba709910c148074ab689e66ec6"}, 0x3a, 0x4040080, &(0x7f0000000040)={0x22, 0xd8, 0x1, 0xf4, 0x5}, 0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x38) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x0, 0x0}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000000)=0x1000009, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r7, 0xb03}, 0x14}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f000001aa40)=""/102400, 0x19000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40400, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2200}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 7.415626085s ago: executing program 6 (id=752): open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x101000, 0x26) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="aeb6a9f98a7f42a46dd40eab7d1f02a2"}}) 6.58681108s ago: executing program 3 (id=753): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x110, 0x29, 0x4, {0x4, 0x1e, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1c8, 0x29, 0x36, {0x5e, 0x35, '\x00', [@generic={0xff, 0x3d, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x3a8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.228091087s ago: executing program 6 (id=754): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) 5.989005088s ago: executing program 6 (id=755): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x48012) r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$midi(0x0, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x40045731, 0xfffffffffffffffe) 5.879218221s ago: executing program 3 (id=756): socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 5.529640902s ago: executing program 4 (id=757): r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000280)=0x80) accept4$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000340)=0x1c, 0x80800) openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x440, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc8}}, 0x0) 5.525752611s ago: executing program 3 (id=758): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYRESOCT], &(0x7f0000000000)='GPL\x00'}, 0x94) socket(0x1e, 0x6, 0x18000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x200000a) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x180, 0x940c, 0x3002, 0x180, 0x2c0, 0x298, 0x3d8, 0x3d8, 0x298, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21e8, 0x9, 0x1, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x200000000000014a, &(0x7f00000001c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0x22, 0x2, 0x3, &(0x7f0000000240)) r6 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r6, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x5, 0x0) 4.206884566s ago: executing program 4 (id=759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r1, 0x4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) 3.776922172s ago: executing program 3 (id=760): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x1ffffe, 0x10100, 0x1, 0xfffffffd, 0x0, r1}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) 2.761129753s ago: executing program 4 (id=761): io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x1c, 0x20000048, 0x0) 2.715837683s ago: executing program 2 (id=762): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$hfs(&(0x7f00000002c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303030342c747970653d7763e6ef2c756d61736b3d30303030303030303030303030303030303030303030342c6469725f756d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d69736f383835392d382c004b35b28f8cad0b105adbf86df7514b180ea1cef9ef09ba2a82127ea3050d7fd500ad048b959efdb75029d8f93d07be1c27524bb0fe77621219a4745cac5531636761ca83f2412d1f607e9a48fcfd9002fb41024932205e2176fc5b"], 0x4, 0x2fe, &(0x7f0000001100)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, 0x0, 0xc4) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/251, 0xfb}], 0x1, 0x6, 0x3) socket(0x2, 0x2, 0x1) 2.55895216s ago: executing program 3 (id=763): mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x204008, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x2, 0x9, 0x2c, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x2e}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x81, 0x8, 0x99f, 0x10000, 0x2}}}}}, 0x0) mkdir(0x0, 0x114) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$UHID_INPUT(r1, &(0x7f00000030c0)={0x18, {"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", 0x1000}}, 0x1006) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) 2.429339143s ago: executing program 4 (id=764): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) 1.657166282s ago: executing program 2 (id=765): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.606272805s ago: executing program 4 (id=766): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) dup3(r1, r0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x8000) 1.2186699s ago: executing program 2 (id=767): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000540)={[{@datacow}, {@rescan_uuid_tree}, {@compress_force}, {@space_cache_v2}, {@clear_cache}, {}, {@clear_cache}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") r0 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x146) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, 0x0) 320.125363ms ago: executing program 3 (id=768): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf464", 0xd}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x118, 0x29, 0x4, {0x4, 0x1f, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1d0, 0x29, 0x36, {0x5e, 0x36, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x3a0}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 6 (id=769): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$eJzs3E1oXNUeAPD/nXz26zXvvb6+176+Z2oVg8WkTavNQpCKggsFsYK6DElaatNGmhRsqTIFqUspuBeXbl24VTdFXAlu61KQQpFu2griyJ25dzIzmUmaSTJjmt8Pbuace2fuOeeee+6ce07mBrBlDad/kkr4VkTsjohC4xuGKy/3716denD36lQUS6VTvyblj91L45lsN7Eji4wUIgofJYsbasxfvnJucnZ25mIWH1s4/97Y/OUrz5wdzNZMTCS9bRaqSXppue7t/3DuwL5X3rnx2lR1z3lqteVYL8Mx3CwrZU+ud2Jdtqsm3Ha90XHp+Z9WV1+5/e+Onliu8oodzBmw0UqlUmmg9eZiqdG1JWuATSsGu50DoDvyL/r0/jdfmnUE+jem+9F1d05WboDSct/PlojHyivzcZC+hvvb9TQcEW8Xf/ssXWKDxiEAAGp9czLvCTb0/4YqMyO/X7r5Qvr6t2wOZSgi/h4R/4iIf0bEnoj4V0TsjYh/R8R/GvbfExGlZdIfbohX069OQhVur1NRm0r7f89nc1vpsjj3VQ0N9WSxXRF5h3nmSHZMRqJv4PTZ2Zmjy6Tx7Us/ftJqW23/L13SPOR9wSwft3sbBuimJxcm2yvtUneuRezvXSx/pf+b9EYk1ZmAJCL2RcT+Vex3qCZ89ukvDlQjffXvW7n8ZaWm82jrMM9U+jziqUr9F6Na/qibREzq5ifPT56ZOTNzYXxi4vixoyeeG392bDBmZ46MpWfBkaZpfP/D9ddbpb9i+b/6ufEjL5/4+lTWstYurf/tNed/5PO3i+UfSiKS6nzt/OrTuP7Txy3vado9//uTN8vh/L70/cmFhYtHI/qTV5euH1/8bB5PX6NYKf/Iocbzv5xu+RqXH4n/RkR6Ev8vIv4flTvENO8HI+LxiDi0TPm/e/GJd9sv/8ZKyz8d9eWv1Hxd/S/O17cKJNncYN2m/kgDPecO3nrQ4uLxcPV/vBwaydY0v/4ldZeIVjnNv+3SNX+s+egBAADA5lCIiJ01Y0k7o1AYHa2MAe2J7YXZufmFw6fnLl2YTrdFDEVfIR/pqowH9yX5+OdQTXy8IX4sGzf+tGdbOT46NTc73dWSAzvKbT4pjEa81VPT/lO/rM8QM/BX5vdasHUt1/7TTvzeGx3MDNBRD//9f/ODDc0I0HE17b/VL/yLbfzfF7AJPPT3f9LyeTbAI2PlB/0YM4TNr6Qtw5a2qvZ/2EMA4VHSG29Uw4Wu5gToNP1/2JJW/F3/mgKlgeabBmPpm2Nw+R32RHvZ2NYkra4E0p5VV1Lf1s6n8omelu+Jwup2OBD1a/rbrNPTazwaxYvzZ/Yunvz5s0XWeJxL2f/Kr3cNftmRdtos0PFLEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIb4MwAA///GJdfC") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x62, 0x5, 0x518, 0x0, 0x188, 0xffffffff, 0xe0, 0x388, 0x480, 0x480, 0xffffffff, 0x480, 0x480, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'veth0_to_bond\x00', 'wg1\x00', {}, {}, 0x0, 0x0, 0x2e}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1f, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'pimreg0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x62, 0x2, 0x7f}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @port=0x4e20, @icmp_id=0x68}}}}, {{@ip={@broadcast, @multicast1, 0xff, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x1c8, 0x200, 0x0, {}, [@common=@inet=@recent1={{0x108}, {0x120, 0x80000000, 0x8, 0x1, 'syz1\x00', 0x5, [0x0, 0xffffff00, 0xff, 0xffffffff]}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @remote, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x578) mkdir(0x0, 0x8) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000280)='./control\x00') kernel console output (not intermixed with test programs): syz.1.59,6166,1):ocfs2_initialize_super:2198 ERROR: status = -30 [ 110.378861][ T6166] (syz.1.59,6166,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 110.645474][ T6176] loop0: detected capacity change from 0 to 1024 [ 110.671574][ T6178] fuse: Bad value for 'group_id' [ 110.685559][ T6178] fuse: Bad value for 'group_id' [ 110.820213][ T6163] loop2: detected capacity change from 0 to 32768 [ 111.028664][ T5980] hfsplus: b-tree write err: -5, ino 4 [ 111.036364][ T6163] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 111.075117][ T6163] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 111.176904][ T6163] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 111.223262][ T6183] loop1: detected capacity change from 0 to 2048 [ 111.231638][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 111.242844][ T6185] loop0: detected capacity change from 0 to 1024 [ 111.250148][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 111.257027][ T6183] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 111.260028][ T6183] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.321750][ T6185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.431726][ T6183] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.531569][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 281ms [ 111.550916][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 111.936828][ T6195] No such timeout policy "syz0" [ 111.952227][ T6195] ip6_vti0 speed is unknown, defaulting to 1000 [ 111.962946][ T6195] ip6_vti0 speed is unknown, defaulting to 1000 [ 111.972606][ T6195] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.202191][ T6195] infiniband syz2: set active [ 112.207140][ T6195] infiniband syz2: added ip6_vti0 [ 112.216752][ T6195] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 112.220655][ T6195] infiniband syz2: Couldn't open port 1 [ 112.248804][ T24] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.347388][ T6195] RDS/IB: syz2: added [ 112.351974][ T6195] smc: adding ib device syz2 with port count 1 [ 112.358557][ T6195] smc: ib device syz2 port 1 has no pnetid [ 112.367213][ T6195] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.554990][ T6163] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 112.581219][ T6163] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 112.591370][ T6195] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.819199][ T6195] ip6_vti0 speed is unknown, defaulting to 1000 [ 113.041111][ T6195] ip6_vti0 speed is unknown, defaulting to 1000 [ 113.259961][ T6195] ip6_vti0 speed is unknown, defaulting to 1000 [ 113.302224][ T24] ip6_vti0 speed is unknown, defaulting to 1000 [ 113.723947][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.018343][ T6205] loop1: detected capacity change from 0 to 256 [ 114.179747][ T6210] netlink: 'syz.4.70': attribute type 1 has an invalid length. [ 114.352101][ T6212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.70'. [ 114.969387][ T6220] siw: device registration error -23 [ 115.770479][ T6226] netlink: 165 bytes leftover after parsing attributes in process `syz.2.74'. [ 116.542106][ T6232] loop2: detected capacity change from 0 to 1024 [ 116.881167][ T12] hfsplus: b-tree write err: -5, ino 4 [ 117.344046][ T6238] loop0: detected capacity change from 0 to 2048 [ 117.375956][ T6242] loop4: detected capacity change from 0 to 1024 [ 117.534021][ T6238] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 117.650732][ T6238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.669874][ T6242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.957233][ T6253] netlink: 536 bytes leftover after parsing attributes in process `syz.1.81'. [ 118.301380][ T6256] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 118.431727][ T6255] No such timeout policy "syz0" [ 119.548772][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.222436][ T6263] loop1: detected capacity change from 0 to 2048 [ 121.159225][ T6263] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 121.336962][ T6263] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.604256][ T6275] Zero length message leads to an empty skb [ 121.664435][ T6276] syz2: rxe_newlink: already configured on ip6_vti0 [ 121.676769][ T6275] No such timeout policy "syz0" [ 122.126484][ T6280] loop1: detected capacity change from 0 to 1024 [ 122.545968][ T5985] hfsplus: b-tree write err: -5, ino 4 [ 122.738859][ T6289] loop3: detected capacity change from 0 to 1024 [ 123.001887][ T6289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.504995][ T30] audit: type=1800 audit(1762036527.741:2): pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.91" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 123.643339][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.698273][ T6300] loop2: detected capacity change from 0 to 1024 [ 123.764566][ T6300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.461988][ T6304] loop3: detected capacity change from 0 to 32768 [ 125.704697][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.741422][ T6304] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.94 (6304) [ 126.018100][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 126.341826][ T6304] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.577210][ T6304] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 126.857936][ T6304] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 126.887205][ T6304] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 127.081673][ T6324] loop2: detected capacity change from 0 to 256 [ 127.084546][ T6304] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 127.157470][ T6304] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 127.167696][ T6304] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 127.215596][ T6304] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 127.224794][ T6304] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 127.236911][ T6324] FAT-fs (loop2): Directory bread(block 64) failed [ 127.269036][ T6324] FAT-fs (loop2): Directory bread(block 65) failed [ 127.285013][ T6304] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 127.285511][ T6304] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 127.310856][ T6304] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 127.311525][ T6324] FAT-fs (loop2): Directory bread(block 66) failed [ 127.334502][ T6304] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 127.346978][ T6304] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 127.380839][ T6304] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 127.438951][ T6324] FAT-fs (loop2): Directory bread(block 67) failed [ 127.478209][ T6304] BTRFS error (device loop3): open_ctree failed: -12 [ 127.496058][ T6324] FAT-fs (loop2): Directory bread(block 68) failed [ 127.504062][ T6324] FAT-fs (loop2): Directory bread(block 69) failed [ 127.535085][ T6324] FAT-fs (loop2): Directory bread(block 70) failed [ 127.546746][ T6324] FAT-fs (loop2): Directory bread(block 71) failed [ 127.553490][ T6324] FAT-fs (loop2): Directory bread(block 72) failed [ 127.586798][ T6324] FAT-fs (loop2): Directory bread(block 73) failed [ 127.665422][ T6341] loop0: detected capacity change from 0 to 1024 [ 128.504207][ T5985] hfsplus: b-tree write err: -5, ino 4 [ 129.832692][ T6365] loop4: detected capacity change from 0 to 256 [ 131.948943][ T6382] Invalid source name [ 132.438404][ T5986] kworker/u8:13: attempt to access beyond end of device [ 132.438404][ T5986] loop2: rw=1, sector=1256, nr_sectors = 512 limit=256 [ 132.545649][ T5986] kworker/u8:13: attempt to access beyond end of device [ 132.545649][ T5986] loop2: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 132.695326][ T5986] kworker/u8:13: attempt to access beyond end of device [ 132.695326][ T5986] loop2: rw=1, sector=1960, nr_sectors = 2240 limit=256 [ 132.762929][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.766040][ T5986] kworker/u8:13: attempt to access beyond end of device [ 132.766040][ T5986] loop2: rw=1, sector=4200, nr_sectors = 1336 limit=256 [ 132.771938][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.989546][ T6391] loop1: detected capacity change from 0 to 1024 [ 133.298131][ T6398] netlink: 536 bytes leftover after parsing attributes in process `syz.3.115'. [ 133.864473][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'. [ 137.359013][ T5987] hfsplus: b-tree write err: -5, ino 4 [ 138.262930][ T6406] loop1: detected capacity change from 0 to 2048 [ 138.273193][ T6410] loop4: detected capacity change from 0 to 2048 [ 138.455610][ T6406] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 138.469366][ T6414] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.068650][ T6406] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.334343][ T6406] No such timeout policy "syz0" [ 140.972167][ T6441] netlink: 536 bytes leftover after parsing attributes in process `syz.3.130'. [ 143.266722][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'. [ 144.830437][ T6457] loop1: detected capacity change from 0 to 1024 [ 144.888328][ T6457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.012744][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.420994][ T6479] loop3: detected capacity change from 0 to 1024 [ 148.053439][ T6479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.046859][ T6496] loop2: detected capacity change from 0 to 32768 [ 150.050336][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.079496][ T6496] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.145 (6496) [ 150.122749][ T6496] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 150.173993][ T6496] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 150.523579][ T6506] loop3: detected capacity change from 0 to 2048 [ 150.539487][ T6496] BTRFS info (device loop2): rebuilding free space tree [ 150.768871][ T6506] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 151.246542][ T6496] BTRFS info (device loop2): disabling free space tree [ 151.270384][ T6506] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.309541][ T6496] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 151.357167][ T6506] No such timeout policy "syz0" [ 151.376057][ T6496] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 151.490372][ T6496] BTRFS info (device loop2): enabling ssd optimizations [ 151.527951][ T6496] BTRFS info (device loop2): turning on async discard [ 151.561592][ T6496] BTRFS info (device loop2): force clearing of disk cache [ 151.591893][ T6496] BTRFS info (device loop2): enabling auto defrag [ 151.619830][ T6496] BTRFS info (device loop2): max_inline set to 4096 [ 152.611375][ T5836] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 152.649968][ T6533] loop4: detected capacity change from 0 to 1024 [ 152.852465][ T6533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.235314][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 154.287304][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.302730][ T6551] loop0: detected capacity change from 0 to 8 [ 154.312410][ T6551] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 154.368395][ T6551] process 'syz.0.156' launched './file2' with NULL argv: empty string added [ 154.378152][ T6551] cramfs: Error -5 while decompressing! [ 154.383807][ T6551] cramfs: ffffffff99925fa8(26)->ffff888077f4d000(4096) [ 154.390792][ T6551] cramfs: Error -3 while decompressing! [ 154.396379][ T6551] cramfs: ffffffff99925fc2(26)->ffff88806f212000(4096) [ 154.403216][ T6551] cramfs: Error -3 while decompressing! [ 154.408777][ T6551] cramfs: ffffffff99925fdc(16)->ffff888073fee000(4096) [ 154.415698][ T6551] cramfs: Error -5 while decompressing! [ 154.421219][ T6551] cramfs: ffffffff99925fa8(26)->ffff888077f4d000(4096) [ 154.453439][ T6124] udevd[6124]: incorrect cramfs checksum on /dev/loop0 [ 155.402869][ T6562] loop2: detected capacity change from 0 to 2048 [ 155.414645][ T6562] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 155.537994][ T6562] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.860444][ T6566] No such timeout policy "syz0" [ 155.872641][ T6566] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 156.050800][ T6568] loop1: detected capacity change from 0 to 256 [ 156.282082][ T6568] FAT-fs (loop1): Directory bread(block 64) failed [ 156.315081][ T6568] FAT-fs (loop1): Directory bread(block 65) failed [ 156.343402][ T6568] FAT-fs (loop1): Directory bread(block 66) failed [ 156.359176][ T6568] FAT-fs (loop1): Directory bread(block 67) failed [ 156.369313][ T6568] FAT-fs (loop1): Directory bread(block 68) failed [ 156.380515][ T6568] FAT-fs (loop1): Directory bread(block 69) failed [ 156.389382][ T6568] FAT-fs (loop1): Directory bread(block 70) failed [ 156.595256][ T6568] FAT-fs (loop1): Directory bread(block 71) failed [ 156.601902][ T6568] FAT-fs (loop1): Directory bread(block 72) failed [ 156.625026][ T6568] FAT-fs (loop1): Directory bread(block 73) failed [ 158.916097][ T5980] kworker/u8:9: attempt to access beyond end of device [ 158.916097][ T5980] loop1: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 158.945241][ T5980] kworker/u8:9: attempt to access beyond end of device [ 158.945241][ T5980] loop1: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 159.157008][ T5980] kworker/u8:9: attempt to access beyond end of device [ 159.157008][ T5980] loop1: rw=1, sector=1384, nr_sectors = 32 limit=256 [ 159.171268][ T5980] kworker/u8:9: attempt to access beyond end of device [ 159.171268][ T5980] loop1: rw=1, sector=1448, nr_sectors = 32 limit=256 [ 159.186076][ T5980] kworker/u8:9: attempt to access beyond end of device [ 159.186076][ T5980] loop1: rw=1, sector=1512, nr_sectors = 32 limit=256 [ 159.199794][ T5980] kworker/u8:9: attempt to access beyond end of device [ 159.199794][ T5980] loop1: rw=1, sector=1576, nr_sectors = 32 limit=256 [ 159.214498][ T5980] kworker/u8:9: attempt to access beyond end of device [ 159.214498][ T5980] loop1: rw=1, sector=1640, nr_sectors = 32 limit=256 [ 159.228485][ T5980] kworker/u8:9: attempt to access beyond end of device [ 159.228485][ T5980] loop1: rw=1, sector=1736, nr_sectors = 32 limit=256 [ 159.242512][ T5980] kworker/u8:9: attempt to access beyond end of device [ 159.242512][ T5980] loop1: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 159.242684][ T6596] loop4: detected capacity change from 0 to 64 [ 159.259242][ T5980] kworker/u8:9: attempt to access beyond end of device [ 159.259242][ T5980] loop1: rw=1, sector=1960, nr_sectors = 2624 limit=256 [ 159.598387][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.168'. [ 160.395456][ T6598] syz.2.166 (6598) used greatest stack depth: 15856 bytes left [ 160.628459][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 160.710240][ T6606] fuse: Unknown parameter 'grou00000000000000000000' [ 160.764176][ T6610] loop1: detected capacity change from 0 to 1024 [ 161.537065][ T6610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.066080][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.205608][ T6631] loop0: detected capacity change from 0 to 2048 [ 164.255639][ T6631] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 164.320801][ T6638] loop3: detected capacity change from 0 to 512 [ 164.327208][ T6631] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.395088][ T6638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 164.658237][ T6638] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.179: invalid indirect mapped block 4294967295 (level 1) [ 164.845104][ T6638] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.179: invalid indirect mapped block 4294967295 (level 1) [ 164.875822][ T6638] EXT4-fs (loop3): 2 truncates cleaned up [ 164.883207][ T6638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.986667][ T6622] netlink: 165 bytes leftover after parsing attributes in process `syz.4.175'. [ 165.379797][ T6645] No such timeout policy "syz0" [ 165.397123][ T6649] loop1: detected capacity change from 0 to 256 [ 165.631659][ T6641] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 166.097773][ T6649] FAT-fs (loop1): Directory bread(block 64) failed [ 166.221118][ T6649] FAT-fs (loop1): Directory bread(block 65) failed [ 166.227882][ T6649] FAT-fs (loop1): Directory bread(block 66) failed [ 166.234414][ T6649] FAT-fs (loop1): Directory bread(block 67) failed [ 166.245481][ T6649] FAT-fs (loop1): Directory bread(block 68) failed [ 166.253799][ T6649] FAT-fs (loop1): Directory bread(block 69) failed [ 166.260450][ T6649] FAT-fs (loop1): Directory bread(block 70) failed [ 166.267750][ T6649] FAT-fs (loop1): Directory bread(block 71) failed [ 166.274365][ T6649] FAT-fs (loop1): Directory bread(block 72) failed [ 166.281091][ T6649] FAT-fs (loop1): Directory bread(block 73) failed [ 166.483964][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 169.335799][ T5990] bio_check_eod: 1 callbacks suppressed [ 169.335816][ T5990] kworker/u8:16: attempt to access beyond end of device [ 169.335816][ T5990] loop1: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 169.391026][ T5990] kworker/u8:16: attempt to access beyond end of device [ 169.391026][ T5990] loop1: rw=1, sector=1320, nr_sectors = 448 limit=256 [ 169.453681][ T5990] kworker/u8:16: attempt to access beyond end of device [ 169.453681][ T5990] loop1: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 169.862628][ T5990] kworker/u8:16: attempt to access beyond end of device [ 169.862628][ T5990] loop1: rw=1, sector=1960, nr_sectors = 5872 limit=256 [ 170.361262][ T6689] loop1: detected capacity change from 0 to 1024 [ 170.361262][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.557827][ T6689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.585858][ T6702] loop3: detected capacity change from 0 to 64 [ 171.976201][ T6706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.191'. [ 173.422415][ T6720] netlink: 165 bytes leftover after parsing attributes in process `syz.3.193'. [ 173.921403][ T6724] loop4: detected capacity change from 0 to 1024 [ 174.642739][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.965432][ T6738] netlink: 'syz.1.196': attribute type 1 has an invalid length. [ 176.189367][ T6741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.196'. [ 176.719708][ T6752] ptrace attach of "./syz-executor exec"[6753] was attempted by "./syz-executor exec"[6752] [ 177.279223][ T6738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.491901][ T6760] loop0: detected capacity change from 0 to 1024 [ 177.514792][ T6763] loop1: detected capacity change from 0 to 64 [ 177.859106][ T6765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.205'. [ 177.898058][ T33] hfsplus: b-tree write err: -5, ino 4 [ 178.689025][ T5975] hfsplus: b-tree write err: -5, ino 4 [ 179.262824][ T6776] netlink: 165 bytes leftover after parsing attributes in process `syz.1.207'. [ 180.251780][ T6784] loop1: detected capacity change from 0 to 2048 [ 180.370407][ T6786] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.555370][ T6755] syz.2.203 (6755): drop_caches: 2 [ 182.786229][ T6807] loop3: detected capacity change from 0 to 64 [ 183.337755][ T6815] netlink: 24 bytes leftover after parsing attributes in process `syz.3.218'. [ 183.769200][ T6809] loop4: detected capacity change from 0 to 2048 [ 183.823237][ T6809] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 184.077037][ T6809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.103425][ T6822] netlink: 165 bytes leftover after parsing attributes in process `syz.1.219'. [ 184.450887][ T6826] No such timeout policy "syz0" [ 184.462834][ T6826] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 186.420955][ T6830] syz.2.223 (6830): drop_caches: 2 [ 187.619582][ T6853] loop2: detected capacity change from 0 to 256 [ 187.793637][ T6855] loop4: detected capacity change from 0 to 2048 [ 187.857739][ T6855] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 187.906856][ T6855] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.258279][ T6862] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 188.258778][ T6855] No such timeout policy "syz0" [ 188.813051][ T6866] loop2: detected capacity change from 0 to 1024 [ 188.908581][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 188.969108][ T6866] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.060670][ T6884] loop1: detected capacity change from 0 to 2048 [ 191.135022][ T6885] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.536362][ T6889] loop4: detected capacity change from 0 to 1024 [ 192.166649][ T6889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.626297][ T6905] random: crng reseeded on system resumption [ 193.850799][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.214548][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.224103][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.247067][ T6910] loop4: detected capacity change from 0 to 2048 [ 194.284137][ T6910] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 194.383419][ T6910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.457563][ T6910] No such timeout policy "syz0" [ 194.470067][ T6910] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 194.674372][ T6908] loop2: detected capacity change from 0 to 32768 [ 194.686779][ T6914] loop4: detected capacity change from 0 to 64 [ 194.918718][ T6908] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 195.001683][ T6924] netlink: 24 bytes leftover after parsing attributes in process `syz.4.248'. [ 195.825252][ T6908] XFS (loop2): Ending clean mount [ 195.831228][ T6932] loop1: detected capacity change from 0 to 256 [ 195.868036][ T6908] XFS (loop2): Quotacheck needed: Please wait. [ 195.964188][ T6932] FAT-fs (loop1): Directory bread(block 64) failed [ 195.985514][ T6932] FAT-fs (loop1): Directory bread(block 65) failed [ 195.998191][ T6932] FAT-fs (loop1): Directory bread(block 66) failed [ 196.069021][ T6932] FAT-fs (loop1): Directory bread(block 67) failed [ 196.088754][ T6932] FAT-fs (loop1): Directory bread(block 68) failed [ 196.129487][ T6932] FAT-fs (loop1): Directory bread(block 69) failed [ 196.176370][ T6908] XFS (loop2): Quotacheck: Done. [ 196.203720][ T6932] FAT-fs (loop1): Directory bread(block 70) failed [ 196.223903][ T6932] FAT-fs (loop1): Directory bread(block 71) failed [ 196.250922][ T6932] FAT-fs (loop1): Directory bread(block 72) failed [ 196.292372][ T6932] FAT-fs (loop1): Directory bread(block 73) failed [ 196.305096][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 196.312269][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 196.319669][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 196.325778][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 196.941119][ T5836] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 198.176893][ T5990] kworker/u8:16: attempt to access beyond end of device [ 198.176893][ T5990] loop1: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 198.209996][ T6936] loop3: detected capacity change from 0 to 32768 [ 198.235200][ T5990] kworker/u8:16: attempt to access beyond end of device [ 198.235200][ T5990] loop1: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 198.238371][ T6951] fuse: Bad value for 'user_id' [ 198.276444][ T6951] fuse: Bad value for 'user_id' [ 198.286736][ T5990] kworker/u8:16: attempt to access beyond end of device [ 198.286736][ T5990] loop1: rw=1, sector=1384, nr_sectors = 32 limit=256 [ 198.304814][ T6936] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 198.314030][ T5990] kworker/u8:16: attempt to access beyond end of device [ 198.314030][ T5990] loop1: rw=1, sector=1448, nr_sectors = 32 limit=256 [ 198.329882][ T5990] kworker/u8:16: attempt to access beyond end of device [ 198.329882][ T5990] loop1: rw=1, sector=1512, nr_sectors = 32 limit=256 [ 198.347968][ T5990] kworker/u8:16: attempt to access beyond end of device [ 198.347968][ T5990] loop1: rw=1, sector=1576, nr_sectors = 32 limit=256 [ 198.364226][ T5990] kworker/u8:16: attempt to access beyond end of device [ 198.364226][ T5990] loop1: rw=1, sector=1640, nr_sectors = 32 limit=256 [ 198.379550][ T5990] kworker/u8:16: attempt to access beyond end of device [ 198.379550][ T5990] loop1: rw=1, sector=1704, nr_sectors = 32 limit=256 [ 198.394514][ T5990] kworker/u8:16: attempt to access beyond end of device [ 198.394514][ T5990] loop1: rw=1, sector=1800, nr_sectors = 32 limit=256 [ 198.411179][ T5990] kworker/u8:16: attempt to access beyond end of device [ 198.411179][ T5990] loop1: rw=1, sector=1864, nr_sectors = 32 limit=256 [ 198.443975][ T6936] XFS (loop3): Ending clean mount [ 198.507746][ T6936] XFS (loop3): Quotacheck needed: Please wait. [ 198.796534][ T6936] XFS (loop3): Quotacheck: Done. [ 199.670573][ T5819] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.293784][ T6973] loop2: detected capacity change from 0 to 2048 [ 200.412141][ T6973] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 200.498349][ T6973] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.555868][ T6979] loop0: detected capacity change from 0 to 256 [ 201.122396][ T6988] No such timeout policy "syz0" [ 201.151774][ T6988] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 202.203877][ T6996] loop0: detected capacity change from 0 to 512 [ 202.245070][ T6996] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 202.348047][ T6996] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.265: invalid indirect mapped block 4294967295 (level 1) [ 202.425703][ T6996] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.265: invalid indirect mapped block 4294967295 (level 1) [ 202.466812][ T6996] EXT4-fs (loop0): 2 truncates cleaned up [ 202.474259][ T6996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.580218][ T7002] loop3: detected capacity change from 0 to 1024 [ 202.643852][ T7002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.735761][ T7006] fuse: Bad value for 'user_id' [ 202.761024][ T7006] fuse: Bad value for 'user_id' [ 203.495786][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.529011][ T7014] loop4: detected capacity change from 0 to 256 [ 203.625114][ T7014] FAT-fs (loop4): Directory bread(block 64) failed [ 203.666381][ T7014] FAT-fs (loop4): Directory bread(block 65) failed [ 203.702637][ T7014] FAT-fs (loop4): Directory bread(block 66) failed [ 203.743536][ T7014] FAT-fs (loop4): Directory bread(block 67) failed [ 203.789703][ T7014] FAT-fs (loop4): Directory bread(block 68) failed [ 203.812942][ T7014] FAT-fs (loop4): Directory bread(block 69) failed [ 203.829576][ T7014] FAT-fs (loop4): Directory bread(block 70) failed [ 203.839031][ T7014] FAT-fs (loop4): Directory bread(block 71) failed [ 203.846133][ T7014] FAT-fs (loop4): Directory bread(block 72) failed [ 203.852816][ T7014] FAT-fs (loop4): Directory bread(block 73) failed [ 203.966541][ T7019] netlink: 536 bytes leftover after parsing attributes in process `syz.3.271'. [ 204.392571][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.710256][ T7027] loop0: detected capacity change from 0 to 64 [ 205.028523][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.274'. [ 205.860445][ T12] bio_check_eod: 5 callbacks suppressed [ 205.860462][ T12] kworker/u8:0: attempt to access beyond end of device [ 205.860462][ T12] loop4: rw=1, sector=1224, nr_sectors = 544 limit=256 [ 205.922954][ T12] kworker/u8:0: attempt to access beyond end of device [ 205.922954][ T12] loop4: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 205.960560][ T12] kworker/u8:0: attempt to access beyond end of device [ 205.960560][ T12] loop4: rw=1, sector=1960, nr_sectors = 2840 limit=256 [ 206.018517][ T12] kworker/u8:0: attempt to access beyond end of device [ 206.018517][ T12] loop4: rw=1, sector=4800, nr_sectors = 1752 limit=256 [ 206.650791][ T7041] loop4: detected capacity change from 0 to 512 [ 206.682270][ T7041] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 206.739332][ T7041] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 206.807749][ T7041] EXT4-fs (loop4): 1 truncate cleaned up [ 206.852532][ T7041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.058679][ T7041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.276'. [ 207.071797][ T7041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.276'. [ 207.213968][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.435357][ T7047] loop4: detected capacity change from 0 to 2048 [ 207.505017][ T7047] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 207.550326][ T7047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.791413][ T7048] syz.2.279 (7048): drop_caches: 2 [ 207.966565][ T7050] No such timeout policy "syz0" [ 208.046466][ T7049] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 208.273503][ T7054] loop0: detected capacity change from 0 to 2048 [ 208.365018][ T7054] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 208.417938][ T7054] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.466433][ T7054] No such timeout policy "syz0" [ 208.479106][ T7054] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 208.713767][ T7059] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 208.720444][ T7059] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 208.912290][ T7059] vhci_hcd vhci_hcd.0: Device attached [ 208.976244][ T7060] vhci_hcd: connection closed [ 208.978502][ T13] vhci_hcd vhci_hcd.4: stop threads [ 208.996070][ T13] vhci_hcd vhci_hcd.4: release socket [ 209.001699][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 209.140181][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.285'. [ 210.168445][ T7077] loop2: detected capacity change from 0 to 256 [ 210.188366][ T7078] loop0: detected capacity change from 0 to 1024 [ 210.245552][ T7078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.414978][ T7077] FAT-fs (loop2): Directory bread(block 64) failed [ 210.443753][ T7077] FAT-fs (loop2): Directory bread(block 65) failed [ 210.538955][ T7077] FAT-fs (loop2): Directory bread(block 66) failed [ 210.664144][ T7077] FAT-fs (loop2): Directory bread(block 67) failed [ 210.814304][ T7077] FAT-fs (loop2): Directory bread(block 68) failed [ 210.915130][ T7077] FAT-fs (loop2): Directory bread(block 69) failed [ 210.921774][ T7077] FAT-fs (loop2): Directory bread(block 70) failed [ 210.931082][ T7077] FAT-fs (loop2): Directory bread(block 71) failed [ 210.937928][ T7077] FAT-fs (loop2): Directory bread(block 72) failed [ 210.944795][ T7077] FAT-fs (loop2): Directory bread(block 73) failed [ 211.849102][ T7092] fuse: Bad value for 'fd' [ 213.275764][ T5990] kworker/u8:16: attempt to access beyond end of device [ 213.275764][ T5990] loop2: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 213.287209][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.292712][ T5990] kworker/u8:16: attempt to access beyond end of device [ 213.292712][ T5990] loop2: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 213.364320][ T5990] kworker/u8:16: attempt to access beyond end of device [ 213.364320][ T5990] loop2: rw=1, sector=1384, nr_sectors = 32 limit=256 [ 213.451656][ T7103] loop0: detected capacity change from 0 to 2048 [ 213.471679][ T7103] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 213.503457][ T7103] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.576572][ T7103] No such timeout policy "syz0" [ 213.590079][ T7103] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 213.595161][ T5990] kworker/u8:16: attempt to access beyond end of device [ 213.595161][ T5990] loop2: rw=1, sector=1448, nr_sectors = 32 limit=256 [ 213.643604][ T7105] loop3: detected capacity change from 0 to 1024 [ 213.661947][ T5990] kworker/u8:16: attempt to access beyond end of device [ 213.661947][ T5990] loop2: rw=1, sector=1512, nr_sectors = 32 limit=256 [ 213.697212][ T5990] kworker/u8:16: attempt to access beyond end of device [ 213.697212][ T5990] loop2: rw=1, sector=1576, nr_sectors = 32 limit=256 [ 213.767057][ T7105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.779448][ T5990] kworker/u8:16: attempt to access beyond end of device [ 213.779448][ T5990] loop2: rw=1, sector=1640, nr_sectors = 128 limit=256 [ 213.831515][ T5990] kworker/u8:16: attempt to access beyond end of device [ 213.831515][ T5990] loop2: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 214.072969][ T5990] kworker/u8:16: attempt to access beyond end of device [ 214.072969][ T5990] loop2: rw=1, sector=1960, nr_sectors = 2568 limit=256 [ 214.516194][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.780776][ T7122] loop2: detected capacity change from 0 to 256 [ 215.677837][ T7132] loop0: detected capacity change from 0 to 2048 [ 215.746405][ T7132] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 215.860182][ T7132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.019374][ T7145] loop1: detected capacity change from 0 to 2048 [ 217.138599][ T30] audit: type=1326 audit(1762036621.371:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7148 comm="syz.3.309" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cb178efc9 code=0x0 [ 217.384520][ T7154] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.838797][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 217.907333][ T7158] No such timeout policy "syz0" [ 218.566063][ T7165] fuse: Bad value for 'fd' [ 218.789822][ T7170] Invalid source name [ 220.972636][ T7187] loop2: detected capacity change from 0 to 2048 [ 221.056176][ T7187] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 221.105849][ T7187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.372969][ T7198] loop1: detected capacity change from 0 to 256 [ 221.491655][ T7200] netlink: 536 bytes leftover after parsing attributes in process `syz.0.323'. [ 222.702636][ T7203] No such timeout policy "syz0" [ 222.719124][ T7203] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 223.247099][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 223.646790][ T7213] loop0: detected capacity change from 0 to 1024 [ 223.684659][ T7213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.209167][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.332846][ T7222] Invalid source name [ 226.657008][ T7232] loop3: detected capacity change from 0 to 64 [ 226.822169][ T7238] loop0: detected capacity change from 0 to 512 [ 227.765238][ T7238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 227.832615][ T7238] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.336: invalid indirect mapped block 4294967295 (level 1) [ 227.876090][ T7245] loop4: detected capacity change from 0 to 1024 [ 227.926346][ T7238] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.336: invalid indirect mapped block 4294967295 (level 1) [ 228.049619][ T7238] EXT4-fs (loop0): 2 truncates cleaned up [ 228.076990][ T7238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.314635][ T7253] loop2: detected capacity change from 0 to 1024 [ 228.418598][ T7253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.653036][ T7257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.334'. [ 230.089637][ T5987] hfsplus: b-tree write err: -5, ino 4 [ 230.112244][ T7216] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 230.325740][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.396951][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.457987][ T7274] loop0: detected capacity change from 0 to 1024 [ 231.646784][ T7274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.794797][ T7285] Invalid source name [ 232.215952][ T7288] loop1: detected capacity change from 0 to 2048 [ 232.350797][ T7288] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 232.396494][ T7288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.826163][ T7298] No such timeout policy "syz0" [ 232.893407][ T7298] syz2: rxe_newlink: already configured on ip6_vti0 [ 233.473407][ T7292] siw: device registration error -23 [ 233.708066][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.921490][ T7305] loop3: detected capacity change from 0 to 2048 [ 233.979157][ T7305] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 234.143577][ T7305] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.570224][ T7311] No such timeout policy "syz0" [ 234.582598][ T7311] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 234.952517][ T7316] loop0: detected capacity change from 0 to 512 [ 234.969154][ T7316] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 235.186087][ T7316] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.354: invalid indirect mapped block 4294967295 (level 1) [ 235.234488][ T7316] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.354: invalid indirect mapped block 4294967295 (level 1) [ 235.295402][ T7316] EXT4-fs (loop0): 2 truncates cleaned up [ 235.303616][ T7316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.443996][ T7335] Invalid source name [ 238.061924][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 238.692899][ T7320] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 241.746680][ T7356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.361'. [ 242.268131][ T7366] fuse: Invalid rootmode [ 242.709404][ T7370] loop2: detected capacity change from 0 to 2048 [ 242.749226][ T7370] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 242.790010][ T7370] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.236234][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.450152][ T7377] No such timeout policy "syz0" [ 243.484324][ T7377] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 243.644367][ T7384] loop4: detected capacity change from 0 to 256 [ 243.892820][ T7384] FAT-fs (loop4): Directory bread(block 64) failed [ 243.969829][ T7384] FAT-fs (loop4): Directory bread(block 65) failed [ 244.103587][ T7384] FAT-fs (loop4): Directory bread(block 66) failed [ 244.231450][ T7384] FAT-fs (loop4): Directory bread(block 67) failed [ 244.359889][ T7384] FAT-fs (loop4): Directory bread(block 68) failed [ 244.421942][ T7384] FAT-fs (loop4): Directory bread(block 69) failed [ 244.430530][ T7384] FAT-fs (loop4): Directory bread(block 70) failed [ 244.437272][ T7384] FAT-fs (loop4): Directory bread(block 71) failed [ 244.444010][ T7384] FAT-fs (loop4): Directory bread(block 72) failed [ 244.450640][ T7384] FAT-fs (loop4): Directory bread(block 73) failed [ 245.464536][ T5990] kworker/u8:16: attempt to access beyond end of device [ 245.464536][ T5990] loop4: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 245.499944][ T5990] kworker/u8:16: attempt to access beyond end of device [ 245.499944][ T5990] loop4: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 245.615146][ T5990] kworker/u8:16: attempt to access beyond end of device [ 245.615146][ T5990] loop4: rw=1, sector=1384, nr_sectors = 32 limit=256 [ 245.659119][ T5990] kworker/u8:16: attempt to access beyond end of device [ 245.659119][ T5990] loop4: rw=1, sector=1448, nr_sectors = 32 limit=256 [ 245.673078][ T5990] kworker/u8:16: attempt to access beyond end of device [ 245.673078][ T5990] loop4: rw=1, sector=1512, nr_sectors = 32 limit=256 [ 245.686987][ T5990] kworker/u8:16: attempt to access beyond end of device [ 245.686987][ T5990] loop4: rw=1, sector=1576, nr_sectors = 32 limit=256 [ 245.703608][ T7399] loop1: detected capacity change from 0 to 1024 [ 245.710376][ T5990] kworker/u8:16: attempt to access beyond end of device [ 245.710376][ T5990] loop4: rw=1, sector=1640, nr_sectors = 32 limit=256 [ 245.772095][ T5990] kworker/u8:16: attempt to access beyond end of device [ 245.772095][ T5990] loop4: rw=1, sector=1704, nr_sectors = 32 limit=256 [ 245.842174][ T7399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 245.856041][ T5990] kworker/u8:16: attempt to access beyond end of device [ 245.856041][ T5990] loop4: rw=1, sector=1800, nr_sectors = 32 limit=256 [ 245.883489][ T7399] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.924907][ T7405] fuse: Invalid rootmode [ 245.946003][ T5990] kworker/u8:16: attempt to access beyond end of device [ 245.946003][ T5990] loop4: rw=1, sector=1864, nr_sectors = 32 limit=256 [ 245.968434][ T7397] loop3: detected capacity change from 0 to 1024 [ 246.208920][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 247.174535][ T7412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.374'. [ 247.184303][ T5985] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:12: bg 0: block 112: padding at end of block bitmap is not set [ 247.222951][ T5985] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 61 with max blocks 1 with error 117 [ 247.272209][ T7397] hfsplus: b-tree write err: -5, ino 3 [ 247.343105][ T5985] EXT4-fs (loop1): This should not happen!! Data will be lost [ 247.343105][ T5985] [ 247.424373][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 247.779138][ T7427] loop2: detected capacity change from 0 to 256 [ 247.828942][ T7427] FAT-fs (loop2): Directory bread(block 64) failed [ 247.845103][ T7427] FAT-fs (loop2): Directory bread(block 65) failed [ 247.866876][ T7427] FAT-fs (loop2): Directory bread(block 66) failed [ 247.876644][ T7427] FAT-fs (loop2): Directory bread(block 67) failed [ 247.894179][ T7427] FAT-fs (loop2): Directory bread(block 68) failed [ 247.943016][ T7427] FAT-fs (loop2): Directory bread(block 69) failed [ 247.965715][ T7427] FAT-fs (loop2): Directory bread(block 70) failed [ 247.972279][ T7427] FAT-fs (loop2): Directory bread(block 71) failed [ 247.989226][ T7429] siw: device registration error -23 [ 248.030052][ T7427] FAT-fs (loop2): Directory bread(block 72) failed [ 248.069877][ T7427] FAT-fs (loop2): Directory bread(block 73) failed [ 249.118637][ T7421] loop1: detected capacity change from 0 to 40427 [ 249.221436][ T7421] F2FS-fs (loop1): invalid crc value [ 249.596006][ T7421] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 249.794130][ T7421] F2FS-fs (loop1): Start checkpoint disabled! [ 250.087423][ T7421] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 250.126084][ T7421] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 250.269682][ T7421] F2FS-fs (loop1): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 250.458498][ T5985] CPU: 0 UID: 0 PID: 5985 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 250.458527][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 250.458539][ T5985] Workqueue: writeback wb_workfn (flush-7:1) [ 250.458599][ T5985] Call Trace: [ 250.458607][ T5985] [ 250.458616][ T5985] dump_stack_lvl+0x189/0x250 [ 250.458651][ T5985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.458679][ T5985] ? __pfx_queue_work_on+0x10/0x10 [ 250.458702][ T5985] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 250.458734][ T5985] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 250.458777][ T5985] f2fs_handle_critical_error+0x37c/0x540 [ 250.458807][ T5985] f2fs_write_end_io+0x886/0xb60 [ 250.458859][ T5985] __submit_merged_bio+0x27a/0x6a0 [ 250.458888][ T5985] __submit_merged_write_cond+0x255/0x530 [ 250.458929][ T5985] f2fs_write_data_pages+0x261d/0x3000 [ 250.458994][ T5985] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 250.459117][ T5985] ? f2fs_write_meta_pages+0x357/0x450 [ 250.459152][ T5985] ? __lock_acquire+0xab9/0xd20 [ 250.459180][ T5985] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 250.459204][ T5985] do_writepages+0x32e/0x550 [ 250.459232][ T5985] ? reacquire_held_locks+0x127/0x1d0 [ 250.459256][ T5985] ? writeback_sb_inodes+0x3bc/0x1950 [ 250.459295][ T5985] __writeback_single_inode+0x143/0x12d0 [ 250.459325][ T5985] ? do_raw_spin_unlock+0x122/0x240 [ 250.459360][ T5985] writeback_sb_inodes+0x984/0x1950 [ 250.459425][ T5985] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 250.459505][ T5985] ? rcu_is_watching+0x15/0xb0 [ 250.459543][ T5985] wb_writeback+0x43b/0xaf0 [ 250.459581][ T5985] ? queue_io+0x351/0x590 [ 250.459613][ T5985] ? __pfx_wb_writeback+0x10/0x10 [ 250.459652][ T5985] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.459678][ T5985] wb_workfn+0x409/0xef0 [ 250.459723][ T5985] ? __pfx_wb_workfn+0x10/0x10 [ 250.459754][ T5985] ? __lock_acquire+0xab9/0xd20 [ 250.459791][ T5985] ? process_one_work+0x868/0x15d0 [ 250.459828][ T5985] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.459851][ T5985] ? process_one_work+0x868/0x15d0 [ 250.459872][ T5985] process_one_work+0x94a/0x15d0 [ 250.459894][ T5985] ? __lock_acquire+0xab9/0xd20 [ 250.459941][ T5985] ? __pfx_process_one_work+0x10/0x10 [ 250.459976][ T5985] ? assign_work+0x3a1/0x410 [ 250.460006][ T5985] worker_thread+0x9b0/0xee0 [ 250.460063][ T5985] kthread+0x711/0x8a0 [ 250.460096][ T5985] ? __pfx_worker_thread+0x10/0x10 [ 250.460119][ T5985] ? __pfx_kthread+0x10/0x10 [ 250.460150][ T5985] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.460168][ T5985] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.460186][ T5985] ? __pfx_kthread+0x10/0x10 [ 250.460215][ T5985] ret_from_fork+0x4bc/0x870 [ 250.460242][ T5985] ? __pfx_ret_from_fork+0x10/0x10 [ 250.460274][ T5985] ? __switch_to_asm+0x39/0x70 [ 250.460291][ T5985] ? __switch_to_asm+0x33/0x70 [ 250.460307][ T5985] ? __pfx_kthread+0x10/0x10 [ 250.460338][ T5985] ret_from_fork_asm+0x1a/0x30 [ 250.460379][ T5985] [ 250.945912][ T5985] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 251.319476][ T7455] netlink: 165 bytes leftover after parsing attributes in process `syz.3.389'. [ 252.389469][ T7458] loop0: detected capacity change from 0 to 512 [ 252.431576][ T7458] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 252.462795][ T7462] netlink: 56 bytes leftover after parsing attributes in process `syz.3.392'. [ 252.545318][ T7458] EXT4-fs (loop0): 1 orphan inode deleted [ 252.551087][ T7458] EXT4-fs (loop0): 1 truncate cleaned up [ 252.571739][ T7458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.818771][ T7471] loop3: detected capacity change from 0 to 256 [ 252.868511][ T7471] FAT-fs (loop3): Directory bread(block 64) failed [ 252.885096][ T7471] FAT-fs (loop3): Directory bread(block 65) failed [ 252.910272][ T7471] FAT-fs (loop3): Directory bread(block 66) failed [ 252.945153][ T7471] FAT-fs (loop3): Directory bread(block 67) failed [ 252.951804][ T7471] FAT-fs (loop3): Directory bread(block 68) failed [ 252.965054][ T7471] FAT-fs (loop3): Directory bread(block 69) failed [ 252.981908][ T7471] FAT-fs (loop3): Directory bread(block 70) failed [ 253.005903][ T7471] FAT-fs (loop3): Directory bread(block 71) failed [ 253.012541][ T7471] FAT-fs (loop3): Directory bread(block 72) failed [ 253.028207][ T7471] FAT-fs (loop3): Directory bread(block 73) failed [ 253.036105][ T7460] loop2: detected capacity change from 0 to 32768 [ 253.054016][ T7460] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.391 (7460) [ 253.102371][ T7460] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 253.123104][ T7460] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 253.240872][ T7479] loop1: detected capacity change from 0 to 2048 [ 253.273929][ T7460] BTRFS info (device loop2): enabling ssd optimizations [ 253.284741][ T7479] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 253.306010][ T7460] BTRFS info (device loop2): turning on async discard [ 253.312809][ T7460] BTRFS info (device loop2): enabling free space tree [ 253.379474][ T7479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.625634][ T5836] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 253.683994][ T7458] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 253.713532][ T7458] EXT4-fs (loop0): Remounting filesystem read-only [ 253.725706][ T7458] overlayfs: failed to verify upper root origin [ 253.743935][ T7496] overlayfs: cleanup of 'bus/work' failed (-30) [ 253.751271][ T7496] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 254.242662][ T5987] bio_check_eod: 16 callbacks suppressed [ 254.242680][ T5987] kworker/u8:14: attempt to access beyond end of device [ 254.242680][ T5987] loop3: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 254.327396][ T5987] kworker/u8:14: attempt to access beyond end of device [ 254.327396][ T5987] loop3: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 254.383843][ T5987] kworker/u8:14: attempt to access beyond end of device [ 254.383843][ T5987] loop3: rw=1, sector=1384, nr_sectors = 32 limit=256 [ 254.425904][ T7503] No such timeout policy "syz0" [ 254.436197][ T7503] syz2: rxe_newlink: already configured on ip6_vti0 [ 254.461183][ T5987] kworker/u8:14: attempt to access beyond end of device [ 254.461183][ T5987] loop3: rw=1, sector=1448, nr_sectors = 32 limit=256 [ 254.462813][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.495168][ T5987] kworker/u8:14: attempt to access beyond end of device [ 254.495168][ T5987] loop3: rw=1, sector=1512, nr_sectors = 32 limit=256 [ 254.553504][ T5987] kworker/u8:14: attempt to access beyond end of device [ 254.553504][ T5987] loop3: rw=1, sector=1576, nr_sectors = 32 limit=256 [ 254.586497][ T5983] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.599870][ T5987] kworker/u8:14: attempt to access beyond end of device [ 254.599870][ T5987] loop3: rw=1, sector=1640, nr_sectors = 32 limit=256 [ 254.640061][ T5987] kworker/u8:14: attempt to access beyond end of device [ 254.640061][ T5987] loop3: rw=1, sector=1704, nr_sectors = 64 limit=256 [ 254.672782][ T5987] kworker/u8:14: attempt to access beyond end of device [ 254.672782][ T5987] loop3: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 254.737242][ T5987] kworker/u8:14: attempt to access beyond end of device [ 254.737242][ T5987] loop3: rw=1, sector=1960, nr_sectors = 4472 limit=256 [ 254.751665][ T5983] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.075136][ T5983] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.221976][ T5983] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.667998][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.674549][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.176424][ T5983] bridge_slave_1: left allmulticast mode [ 256.182354][ T5983] bridge_slave_1: left promiscuous mode [ 256.291320][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.336137][ T5983] bridge_slave_0: left allmulticast mode [ 256.341822][ T5983] bridge_slave_0: left promiscuous mode [ 256.351630][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.363950][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.373032][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.380549][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.390826][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.403831][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.472470][ T7518] fuse: Bad value for 'rootmode' [ 256.603072][ T7521] loop4: detected capacity change from 0 to 2048 [ 256.613863][ T7521] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 256.627770][ T7521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.989936][ T7527] No such timeout policy "syz0" [ 257.054630][ T7527] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 258.510948][ T5822] Bluetooth: hci3: command tx timeout [ 258.537172][ T7545] loop2: detected capacity change from 0 to 256 [ 258.694170][ T7545] FAT-fs (loop2): Directory bread(block 64) failed [ 258.700844][ T7545] FAT-fs (loop2): Directory bread(block 65) failed [ 258.736552][ T7545] FAT-fs (loop2): Directory bread(block 66) failed [ 258.756526][ T7545] FAT-fs (loop2): Directory bread(block 67) failed [ 258.763208][ T7545] FAT-fs (loop2): Directory bread(block 68) failed [ 258.795043][ T7545] FAT-fs (loop2): Directory bread(block 69) failed [ 258.817306][ T7545] FAT-fs (loop2): Directory bread(block 70) failed [ 258.838087][ T7545] FAT-fs (loop2): Directory bread(block 71) failed [ 258.865056][ T7545] FAT-fs (loop2): Directory bread(block 72) failed [ 258.881930][ T7545] FAT-fs (loop2): Directory bread(block 73) failed [ 259.520436][ T5983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.734465][ T5983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.769088][ T5983] bond0 (unregistering): Released all slaves [ 260.419631][ T7514] ip6_vti0 speed is unknown, defaulting to 1000 [ 260.584431][ T5990] bio_check_eod: 1 callbacks suppressed [ 260.584447][ T5990] kworker/u8:16: attempt to access beyond end of device [ 260.584447][ T5990] loop2: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 260.585296][ T5822] Bluetooth: hci3: command tx timeout [ 260.609521][ T5990] kworker/u8:16: attempt to access beyond end of device [ 260.609521][ T5990] loop2: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 260.628066][ T7563] syz.3.413 (7563): drop_caches: 2 [ 260.650034][ T5990] kworker/u8:16: attempt to access beyond end of device [ 260.650034][ T5990] loop2: rw=1, sector=1384, nr_sectors = 32 limit=256 [ 260.665899][ T5990] kworker/u8:16: attempt to access beyond end of device [ 260.665899][ T5990] loop2: rw=1, sector=1448, nr_sectors = 32 limit=256 [ 260.681001][ T5990] kworker/u8:16: attempt to access beyond end of device [ 260.681001][ T5990] loop2: rw=1, sector=1512, nr_sectors = 32 limit=256 [ 260.696531][ T5990] kworker/u8:16: attempt to access beyond end of device [ 260.696531][ T5990] loop2: rw=1, sector=1576, nr_sectors = 32 limit=256 [ 260.710945][ T5990] kworker/u8:16: attempt to access beyond end of device [ 260.710945][ T5990] loop2: rw=1, sector=1640, nr_sectors = 128 limit=256 [ 260.725032][ T5990] kworker/u8:16: attempt to access beyond end of device [ 260.725032][ T5990] loop2: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 260.759505][ T5990] kworker/u8:16: attempt to access beyond end of device [ 260.759505][ T5990] loop2: rw=1, sector=1960, nr_sectors = 2344 limit=256 [ 260.809623][ T5990] kworker/u8:16: attempt to access beyond end of device [ 260.809623][ T5990] loop2: rw=1, sector=4304, nr_sectors = 2048 limit=256 [ 260.814512][ T5907] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 260.933461][ T7575] loop3: detected capacity change from 0 to 2048 [ 260.937013][ T7577] loop4: detected capacity change from 0 to 1024 [ 260.971688][ T7575] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 261.035003][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 261.055270][ T7575] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.265530][ T5990] hfsplus: b-tree write err: -5, ino 4 [ 262.735273][ T5822] Bluetooth: hci3: command tx timeout [ 263.823660][ T5907] usb 2-1: unable to get BOS descriptor or descriptor too short [ 263.876508][ T5907] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 263.953604][ T5907] usb 2-1: can't read configurations, error -71 [ 264.035035][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 264.221352][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.264394][ T9] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 264.287507][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.383401][ T9] usb 5-1: Product: syz [ 264.390434][ T7601] loop3: detected capacity change from 0 to 2048 [ 264.407535][ T9] usb 5-1: Manufacturer: syz [ 264.459681][ T7601] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 264.471454][ T9] usb 5-1: SerialNumber: syz [ 264.522910][ T7601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.561245][ T9] usb 5-1: config 0 descriptor?? [ 264.610092][ T9] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 264.899483][ T798] usb 5-1: USB disconnect, device number 2 [ 264.922041][ T5822] Bluetooth: hci3: command tx timeout [ 264.946573][ T5983] hsr_slave_0: left promiscuous mode [ 264.953159][ T5983] hsr_slave_1: left promiscuous mode [ 264.960273][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.969282][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.979443][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.987222][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.012539][ T5983] veth1_macvtap: left promiscuous mode [ 265.018675][ T5983] veth0_macvtap: left promiscuous mode [ 265.024457][ T5983] veth1_vlan: left promiscuous mode [ 265.034962][ T5983] veth0_vlan: left promiscuous mode [ 265.144770][ T7611] No such timeout policy "syz0" [ 265.202669][ T7611] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 266.199494][ T7618] loop2: detected capacity change from 0 to 256 [ 266.481389][ T7618] FAT-fs (loop2): Directory bread(block 64) failed [ 266.501209][ T7618] FAT-fs (loop2): Directory bread(block 65) failed [ 266.538851][ T7618] FAT-fs (loop2): Directory bread(block 66) failed [ 266.558991][ T7618] FAT-fs (loop2): Directory bread(block 67) failed [ 266.626543][ T7618] FAT-fs (loop2): Directory bread(block 68) failed [ 266.633098][ T7618] FAT-fs (loop2): Directory bread(block 69) failed [ 266.707789][ T7618] FAT-fs (loop2): Directory bread(block 70) failed [ 266.724352][ T7618] FAT-fs (loop2): Directory bread(block 71) failed [ 266.744791][ T7618] FAT-fs (loop2): Directory bread(block 72) failed [ 266.751468][ T7618] FAT-fs (loop2): Directory bread(block 73) failed [ 267.375507][ T7631] loop3: detected capacity change from 0 to 1024 [ 267.430158][ T7634] loop4: detected capacity change from 0 to 2048 [ 267.489599][ T7634] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 267.678728][ T7634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.721591][ T5985] bio_check_eod: 1 callbacks suppressed [ 267.721609][ T5985] kworker/u8:12: attempt to access beyond end of device [ 267.721609][ T5985] loop2: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 268.133503][ T7615] loop1: detected capacity change from 0 to 32768 [ 268.268093][ T5985] kworker/u8:12: attempt to access beyond end of device [ 268.268093][ T5985] loop2: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 268.281961][ T5985] kworker/u8:12: attempt to access beyond end of device [ 268.281961][ T5985] loop2: rw=1, sector=1384, nr_sectors = 32 limit=256 [ 268.282850][ T7615] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 268.295760][ T5985] kworker/u8:12: attempt to access beyond end of device [ 268.295760][ T5985] loop2: rw=1, sector=1448, nr_sectors = 32 limit=256 [ 268.327702][ T5975] hfsplus: b-tree write err: -5, ino 4 [ 268.363123][ T5985] kworker/u8:12: attempt to access beyond end of device [ 268.363123][ T5985] loop2: rw=1, sector=1512, nr_sectors = 32 limit=256 [ 268.405211][ T5985] kworker/u8:12: attempt to access beyond end of device [ 268.405211][ T5985] loop2: rw=1, sector=1576, nr_sectors = 32 limit=256 [ 268.419865][ T7615] XFS (loop1): Ending clean mount [ 268.427341][ T5985] kworker/u8:12: attempt to access beyond end of device [ 268.427341][ T5985] loop2: rw=1, sector=1640, nr_sectors = 32 limit=256 [ 268.442865][ T5985] kworker/u8:12: attempt to access beyond end of device [ 268.442865][ T5985] loop2: rw=1, sector=1704, nr_sectors = 32 limit=256 [ 268.457395][ T5985] kworker/u8:12: attempt to access beyond end of device [ 268.457395][ T5985] loop2: rw=1, sector=1800, nr_sectors = 32 limit=256 [ 268.472711][ T5985] kworker/u8:12: attempt to access beyond end of device [ 268.472711][ T5985] loop2: rw=1, sector=1864, nr_sectors = 32 limit=256 [ 268.476376][ T7615] XFS (loop1): Quotacheck needed: Please wait. [ 268.556804][ T7615] XFS (loop1): Quotacheck: Done. [ 268.718500][ T7647] XFS (loop1): User initiated shutdown received. [ 268.719579][ T7647] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:466). Shutting down filesystem. [ 268.719666][ T7647] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 269.581971][ T7650] No such timeout policy "syz0" [ 270.013396][ T5983] team0 (unregistering): Port device team_slave_1 removed [ 270.114777][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 270.196488][ T5983] team0 (unregistering): Port device team_slave_0 removed [ 270.270139][ T7659] siw: device registration error -23 [ 271.158569][ T7663] netlink: 165 bytes leftover after parsing attributes in process `syz.3.435'. [ 271.376112][ T7661] loop4: detected capacity change from 0 to 32768 [ 271.408685][ T7661] [ 271.408685][ T7661] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.408685][ T7661] [ 271.456221][ T7661] ERROR: (device loop4): diWrite: ixpxd invalid [ 271.456221][ T7661] [ 271.480266][ T7661] ERROR: (device loop4): txCommit: [ 271.480266][ T7661] [ 271.531807][ T7661] [ 271.531807][ T7661] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.531807][ T7661] [ 271.584908][ T7661] [ 271.584908][ T7661] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.584908][ T7661] [ 271.612007][ T7667] [ 271.612007][ T7667] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.612007][ T7667] [ 271.671103][ T7667] [ 271.671103][ T7667] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.671103][ T7667] [ 271.847696][ T5825] [ 271.847696][ T5825] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.847696][ T5825] [ 271.909975][ T5825] [ 271.909975][ T5825] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.909975][ T5825] [ 271.991840][ T7666] loop3: detected capacity change from 0 to 32768 [ 272.348920][ T7666] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.436 (7666) [ 272.598062][ T7666] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 272.650217][ T7666] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 272.936451][ T7647] netlink: 40 bytes leftover after parsing attributes in process `syz.1.424'. [ 273.041864][ T7666] BTRFS info (device loop3): rebuilding free space tree [ 273.077467][ T7666] BTRFS info (device loop3): disabling free space tree [ 273.084446][ T7666] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 273.094576][ T7666] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 273.136856][ T7666] BTRFS info (device loop3): enabling ssd optimizations [ 273.168057][ T7666] BTRFS info (device loop3): turning on async discard [ 273.210380][ T7666] BTRFS info (device loop3): force clearing of disk cache [ 273.228451][ T7666] BTRFS info (device loop3): enabling auto defrag [ 273.245197][ T7666] BTRFS info (device loop3): max_inline set to 4096 [ 273.302882][ T7514] chnl_net:caif_netlink_parms(): no params data found [ 273.331632][ T7693] loop2: detected capacity change from 0 to 4096 [ 273.348895][ T5820] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 273.357187][ T30] audit: type=1800 audit(1762036677.621:4): pid=7666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.436" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 273.467215][ T7700] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 273.523243][ T7697] loop4: detected capacity change from 0 to 8192 [ 273.889733][ T7697] overlay: filesystem on ./file1 not supported [ 274.208267][ T5819] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 274.653842][ T7717] netlink: 40 bytes leftover after parsing attributes in process `syz.2.444'. [ 275.350781][ T7719] loop1: detected capacity change from 0 to 1024 [ 275.399573][ T7514] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.431782][ T7514] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.453210][ T7719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.479868][ T7514] bridge_slave_0: entered allmulticast mode [ 275.498799][ T7514] bridge_slave_0: entered promiscuous mode [ 275.537993][ T7514] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.618514][ T7514] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.829708][ T7514] bridge_slave_1: entered allmulticast mode [ 275.836038][ T7728] netlink: 165 bytes leftover after parsing attributes in process `syz.4.445'. [ 275.847341][ T7514] bridge_slave_1: entered promiscuous mode [ 275.979521][ T7729] siw: device registration error -23 [ 276.095548][ T7514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.109255][ T7514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.243209][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.275640][ T7736] loop3: detected capacity change from 0 to 2048 [ 276.289160][ T7514] team0: Port device team_slave_0 added [ 276.357634][ T7514] team0: Port device team_slave_1 added [ 276.386514][ T7736] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 276.407092][ T7736] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.644154][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.663961][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.715107][ T7514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.747408][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.754386][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.817487][ T7514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.880712][ T7746] loop1: detected capacity change from 0 to 2048 [ 276.996011][ T7749] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.378637][ T7514] hsr_slave_0: entered promiscuous mode [ 277.387646][ T7750] No such timeout policy "syz0" [ 277.392426][ T7514] hsr_slave_1: entered promiscuous mode [ 277.408191][ T7747] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 279.054363][ T7769] loop3: detected capacity change from 0 to 2048 [ 279.142329][ T7771] loop1: detected capacity change from 0 to 2048 [ 279.158184][ T7769] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 279.204260][ T7769] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 279.251209][ T7771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 279.766790][ T7514] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 279.890946][ T7514] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 279.958281][ T7514] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 280.012447][ T7514] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 280.435744][ T7514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.087931][ T7514] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.110487][ T1344] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.113278][ T7765] loop2: detected capacity change from 0 to 32768 [ 281.117731][ T1344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.146046][ T1344] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.153266][ T1344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.276212][ T7514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.287050][ T7514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.328296][ T7765] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.453 (7765) [ 281.456656][ T7793] No such timeout policy "syz0" [ 281.468543][ T7793] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 281.590766][ T7765] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 281.603916][ T7792] loop4: detected capacity change from 0 to 1024 [ 281.647244][ T7765] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 281.729113][ T7792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.742462][ T7765] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 281.742806][ T7765] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 281.827622][ T7765] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 281.932819][ T7765] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 281.966351][ T7765] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 282.027014][ T7765] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 282.076116][ T7765] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 282.155699][ T7765] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 282.928336][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.997438][ T7765] BTRFS error (device loop2): open_ctree failed: -12 [ 283.179195][ T7823] netlink: 165 bytes leftover after parsing attributes in process `syz.3.458'. [ 283.204083][ T7514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.213764][ T7838] loop4: detected capacity change from 0 to 1024 [ 284.477493][ T7514] veth0_vlan: entered promiscuous mode [ 284.600926][ T7514] veth1_vlan: entered promiscuous mode [ 284.663193][ T7829] loop2: detected capacity change from 0 to 32768 [ 284.755741][ T7842] loop3: detected capacity change from 0 to 4096 [ 284.892758][ T7842] ntfs3: Unknown parameter 'ÿ' [ 285.151782][ T7514] veth0_macvtap: entered promiscuous mode [ 285.223868][ T7514] veth1_macvtap: entered promiscuous mode [ 285.351926][ T7848] loop2: detected capacity change from 0 to 2048 [ 285.408558][ T7514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.437202][ T7848] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 285.444378][ T7514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.559075][ T7848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.586650][ T1344] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.666052][ T5983] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.749003][ T5983] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.789926][ T5983] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.196540][ T7856] loop3: detected capacity change from 0 to 32768 [ 286.249457][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.297644][ T7856] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 286.324306][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.474663][ T7856] XFS (loop3): Ending clean mount [ 286.528794][ T1344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.564101][ T1344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.818146][ T7869] No such timeout policy "syz0" [ 287.882908][ T7869] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 287.985232][ T5907] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 288.042050][ T7871] Invalid source name [ 288.244027][ T5907] usb 4-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 288.280547][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.139663][ T5907] usb 4-1: Product: syz [ 289.143845][ T5907] usb 4-1: Manufacturer: syz [ 289.245129][ T5907] usb 4-1: SerialNumber: syz [ 289.260380][ T5907] r8152-cfgselector 4-1: Unknown version 0x0000 [ 289.283240][ T5907] r8152-cfgselector 4-1: config 0 descriptor?? [ 289.290089][ T5907] r8152-cfgselector 4-1: can't set config #0, error -71 [ 289.299051][ T5819] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 289.457117][ T5907] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 290.761586][ T7901] fuse: Unknown parameter 'use00000000000000000000' [ 291.365819][ T7905] loop3: detected capacity change from 0 to 512 [ 291.401499][ T7905] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 291.614415][ T7911] siw: device registration error -23 [ 291.955341][ T7905] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.477: invalid indirect mapped block 4294967295 (level 1) [ 292.022939][ T7905] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.477: invalid indirect mapped block 4294967295 (level 1) [ 292.079860][ T7905] EXT4-fs (loop3): 2 truncates cleaned up [ 292.107385][ T7905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.175695][ T7915] loop5: detected capacity change from 0 to 2048 [ 292.295901][ T7915] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 292.357845][ T7915] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.025974][ T7938] No such timeout policy "syz0" [ 294.033247][ T7938] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 294.181210][ T7939] loop4: detected capacity change from 0 to 256 [ 294.187595][ T7912] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 294.310095][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.617868][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 295.628661][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.637478][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.665138][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 295.705006][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.814384][ T7951] ip6_vti0 speed is unknown, defaulting to 1000 [ 296.808944][ T7962] syz.5.489 (7962): drop_caches: 2 [ 297.076116][ T7967] loop5: detected capacity change from 0 to 64 [ 297.331709][ T7971] netlink: 24 bytes leftover after parsing attributes in process `syz.5.491'. [ 297.352423][ T7956] loop3: detected capacity change from 0 to 32768 [ 297.391426][ T7956] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.486 (7956) [ 297.412846][ T7969] loop4: detected capacity change from 0 to 2048 [ 297.471094][ T7956] BTRFS info (device loop3 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 297.530454][ T7969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.577824][ T7956] BTRFS info (device loop3 state S): using crc32c (crc32c-lib) checksum algorithm [ 297.597616][ T7969] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.696390][ T7955] loop2: detected capacity change from 0 to 40427 [ 297.727360][ T7955] F2FS-fs (loop2): build fault injection rate: 690 [ 297.777339][ T7955] F2FS-fs (loop2): invalid crc value [ 297.786230][ T5827] Bluetooth: hci5: command tx timeout [ 297.819473][ T7969] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 297.835100][ T7969] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 297.934062][ T5975] BTRFS warning (device loop3 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xaf8e1d48 level 0, ignored [ 298.090816][ T7956] BTRFS warning (device loop3 state S): devid 1 uuid ffe96fa6-2f75-4027-b49d-9003f3eadbc4 is missing [ 298.143151][ T5975] BTRFS warning (device loop3 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored [ 298.209514][ T33] BTRFS warning (device loop3 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored [ 298.265794][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.285798][ T5975] BTRFS warning (device loop3 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x73153135 level 0, ignored [ 298.355558][ T7956] BTRFS warning (device loop3 state S): devid 1 physical 4096 len 4194304 inside the reserved space [ 298.405194][ T7956] BTRFS error (device loop3 state S): dev extent physical offset 4096 devid 1 has no corresponding chunk [ 298.442671][ T7955] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 298.465285][ T7956] BTRFS error (device loop3 state S): dev extent devid 1 physical offset 4096 len 4194304 is beyond device boundary 0 [ 298.519191][ T7951] chnl_net:caif_netlink_parms(): no params data found [ 298.527151][ T7955] F2FS-fs (loop2): Start checkpoint disabled! [ 298.656582][ T7956] BTRFS error (device loop3 state S): failed to verify dev extents against chunks: -117 [ 298.718883][ T7955] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 298.740703][ T7955] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 298.790719][ T7956] BTRFS error (device loop3 state S): open_ctree failed: -117 [ 299.443053][ T7951] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.488325][ T7951] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.518900][ T7951] bridge_slave_0: entered allmulticast mode [ 299.552870][ T7951] bridge_slave_0: entered promiscuous mode [ 299.606478][ T7951] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.632654][ T7951] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.687116][ T7951] bridge_slave_1: entered allmulticast mode [ 299.738027][ T7951] bridge_slave_1: entered promiscuous mode [ 299.865281][ T5827] Bluetooth: hci5: command tx timeout [ 299.895959][ T8025] loop5: detected capacity change from 0 to 1024 [ 299.993622][ T8025] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.057748][ T7951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.113625][ T7951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.414626][ T7951] team0: Port device team_slave_0 added [ 300.441029][ T7951] team0: Port device team_slave_1 added [ 300.463116][ T8039] loop2: detected capacity change from 0 to 256 [ 300.500202][ T8039] FAT-fs (loop2): Directory bread(block 64) failed [ 300.517098][ T8039] FAT-fs (loop2): Directory bread(block 65) failed [ 300.533216][ T8039] FAT-fs (loop2): Directory bread(block 66) failed [ 300.559701][ T8039] FAT-fs (loop2): Directory bread(block 67) failed [ 300.590855][ T8039] FAT-fs (loop2): Directory bread(block 68) failed [ 300.609875][ T8039] FAT-fs (loop2): Directory bread(block 69) failed [ 300.638047][ T7951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.659703][ T7514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.669102][ T8039] FAT-fs (loop2): Directory bread(block 70) failed [ 300.697498][ T7951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.726882][ T8039] FAT-fs (loop2): Directory bread(block 71) failed [ 300.744004][ T8039] FAT-fs (loop2): Directory bread(block 72) failed [ 300.766023][ T8039] FAT-fs (loop2): Directory bread(block 73) failed [ 300.772664][ T7951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.787281][ T7951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.796926][ T7951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.831742][ T7951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.030746][ T7951] hsr_slave_0: entered promiscuous mode [ 301.031574][ T7951] hsr_slave_1: entered promiscuous mode [ 301.032113][ T7951] debugfs: 'hsr0' already exists in 'hsr' [ 301.032133][ T7951] Cannot create hsr debugfs directory [ 301.486064][ T8021] loop4: detected capacity change from 0 to 32768 [ 301.605703][ T8021] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 301.613874][ T8021] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 301.820346][ T8021] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 301.867593][ T44] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 301.885089][ T44] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 301.955486][ T5827] Bluetooth: hci5: command tx timeout [ 301.966341][ T5990] bio_check_eod: 14 callbacks suppressed [ 301.966356][ T5990] kworker/u8:16: attempt to access beyond end of device [ 301.966356][ T5990] loop2: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 302.013141][ T44] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 128ms [ 302.039374][ T44] gfs2: fsid=syz:syz.0: jid=0: Done [ 302.044714][ T8021] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 302.102696][ T5990] kworker/u8:16: attempt to access beyond end of device [ 302.102696][ T5990] loop2: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 302.185474][ T5990] kworker/u8:16: attempt to access beyond end of device [ 302.185474][ T5990] loop2: rw=1, sector=1384, nr_sectors = 32 limit=256 [ 302.235284][ T5990] kworker/u8:16: attempt to access beyond end of device [ 302.235284][ T5990] loop2: rw=1, sector=1448, nr_sectors = 32 limit=256 [ 302.272048][ T5990] kworker/u8:16: attempt to access beyond end of device [ 302.272048][ T5990] loop2: rw=1, sector=1512, nr_sectors = 32 limit=256 [ 302.330960][ T5990] kworker/u8:16: attempt to access beyond end of device [ 302.330960][ T5990] loop2: rw=1, sector=1576, nr_sectors = 32 limit=256 [ 302.392736][ T8021] gfs2: fsid=syz:syz.0: found 1 quota changes [ 302.409340][ T5990] kworker/u8:16: attempt to access beyond end of device [ 302.409340][ T5990] loop2: rw=1, sector=1640, nr_sectors = 32 limit=256 [ 302.479988][ T5990] kworker/u8:16: attempt to access beyond end of device [ 302.479988][ T5990] loop2: rw=1, sector=1704, nr_sectors = 32 limit=256 [ 302.526417][ T5990] kworker/u8:16: attempt to access beyond end of device [ 302.526417][ T5990] loop2: rw=1, sector=1800, nr_sectors = 32 limit=256 [ 302.552740][ T7951] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 302.603666][ T5990] kworker/u8:16: attempt to access beyond end of device [ 302.603666][ T5990] loop2: rw=1, sector=1864, nr_sectors = 32 limit=256 [ 302.641196][ T7951] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 302.728725][ T7951] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 302.802876][ T7951] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 302.881393][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'. [ 304.025206][ T5827] Bluetooth: hci5: command tx timeout [ 305.148371][ T8090] loop3: detected capacity change from 0 to 512 [ 305.231458][ T8090] EXT4-fs: Ignoring removed orlov option [ 305.360908][ T7951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.400273][ T8090] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 305.961304][ T8090] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 306.007605][ T7951] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.044358][ T8090] EXT4-fs error (device loop3): ext4_iget_extra_inode:5072: inode #15: comm syz.3.504: corrupted in-inode xattr: e_value size too large [ 306.227072][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.234287][ T5987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.237806][ T8090] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.504: couldn't read orphan inode 15 (err -117) [ 306.664422][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.671672][ T5987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.679882][ T8090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.045183][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.156562][ T7951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.268765][ T8134] fuse: Unknown parameter 'use00000000000000000000' [ 310.355529][ T7951] veth0_vlan: entered promiscuous mode [ 310.416289][ T7951] veth1_vlan: entered promiscuous mode [ 310.604655][ T7951] veth0_macvtap: entered promiscuous mode [ 310.631277][ T7951] veth1_macvtap: entered promiscuous mode [ 310.695073][ T7951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.783535][ T8113] loop3: detected capacity change from 0 to 40427 [ 310.897018][ T8113] F2FS-fs (loop3): Unable to read 1th superblock [ 310.906138][ T8113] F2FS-fs (loop3): Unable to read 2th superblock [ 311.439918][ T7951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.521264][ T5975] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.616319][ T5975] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.639544][ T5975] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.669034][ T8141] loop2: detected capacity change from 0 to 64 [ 311.799333][ T5975] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.967459][ T8147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.515'. [ 312.104112][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.517'. [ 313.038161][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.081523][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.234032][ T1344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.265080][ T1344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.925155][ T8160] siw: device registration error -23 [ 317.086283][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.092640][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.228896][ T8175] loop3: detected capacity change from 0 to 2048 [ 317.246975][ T8178] fuse: Unknown parameter 'user_i00000000000000000000' [ 317.434359][ T8175] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 318.191198][ T8175] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.216027][ T8183] loop5: detected capacity change from 0 to 2048 [ 318.262863][ T8183] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 318.418440][ T8183] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.502326][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.529'. [ 320.693756][ T8203] loop6: detected capacity change from 0 to 256 [ 321.366954][ T8208] loop3: detected capacity change from 0 to 64 [ 321.564099][ T8209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.532'. [ 322.043528][ T8211] loop3: detected capacity change from 0 to 512 [ 322.097352][ T8211] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 322.266548][ T8211] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.534: invalid indirect mapped block 4294967295 (level 1) [ 322.385748][ T8211] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.534: invalid indirect mapped block 4294967295 (level 1) [ 322.565696][ T8211] EXT4-fs (loop3): 2 truncates cleaned up [ 322.572468][ T8211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.735171][ T8214] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 324.431443][ T8226] fuse: Unknown parameter 'user_i00000000000000000000' [ 324.825079][ T8232] siw: device registration error -23 [ 326.328237][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.428350][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 327.951220][ T8249] loop3: detected capacity change from 0 to 64 [ 328.005426][ T8245] loop4: detected capacity change from 0 to 2048 [ 328.096331][ T8249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.545'. [ 328.272579][ T8245] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 328.331360][ T8247] loop2: detected capacity change from 0 to 2048 [ 328.358936][ T8245] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.453910][ T8247] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 328.660579][ T8247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.841819][ T8258] No such timeout policy "syz0" [ 329.007781][ T8257] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 330.568285][ T8270] fuse: Unknown parameter 'user_i00000000000000000000' [ 330.591768][ T8271] loop4: detected capacity change from 0 to 256 [ 332.275763][ T8286] siw: device registration error -23 [ 332.633539][ T8287] loop2: detected capacity change from 0 to 512 [ 332.652571][ T8287] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 332.772077][ T8287] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.553: invalid indirect mapped block 4294967295 (level 1) [ 332.821502][ T8287] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.553: invalid indirect mapped block 4294967295 (level 1) [ 332.959624][ T8287] EXT4-fs (loop2): 2 truncates cleaned up [ 333.056601][ T8287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.898413][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'. [ 334.275185][ T8289] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 336.007740][ T8304] loop3: detected capacity change from 0 to 64 [ 336.167998][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.558'. [ 336.468638][ T8308] loop3: detected capacity change from 0 to 2048 [ 336.507359][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.593139][ T8308] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 336.698616][ T8308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.405948][ T8315] No such timeout policy "syz0" [ 337.423999][ T8313] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 337.558645][ T8317] fuse: Unknown parameter 'user_id00000000000000000000' [ 338.801126][ T8322] loop6: detected capacity change from 0 to 2048 [ 338.936105][ T8334] siw: device registration error -23 [ 339.320446][ T8322] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 339.356413][ T8333] loop3: detected capacity change from 0 to 256 [ 339.605425][ T8322] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 340.529922][ T8339] No such timeout policy "syz0" [ 341.869997][ T8349] loop4: detected capacity change from 0 to 64 [ 342.124718][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.571'. [ 343.152660][ T8353] loop2: detected capacity change from 0 to 512 [ 343.208488][ T8353] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.317257][ T8359] fuse: Unknown parameter 'user_id00000000000000000000' [ 343.358090][ T8353] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.572: invalid indirect mapped block 4294967295 (level 1) [ 343.407192][ T8353] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.572: invalid indirect mapped block 4294967295 (level 1) [ 343.423385][ T8353] EXT4-fs (loop2): 2 truncates cleaned up [ 343.431832][ T8353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.525650][ T8361] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 343.570762][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.576'. [ 344.421631][ T8369] loop4: detected capacity change from 0 to 2048 [ 344.505262][ T8369] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 344.582582][ T8369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.855492][ T8371] No such timeout policy "syz0" [ 344.879503][ T8371] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 346.267815][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.706241][ T8392] siw: device registration error -23 [ 348.268570][ T8395] loop5: detected capacity change from 0 to 64 [ 348.490925][ T8397] netlink: 24 bytes leftover after parsing attributes in process `syz.5.585'. [ 350.219383][ T8406] fuse: Unknown parameter 'user_id00000000000000000000' [ 350.260800][ T8411] loop4: detected capacity change from 0 to 512 [ 350.339451][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.589'. [ 351.737358][ T8419] loop6: detected capacity change from 0 to 256 [ 351.743748][ T8411] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 352.084427][ T8421] loop3: detected capacity change from 0 to 2048 [ 352.141159][ T8421] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 352.314424][ T8411] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.590: invalid indirect mapped block 4294967295 (level 1) [ 352.336296][ T8421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 353.192118][ T8411] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.590: invalid indirect mapped block 4294967295 (level 1) [ 353.566881][ T8435] loop2: detected capacity change from 0 to 2048 [ 353.600134][ T8411] EXT4-fs (loop4): 2 truncates cleaned up [ 353.617872][ T8435] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 353.755348][ T8411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.911811][ T8441] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 353.949993][ T8440] No such timeout policy "syz0" [ 354.216143][ T8435] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 354.613388][ T8446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.597'. [ 354.896273][ T8448] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 354.943631][ T8447] No such timeout policy "syz0" [ 355.109545][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.806790][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'. [ 359.236811][ T8469] Invalid source name [ 359.538311][ T8473] fuse: Bad value for 'fd' [ 360.526724][ T8477] loop6: detected capacity change from 0 to 256 [ 360.698403][ T8487] loop5: detected capacity change from 0 to 512 [ 360.881668][ T8487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 361.560721][ T8483] loop4: detected capacity change from 0 to 2048 [ 361.583240][ T8487] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.608: invalid indirect mapped block 4294967295 (level 1) [ 361.604361][ T8483] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 361.728991][ T8487] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.608: invalid indirect mapped block 4294967295 (level 1) [ 361.747570][ T8483] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 361.886749][ T8487] EXT4-fs (loop5): 2 truncates cleaned up [ 361.917713][ T8493] loop2: detected capacity change from 0 to 2048 [ 362.019377][ T8495] No such timeout policy "syz0" [ 362.039277][ T8495] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 362.322474][ T8487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.406111][ T8493] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 362.554351][ T8493] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 362.825956][ T8499] loop4: detected capacity change from 0 to 64 [ 363.222752][ T8501] No such timeout policy "syz0" [ 363.240997][ T8502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.611'. [ 363.259240][ T8501] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 364.200635][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.614'. [ 365.409925][ T8514] Invalid source name [ 365.781106][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 365.967229][ T7514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.795584][ T8524] fuse: Bad value for 'fd' [ 368.693569][ T8543] loop4: detected capacity change from 0 to 2048 [ 369.339546][ T8543] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 369.446595][ T8540] loop6: detected capacity change from 0 to 2048 [ 369.765680][ T8543] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 369.784402][ T8540] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 369.796763][ T8549] loop2: detected capacity change from 0 to 64 [ 369.949570][ T8540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 369.994867][ T8550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.624'. [ 370.379304][ T8552] No such timeout policy "syz0" [ 370.501724][ T8551] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 370.551661][ T8556] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 370.677323][ T8555] No such timeout policy "syz0" [ 371.177293][ T8560] loop2: detected capacity change from 0 to 512 [ 371.205483][ T8560] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 371.366426][ T8560] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.626: invalid indirect mapped block 4294967295 (level 1) [ 371.441589][ T8560] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.626: invalid indirect mapped block 4294967295 (level 1) [ 371.492821][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.628'. [ 371.543676][ T8560] EXT4-fs (loop2): 2 truncates cleaned up [ 372.025592][ T8560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.587067][ T8566] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 373.215372][ T8578] Invalid source name [ 373.491083][ T8584] loop6: detected capacity change from 0 to 1024 [ 373.818479][ T8588] loop5: detected capacity change from 0 to 256 [ 374.526045][ T8584] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.494363][ T8601] loop4: detected capacity change from 0 to 64 [ 376.569437][ T7951] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.722121][ T8602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.636'. [ 376.726557][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.986295][ T8604] loop2: detected capacity change from 0 to 2048 [ 377.053622][ T8604] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 377.116066][ T8604] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 377.393578][ T8610] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 378.510993][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.517682][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.629680][ T8617] loop4: detected capacity change from 0 to 2048 [ 378.766702][ T8617] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 378.809665][ T8617] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 379.219367][ T8623] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 379.269812][ T8622] No such timeout policy "syz0" [ 380.589523][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 381.473479][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.644'. [ 382.704123][ T8643] loop4: detected capacity change from 0 to 1024 [ 382.833233][ T8643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.936349][ T8650] loop6: detected capacity change from 0 to 512 [ 383.005384][ T8650] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 383.263696][ T8650] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.648: invalid indirect mapped block 4294967295 (level 1) [ 383.983379][ T8650] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.648: invalid indirect mapped block 4294967295 (level 1) [ 383.997298][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.047111][ T8650] EXT4-fs (loop6): 2 truncates cleaned up [ 384.116834][ T8650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.146569][ T8655] loop5: detected capacity change from 0 to 64 [ 384.357410][ T8656] netlink: 24 bytes leftover after parsing attributes in process `syz.5.651'. [ 384.558970][ T8662] loop3: detected capacity change from 0 to 22 [ 384.568980][ T8662] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 384.579034][ T8662] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 385.300517][ T8667] loop5: detected capacity change from 0 to 256 [ 385.942846][ T8669] loop4: detected capacity change from 0 to 2048 [ 385.981796][ T8669] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 386.038816][ T8669] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 386.153241][ T8671] loop2: detected capacity change from 0 to 1024 [ 386.321802][ T8671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.592873][ T8678] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 386.721657][ T8677] No such timeout policy "syz0" [ 386.915704][ T7951] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.758257][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.075129][ T8689] loop4: detected capacity change from 0 to 1024 [ 388.219079][ T8689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.413805][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 388.511043][ T8698] Invalid source name [ 388.840833][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.815690][ T8708] syz.6.664 (8708): drop_caches: 2 [ 390.454725][ T8718] loop6: detected capacity change from 0 to 1024 [ 391.011648][ T8720] loop3: detected capacity change from 0 to 2048 [ 391.081517][ T8720] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 391.180758][ T8720] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 391.638561][ T8725] No such timeout policy "syz0" [ 391.657417][ T8725] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 392.194894][ T8727] loop5: detected capacity change from 0 to 1024 [ 392.288653][ T8727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.490272][ T8736] netlink: 32 bytes leftover after parsing attributes in process `syz.2.672'. [ 392.595879][ T8736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.672'. [ 392.978738][ T8743] loop2: detected capacity change from 0 to 1024 [ 393.117892][ T8743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.638995][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.373686][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'. [ 396.028132][ T8757] netlink: 165 bytes leftover after parsing attributes in process `syz.4.676'. [ 396.558665][ T12] hfsplus: b-tree write err: -5, ino 4 [ 396.576649][ T8764] loop4: detected capacity change from 0 to 2048 [ 396.637530][ T8764] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 396.697987][ T8764] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 397.194755][ T8777] No such timeout policy "syz0" [ 397.215546][ T8777] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 397.687813][ T8781] loop2: detected capacity change from 0 to 256 [ 397.805230][ T8784] siw: device registration error -23 [ 398.237560][ T8781] FAT-fs (loop2): Directory bread(block 64) failed [ 398.275521][ T8781] FAT-fs (loop2): Directory bread(block 65) failed [ 398.297814][ T8781] FAT-fs (loop2): Directory bread(block 66) failed [ 398.318300][ T8781] FAT-fs (loop2): Directory bread(block 67) failed [ 398.347652][ T8781] FAT-fs (loop2): Directory bread(block 68) failed [ 398.375028][ T8781] FAT-fs (loop2): Directory bread(block 69) failed [ 398.408441][ T8781] FAT-fs (loop2): Directory bread(block 70) failed [ 398.468539][ T8781] FAT-fs (loop2): Directory bread(block 71) failed [ 398.515247][ T8781] FAT-fs (loop2): Directory bread(block 72) failed [ 398.526774][ T8781] FAT-fs (loop2): Directory bread(block 73) failed [ 398.725603][ T8788] netlink: 32 bytes leftover after parsing attributes in process `syz.3.684'. [ 398.767723][ T8788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.684'. [ 400.111466][ T8799] loop4: detected capacity change from 0 to 2048 [ 400.157723][ T8800] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 400.250200][ T5975] bio_check_eod: 4 callbacks suppressed [ 400.250212][ T5975] kworker/u8:8: attempt to access beyond end of device [ 400.250212][ T5975] loop2: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 400.317072][ T5975] kworker/u8:8: attempt to access beyond end of device [ 400.317072][ T5975] loop2: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 400.472916][ T5975] kworker/u8:8: attempt to access beyond end of device [ 400.472916][ T5975] loop2: rw=1, sector=1384, nr_sectors = 384 limit=256 [ 400.493079][ T5975] kworker/u8:8: attempt to access beyond end of device [ 400.493079][ T5975] loop2: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 400.510989][ T5975] kworker/u8:8: attempt to access beyond end of device [ 400.510989][ T5975] loop2: rw=1, sector=1960, nr_sectors = 432 limit=256 [ 401.900661][ T8812] netlink: 165 bytes leftover after parsing attributes in process `syz.2.689'. [ 402.286086][ T8818] loop2: detected capacity change from 0 to 22 [ 402.292992][ T8814] loop3: detected capacity change from 0 to 2048 [ 402.323143][ T8818] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 402.340274][ T8818] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 402.461703][ T8814] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 402.993905][ T8822] loop6: detected capacity change from 0 to 2048 [ 403.068865][ T8814] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.123454][ T8822] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 403.309530][ T8822] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.636908][ T8832] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 403.896997][ T8834] No such timeout policy "syz0" [ 403.909375][ T8834] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 404.828580][ T8841] loop6: detected capacity change from 0 to 64 [ 405.091942][ T8843] netlink: 24 bytes leftover after parsing attributes in process `syz.6.698'. [ 405.931828][ T8849] loop6: detected capacity change from 0 to 256 [ 405.971276][ T8849] FAT-fs (loop6): Directory bread(block 64) failed [ 405.989445][ T8849] FAT-fs (loop6): Directory bread(block 65) failed [ 406.055216][ T8849] FAT-fs (loop6): Directory bread(block 66) failed [ 406.064050][ T8849] FAT-fs (loop6): Directory bread(block 67) failed [ 406.108091][ T8849] FAT-fs (loop6): Directory bread(block 68) failed [ 406.199628][ T8849] FAT-fs (loop6): Directory bread(block 69) failed [ 406.234488][ T8849] FAT-fs (loop6): Directory bread(block 70) failed [ 406.254996][ T8849] FAT-fs (loop6): Directory bread(block 71) failed [ 406.261651][ T8849] FAT-fs (loop6): Directory bread(block 72) failed [ 406.365167][ T8849] FAT-fs (loop6): Directory bread(block 73) failed [ 406.680944][ T8854] loop3: detected capacity change from 0 to 2048 [ 406.785247][ T8855] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 406.925698][ T12] kworker/u8:0: attempt to access beyond end of device [ 406.925698][ T12] loop6: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 406.985222][ T12] kworker/u8:0: attempt to access beyond end of device [ 406.985222][ T12] loop6: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 407.076144][ T12] kworker/u8:0: attempt to access beyond end of device [ 407.076144][ T12] loop6: rw=1, sector=1384, nr_sectors = 32 limit=256 [ 407.135137][ T12] kworker/u8:0: attempt to access beyond end of device [ 407.135137][ T12] loop6: rw=1, sector=1448, nr_sectors = 32 limit=256 [ 407.291724][ T12] kworker/u8:0: attempt to access beyond end of device [ 407.291724][ T12] loop6: rw=1, sector=1512, nr_sectors = 32 limit=256 [ 407.968520][ T12] kworker/u8:0: attempt to access beyond end of device [ 407.968520][ T12] loop6: rw=1, sector=1576, nr_sectors = 32 limit=256 [ 408.055181][ T12] kworker/u8:0: attempt to access beyond end of device [ 408.055181][ T12] loop6: rw=1, sector=1640, nr_sectors = 32 limit=256 [ 408.069051][ T12] kworker/u8:0: attempt to access beyond end of device [ 408.069051][ T12] loop6: rw=1, sector=1704, nr_sectors = 32 limit=256 [ 408.082952][ T12] kworker/u8:0: attempt to access beyond end of device [ 408.082952][ T12] loop6: rw=1, sector=1800, nr_sectors = 32 limit=256 [ 408.113591][ T7514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.115190][ T12] kworker/u8:0: attempt to access beyond end of device [ 408.115190][ T12] loop6: rw=1, sector=1864, nr_sectors = 32 limit=256 [ 408.333243][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.705'. [ 409.367742][ T5827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 409.376042][ T5827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 409.383778][ T5827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 409.392713][ T5827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 409.400369][ T5827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 410.013203][ T8879] loop6: detected capacity change from 0 to 2048 [ 410.073405][ T8872] ip6_vti0 speed is unknown, defaulting to 1000 [ 410.158398][ T8879] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 410.241379][ T8879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.337908][ T8880] syz.3.707 (8880): drop_caches: 2 [ 411.229128][ T8893] loop2: detected capacity change from 0 to 256 [ 411.295682][ T8893] FAT-fs (loop2): Directory bread(block 64) failed [ 411.313840][ T8893] FAT-fs (loop2): Directory bread(block 65) failed [ 411.321832][ T8893] FAT-fs (loop2): Directory bread(block 66) failed [ 411.330385][ T8893] FAT-fs (loop2): Directory bread(block 67) failed [ 411.337050][ T8888] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 411.405449][ T8893] FAT-fs (loop2): Directory bread(block 68) failed [ 411.411980][ T8893] FAT-fs (loop2): Directory bread(block 69) failed [ 411.455251][ T8893] FAT-fs (loop2): Directory bread(block 70) failed [ 411.467070][ T8893] FAT-fs (loop2): Directory bread(block 71) failed [ 411.473860][ T8893] FAT-fs (loop2): Directory bread(block 72) failed [ 411.480948][ T5822] Bluetooth: hci6: command tx timeout [ 411.534910][ T8893] FAT-fs (loop2): Directory bread(block 73) failed [ 411.680939][ T8898] loop6: detected capacity change from 0 to 256 [ 412.040812][ T5987] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.227868][ T33] bio_check_eod: 16 callbacks suppressed [ 412.227892][ T33] kworker/u8:2: attempt to access beyond end of device [ 412.227892][ T33] loop2: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 412.261981][ T33] kworker/u8:2: attempt to access beyond end of device [ 412.261981][ T33] loop2: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 412.295610][ T33] kworker/u8:2: attempt to access beyond end of device [ 412.295610][ T33] loop2: rw=1, sector=1384, nr_sectors = 32 limit=256 [ 412.403974][ T33] kworker/u8:2: attempt to access beyond end of device [ 412.403974][ T33] loop2: rw=1, sector=1448, nr_sectors = 32 limit=256 [ 412.418553][ T33] kworker/u8:2: attempt to access beyond end of device [ 412.418553][ T33] loop2: rw=1, sector=1512, nr_sectors = 32 limit=256 [ 412.425576][ T5987] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.442699][ T33] kworker/u8:2: attempt to access beyond end of device [ 412.442699][ T33] loop2: rw=1, sector=1576, nr_sectors = 32 limit=256 [ 413.167516][ T33] kworker/u8:2: attempt to access beyond end of device [ 413.167516][ T33] loop2: rw=1, sector=1640, nr_sectors = 32 limit=256 [ 413.241456][ T33] kworker/u8:2: attempt to access beyond end of device [ 413.241456][ T33] loop2: rw=1, sector=1704, nr_sectors = 32 limit=256 [ 413.328048][ T33] kworker/u8:2: attempt to access beyond end of device [ 413.328048][ T33] loop2: rw=1, sector=1800, nr_sectors = 32 limit=256 [ 413.342975][ T33] kworker/u8:2: attempt to access beyond end of device [ 413.342975][ T33] loop2: rw=1, sector=1864, nr_sectors = 32 limit=256 [ 413.397108][ T5987] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.550989][ T5822] Bluetooth: hci6: command tx timeout [ 413.856392][ T5987] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.946367][ T8872] chnl_net:caif_netlink_parms(): no params data found [ 414.972835][ T8925] netlink: 24 bytes leftover after parsing attributes in process `syz.6.721'. [ 415.187809][ T8872] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.215181][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.222649][ T8872] bridge_slave_0: entered allmulticast mode [ 415.257598][ T8872] bridge_slave_0: entered promiscuous mode [ 415.267542][ T8872] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.274799][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.282926][ T8872] bridge_slave_1: entered allmulticast mode [ 415.345925][ T8872] bridge_slave_1: entered promiscuous mode [ 415.639214][ T5822] Bluetooth: hci6: command tx timeout [ 415.975970][ T5987] bridge_slave_1: left allmulticast mode [ 415.986032][ T5987] bridge_slave_1: left promiscuous mode [ 415.995437][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.045999][ T8938] loop4: detected capacity change from 0 to 1024 [ 416.110868][ T5987] bridge_slave_0: left allmulticast mode [ 416.145534][ T5987] bridge_slave_0: left promiscuous mode [ 416.146202][ T8935] loop6: detected capacity change from 0 to 2048 [ 416.167464][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.229537][ T8935] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 416.281392][ T8935] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.660871][ T8944] No such timeout policy "syz0" [ 416.679280][ T8944] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 417.706561][ T5822] Bluetooth: hci6: command tx timeout [ 418.918714][ T5975] hfsplus: b-tree write err: -5, ino 4 [ 419.757617][ T5987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.826690][ T5987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.876493][ T5987] bond0 (unregistering): Released all slaves [ 420.088900][ T8872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.168131][ T8872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.417715][ T8974] loop4: detected capacity change from 0 to 32768 [ 420.529139][ T8974] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 420.559962][ T8986] fuse: Unknown parameter 'fd0x0000000000000003' [ 420.990460][ T8992] loop6: detected capacity change from 0 to 32768 [ 421.064456][ T8992] XFS (loop6): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 421.171233][ T8992] XFS (loop6): Ending clean mount [ 421.211621][ T8872] team0: Port device team_slave_0 added [ 421.218332][ T8974] XFS (loop4): Ending clean mount [ 421.237706][ T8974] XFS (loop4): Quotacheck needed: Please wait. [ 421.271412][ T7951] XFS (loop6): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 421.364745][ T8974] XFS (loop4): Quotacheck: Done. [ 422.450456][ T8872] team0: Port device team_slave_1 added [ 422.459920][ T5825] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 423.232295][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.280147][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.457195][ T8872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.528232][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.576115][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.677595][ T8872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.946509][ T5987] hsr_slave_0: left promiscuous mode [ 423.953873][ T9029] netlink: 165 bytes leftover after parsing attributes in process `syz.6.742'. [ 423.969039][ T5987] hsr_slave_1: left promiscuous mode [ 423.996949][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.035546][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.146635][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.183757][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.401878][ T5987] veth1_macvtap: left promiscuous mode [ 424.441877][ T5987] veth0_macvtap: left promiscuous mode [ 424.550555][ T5987] veth1_vlan: left promiscuous mode [ 424.570689][ T5987] veth0_vlan: left promiscuous mode [ 427.106299][ T9069] loop3: detected capacity change from 0 to 64 [ 427.888941][ T9073] siw: device registration error -23 [ 428.716268][ T5987] team0 (unregistering): Port device team_slave_1 removed [ 428.860390][ T5987] team0 (unregistering): Port device team_slave_0 removed [ 432.136865][ T9107] loop2: detected capacity change from 0 to 64 [ 433.227149][ T9117] syz.2.765 (9117): drop_caches: 2 [ 434.552972][ T9128] loop6: detected capacity change from 0 to 512 [ 434.567147][ T9128] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 434.603652][ T9128] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.769: invalid indirect mapped block 4294967295 (level 1) [ 434.604196][ T9128] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.769: invalid indirect mapped block 4294967295 (level 1) [ 434.604786][ T9128] EXT4-fs (loop6): 2 truncates cleaned up [ 434.606377][ T9128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.676733][ T9123] loop2: detected capacity change from 0 to 32768 [ 434.685253][ T9123] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.767 (9123) [ 434.701549][ T9123] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 434.701635][ T9123] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 434.830068][ T31] INFO: task syz.1.455:7771 blocked for more than 143 seconds. [ 434.830094][ T31] Not tainted syzkaller #0 [ 434.830106][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.830117][ T31] task:syz.1.455 state:D stack:25512 pid:7771 tgid:7770 ppid:5820 task_flags:0x400140 flags:0x00080002 [ 434.830193][ T31] Call Trace: [ 434.830202][ T31] [ 434.830217][ T31] __schedule+0x17c4/0x4d60 [ 434.830269][ T31] ? __lock_acquire+0xab9/0xd20 [ 434.830295][ T31] ? __pfx___schedule+0x10/0x10 [ 434.830332][ T31] ? schedule+0x91/0x360 [ 434.830356][ T31] schedule+0x165/0x360 [ 434.830379][ T31] schedule_preempt_disabled+0x13/0x30 [ 434.830399][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 434.830426][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 434.830457][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 434.830504][ T31] down_read+0x98/0x2e0 [ 434.830532][ T31] lookup_slow+0x46/0x70 [ 434.830560][ T31] walk_component+0x2d2/0x400 [ 434.830583][ T31] ? path_lookupat+0x156/0x430 [ 434.830611][ T31] path_lookupat+0x163/0x430 [ 434.830650][ T31] filename_lookup+0x212/0x570 [ 434.830681][ T31] ? __pfx_filename_lookup+0x10/0x10 [ 434.830730][ T31] ? strncpy_from_user+0x150/0x290 [ 434.830757][ T31] ? getname_flags+0x1e5/0x540 [ 434.830784][ T31] user_path_at+0x3a/0x60 [ 434.830811][ T31] __se_sys_mount+0x2d4/0x410 [ 434.830840][ T31] ? __pfx___se_sys_mount+0x10/0x10 [ 434.830866][ T31] ? do_syscall_64+0xbe/0xfa0 [ 434.830887][ T31] ? __x64_sys_mount+0x20/0xc0 [ 434.830911][ T31] do_syscall_64+0xfa/0xfa0 [ 434.830933][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.830955][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.830976][ T31] ? clear_bhb_loop+0x60/0xb0 [ 434.831001][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.831026][ T31] RIP: 0033:0x7f3d0bb8efc9 [ 434.831048][ T31] RSP: 002b:00007f3d0cb00038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 434.831071][ T31] RAX: ffffffffffffffda RBX: 00007f3d0bde5fa0 RCX: 00007f3d0bb8efc9 [ 434.831087][ T31] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000000 [ 434.831102][ T31] RBP: 00007f3d0bc11f91 R08: 0000200000000340 R09: 0000000000000000 [ 434.831117][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.831131][ T31] R13: 00007f3d0bde6038 R14: 00007f3d0bde5fa0 R15: 00007ffd3e073c68 [ 434.831165][ T31] [ 434.831179][ T31] INFO: task syz.1.455:7776 blocked for more than 143 seconds. [ 434.831194][ T31] Not tainted syzkaller #0 [ 434.831205][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.831215][ T31] task:syz.1.455 state:D stack:26728 pid:7776 tgid:7770 ppid:5820 task_flags:0x400040 flags:0x00080002 [ 434.831276][ T31] Call Trace: [ 434.831284][ T31] [ 434.831297][ T31] __schedule+0x17c4/0x4d60 [ 434.831343][ T31] ? __lock_acquire+0xab9/0xd20 [ 434.831368][ T31] ? __pfx___schedule+0x10/0x10 [ 434.831405][ T31] ? schedule+0x91/0x360 [ 434.831428][ T31] schedule+0x165/0x360 [ 434.831451][ T31] schedule_preempt_disabled+0x13/0x30 [ 434.831472][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 434.831505][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 434.831541][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 434.831568][ T31] ? __lock_acquire+0xab9/0xd20 [ 434.831610][ T31] ? filename_create+0x1f8/0x3c0 [ 434.831647][ T31] ? mnt_get_write_access+0x66/0x280 [ 434.831682][ T31] down_write_nested+0x1b5/0x200 [ 434.831712][ T31] ? __pfx_down_write_nested+0x10/0x10 [ 434.831753][ T31] filename_create+0x1f8/0x3c0 [ 434.831787][ T31] ? __pfx_filename_create+0x10/0x10 [ 434.831826][ T31] do_mkdirat+0xa0/0x590 [ 434.831858][ T31] ? __pfx_do_mkdirat+0x10/0x10 [ 434.831888][ T31] ? getname_flags+0x1e5/0x540 [ 434.831915][ T31] __x64_sys_mkdirat+0x87/0xa0 [ 434.831946][ T31] do_syscall_64+0xfa/0xfa0 [ 434.831967][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.831989][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.832010][ T31] ? clear_bhb_loop+0x60/0xb0 [ 434.832036][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.832056][ T31] RIP: 0033:0x7f3d0bb8efc9 [ 434.832073][ T31] RSP: 002b:00007f3d0cabe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 434.832095][ T31] RAX: ffffffffffffffda RBX: 00007f3d0bde6180 RCX: 00007f3d0bb8efc9 [ 434.832112][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 434.832127][ T31] RBP: 00007f3d0bc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 434.832141][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.832155][ T31] R13: 00007f3d0bde6218 R14: 00007f3d0bde6180 R15: 00007ffd3e073c68 [ 434.832189][ T31] [ 434.832228][ T31] [ 434.832228][ T31] Showing all locks held in the system: [ 434.832240][ T31] 3 locks held by kworker/u8:1/13: [ 434.832253][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x841/0x15d0 [ 434.832322][ T31] #1: ffffc90000127ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x868/0x15d0 [ 434.832384][ T31] #2: ffffffff8f2d4b88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 434.832446][ T31] 1 lock held by khungtaskd/31: [ 434.832458][ T31] #0: ffffffff8df3d960 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 434.832534][ T31] 1 lock held by dhcpcd/5491: [ 434.832547][ T31] #0: ffffffff8f2d4b88 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50 [ 434.832632][ T31] 2 locks held by getty/5578: [ 434.832644][ T31] #0: ffff88814d46f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 434.832700][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 434.832765][ T31] 4 locks held by kworker/1:4/5886: [ 434.832781][ T31] 5 locks held by kworker/u8:14/5987: [ 434.832793][ T31] #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x841/0x15d0 [ 434.832851][ T31] #1: ffffc90004d87ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x868/0x15d0 [ 434.832908][ T31] #2: ffffffff8f2c7610 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 434.832965][ T31] #3: ffffffff8f2d4b88 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 434.833019][ T31] #4: ffffffff8df433f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 434.833083][ T31] 3 locks held by kworker/u8:16/5990: [ 434.833105][ T31] #0: ffff88802fe20948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x841/0x15d0 [ 434.833162][ T31] #1: ffffc90004ca7ba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x868/0x15d0 [ 434.833221][ T31] #2: ffffffff8f2d4b88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 434.833284][ T31] 4 locks held by udevd/6118: [ 434.833297][ T31] #0: ffffffff8dff7610 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x131/0x4b0 [ 434.833356][ T31] #1: ffff88807aca9760 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x126/0x1b10 [ 434.833413][ T31] #2: ffff888031fe9760 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x212/0x1b10 [ 434.833475][ T31] #3: ffff888029dcd7e8 (&anon_vma->rwsem){++++}-{4:4}, at: anon_vma_clone+0x125/0x4f0 [ 434.833534][ T31] 2 locks held by udevd/6124: [ 434.833547][ T31] 1 lock held by syz.1.455/7771: [ 434.833560][ T31] #0: ffff888058a841c0 (&type->i_mutex_dir_key#11){++++}-{4:4}, at: lookup_slow+0x46/0x70 [ 434.833632][ T31] 2 locks held by syz.1.455/7775: [ 434.833645][ T31] 2 locks held by syz.1.455/7776: [ 434.833657][ T31] #0: ffff8880329f8420 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 434.833722][ T31] #1: ffff888058a841c0 (&type->i_mutex_dir_key#11/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0 [ 434.833798][ T31] 2 locks held by syz-executor/8872: [ 434.833811][ T31] #0: ffffffff8f7f3050 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 434.833872][ T31] #1: ffffffff8f2d4b88 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 434.833926][ T31] 1 lock held by syz.4.766/9115: [ 434.833938][ T31] #0: ffff88802fd1b068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x48/0x330 [ 434.833992][ T31] 1 lock held by syz.4.766/9118: [ 434.834004][ T31] #0: ffff88802fd1b068 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x2e/0x440 [ 434.834060][ T31] 1 lock held by syz.4.766/9119: [ 434.834071][ T31] #0: ffff88802fd1b068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_fasync+0x4c/0x1e0 [ 434.834125][ T31] 2 locks held by syz.2.767/9123: [ 434.834137][ T31] #0: ffff888051e960e0 (&type->s_umount_key#76/1){+.+.}-{4:4}, at: alloc_super+0x1bb/0x960 [ 434.834208][ T31] #1: ffffffff8dde3f48 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9f0/0x1b80 [ 434.834273][ T31] 1 lock held by syz.3.768/9125: [ 434.834284][ T31] #0: ffffffff8df432c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 434.834347][ T31] 1 lock held by syz.6.769/9127: [ 434.834360][ T31] #0: ffff888031feace0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x211/0x4d0 [ 434.834423][ T31] 2 locks held by syz.6.769/9128: [ 434.834436][ T31] [ 434.834443][ T31] ============================================= [ 434.834443][ T31] [ 434.834453][ T31] NMI backtrace for cpu 0 [ 434.834474][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 434.834494][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.834506][ T31] Call Trace: [ 434.834513][ T31] [ 434.834520][ T31] dump_stack_lvl+0x189/0x250 [ 434.834551][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.834579][ T31] ? __pfx__printk+0x10/0x10 [ 434.834616][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 434.834645][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 434.834673][ T31] ? __pfx__printk+0x10/0x10 [ 434.834697][ T31] ? debug_show_all_locks+0x2e/0x180 [ 434.834714][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 434.834737][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 434.834767][ T31] watchdog+0xfa9/0xff0 [ 434.834793][ T31] ? watchdog+0x1f4/0xff0 [ 434.834822][ T31] kthread+0x711/0x8a0 [ 434.834852][ T31] ? __pfx_watchdog+0x10/0x10 [ 434.834873][ T31] ? __pfx_kthread+0x10/0x10 [ 434.834902][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.834923][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.834938][ T31] ? __pfx_kthread+0x10/0x10 [ 434.834962][ T31] ret_from_fork+0x4bc/0x870 [ 434.834985][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 434.835019][ T31] ? __switch_to_asm+0x39/0x70 [ 434.835036][ T31] ? __switch_to_asm+0x33/0x70 [ 434.835051][ T31] ? __pfx_kthread+0x10/0x10 [ 434.835079][ T31] ret_from_fork_asm+0x1a/0x30 [ 434.835107][ T31] [ 434.835901][ T31] Sending NMI from CPU 0 to CPUs 1: [ 434.835928][ C1] NMI backtrace for cpu 1 [ 434.835941][ C1] CPU: 1 UID: 0 PID: 5985 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 434.835959][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.835970][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 434.835996][ C1] RIP: 0010:memset_orig+0x3a/0xb0 [ 434.836017][ C1] Code: 01 48 0f af c1 41 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 00 00 00 00 00 48 ff c9 48 89 07 48 89 47 08 <48> 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 [ 434.836032][ C1] RSP: 0018:ffffc90004d67638 EFLAGS: 00000202 [ 434.836045][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 434.836056][ C1] RDX: 0000000000000200 RSI: 0000000000000000 RDI: ffffc90004d67700 [ 434.836066][ C1] RBP: ffffc90004d67870 R08: dffffc0000000000 R09: 0000000000000000 [ 434.836078][ C1] R10: ffffc90004d67640 R11: fffffbfff1efae8f R12: ffff88813fe27140 [ 434.836090][ C1] R13: 0000000000000000 R14: ffff88807b97a008 R15: ffffc90004d67640 [ 434.836102][ C1] FS: 0000000000000000(0000) GS:ffff888125fe2000(0000) knlGS:0000000000000000 [ 434.836116][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.836127][ C1] CR2: 00007ff449b67000 CR3: 0000000033968000 CR4: 00000000003526f0 [ 434.836142][ C1] Call Trace: [ 434.836148][ C1] [ 434.836154][ C1] kasan_save_track+0x2f/0x80 [ 434.836182][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 434.836206][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.836223][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 434.836246][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 434.836270][ C1] ? crng_make_state+0x13a/0x700 [ 434.836294][ C1] ? debug_check_no_obj_freed+0x451/0x470 [ 434.836317][ C1] kasan_save_free_info+0x46/0x50 [ 434.836332][ C1] __kasan_slab_free+0x5c/0x80 [ 434.836350][ C1] ? skb_release_data+0x62d/0x7c0 [ 434.836367][ C1] kfree+0x19a/0x6d0 [ 434.836385][ C1] skb_release_data+0x62d/0x7c0 [ 434.836406][ C1] consume_skb+0x9e/0xf0 [ 434.836421][ C1] nsim_dev_trap_report_work+0x7cf/0xb80 [ 434.836453][ C1] ? process_one_work+0x868/0x15d0 [ 434.836472][ C1] process_one_work+0x94a/0x15d0 [ 434.836489][ C1] ? __lock_acquire+0xab9/0xd20 [ 434.836515][ C1] ? __pfx_process_one_work+0x10/0x10 [ 434.836537][ C1] ? assign_work+0x3a1/0x410 [ 434.836557][ C1] worker_thread+0x9b0/0xee0 [ 434.836586][ C1] kthread+0x711/0x8a0 [ 434.836609][ C1] ? __pfx_worker_thread+0x10/0x10 [ 434.836628][ C1] ? __pfx_kthread+0x10/0x10 [ 434.836650][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.836665][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.836679][ C1] ? __pfx_kthread+0x10/0x10 [ 434.836702][ C1] ret_from_fork+0x4bc/0x870 [ 434.836720][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 434.836741][ C1] ? __switch_to_asm+0x39/0x70 [ 434.836755][ C1] ? __switch_to_asm+0x33/0x70 [ 434.836768][ C1] ? __pfx_kthread+0x10/0x10 [ 434.836791][ C1] ret_from_fork_asm+0x1a/0x30 [ 434.836812][ C1] [ 434.863535][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 434.863554][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 434.863576][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.863588][ T31] Call Trace: [ 434.863596][ T31] [ 434.863619][ T31] dump_stack_lvl+0x99/0x250 [ 434.863651][ T31] ? __asan_memcpy+0x40/0x70 [ 434.863673][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.863701][ T31] ? __pfx__printk+0x10/0x10 [ 434.863733][ T31] vpanic+0x237/0x6d0 [ 434.863761][ T31] ? __pfx_vpanic+0x10/0x10 [ 434.863788][ T31] ? preempt_schedule+0xae/0xc0 [ 434.863814][ T31] panic+0xb9/0xc0 [ 434.863841][ T31] ? __pfx_panic+0x10/0x10 [ 434.863871][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 434.863899][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 434.863929][ T31] watchdog+0xfe8/0xff0 [ 434.863957][ T31] ? watchdog+0x1f4/0xff0 [ 434.863985][ T31] kthread+0x711/0x8a0 [ 434.864016][ T31] ? __pfx_watchdog+0x10/0x10 [ 434.864038][ T31] ? __pfx_kthread+0x10/0x10 [ 434.864066][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.864084][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.864103][ T31] ? __pfx_kthread+0x10/0x10 [ 434.864130][ T31] ret_from_fork+0x4bc/0x870 [ 434.864156][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 434.864186][ T31] ? __switch_to_asm+0x39/0x70 [ 434.864203][ T31] ? __switch_to_asm+0x33/0x70 [ 434.864220][ T31] ? __pfx_kthread+0x10/0x10 [ 434.864248][ T31] ret_from_fork_asm+0x1a/0x30 [ 434.864283][ T31] [ 434.864537][ T31] Kernel Offset: disabled