last executing test programs: 14m8.346365509s ago: executing program 0 (id=260): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x2) 14m6.355690344s ago: executing program 0 (id=265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 14m5.44496669s ago: executing program 0 (id=269): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000440), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000140)) write$binfmt_script(r0, &(0x7f0000000080), 0xfea7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_LK(r4, &(0x7f0000000280)={0x28, 0x0, 0x0, {{0x6, 0x1, 0x2}}}, 0x28) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) ftruncate(r1, 0x3af001) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000030605000000008000000000050000040900022673797a31030000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 14m1.045678394s ago: executing program 0 (id=280): socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x140, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2b442, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_io_uring_setup(0x42e9, &(0x7f0000000200)={0x0, 0xfe3a, 0x0, 0x3, 0x20000}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, 0x0, 0x0}, 0x20) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 13m56.200038511s ago: executing program 0 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 13m53.110735044s ago: executing program 0 (id=293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d61436", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 13m37.586344021s ago: executing program 32 (id=293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d61436", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 3.625809982s ago: executing program 5 (id=3060): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xf0, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x0, 0xfd}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x50, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x7}}, @TCA_ROUTE4_ACT={0x34, 0x6, [@m_ctinfo={0x30, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.770486579s ago: executing program 5 (id=3066): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200), 0x8, &(0x7f00000012c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.62610241s ago: executing program 5 (id=3069): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r0, 0x801, 0x200000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x58}}, 0x0) 2.464680361s ago: executing program 5 (id=3073): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket(0x1, 0x2, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='cpuacct'}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x3, 0x1) syz_emit_ethernet(0xf2, 0x0, 0x0) 2.388743132s ago: executing program 4 (id=3076): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x2, 0x0, 0x0, {[@mss={0x2, 0x4, 0x5}, @fastopen={0x22, 0x4, "c5a9"}]}}}}}}}}, 0x0) 2.368809802s ago: executing program 1 (id=3077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000b06010800000000000000000600000205000100070800002c0007801800018014000240fc020000000000000000000000000000060004404e21000005000700060000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x24008041}, 0x4048990) 2.147430304s ago: executing program 1 (id=3078): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x101a02, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xf, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x140, 0x0) socket$rds(0x15, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) epoll_create1(0x0) socket$tipc(0x1e, 0x5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2b442, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_io_uring_setup(0x42e9, &(0x7f0000000200)={0x0, 0xfe3a, 0x0, 0x3, 0x20000}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, 0x0, 0x0}, 0x20) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x12, 0x6000, @fd=r0, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 2.142158353s ago: executing program 3 (id=3080): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000000)={'wlan1\x00', @random="e318f2f1de09"}) 2.141465903s ago: executing program 4 (id=3081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.553733908s ago: executing program 1 (id=3082): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5}}, @TCA_HTB_INIT={0x6a, 0x2, {0x3, 0x9, 0x6}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) 1.553646748s ago: executing program 3 (id=3083): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4, r1}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000001b80)={@local, @link_local, @void}, 0x0) 1.523506958s ago: executing program 2 (id=3084): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_SSID={0x5, 0x34, @random="f7"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0xca004}, 0x0) 1.450383709s ago: executing program 4 (id=3085): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x80, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x9}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x80}, 0x1, 0xba01}, 0x0) 1.411618429s ago: executing program 1 (id=3086): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2c82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) readv(r0, &(0x7f0000001700)=[{&(0x7f0000000080)=""/199, 0xc7}], 0x1) 1.400673439s ago: executing program 5 (id=3087): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x140d, 0x4, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x30000040}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1.384554649s ago: executing program 2 (id=3088): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 1.34814562s ago: executing program 2 (id=3089): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x3000892, &(0x7f0000000180)=ANY=[@ANYBLOB='map=normal,mode=0x0000000000000001,check=relaxed,iocharset=cp863,sbsector=0x0000000000000000,map=acorn,check=strict,norock,\x00\x00uft,cruft,map=acorn,session=0x0000000000000031,\x00'], 0x1, 0xa14, &(0x7f0000000dc0)="$eJzs3U1sXOW5B/D/8UdiDEoC5HK5CMgk3AQDvo7tXJIbseAm9iQx146vbEci6oJQ4lRp3NKSVgJUiSBVXRW1Uqsu2h3qqt0gsSmbil27a1ddVKpYdY+6Sleuzsw4HtszHts4dgi/X3Q85+M57/uczzczPp43fLks7l8xtbhYG7Y4fek3O5Ax97Cz4599+NEH5fD+rexJd14sfpf0JakkPUkeT3rHxmempzoUdCO5kuTTpEiyN/XXDbmS4id5aHn60xS/Kutta89GS6aTRb7Sdvv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAe1ExNj48PFLsycTFS69W6pLKGmPjM9NFFhfXLllap+6TWq/fxScd602Kckhf31JX348fXF78WJLKkTxZn3qy1iF5+vLug48deOnRnq6l9dtl84Xs3XixN99598brCwvzb7UPWXyvvg3bk9s95nz14sTs9MTUmfPVysTsdOX0yZPDxy+cm62cm5iszl6enatOVcZmqmfmpmcqA2PPVUZOnz5RqQ5dnr508fz40GR1aeap/xodHj5ZeWXo/6tnZmanLx5/ZWh27MLE5OTExfO1mHJxGXOqPBH/b2KuMlc9M1WpXLu+MH9iVU7dq3d2GTTSaUvKoNFOQaPDo6MjI6OjI+83es++M+Pki6dfPDU83DO8StZE3KWTlnvLA+0P8zbfwWHruurtf745mYlczKW8mkrLf2MZz0ymM9VmecNS+3/0eHXdepvb/0Yr39O0+Inyx5E83Zjsa9P+t8ll5/7dzDt5NzfyehaykPm8tesZ7ey/86nmYiYym+lMZCpnanMqjTmVnM7JnMxwXsuFHMpsKjmXiUymmtlczmzmUq2dUWOZSTVnMpfpzKSSgYzluVQyktM5nROppJqhXM507Sw5n/GcqZVyLddr+/3EOjneCRrZSNDoOkGrG/PyXN9c+1+9X/8nyIZt/00ctmix0f7v6Rw6MLYTCQEAAADb7j/+mH0HH/nD35IiT9U+lz83MVl9ebfTAgAAALZR7XG9J8uX3nLsqb7a+//h3U4LAAAA2EZF7W/siiT9OVQfW/pLKB8CAAAAwH2i9vv/p1McWp7h/T8AAADcZzp/x37HiGJw6et/K1frr1cbEfWpov/cxGR1aGx68qWRHKt9y0CSp9aW1p0UvbU/P3g+h+tRh/vrr/3LJZZ19pVRI0MvjeT5HGlsyMAz5cszAy0iR+uRz9Yjn22O7M6KyBNlJADc746s0x5vtP1/PoP1iMEnak1+zxMt2uBhLSsA3Cvu9LHzz0aXZi3a/0bE0+3a//9e5/1/GfFIrh2qP1IwlDfyZhZyNYNpPHFwqFWpS70R1B9DGOzwaUB/45GFP5/qyuCazwP67mxrc+x8RjPY8hOBpnKLpRxO1OO6784xAICddmTddnhj7f9gh/f//R4pBIB7yp0e7Dcx8t5mguffurnb2wgArKSVBgAAAAAAAAAAAAAAAAAAAAAAAAAAgO23oS/w/9OxZGFhPtlCZwFbHunbTIbrj3Rlh3JujPQm2bkd1TzSnWTHK22MvJxNr9X3xXbUbx9orP73Xdrk+3lkl29MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7Igi6W41vyvZm2Q4yfGdz+ruubXbCWyXyp4trVbczu28nX3bng8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFdc4/v/u1J/fbA+Kz1dydEkV5J8bbdz3E63dzuBu6PoHPKteuDy9/93Jb1ZLNJTP+wpesfGZ6anyqKKveXyzz786INy6Fz22l4VygLKGlZ0LtGooWlO78q1Hq6t1T8+f/PG9978TmX8bO3EPDt3bnJ86vzM/y4HPlZ8nFRSH5Ys5fuDo7//adPsRkcJxcfllra2ut5ztXrH19b7763WblPvBlxfmB8ta5qrvjr3/W9ff7tp0SM5nDwzkAysrOkb5dCmpsOr9+dKxefFj4p9+UWu1I5/uTeKxaI8RPtr2//AtesL80NvvLlw9U5O763I6UAOJbma9G08p0Ptz83aWdfVW9Y6XAsqfxzsUN66mkocqW1DeWau3K8P106Z/k1tQ6XD9dVhvzcyOtHySP/su4/mWONId284o2Mdamyp+Lz4a3Ehf8kPm/r/6CqP/9G0vDpbFFGLbDpTmpetuLy6ji5v+WjzgtdWl9n2quQu+HG+nv+5c/y7mu7/jWO1M/ejphpbXxfJ8nWx0Rp/vX9Ni7Ks1iIdXNUiNe4+7dZp5HmwHtUmz3/LC/UyN3FHeaFTi32Xrv9fFgP5R27p/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALj3FUl3q/ldydEkB5LsL6cryeLqmFtbqK+rv9hKmttmKzl/+RRtN7S4ndt5O/t2OiMAAAAAAAAA7o6z4599+NEH5VD7fXx3/rOrsaSS9CQ5UPy8d2x8ZnqqQ0G9yZWlX+n3bS6HK+WPh5anPy2nHu+w0u4+PgAAX2r/CgAA//8S8Ws4") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/85, 0x55) 1.27522904s ago: executing program 1 (id=3090): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000000580)=""/4056, &(0x7f00000004c0)=0xfd8) 1.27470639s ago: executing program 3 (id=3091): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xd, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) 1.24360669s ago: executing program 2 (id=3092): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16], 0x86, 0x2a9, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101001, 0x0) fallocate(r0, 0x0, 0x0, 0x3) 1.211759671s ago: executing program 4 (id=3093): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xa00008, &(0x7f0000000100), 0xf9, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6611, 0x0) 1.144186861s ago: executing program 3 (id=3094): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x20) 1.143600211s ago: executing program 2 (id=3095): r0 = socket(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x84, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x0, 0xfd}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xff, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x81}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4000, 0x20, &(0x7f0000000300)) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000540)={'batadv_slave_0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 983.967822ms ago: executing program 3 (id=3096): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x101a02, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xf, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x140, 0x0) socket$rds(0x15, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) epoll_create1(0x0) socket$tipc(0x1e, 0x5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2b442, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_io_uring_setup(0x42e9, &(0x7f0000000200)={0x0, 0xfe3a, 0x0, 0x3, 0x20000}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, 0x0, 0x0}, 0x20) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x12, 0x6000, @fd=r0, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 942.391503ms ago: executing program 4 (id=3106): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) 896.776613ms ago: executing program 5 (id=3097): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000900)={[{@acl}, {@usrjquota_file, 0x4}, {@acl}, {@balloc_hashed_reloc}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$eJzs2L1qVEEYBuB3zi4aq5WT/iBoKSFh7axSRNjW2kZiKlNlq4gg3ouXI6nsQy7AIr0wcs7uuiIRld0ggeeB+eGbb/7KmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDC877abZJ2FWmSlKTrLmZXSbpV/OHnUZOSlyez+dHZ9MU8yWhIL33pZ/XT0h483mmn7bQ9aJ/tHj5p5+fv3r4+PT05Wy5T0uXyevsXKcvz3GinbH9DAAAAuCPqxia/Ljledf7mxb35/gAAAMCfbP1DAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAf1cm63yb5VmtNk6QkXXcxu0rS/c8DAgAAABsrafJqclM8wzfA2tN8mZQhviw1Q85+Pg3z769Tj5s8uPWTAwAAwF0yXjT3fp9RfnqPv8k4tdYPq7FHGWdvb9Hvm37g62EyOj/K/o83+cehvrx+f7wqpY5u8U4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfGcHDkgAAAAABP1/3Y5AAQAAAAAAAAAAAAAAAAAAAAAAAHgoAAD//z1A3fg=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, 0x0, 0x0) 896.570383ms ago: executing program 4 (id=3098): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket(0x1, 0x2, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='cpuacct'}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x3, 0x1) syz_emit_ethernet(0xf2, 0x0, 0x0) 105.568659ms ago: executing program 1 (id=3099): syz_mount_image$jfs(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c002, &(0x7f0000000380)={[{@discard}, {@discard_size={'discard', 0x3d, 0x20001}}, {@discard}, {@nodiscard}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@errors_remount}, {@grpquota}, {@gid}]}, 0x23, 0x61c3, &(0x7f000000c9c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 22.372939ms ago: executing program 2 (id=3100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020022000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000008080002400000001b0900020073797a3200000000050007402400000014000000110001"], 0x84}}, 0x0) 0s ago: executing program 3 (id=3101): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0xfffffffd, {{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x0, 0x0, 0x0, 0xfffa, 0xa, 0x0, 0x26b9ffe36856e205, 0x2f}, {0x0, 0x0, 0x400000, 0x0, 0xd, 0x0, 0x0, 0xfffffffffffffffc}, {0x40}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d91e00", 0x14, 0x3a, 0xff, @private1, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @loopback}}}}}}, 0x0) kernel console output (not intermixed with test programs): IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.127771][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.129831][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.133412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.286375][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.288313][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.341405][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.343512][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.403046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.405683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.320994][ T4121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 52.411688][ T1770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.426298][ T1770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.438739][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.553842][ T4128] netlink: 'syz.1.11': attribute type 10 has an invalid length. [ 52.558705][ T4128] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.561225][ T4128] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.606792][ T4128] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.608547][ T4128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.610877][ T4128] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.612738][ T4128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.636863][ T4128] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 52.639185][ T4129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 52.641304][ T4129] device bridge_slave_1 left promiscuous mode [ 52.648658][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.720344][ T4129] device bridge_slave_0 left promiscuous mode [ 52.722008][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.916842][ T4129] bond0: (slave bridge0): Releasing backup interface [ 52.922693][ T4134] loop2: detected capacity change from 0 to 40427 [ 52.980113][ T4134] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 52.982092][ T4134] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 52.984988][ T4106] Bluetooth: hci0: command 0x0419 tx timeout [ 52.986495][ T4106] Bluetooth: hci1: command 0x0419 tx timeout [ 53.113018][ T4072] Bluetooth: hci2: command 0x0419 tx timeout [ 53.120222][ T4072] Bluetooth: hci3: command 0x0419 tx timeout [ 53.125528][ T4072] Bluetooth: hci4: command 0x0419 tx timeout [ 53.162366][ T4134] F2FS-fs (loop2): Found nat_bits in checkpoint [ 53.187937][ T4134] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 53.189840][ T4134] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 55.042814][ T4144] attempt to access beyond end of device [ 55.042814][ T4144] loop2: rw=2049, want=45104, limit=40427 [ 55.274289][ T26] audit: type=1326 audit(55.220:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f799d28 code=0x7ffc0000 [ 55.289914][ T26] audit: type=1326 audit(55.230:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7f799d28 code=0x7ffc0000 [ 55.313139][ T26] audit: type=1326 audit(55.230:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f799d28 code=0x7ffc0000 [ 55.328353][ T26] audit: type=1326 audit(55.230:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=4 compat=0 ip=0xffff7f799d28 code=0x7ffc0000 [ 55.338790][ T26] audit: type=1326 audit(55.230:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f799d28 code=0x7ffc0000 [ 55.343930][ T26] audit: type=1326 audit(55.230:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7f799d28 code=0x7ffc0000 [ 55.350929][ T26] audit: type=1326 audit(55.230:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f799d28 code=0x7ffc0000 [ 55.356478][ T26] audit: type=1326 audit(55.230:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff7f799d28 code=0x7ffc0000 [ 55.395958][ T26] audit: type=1326 audit(55.230:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f799d28 code=0x7ffc0000 [ 55.415912][ T26] audit: type=1326 audit(55.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4157 comm="syz.3.19" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7f799d28 code=0x7ffc0000 [ 55.428777][ T4161] udc-core: couldn't find an available UDC or it's busy [ 55.430581][ T4161] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.795536][ T4171] loop2: detected capacity change from 0 to 16 [ 55.846287][ T4171] erofs: (device loop2): mounted with root inode @ nid 36. [ 56.326149][ T4185] netlink: 64 bytes leftover after parsing attributes in process `syz.2.24'. [ 56.671674][ T4189] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.26'. [ 57.409368][ T4206] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.864077][ C1] sched: RT throttling activated [ 62.204194][ T4234] IPv6: addrconf: prefix option has invalid lifetime [ 62.205915][ T4234] IPv6: addrconf: prefix option has invalid lifetime [ 62.208945][ T4234] fuse: Bad value for 'fd' [ 62.263027][ T4225] netlink: 'syz.3.37': attribute type 10 has an invalid length. [ 62.278487][ T4225] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.280387][ T4225] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.309773][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.311673][ T4225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.313839][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.315745][ T4225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.355437][ T4225] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 62.358118][ T4238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 62.360241][ T4238] device bridge_slave_1 left promiscuous mode [ 62.361726][ T4238] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.442177][ T4242] netlink: 68 bytes leftover after parsing attributes in process `syz.2.42'. [ 62.470138][ T4238] device bridge_slave_0 left promiscuous mode [ 62.471652][ T4238] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.505759][ T4233] loop0: detected capacity change from 0 to 4096 [ 62.575434][ T4233] ======================================================= [ 62.575434][ T4233] WARNING: The mand mount option has been deprecated and [ 62.575434][ T4233] and is ignored by this kernel. Remove the mand [ 62.575434][ T4233] option from the mount to silence this warning. [ 62.575434][ T4233] ======================================================= [ 62.623860][ T4233] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 64.761498][ T4238] bond0: (slave bridge0): Releasing backup interface [ 65.019359][ T4265] dccp_close: ABORT with 32 bytes unread [ 65.634218][ T4271] process 'syz.4.49' launched './file1' with NULL argv: empty string added [ 68.007971][ T3606] Bluetooth: hci4: command 0x0405 tx timeout [ 68.444532][ T4294] Zero length message leads to an empty skb [ 68.483587][ T4294] device sit1 entered promiscuous mode [ 69.998727][ T1962] cfg80211: failed to load regulatory.db [ 70.042880][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.057970][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.232452][ T4301] device netdevsim0 entered promiscuous mode [ 70.265054][ T4301] device netdevsim0 left promiscuous mode [ 71.551855][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 71.551867][ T26] audit: type=1326 audit(71.510:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4322 comm="syz.1.67" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa016cd28 code=0x0 [ 71.605003][ T4321] netlink: 'syz.2.65': attribute type 10 has an invalid length. [ 71.607177][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.609276][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.653927][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.655824][ T4321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.657763][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.659439][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.687133][ T4321] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 71.704710][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 71.707592][ T4331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'. [ 71.709680][ T4331] device bridge_slave_1 left promiscuous mode [ 71.725589][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.828334][ T4331] device bridge_slave_0 left promiscuous mode [ 71.830011][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.741794][ T4331] bond0: (slave bridge0): Releasing backup interface [ 74.079557][ T4348] netlink: 64 bytes leftover after parsing attributes in process `syz.3.72'. [ 74.905307][ T4334] netlink: 36 bytes leftover after parsing attributes in process `syz.4.70'. [ 75.313382][ T4358] netlink: 71 bytes leftover after parsing attributes in process `syz.1.77'. [ 75.658487][ T4366] loop1: detected capacity change from 0 to 512 [ 76.873161][ T4366] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 76.897396][ T4369] loop0: detected capacity change from 0 to 128 [ 76.912312][ T4366] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.109579][ T4366] EXT4-fs (loop1): 1 truncate cleaned up [ 77.111026][ T4366] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,nombcache,barrier=0x000000000000ffff,nodelalloc,noblock_validity,barrier=0x0000000000000000,,errors=continue. Quota mode: none. [ 78.905368][ T4369] EXT4-fs: failed to create workqueue [ 78.916644][ T4369] EXT4-fs (loop0): mount failed [ 79.014981][ T4388] loop2: detected capacity change from 0 to 2048 [ 79.301747][ T4392] sctp: [Deprecated]: syz.3.84 (pid 4392) Use of int in max_burst socket option. [ 79.301747][ T4392] Use struct sctp_assoc_value instead [ 80.103737][ T4388] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 80.423383][ T4387] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 81.187922][ T4387] EXT4-fs (loop2): Remounting filesystem read-only [ 83.028132][ T4432] loop0: detected capacity change from 0 to 128 [ 83.112406][ T4434] binder: 4433:4434 tried to acquire reference to desc 0, got 1 instead [ 83.126883][ T4434] binder: 4433:4434 got transaction with invalid parent offset or type [ 83.129183][ T4434] binder: 4433:4434 transaction failed 29201/-22, size 80-24 line 3286 [ 83.230876][ T4107] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.304313][ T4432] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.316166][ T4437] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 83.337673][ T4432] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.96: No space for directory leaf checksum. Please run e2fsck -D. [ 83.341533][ T4432] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.96: checksumming directory block 0 [ 83.539921][ T4445] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.96: No space for directory leaf checksum. Please run e2fsck -D. [ 83.549822][ T4445] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.96: checksumming directory block 0 [ 83.557144][ T4432] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.96: No space for directory leaf checksum. Please run e2fsck -D. [ 84.320900][ T4432] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.96: checksumming directory block 0 [ 84.380533][ T4445] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.96: No space for directory leaf checksum. Please run e2fsck -D. [ 84.405204][ T4445] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.96: checksumming directory block 0 [ 84.459684][ T4432] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.96: No space for directory leaf checksum. Please run e2fsck -D. [ 84.463557][ T4432] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.96: checksumming directory block 0 [ 84.550894][ T4455] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.96: No space for directory leaf checksum. Please run e2fsck -D. [ 84.574261][ T4455] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.96: checksumming directory block 0 [ 84.594566][ T4455] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.96: No space for directory leaf checksum. Please run e2fsck -D. [ 84.598590][ T4455] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.96: checksumming directory block 0 [ 84.755942][ T4432] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.96: No space for directory leaf checksum. Please run e2fsck -D. [ 84.768802][ T4459] loop4: detected capacity change from 0 to 1024 [ 84.803799][ T4463] loop3: detected capacity change from 0 to 64 [ 84.822751][ T4432] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.96: checksumming directory block 0 [ 84.850026][ T4432] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.96: No space for directory leaf checksum. Please run e2fsck -D. [ 84.864268][ T4432] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.96: checksumming directory block 0 [ 84.873600][ T4459] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000082,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,data=ordered,init_itable=0x0000000000000003,usrquota,max_dir_size_kb=0x00000000000040d2,,errors=continue. Quota mode: writeback. [ 84.894584][ T4432] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.96: No space for directory leaf checksum. Please run e2fsck -D. [ 84.905547][ T4432] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.96: checksumming directory block 0 [ 87.231480][ T4489] netlink: 'syz.2.113': attribute type 4 has an invalid length. [ 88.619709][ T4492] netlink: 'syz.2.113': attribute type 4 has an invalid length. [ 89.862448][ T4523] udc-core: couldn't find an available UDC or it's busy [ 89.869370][ T4523] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 89.882216][ T4523] netlink: 'syz.2.121': attribute type 10 has an invalid length. [ 89.903735][ T4523] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.910927][ T4523] bond0: (slave team0): Enslaving as an active interface with an up link [ 89.945240][ T4524] netlink: 'syz.2.121': attribute type 1 has an invalid length. [ 90.163679][ T4532] netlink: 'syz.0.124': attribute type 4 has an invalid length. [ 91.118331][ T4541] loop0: detected capacity change from 0 to 512 [ 92.086763][ T4541] EXT4-fs (loop0): Ignoring removed nobh option [ 92.905827][ T4541] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.129: corrupted inode contents [ 92.910581][ T4541] EXT4-fs (loop0): Remounting filesystem read-only [ 92.913079][ T4541] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #3: comm syz.0.129: mark_inode_dirty error [ 92.919671][ T4541] EXT4-fs (loop0): Remounting filesystem read-only [ 92.923508][ T4541] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #3: comm syz.0.129: corrupted inode contents [ 92.927260][ T4541] EXT4-fs (loop0): Remounting filesystem read-only [ 92.928843][ T4541] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.129: mark_inode_dirty error [ 92.932014][ T4541] EXT4-fs (loop0): Remounting filesystem read-only [ 92.936541][ T4541] Quota error (device loop0): write_blk: dquota write failed [ 92.938702][ T4541] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 92.941142][ T4541] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.129: Failed to acquire dquot type 0 [ 92.944784][ T4541] EXT4-fs (loop0): Remounting filesystem read-only [ 92.950214][ T4541] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.129: corrupted inode contents [ 92.955064][ T4541] EXT4-fs (loop0): Remounting filesystem read-only [ 92.956844][ T4541] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #16: comm syz.0.129: mark_inode_dirty error [ 92.960127][ T4541] EXT4-fs (loop0): Remounting filesystem read-only [ 92.961874][ T4541] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.129: corrupted inode contents [ 92.965649][ T4541] EXT4-fs (loop0): Remounting filesystem read-only [ 92.967271][ T4541] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.129: mark_inode_dirty error [ 92.970262][ T4541] EXT4-fs (loop0): Remounting filesystem read-only [ 92.971893][ T4541] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.129: corrupted inode contents [ 92.976536][ T4541] EXT4-fs (loop0): Remounting filesystem read-only [ 92.978043][ T4541] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 92.980413][ T4541] EXT4-fs (loop0): Remounting filesystem read-only [ 92.982050][ T4541] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.129: corrupted inode contents [ 92.985404][ T4541] EXT4-fs (loop0): Remounting filesystem read-only [ 92.987034][ T4541] EXT4-fs error (device loop0): ext4_truncate:4272: inode #16: comm syz.0.129: mark_inode_dirty error [ 92.989996][ T4541] EXT4-fs (loop0): Remounting filesystem read-only [ 92.991550][ T4541] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 92.994856][ T4541] EXT4-fs (loop0): Remounting filesystem read-only [ 92.997168][ T4541] EXT4-fs (loop0): 1 truncate cleaned up [ 92.998611][ T4541] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 94.041454][ T4558] loop3: detected capacity change from 0 to 64 [ 94.082797][ C0] Unknown status report in ack skb [ 94.155929][ T4564] netlink: 28 bytes leftover after parsing attributes in process `syz.4.136'. [ 94.158279][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 94.215325][ T4563] tipc: Started in network mode [ 94.216659][ T4563] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 94.218949][ T4563] tipc: Enabled bearer , priority 10 [ 94.345577][ T4563] tipc: Resetting bearer [ 94.348954][ T4563] tipc: Resetting bearer [ 95.114608][ T4564] netlink: 'syz.4.136': attribute type 10 has an invalid length. [ 95.134294][ T4564] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.136440][ T4564] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.142641][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.144418][ T4564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.146305][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.148041][ T4564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.220146][ T4564] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 95.230280][ T4107] tipc: Node number set to 10398378 [ 95.250448][ T4572] netlink: 56 bytes leftover after parsing attributes in process `syz.0.137'. [ 96.066452][ T4581] loop3: detected capacity change from 0 to 1024 [ 96.175954][ T4586] loop0: detected capacity change from 0 to 512 [ 96.223901][ T4586] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 96.233049][ T4586] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 96.280603][ T4586] System zones: 1-12 [ 96.282701][ T4586] EXT4-fs (loop0): orphan cleanup on readonly fs [ 96.285913][ T4586] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 96.289661][ T4586] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 96.300060][ T4586] EXT4-fs (loop0): 1 truncate cleaned up [ 96.301668][ T4586] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.310209][ T4595] loop2: detected capacity change from 0 to 512 [ 96.344898][ T4581] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.382206][ T4595] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.426974][ T4595] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 96.431321][ T4595] System zones: 1-12 [ 96.437944][ T4581] raw_sendmsg: syz.3.138 forgot to set AF_INET. Fix it! [ 96.440197][ T4595] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.456083][ T4595] EXT4-fs (loop2): 1 truncate cleaned up [ 96.463104][ T4595] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 97.235357][ T4581] netlink: 132 bytes leftover after parsing attributes in process `syz.3.138'. [ 97.256617][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 97.259587][ T4581] netlink: 'syz.3.138': attribute type 10 has an invalid length. [ 97.301337][ T4581] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 97.513778][ T4610] xt_hashlimit: max too large, truncated to 1048576 [ 98.918617][ T4626] loop4: detected capacity change from 0 to 2048 [ 99.007625][ T4626] hpfs: hpfs_map_sector(): read error [ 99.063701][ T4634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'. [ 99.151625][ T4637] loop4: detected capacity change from 0 to 64 [ 102.510364][ T4665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.165'. [ 102.533586][ T4067] Bluetooth: hci4: command 0x0405 tx timeout [ 102.617111][ T4668] loop3: detected capacity change from 0 to 1024 [ 103.896855][ T1535] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 105.343945][ T4668] EXT4-fs: error -4 creating inode table initialization thread [ 105.351075][ T1535] Bluetooth: hci3: Injecting HCI hardware error event [ 105.353788][ T4029] Bluetooth: hci3: hardware error 0x00 [ 105.379871][ T4668] EXT4-fs (loop3): mount failed [ 108.930078][ T4714] block nbd2: shutting down sockets [ 109.097864][ T4723] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 109.106491][ T4726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.186'. [ 109.131483][ T4728] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 109.185527][ T26] audit: type=1326 audit(109.150:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7c1d28 code=0x7ffc0000 [ 109.196482][ T26] audit: type=1326 audit(109.160:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=227 compat=0 ip=0xffffac7c1d28 code=0x7ffc0000 [ 109.223817][ T26] audit: type=1326 audit(109.170:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4729 comm="" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7c1d28 code=0x7ffc0000 [ 109.300727][ T4734] loop4: detected capacity change from 0 to 128 [ 109.346719][ T4734] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 110.933704][ T4752] sctp: [Deprecated]: syz.2.195 (pid 4752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.933704][ T4752] Use struct sctp_sack_info instead [ 111.659119][ T4754] loop4: detected capacity change from 0 to 164 [ 113.897529][ T4778] loop2: detected capacity change from 0 to 1024 [ 114.078581][ T4784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 114.820724][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 115.713819][ T4360] hfsplus: b-tree write err: -5, ino 8 [ 115.828804][ T4795] loop1: detected capacity change from 0 to 1024 [ 115.988617][ T4801] device syzkaller0 entered promiscuous mode [ 117.400049][ T4795] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.992556][ T4842] device syzkaller0 entered promiscuous mode [ 120.009186][ T13] syzkaller0: tun_net_xmit 48 [ 120.036959][ T4842] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 120.048451][ T4842] syzkaller0: tun_net_xmit 1280 [ 120.092062][ T4849] loop1: detected capacity change from 0 to 512 [ 124.024405][ T4887] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.721445][ T4909] syz.1.240 uses obsolete (PF_INET,SOCK_PACKET) [ 128.154722][ T4928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.243'. [ 128.198730][ T4924] netlink: 'syz.1.245': attribute type 10 has an invalid length. [ 132.012961][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.014686][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.146736][ T5013] loop4: detected capacity change from 0 to 16 [ 136.419155][ T26] audit: type=1326 audit(136.350:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa016cd28 code=0x7ffc0000 [ 136.429600][ T26] audit: type=1326 audit(136.350:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa016b254 code=0x7ffc0000 [ 137.403392][ T4999] loop0: detected capacity change from 0 to 8192 [ 137.447817][ T5013] erofs: (device loop4): erofs_read_superblock: invalid sb_extslots 4160 (more than a fs block) [ 137.456376][ T26] audit: type=1326 audit(136.360:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffa016e88c code=0x7ffc0000 [ 137.461780][ T26] audit: type=1326 audit(136.370:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa016cd28 code=0x7ffc0000 [ 137.467981][ T26] audit: type=1326 audit(136.370:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffa016e88c code=0x7ffc0000 [ 137.473123][ T26] audit: type=1326 audit(136.370:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffa016b62c code=0x7ffc0000 [ 137.509846][ T26] audit: type=1326 audit(136.370:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa016cd28 code=0x7ffc0000 [ 137.525528][ T26] audit: type=1326 audit(136.380:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffa016cd28 code=0x7ffc0000 [ 137.530802][ T26] audit: type=1326 audit(136.380:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa016cd28 code=0x7ffc0000 [ 137.568327][ T26] audit: type=1326 audit(136.380:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5010 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa016cd28 code=0x7ffc0000 [ 137.702374][ T4999] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 137.714394][ T4999] REISERFS (device loop0): using ordered data mode [ 137.724573][ T4999] reiserfs: using flush barriers [ 138.082831][ T4999] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.617484][ T4999] REISERFS (device loop0): checking transaction log (loop0) [ 138.787384][ T4999] REISERFS (device loop0): Using r5 hash to sort names [ 138.791037][ T4999] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 138.841902][ T5027] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.844355][ T5027] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.846409][ T5027] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.848578][ T5027] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.588151][ T5027] team0: Port device vxlan0 added [ 139.636245][ T5039] loop2: detected capacity change from 0 to 128 [ 141.851505][ T5052] loop2: detected capacity change from 0 to 128 [ 142.028148][ T5056] loop3: detected capacity change from 0 to 1024 [ 142.045639][ T5052] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,noauto_da_alloc,,errors=continue. Quota mode: none. [ 147.291460][ T5056] EXT4-fs (loop3): Ignoring removed orlov option [ 147.293257][ T5056] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 147.314824][ T5056] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3. [ 149.507826][ T5100] loop1: detected capacity change from 0 to 1024 [ 149.657227][ T5113] loop3: detected capacity change from 0 to 128 [ 149.697533][ T5100] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.974736][ T5116] sctp: [Deprecated]: syz.3.297 (pid 5116) Use of int in max_burst socket option. [ 149.974736][ T5116] Use struct sctp_assoc_value instead [ 151.065962][ T5128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.302'. [ 151.971722][ T5123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 151.972465][ T5123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.303'. [ 152.200478][ T5131] loop2: detected capacity change from 0 to 2048 [ 152.253287][ T5131] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.294497][ T3606] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.344316][ T4069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.547898][ T4069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.853143][ T3606] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.895918][ T4069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.014338][ T4069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.278091][ T3606] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.793586][ T3606] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.206374][ T5156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 156.208687][ T5156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.717848][ T5156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.974912][ T5184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.319'. [ 165.100373][ T5227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.331'. [ 169.144404][ T4070] Bluetooth: hci2: command 0x0406 tx timeout [ 169.281579][ T4070] Bluetooth: hci4: command 0x0406 tx timeout [ 169.320729][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 170.358140][ T5261] loop4: detected capacity change from 0 to 2048 [ 170.476043][ T5261] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.516300][ T4070] Bluetooth: hci0: command 0x0406 tx timeout [ 170.517933][ T4070] Bluetooth: hci1: command 0x0406 tx timeout [ 170.911913][ T5271] loop1: detected capacity change from 0 to 764 [ 171.006317][ T5271] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 171.780215][ T1535] Bluetooth: hci5: command 0x041b tx timeout [ 173.916331][ T4070] Bluetooth: hci5: command 0x040f tx timeout [ 176.255027][ T1962] Bluetooth: hci5: command 0x0419 tx timeout [ 176.280519][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 176.789019][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.790952][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.793497][ T5241] device bridge_slave_0 entered promiscuous mode [ 176.797752][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.799596][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.801984][ T5241] device bridge_slave_1 entered promiscuous mode [ 176.818760][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.823249][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.221779][ T5241] team0: Port device team_slave_0 added [ 178.245264][ T5241] team0: Port device team_slave_1 added [ 178.292325][ T5344] loop2: detected capacity change from 0 to 4096 [ 178.348222][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.352358][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.362423][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.371794][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.373727][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.544666][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.586256][ T5344] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 178.593554][ T5344] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 179.484511][ T5344] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 179.546406][ T5344] ntfs: volume version 3.1. [ 179.628942][ T5241] device hsr_slave_0 entered promiscuous mode [ 180.941533][ T5367] loop4: detected capacity change from 0 to 1024 [ 181.375603][ T5241] device hsr_slave_1 entered promiscuous mode [ 181.592992][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.595018][ T5241] Cannot create hsr debugfs directory [ 181.610595][ T5367] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 183.504865][ T5241] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 184.557446][ T5241] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 184.596333][ T5241] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 185.575538][ T5241] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 186.808104][ T5420] loop4: detected capacity change from 0 to 2048 [ 186.931102][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.941512][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.966535][ T1770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.975909][ T1770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.980823][ T1770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.007290][ T5423] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.013835][ T1770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.017468][ T1770] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.019240][ T1770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.021470][ T1770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.033197][ T1770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.039024][ T1770] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.040805][ T1770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.042973][ T1770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.155340][ T5425] loop6: detected capacity change from 0 to 63 [ 187.427776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 187.445319][ T1770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.451588][ T1770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.457974][ T1770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.464551][ T1770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.472977][ T1770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.475770][ T1770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.479588][ T1770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.483439][ T1770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.659625][ T1770] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.677194][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.680043][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.703640][ T5241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.956754][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.958902][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.000765][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.859448][ T5460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.390'. [ 191.861839][ T5460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.390'. [ 191.868455][ T26] audit: type=1326 audit(191.830:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5459 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7c1d28 code=0x7ffc0000 [ 191.889800][ T26] audit: type=1326 audit(191.850:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5459 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffffac7c1d28 code=0x7ffc0000 [ 191.896821][ T26] audit: type=1326 audit(191.860:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5459 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7c1d28 code=0x7ffc0000 [ 191.925297][ T26] audit: type=1326 audit(191.860:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5459 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7c1d28 code=0x7ffc0000 [ 191.930587][ T26] audit: type=1326 audit(191.860:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5459 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffffac7c1d28 code=0x7ffc0000 [ 191.955065][ T26] audit: type=1326 audit(191.860:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5459 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7c1d28 code=0x7ffc0000 [ 191.970909][ T26] audit: type=1326 audit(191.860:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5459 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7c1d28 code=0x7ffc0000 [ 192.011216][ T26] audit: type=1326 audit(191.860:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5459 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffac7c1d28 code=0x7ffc0000 [ 192.024257][ T26] audit: type=1326 audit(191.860:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5459 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7c1d28 code=0x7ffc0000 [ 192.029471][ T26] audit: type=1326 audit(191.860:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5459 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac7c1d28 code=0x7ffc0000 [ 192.033513][ T5468] loop1: detected capacity change from 0 to 128 [ 192.106823][ T5468] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 192.117305][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.120036][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.174957][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.177465][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.180324][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.190148][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.220358][ T5241] device veth0_vlan entered promiscuous mode [ 192.255299][ T5241] device veth1_vlan entered promiscuous mode [ 193.588615][ T5473] loop2: detected capacity change from 0 to 64 [ 193.620566][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.678202][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 193.750152][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.752946][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.775080][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.776733][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.988233][ T5241] device veth0_macvtap entered promiscuous mode [ 193.993033][ T5241] device veth1_macvtap entered promiscuous mode [ 194.952637][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.983298][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.701677][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.722269][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.736892][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.746729][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.749205][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.772145][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.779344][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.782017][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.795519][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.801281][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.808595][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.825176][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.829742][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.843638][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.851569][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.862394][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.870952][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.881085][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.883908][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.892046][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.892950][ T5492] loop1: detected capacity change from 0 to 47 [ 195.900417][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.922497][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.928070][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.930965][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.939699][ T5241] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.950959][ T5241] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.954926][ T5494] loop2: detected capacity change from 0 to 16 [ 195.956905][ T5241] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.960452][ T5241] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.008242][ T5494] erofs: (device loop2): erofs_read_superblock: invalid sb_extslots 4160 (more than a fs block) [ 196.100587][ T4209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.126603][ T4209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.156938][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.238873][ T716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.246790][ T716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.295560][ T1705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.271295][ T5510] loop2: detected capacity change from 0 to 64 [ 198.855534][ T5517] attempt to access beyond end of device [ 198.855534][ T5517] loop2: rw=34817, want=549, limit=64 [ 200.456636][ T5532] loop2: detected capacity change from 0 to 64 [ 203.291371][ T5543] loop4: detected capacity change from 0 to 32768 [ 204.466113][ T5546] loop5: detected capacity change from 0 to 40427 [ 204.580178][ T5549] loop1: detected capacity change from 0 to 32768 [ 204.743215][ T5546] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 204.745304][ T5546] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 204.750123][ T5546] F2FS-fs (loop5): invalid crc value [ 205.669896][ T5546] F2FS-fs (loop5): Found nat_bits in checkpoint [ 205.754318][ T5546] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 205.756748][ T5546] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 206.013292][ T5571] overlayfs: missing 'lowerdir' [ 207.386048][ T5574] attempt to access beyond end of device [ 207.386048][ T5574] loop5: rw=2049, want=78344, limit=40427 [ 208.102875][ T5583] loop4: detected capacity change from 0 to 4096 [ 208.133207][ T5583] __ntfs_warning: 9 callbacks suppressed [ 208.133220][ T5583] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 208.181673][ T5583] ntfs: (device loop4): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 208.194003][ T5583] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 208.247552][ T5583] ntfs: volume version 3.1. [ 209.196751][ T5597] loop1: detected capacity change from 0 to 47 [ 210.369467][ T5603] loop5: detected capacity change from 0 to 1024 [ 211.202382][ T5606] loop2: detected capacity change from 0 to 128 [ 211.338630][ T5606] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.437725][ T4229] hfsplus: b-tree write err: -5, ino 4 [ 211.452226][ T5616] loop4: detected capacity change from 0 to 8 [ 213.437783][ T5628] SQUASHFS error: zstd decompression error: 2 [ 213.439533][ T5628] SQUASHFS error: zstd decompression failed, data probably corrupt [ 213.442026][ T5628] SQUASHFS error: Failed to read block 0x62b: -5 [ 213.443752][ T5628] SQUASHFS error: Unable to read metadata cache entry [629] [ 213.445687][ T5628] SQUASHFS error: Unable to read directory block [629:ff26] [ 214.142904][ T5634] loop2: detected capacity change from 0 to 512 [ 214.260584][ T5634] EXT4-fs (loop2): error: could not find journal device path: error -2 [ 216.200808][ T5654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.440'. [ 217.069993][ T5634] loop2: detected capacity change from 0 to 512 [ 217.248124][ T5663] loop5: detected capacity change from 0 to 2048 [ 217.786586][ T26] audit: type=1326 audit(217.310:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5657 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa016cd28 code=0x7ffc0000 [ 217.792075][ T26] audit: type=1326 audit(217.320:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5657 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa016b254 code=0x7ffc0000 [ 217.860204][ T26] audit: type=1326 audit(217.330:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5657 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa016cd28 code=0x7ffc0000 [ 217.967859][ T26] audit: type=1326 audit(217.330:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5657 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa016b254 code=0x7ffc0000 [ 217.973153][ T26] audit: type=1326 audit(217.330:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5657 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffa016e88c code=0x7ffc0000 [ 217.978616][ T26] audit: type=1326 audit(217.340:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5657 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa016cd28 code=0x7ffc0000 [ 217.983839][ T26] audit: type=1326 audit(217.340:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5657 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffffa016e88c code=0x7ffc0000 [ 217.989300][ T26] audit: type=1326 audit(217.340:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5657 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffa016b62c code=0x7ffc0000 [ 218.013934][ T26] audit: type=1326 audit(217.340:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5657 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa016cd28 code=0x7ffc0000 [ 218.027313][ T26] audit: type=1326 audit(217.350:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5657 comm="syz.1.442" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa016cd28 code=0x7ffc0000 [ 218.048625][ T5663] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.637126][ T5634] EXT4-fs (loop2): Ignoring removed orlov option [ 220.925201][ T5634] EXT4-fs: failed to create workqueue [ 220.926526][ T5634] EXT4-fs (loop2): mount failed [ 221.968101][ T5690] device bond_slave_0 entered promiscuous mode [ 221.970073][ T5690] device bond_slave_1 entered promiscuous mode [ 221.971526][ T5690] device dummy0 entered promiscuous mode [ 221.973064][ T5690] device macvtap1 entered promiscuous mode [ 221.996510][ T5690] device bond0 entered promiscuous mode [ 222.014462][ T5690] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 225.669878][ T5714] capability: warning: `syz.3.457' uses deprecated v2 capabilities in a way that may be insecure [ 229.062796][ T5741] ubi31: attaching mtd0 [ 229.076151][ T5741] ubi31: scanning is finished [ 229.077390][ T5741] ubi31: empty MTD device detected [ 229.651219][ T5741] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 229.653176][ T5741] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 229.656999][ T5741] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 229.658826][ T5741] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 229.660789][ T5741] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 229.662471][ T5741] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 229.664489][ T5741] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3713277449 [ 229.666990][ T5741] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 229.742098][ T5742] ubi31: background thread "ubi_bgt31d" started, PID 5742 [ 233.774425][ T5778] bridge0: port 3(netdevsim0) entered blocking state [ 233.776608][ T5778] bridge0: port 3(netdevsim0) entered disabled state [ 233.780411][ T5778] device netdevsim0 entered promiscuous mode [ 233.783337][ T5778] bridge0: port 3(netdevsim0) entered blocking state [ 233.785309][ T5778] bridge0: port 3(netdevsim0) entered forwarding state [ 235.230141][ T5790] bond0: (slave team0): Error: Slave device does not support XDP [ 236.883950][ T5811] loop1: detected capacity change from 0 to 512 [ 242.314912][ T5839] hub 1-0:1.0: USB hub found [ 242.317456][ T5839] hub 1-0:1.0: 1 port detected [ 243.658412][ T5854] loop4: detected capacity change from 0 to 128 [ 245.290545][ T5854] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.019134][ T5894] loop2: detected capacity change from 0 to 1024 [ 252.008877][ T5894] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000006,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 254.984381][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.985894][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.357965][ T5957] netlink: 'syz.3.514': attribute type 8 has an invalid length. [ 261.559616][ T5983] loop4: detected capacity change from 0 to 128 [ 264.134860][ T5999] loop2: detected capacity change from 0 to 1024 [ 264.239616][ T6003] loop5: detected capacity change from 0 to 2048 [ 264.289067][ T5983] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,noauto_da_alloc,,errors=continue. Quota mode: none. [ 265.287671][ T5999] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000082,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,data=ordered,init_itable=0x0000000000000003,usrquota,max_dir_size_kb=0x00000000000040d2,,errors=continue. Quota mode: writeback. [ 265.359358][ T6008] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 273.559932][ T6057] loop2: detected capacity change from 0 to 64 [ 273.913108][ T6061] loop1: detected capacity change from 0 to 64 [ 281.218697][ T6107] loop2: detected capacity change from 0 to 64 [ 282.985224][ T6118] udc-core: couldn't find an available UDC or it's busy [ 282.987089][ T6118] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 283.019526][ T6118] netlink: 'syz.1.562': attribute type 10 has an invalid length. [ 283.113493][ T6118] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.133871][ T6118] bond0: (slave team0): Enslaving as an active interface with an up link [ 283.146804][ T6122] netlink: 'syz.1.562': attribute type 1 has an invalid length. [ 283.329519][ T6127] netlink: 'syz.3.565': attribute type 4 has an invalid length. [ 283.456254][ T6127] netlink: 'syz.3.565': attribute type 4 has an invalid length. [ 287.103322][ T25] Bluetooth: hci5: command 0x0405 tx timeout [ 287.230074][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.579'. [ 288.355276][ T6185] loop1: detected capacity change from 0 to 64 [ 288.391718][ T6183] block nbd5: shutting down sockets [ 288.639625][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 288.639637][ T26] audit: type=1326 audit(288.600:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f799d28 code=0x7ffc0000 [ 288.650796][ T26] audit: type=1326 audit(288.610:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f799d28 code=0x7ffc0000 [ 288.664248][ T26] audit: type=1326 audit(288.620:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=227 compat=0 ip=0xffff7f799d28 code=0x7ffc0000 [ 289.072523][ T26] audit: type=1326 audit(288.620:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f799d28 code=0x7ffc0000 [ 289.396971][ T26] audit: type=1326 audit(288.620:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f799d28 code=0x7ffc0000 [ 289.477995][ T6198] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 289.510995][ T6200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.589'. [ 291.843565][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 291.864883][ T1962] Bluetooth: hci5: command 0x0406 tx timeout [ 292.706876][ T6227] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 296.214343][ T6251] 8021q: VLANs not supported on gre0 [ 297.776169][ T6278] loop5: detected capacity change from 0 to 16 [ 297.908679][ T6278] erofs: (device loop5): erofs_read_superblock: invalid sb_extslots 4160 (more than a fs block) [ 300.888664][ T6290] loop4: detected capacity change from 0 to 4096 [ 300.976693][ T6290] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 302.135988][ T6312] netlink: 28 bytes leftover after parsing attributes in process `syz.5.626'. [ 306.013092][ T6344] loop4: detected capacity change from 0 to 764 [ 306.033215][ T6344] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 307.922624][ T6357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.639'. [ 308.120541][ T6370] loop2: detected capacity change from 0 to 16 [ 309.271593][ T6370] erofs: (device loop2): erofs_read_superblock: invalid sb_extslots 4160 (more than a fs block) [ 310.898407][ T6391] loop1: detected capacity change from 0 to 128 [ 312.215103][ T6408] sctp: [Deprecated]: syz.1.651 (pid 6408) Use of int in max_burst socket option. [ 312.215103][ T6408] Use struct sctp_assoc_value instead [ 312.833722][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'. [ 312.845859][ T6412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.380346][ T6412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.441845][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.443691][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.416182][ T6459] loop2: detected capacity change from 0 to 764 [ 317.463549][ T6462] netlink: 28 bytes leftover after parsing attributes in process `syz.4.673'. [ 317.520934][ T6472] 8021q: VLANs not supported on ip6tnl0 [ 317.576307][ T6459] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 318.874598][ T6476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.687'. [ 319.041781][ T6491] loop4: detected capacity change from 0 to 1024 [ 321.013287][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 321.596308][ T716] hfsplus: b-tree write err: -5, ino 8 [ 324.406821][ T6533] netlink: 28 bytes leftover after parsing attributes in process `syz.4.694'. [ 328.207507][ T6574] loop5: detected capacity change from 0 to 512 [ 329.027765][ T26] audit: type=1326 audit(328.680:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96979d28 code=0x7ffc0000 [ 329.032138][ T26] audit: type=1326 audit(328.700:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff96978254 code=0x7ffc0000 [ 329.042148][ T26] audit: type=1326 audit(328.700:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff9697b88c code=0x7ffc0000 [ 329.118354][ T26] audit: type=1326 audit(328.700:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff96979d28 code=0x7ffc0000 [ 329.121825][ T26] audit: type=1326 audit(328.710:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff9697b88c code=0x7ffc0000 [ 329.126594][ T26] audit: type=1326 audit(328.710:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff9697862c code=0x7ffc0000 [ 329.129869][ T26] audit: type=1326 audit(328.710:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96979d28 code=0x7ffc0000 [ 329.133711][ T26] audit: type=1326 audit(329.050:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff96979d28 code=0x7ffc0000 [ 329.427768][ T26] audit: type=1326 audit(329.060:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96979d28 code=0x7ffc0000 [ 329.427813][ T26] audit: type=1326 audit(329.060:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96979d28 code=0x7ffc0000 [ 331.894284][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.717'. [ 332.885307][ T6618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.721'. [ 343.159587][ T6729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.756'. [ 343.495460][ T6742] loop1: detected capacity change from 0 to 8 [ 343.726566][ T6744] loop4: detected capacity change from 0 to 1024 [ 344.699906][ T6752] SQUASHFS error: zstd decompression error: 2 [ 344.701520][ T6752] SQUASHFS error: zstd decompression failed, data probably corrupt [ 344.703680][ T6752] SQUASHFS error: Failed to read block 0x62b: -5 [ 344.705405][ T6752] SQUASHFS error: Unable to read metadata cache entry [629] [ 344.707304][ T6752] SQUASHFS error: Unable to read directory block [629:ff26] [ 345.291090][ T4187] hfsplus: b-tree write err: -5, ino 4 [ 349.047408][ T6781] netlink: 28 bytes leftover after parsing attributes in process `syz.5.773'. [ 349.153435][ T6783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.775'. [ 349.206771][ T6783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.775'. [ 349.402509][ T6783] device bridge0 entered promiscuous mode [ 349.404810][ T6783] device bridge0 left promiscuous mode [ 351.977016][ T6825] loop6: detected capacity change from 0 to 63 [ 352.530392][ T6834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.791'. [ 356.308314][ T6850] loop5: detected capacity change from 0 to 8192 [ 356.815480][ T6878] loop6: detected capacity change from 0 to 63 [ 357.525360][ T6873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.808'. [ 360.401438][ T6919] loop1: detected capacity change from 0 to 8192 [ 360.439395][ T6923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.826'. [ 363.977771][ T6965] loop4: detected capacity change from 0 to 64 [ 366.952913][ T6981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.844'. [ 367.231685][ T6991] loop2: detected capacity change from 0 to 64 [ 367.497459][ T6999] loop5: detected capacity change from 0 to 64 [ 368.253913][ T7002] ubi: mtd0 is already attached to ubi31 [ 372.586846][ T7022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.857'. [ 373.736261][ T7035] loop4: detected capacity change from 0 to 64 [ 375.680561][ T7048] loop5: detected capacity change from 0 to 64 [ 375.819447][ T7052] loop1: detected capacity change from 0 to 64 [ 378.662503][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.666868][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.892953][ T7057] loop4: detected capacity change from 0 to 2048 [ 381.147580][ T7078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.873'. [ 381.229919][ T7083] loop2: detected capacity change from 0 to 64 [ 384.672864][ T7097] loop1: detected capacity change from 0 to 64 [ 389.104031][ T7141] loop4: detected capacity change from 0 to 2048 [ 389.176753][ T7141] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 389.377331][ T7005] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.970517][ T7005] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.133519][ T7147] loop1: detected capacity change from 0 to 64 [ 391.598542][ T7005] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.812581][ T7162] attempt to access beyond end of device [ 391.812581][ T7162] loop1: rw=34817, want=549, limit=64 [ 392.847977][ T7005] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.897032][ T7167] loop4: detected capacity change from 0 to 64 [ 393.790459][ T7173] attempt to access beyond end of device [ 393.790459][ T7173] loop4: rw=34817, want=549, limit=64 [ 394.621649][ T7175] loop2: detected capacity change from 0 to 8192 [ 397.787705][ T7209] loop1: detected capacity change from 0 to 64 [ 398.209467][ T7219] attempt to access beyond end of device [ 398.209467][ T7219] loop1: rw=34817, want=545, limit=64 [ 400.441537][ T7246] loop5: detected capacity change from 0 to 64 [ 400.572491][ T7234] loop2: detected capacity change from 0 to 8192 [ 400.576143][ T7236] loop4: detected capacity change from 0 to 8192 [ 402.342992][ T7252] attempt to access beyond end of device [ 402.342992][ T7252] loop5: rw=34817, want=549, limit=64 [ 408.925451][ T7322] loop1: detected capacity change from 0 to 2048 [ 408.979045][ T7322] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 412.980900][ T7382] loop2: detected capacity change from 0 to 2048 [ 413.051336][ T7382] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 414.790453][ T7413] loop2: detected capacity change from 0 to 8192 [ 415.733586][ T7430] loop2: detected capacity change from 0 to 64 [ 417.284873][ T7005] device hsr_slave_0 left promiscuous mode [ 418.374773][ T7005] device hsr_slave_1 left promiscuous mode [ 418.669793][ T7456] loop1: detected capacity change from 0 to 64 [ 418.745929][ T7005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.747959][ T7005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.752013][ T7005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.765738][ T7005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.948018][ T7005] device bridge_slave_1 left promiscuous mode [ 418.951448][ T7005] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.978134][ T7457] loop2: detected capacity change from 0 to 2048 [ 419.195238][ T7461] attempt to access beyond end of device [ 419.195238][ T7461] loop1: rw=34817, want=545, limit=64 [ 419.742025][ T7457] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 419.935352][ T7005] device bridge_slave_0 left promiscuous mode [ 419.940529][ T7005] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.755041][ T7471] loop4: detected capacity change from 0 to 8192 [ 421.574590][ T7005] device veth1_macvtap left promiscuous mode [ 421.576397][ T7005] device veth0_macvtap left promiscuous mode [ 421.577900][ T7005] device veth1_vlan left promiscuous mode [ 421.579645][ T7005] device veth0_vlan left promiscuous mode [ 424.109223][ T7005] team0 (unregistering): Port device team_slave_1 removed [ 424.119763][ T7005] team0 (unregistering): Port device team_slave_0 removed [ 424.129419][ T7005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.185022][ T7005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.341387][ T7005] bond0 (unregistering): Released all slaves [ 424.586157][ T7501] loop4: detected capacity change from 0 to 64 [ 425.913135][ T7522] loop5: detected capacity change from 0 to 2048 [ 426.108350][ T7525] attempt to access beyond end of device [ 426.108350][ T7525] loop4: rw=34817, want=545, limit=64 [ 426.539541][ T7522] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 430.035054][ T7574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1006'. [ 430.413565][ T7581] loop4: detected capacity change from 0 to 64 [ 430.678215][ T7587] loop5: detected capacity change from 0 to 8192 [ 431.018331][ T7593] attempt to access beyond end of device [ 431.018331][ T7593] loop4: rw=34817, want=545, limit=64 [ 431.985068][ T7604] loop1: detected capacity change from 0 to 2048 [ 432.648183][ T7601] loop4: detected capacity change from 0 to 8192 [ 432.971307][ T7604] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 433.978932][ T7637] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1020'. [ 436.791028][ T7686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1034'. [ 436.907855][ T7676] loop1: detected capacity change from 0 to 8192 [ 438.280694][ T7717] loop2: detected capacity change from 0 to 64 [ 439.635779][ T7725] attempt to access beyond end of device [ 439.635779][ T7725] loop2: rw=34817, want=549, limit=64 [ 440.347808][ T7731] 8021q: VLANs not supported on sit0 [ 440.617692][ T7742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1047'. [ 442.090135][ T7753] loop4: detected capacity change from 0 to 8192 [ 443.424809][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.426776][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.563787][ T7781] loop2: detected capacity change from 0 to 8192 [ 446.849346][ T7825] loop2: detected capacity change from 0 to 64 [ 447.654552][ T7840] attempt to access beyond end of device [ 447.654552][ T7840] loop2: rw=34817, want=545, limit=64 [ 451.692863][ T7902] loop1: detected capacity change from 0 to 64 [ 452.044397][ T7914] attempt to access beyond end of device [ 452.044397][ T7914] loop1: rw=34817, want=545, limit=64 [ 452.097251][ T7917] loop4: detected capacity change from 0 to 2048 [ 452.244167][ T7917] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 452.305444][ T7924] loop2: detected capacity change from 0 to 2048 [ 452.499954][ T7924] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 453.146232][ T7934] loop5: detected capacity change from 0 to 64 [ 453.506209][ T7939] attempt to access beyond end of device [ 453.506209][ T7939] loop5: rw=34817, want=549, limit=64 [ 457.415487][ T7973] loop1: detected capacity change from 0 to 8192 [ 457.500955][ T7996] loop4: detected capacity change from 0 to 1024 [ 458.905800][ T8017] loop5: detected capacity change from 0 to 64 [ 458.957183][ T8013] loop1: detected capacity change from 0 to 8192 [ 458.981121][ T7996] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 459.638086][ T8024] attempt to access beyond end of device [ 459.638086][ T8024] loop5: rw=34817, want=549, limit=64 [ 461.510652][ T8044] loop1: detected capacity change from 0 to 64 [ 461.546899][ T8043] loop5: detected capacity change from 0 to 2048 [ 461.643341][ T8040] loop4: detected capacity change from 0 to 8192 [ 461.895027][ T8043] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 462.907708][ T8066] attempt to access beyond end of device [ 462.907708][ T8066] loop1: rw=34817, want=549, limit=64 [ 466.506843][ T8119] loop2: detected capacity change from 0 to 64 [ 466.618557][ T8116] loop1: detected capacity change from 0 to 2048 [ 466.666139][ T8126] loop4: detected capacity change from 0 to 64 [ 466.694219][ T8116] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 467.252904][ T8132] attempt to access beyond end of device [ 467.252904][ T8132] loop2: rw=34817, want=549, limit=64 [ 467.518933][ T8137] attempt to access beyond end of device [ 467.518933][ T8137] loop4: rw=34817, want=549, limit=64 [ 467.575972][ T8140] loop2: detected capacity change from 0 to 64 [ 467.611068][ T8130] loop5: detected capacity change from 0 to 8192 [ 467.912091][ T8147] attempt to access beyond end of device [ 467.912091][ T8147] loop2: rw=34817, want=545, limit=64 [ 470.116334][ T8189] loop4: detected capacity change from 0 to 64 [ 470.151721][ T8182] loop5: detected capacity change from 0 to 8192 [ 470.249684][ T8183] loop2: detected capacity change from 0 to 8192 [ 470.420781][ T8193] attempt to access beyond end of device [ 470.420781][ T8193] loop4: rw=34817, want=549, limit=64 [ 472.257386][ T8213] loop4: detected capacity change from 0 to 8192 [ 473.866341][ T8258] loop4: detected capacity change from 0 to 64 [ 474.209443][ T8263] attempt to access beyond end of device [ 474.209443][ T8263] loop4: rw=34817, want=549, limit=64 [ 475.022672][ T8278] loop1: detected capacity change from 0 to 8192 [ 475.850728][ T8294] loop2: detected capacity change from 0 to 64 [ 476.183534][ T8294] attempt to access beyond end of device [ 476.183534][ T8294] loop2: rw=34817, want=549, limit=64 [ 476.336326][ T8307] loop4: detected capacity change from 0 to 64 [ 476.551243][ T8311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1190'. [ 477.098000][ T8319] attempt to access beyond end of device [ 477.098000][ T8319] loop4: rw=34817, want=549, limit=64 [ 478.660583][ T8336] loop2: detected capacity change from 0 to 8192 [ 479.261490][ T8355] loop1: detected capacity change from 0 to 64 [ 480.311986][ T8355] attempt to access beyond end of device [ 480.311986][ T8355] loop1: rw=34817, want=549, limit=64 [ 480.446394][ T8367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1205'. [ 480.583635][ T8380] loop1: detected capacity change from 0 to 64 [ 481.271338][ T8390] attempt to access beyond end of device [ 481.271338][ T8390] loop1: rw=34817, want=549, limit=64 [ 482.597943][ T8415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1219'. [ 483.650532][ T8431] loop1: detected capacity change from 0 to 64 [ 484.041795][ T8431] attempt to access beyond end of device [ 484.041795][ T8431] loop1: rw=34817, want=549, limit=64 [ 484.669122][ T8443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1230'. [ 485.654456][ T8457] loop1: detected capacity change from 0 to 64 [ 486.622168][ T8473] attempt to access beyond end of device [ 486.622168][ T8473] loop1: rw=34817, want=549, limit=64 [ 486.637635][ T8475] loop5: detected capacity change from 0 to 64 [ 487.099415][ T8484] attempt to access beyond end of device [ 487.099415][ T8484] loop5: rw=34817, want=549, limit=64 [ 487.146188][ T8481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1243'. [ 488.162023][ T8487] loop2: detected capacity change from 0 to 8192 [ 488.241058][ T8498] loop5: detected capacity change from 0 to 64 [ 489.403411][ T8508] attempt to access beyond end of device [ 489.403411][ T8508] loop5: rw=34817, want=549, limit=64 [ 492.796139][ T8527] loop5: detected capacity change from 0 to 64 [ 493.558992][ T8527] attempt to access beyond end of device [ 493.558992][ T8527] loop5: rw=34817, want=549, limit=64 [ 493.848969][ T8548] loop2: detected capacity change from 0 to 2048 [ 493.931161][ T8550] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1265'. [ 493.960080][ T8557] loop5: detected capacity change from 0 to 64 [ 494.019622][ T8555] loop4: detected capacity change from 0 to 8192 [ 494.030398][ T8548] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 494.103434][ T8560] loop1: detected capacity change from 0 to 64 [ 494.787499][ T8562] attempt to access beyond end of device [ 494.787499][ T8562] loop5: rw=34817, want=549, limit=64 [ 494.973061][ T8560] attempt to access beyond end of device [ 494.973061][ T8560] loop1: rw=34817, want=549, limit=64 [ 496.452903][ T8591] loop1: detected capacity change from 0 to 64 [ 496.850542][ T8591] attempt to access beyond end of device [ 496.850542][ T8591] loop1: rw=34817, want=549, limit=64 [ 497.087705][ T8594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1279'. [ 498.153753][ T8610] loop2: detected capacity change from 0 to 64 [ 498.197874][ T8608] loop1: detected capacity change from 0 to 2048 [ 498.221190][ T8622] loop4: detected capacity change from 0 to 64 [ 498.233173][ T8608] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 498.323640][ T8620] loop5: detected capacity change from 0 to 8192 [ 498.446922][ T8610] attempt to access beyond end of device [ 498.446922][ T8610] loop2: rw=34817, want=549, limit=64 [ 499.847635][ T8636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1292'. [ 499.899975][ T8640] loop1: detected capacity change from 0 to 64 [ 502.528116][ T8640] attempt to access beyond end of device [ 502.528116][ T8640] loop1: rw=34817, want=549, limit=64 [ 502.637504][ T8661] loop2: detected capacity change from 0 to 64 [ 503.006527][ T8661] attempt to access beyond end of device [ 503.006527][ T8661] loop2: rw=34817, want=549, limit=64 [ 503.597762][ T8670] loop4: detected capacity change from 0 to 64 [ 503.716113][ T8670] attempt to access beyond end of device [ 503.716113][ T8670] loop4: rw=34817, want=549, limit=64 [ 504.631257][ T8683] loop4: detected capacity change from 0 to 8192 [ 504.653418][ T8681] loop2: detected capacity change from 0 to 8192 [ 504.827870][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.829444][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.853388][ T8708] loop1: detected capacity change from 0 to 64 [ 507.896733][ T8709] loop2: detected capacity change from 0 to 64 [ 508.034614][ T8711] loop4: detected capacity change from 0 to 2048 [ 508.062599][ T8709] attempt to access beyond end of device [ 508.062599][ T8709] loop2: rw=34817, want=549, limit=64 [ 508.179844][ T8708] attempt to access beyond end of device [ 508.179844][ T8708] loop1: rw=34817, want=549, limit=64 [ 508.199591][ T8711] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 509.459309][ T8725] loop4: detected capacity change from 0 to 8192 [ 510.809660][ T8736] loop1: detected capacity change from 0 to 8192 [ 513.805471][ T8756] loop4: detected capacity change from 0 to 64 [ 515.867515][ T8756] attempt to access beyond end of device [ 515.867515][ T8756] loop4: rw=34817, want=549, limit=64 [ 515.936153][ T8769] loop1: detected capacity change from 0 to 64 [ 517.027033][ T8782] loop5: detected capacity change from 0 to 128 [ 517.207525][ T8791] loop4: detected capacity change from 0 to 64 [ 517.997855][ T8782] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,noauto_da_alloc,,errors=continue. Quota mode: none. [ 520.138963][ T8810] loop1: detected capacity change from 0 to 2048 [ 520.340452][ T8810] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 523.596337][ T8843] loop5: detected capacity change from 0 to 64 [ 525.646877][ T8860] loop4: detected capacity change from 0 to 8192 [ 525.676443][ T8861] loop1: detected capacity change from 0 to 64 [ 525.963327][ T8861] attempt to access beyond end of device [ 525.963327][ T8861] loop1: rw=34817, want=549, limit=64 [ 526.508368][ T8864] attempt to access beyond end of device [ 526.508368][ T8864] loop5: rw=34817, want=549, limit=64 [ 528.886398][ T8896] loop1: detected capacity change from 0 to 64 [ 529.937534][ T8907] attempt to access beyond end of device [ 529.937534][ T8907] loop1: rw=34817, want=549, limit=64 [ 532.427088][ T8933] loop5: detected capacity change from 0 to 8192 [ 534.533738][ T8955] loop4: detected capacity change from 0 to 64 [ 535.090944][ T8967] attempt to access beyond end of device [ 535.090944][ T8967] loop4: rw=34817, want=549, limit=64 [ 536.183430][ T8982] loop5: detected capacity change from 0 to 64 [ 536.393166][ T8983] loop1: detected capacity change from 0 to 8192 [ 536.579189][ T8987] attempt to access beyond end of device [ 536.579189][ T8987] loop5: rw=34817, want=549, limit=64 [ 539.680739][ T9021] loop4: detected capacity change from 0 to 64 [ 541.446166][ T9025] attempt to access beyond end of device [ 541.446166][ T9025] loop4: rw=34817, want=549, limit=64 [ 543.221224][ T9047] loop5: detected capacity change from 0 to 512 [ 545.394841][ T9066] loop4: detected capacity change from 0 to 64 [ 545.564333][ T9047] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 547.581700][ T9078] attempt to access beyond end of device [ 547.581700][ T9078] loop4: rw=34817, want=549, limit=64 [ 552.210854][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 554.152924][ T9154] loop2: detected capacity change from 0 to 2048 [ 554.392177][ T9149] loop1: detected capacity change from 0 to 8192 [ 554.821375][ T9154] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 556.177692][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 556.390503][ T9189] loop5: detected capacity change from 0 to 64 [ 556.867659][ T9196] attempt to access beyond end of device [ 556.867659][ T9196] loop5: rw=34817, want=549, limit=64 [ 559.868331][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1474'. [ 560.065916][ T9223] loop2: detected capacity change from 0 to 64 [ 561.236952][ T9236] attempt to access beyond end of device [ 561.236952][ T9236] loop2: rw=34817, want=549, limit=64 [ 566.457187][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.458809][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.893311][ T9288] loop1: detected capacity change from 0 to 8192 [ 569.098411][ T9311] loop2: detected capacity change from 0 to 8 [ 572.918742][ T9344] loop2: detected capacity change from 0 to 64 [ 574.046392][ T9351] loop4: detected capacity change from 0 to 4096 [ 574.212447][ T9351] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 574.215599][ T9351] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 574.220132][ T9351] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 574.223182][ T9351] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 574.226619][ T9351] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 574.232537][ T9351] ntfs: volume version 3.1. [ 574.235802][ T9351] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 574.239184][ T9351] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 574.243244][ T9351] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 574.246100][ T9351] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 574.248876][ T9351] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 574.379584][ T9356] attempt to access beyond end of device [ 574.379584][ T9356] loop2: rw=34817, want=549, limit=64 [ 574.629220][ T9358] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1516'. [ 576.504993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 578.958769][ T9394] loop5: detected capacity change from 0 to 2048 [ 579.127727][ T9394] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 579.533057][ T9401] loop4: detected capacity change from 0 to 64 [ 580.604942][ T9404] hub 2-0:1.0: USB hub found [ 580.607141][ T9404] hub 2-0:1.0: 8 ports detected [ 581.101825][ T9413] loop5: detected capacity change from 0 to 32768 [ 581.741964][ T9413] JBD2: Ignoring recovery information on journal [ 581.969167][ T9413] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 583.152277][ T5241] ocfs2: Unmounting device (7,5) on (node local) [ 584.356258][ T9448] delete_channel: no stack [ 585.398869][ T9475] loop1: detected capacity change from 0 to 64 [ 586.042333][ T9481] attempt to access beyond end of device [ 586.042333][ T9481] loop1: rw=34817, want=549, limit=64 [ 589.733617][ T9519] loop5: detected capacity change from 0 to 2048 [ 589.936840][ T9522] No such timeout policy "syz1" [ 591.179222][ T9519] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 593.571464][ T9556] loop1: detected capacity change from 0 to 8 [ 595.058800][ T9567] loop2: detected capacity change from 0 to 2048 [ 595.129046][ T9567] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 597.529941][ T9580] loop1: detected capacity change from 0 to 32768 [ 598.079386][ T9580] JBD2: Ignoring recovery information on journal [ 598.346323][ T9580] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 599.283493][ T4024] ocfs2: Unmounting device (7,1) on (node local) [ 602.502845][ T9626] bridge0: port 1(erspan0) entered blocking state [ 602.504680][ T9626] bridge0: port 1(erspan0) entered disabled state [ 602.507078][ T9626] device erspan0 entered promiscuous mode [ 606.015846][ T9648] loop4: detected capacity change from 0 to 32768 [ 606.146089][ T9648] JBD2: Ignoring recovery information on journal [ 606.261383][ T9648] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 607.610204][ T9660] delete_channel: no stack [ 607.753113][ T4033] ocfs2: Unmounting device (7,4) on (node local) [ 610.570319][ T9701] loop5: detected capacity change from 0 to 64 [ 610.583888][ T9702] loop1: detected capacity change from 0 to 8 [ 610.695004][ T9702] SQUASHFS error: lzo decompression failed, data probably corrupt [ 610.697343][ T9702] SQUASHFS error: Failed to read block 0x82: -5 [ 610.698878][ T9702] SQUASHFS error: Unable to read metadata cache entry [80] [ 610.701594][ T9702] SQUASHFS error: Unable to read inode 0x11f [ 612.174391][ T9710] attempt to access beyond end of device [ 612.174391][ T9710] loop5: rw=34817, want=549, limit=64 [ 612.488994][ T9713] delete_channel: no stack [ 615.092817][ T9736] bond0: (slave dummy0): Error: Slave device does not support XDP [ 617.973748][ T9769] loop2: detected capacity change from 0 to 32768 [ 618.422505][ T9769] JBD2: Ignoring recovery information on journal [ 618.510020][ T9769] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 619.543567][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1637'. [ 619.545996][ T9786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1637'. [ 620.984638][ T4028] ocfs2: Unmounting device (7,2) on (node local) [ 621.049351][ T9797] loop4: detected capacity change from 0 to 2048 [ 621.163887][ T9797] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 628.722858][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.722952][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.963516][ T9882] loop2: detected capacity change from 0 to 2048 [ 631.022449][ T9882] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 632.025897][ T9891] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 634.496601][ T9905] loop4: detected capacity change from 0 to 8192 [ 634.638035][ T9905] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 634.640845][ T9905] REISERFS (device loop4): using ordered data mode [ 634.642516][ T9905] reiserfs: using flush barriers [ 634.654930][ T9905] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 634.659139][ T9905] REISERFS (device loop4): checking transaction log (loop4) [ 634.715885][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1684'. [ 635.724819][ T9905] REISERFS (device loop4): Using tea hash to sort names [ 635.727358][ T9905] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 636.669263][ T9936] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 7 0x0 SD] (nlink == 2) not found (pos 2) [ 639.986353][ T9961] loop1: detected capacity change from 0 to 64 [ 640.743340][ T9969] attempt to access beyond end of device [ 640.743340][ T9969] loop1: rw=34817, want=549, limit=64 [ 641.330366][ T4106] Bluetooth: hci5: command 0x0405 tx timeout [ 641.887194][ T9978] loop4: detected capacity change from 0 to 8192 [ 646.267282][T10022] udc-core: couldn't find an available UDC or it's busy [ 646.269321][T10022] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 648.784467][T10037] loop1: detected capacity change from 0 to 512 [ 648.856657][T10037] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 651.472335][T10057] loop2: detected capacity change from 0 to 8192 [ 659.113762][T10106] loop5: detected capacity change from 0 to 8192 [ 659.592547][T10117] loop4: detected capacity change from 0 to 512 [ 659.694794][T10117] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 660.673214][T10124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1732'. [ 660.675456][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1732'. [ 661.685585][T10130] loop1: detected capacity change from 0 to 64 [ 663.178183][T10144] attempt to access beyond end of device [ 663.178183][T10144] loop1: rw=34817, want=549, limit=64 [ 666.479747][T10165] loop1: detected capacity change from 0 to 2048 [ 666.575920][T10165] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 666.580268][T10165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 666.726935][T10169] loop2: detected capacity change from 0 to 1024 [ 667.095997][T10173] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1747'. [ 667.922177][T10177] loop5: detected capacity change from 0 to 4096 [ 667.924088][T10169] EXT4-fs (loop2): Ignoring removed nobh option [ 667.925772][T10169] EXT4-fs (loop2): Ignoring removed bh option [ 667.927346][T10169] EXT4-fs (loop2): Ignoring removed oldalloc option [ 667.975964][T10177] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 668.010783][T10169] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,oldalloc,,errors=continue. Quota mode: writeback. [ 671.392749][T10209] loop1: detected capacity change from 0 to 64 [ 672.932325][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1758'. [ 674.609757][T10233] loop1: detected capacity change from 0 to 2048 [ 674.693216][T10233] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 674.840367][T10236] x_tables: duplicate entry at hook 3 [ 675.148067][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1762'. [ 678.953167][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1769'. [ 681.447823][T10290] loop2: detected capacity change from 0 to 64 [ 682.920692][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1781'. [ 683.583771][T10309] loop4: detected capacity change from 0 to 1024 [ 684.161655][T10311] loop2: detected capacity change from 0 to 8192 [ 684.179641][ T256] hfsplus: b-tree write err: -5, ino 4 [ 685.505736][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1786'. [ 685.541866][T10319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1786'. [ 687.586596][T10336] loop2: detected capacity change from 0 to 2048 [ 687.588948][T10338] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1792'. [ 687.597165][T10334] loop4: detected capacity change from 0 to 4096 [ 687.629421][T10336] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 687.646390][T10334] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 688.723313][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.724965][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.478197][T10354] loop4: detected capacity change from 0 to 2048 [ 690.508933][T10354] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 691.303799][T10362] loop2: detected capacity change from 0 to 512 [ 691.379312][T10362] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 692.477081][T10370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1799'. [ 692.479782][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1799'. [ 693.363953][T10382] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1802'. [ 694.145857][T10387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1804'. [ 694.175907][T10389] loop5: detected capacity change from 0 to 64 [ 695.426566][T10404] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1811'. [ 696.694346][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1814'. [ 696.700362][T10416] loop5: detected capacity change from 0 to 512 [ 696.769326][T10416] EXT2-fs (loop5): warning: mounting ext3 filesystem as ext2 [ 697.302566][T10422] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1815'. [ 697.305197][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1815'. [ 697.952912][T10424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1817'. [ 699.465958][T10441] loop5: detected capacity change from 0 to 4096 [ 699.469032][T10441] __ntfs_warning: 4 callbacks suppressed [ 699.469052][T10441] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 699.647693][T10441] ntfs: (device loop5): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 699.676406][T10441] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 699.701991][T10441] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 699.745606][T10441] ntfs: volume version 3.1. [ 701.410035][ T5241] ntfs: (device loop5): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 701.555485][T10451] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1824'. [ 702.902552][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1827'. [ 702.986038][T10460] tipc: Started in network mode [ 702.988543][T10460] tipc: Node identity 6, cluster identity 4711 [ 702.994409][T10460] tipc: Node number set to 6 [ 703.044830][T10462] loop5: detected capacity change from 0 to 1024 [ 703.126575][T10462] EXT4-fs (loop5): Ignoring removed nobh option [ 703.128631][T10462] EXT4-fs (loop5): Ignoring removed bh option [ 703.140240][T10462] EXT4-fs (loop5): Ignoring removed oldalloc option [ 704.058796][T10462] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,oldalloc,,errors=continue. Quota mode: writeback. [ 705.380945][T10475] input: syz0 as /devices/virtual/input/input9 [ 705.522796][T10478] x_tables: duplicate entry at hook 3 [ 705.844689][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 706.708515][T10490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1836'. [ 708.112371][T10493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1832'. [ 708.141245][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1832'. [ 708.853848][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1839'. [ 711.038739][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1846'. [ 711.690102][T10523] loop2: detected capacity change from 0 to 4096 [ 711.723341][T10537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1849'. [ 711.737166][T10523] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 711.768935][T10523] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 711.783511][T10523] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 711.786973][T10523] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 711.801984][T10523] ntfs: volume version 3.1. [ 712.513721][T10552] loop5: detected capacity change from 0 to 32768 [ 712.672824][T10552] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1853 (10552) [ 712.706921][ T4028] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 712.745953][T10552] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 712.748363][T10552] BTRFS info (device loop5): setting nodatacow, compression disabled [ 712.750611][T10552] BTRFS info (device loop5): force zlib compression, level 3 [ 712.752604][T10552] BTRFS info (device loop5): turning off barriers [ 712.754182][T10552] BTRFS info (device loop5): enabling ssd optimizations [ 712.755821][T10552] BTRFS info (device loop5): using spread ssd allocation scheme [ 712.757804][T10552] BTRFS info (device loop5): setting nodatacow [ 712.759409][T10552] BTRFS info (device loop5): using free space tree [ 712.761096][T10552] BTRFS info (device loop5): has skinny extents [ 712.787888][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'. [ 714.882954][T10609] loop5: detected capacity change from 0 to 128 [ 715.614330][T10609] FAT-fs (loop5): Unrecognized mount option "ÿÿè~תPZaÂJªrh{hòT$¾PS2AÂòã‰4Š‡áMÎ÷W‡S¶³hâƒé#2Ä<Èõé¼ îNªs¹6¥À!ù(þcívºJ\ 0àyÕ÷A^ÿŸ/ÿ/cìž°å" or missing value [ 715.858200][T10619] syz.5.1858 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 715.948932][T10621] loop5: detected capacity change from 0 to 128 [ 715.981326][T10621] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 716.450771][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1868'. [ 716.461064][T10625] tipc: Started in network mode [ 716.468485][T10625] tipc: Node identity 6, cluster identity 4711 [ 716.470023][T10625] tipc: Node number set to 6 [ 720.410396][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 721.648630][T10680] loop5: detected capacity change from 0 to 8192 [ 721.826262][T10684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1885'. [ 721.828765][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1885'. [ 723.482514][T10691] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1888'. [ 724.029625][T10696] loop5: detected capacity change from 0 to 1024 [ 724.584588][ T9] hfsplus: b-tree write err: -5, ino 4 [ 724.681898][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1891'. [ 724.689291][T10700] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1891'. [ 724.857351][T10705] loop5: detected capacity change from 0 to 64 [ 725.403919][T10712] attempt to access beyond end of device [ 725.403919][T10712] loop5: rw=34817, want=549, limit=64 [ 728.083200][T10734] loop5: detected capacity change from 0 to 8192 [ 728.706733][T10746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1904'. [ 728.721048][T10746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1904'. [ 732.440526][T10778] tipc: Started in network mode [ 732.441905][T10778] tipc: Node identity 6, cluster identity 4711 [ 732.448621][T10778] tipc: Node number set to 6 [ 732.538950][T10784] netlink: 'syz.2.1912': attribute type 10 has an invalid length. [ 734.116845][T10804] loop5: detected capacity change from 0 to 2048 [ 735.588577][T10804] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 738.094235][T10847] netlink: 'syz.5.1932': attribute type 72 has an invalid length. [ 738.096308][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1932'. [ 738.364329][T10853] loop5: detected capacity change from 0 to 128 [ 739.184065][T10853] FAT-fs (loop5): invalid media value (0x00) [ 739.185695][T10853] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 739.187907][T10853] FAT-fs (loop5): Can't find a valid FAT filesystem [ 747.951799][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1954'. [ 747.989112][T10925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1954'. [ 750.096174][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.097970][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.617033][T10974] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1970'. [ 753.691920][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1971'. [ 762.925372][T11056] loop5: detected capacity change from 0 to 128 [ 765.540373][T11088] loop5: detected capacity change from 0 to 4096 [ 765.618171][T11088] ntfs: (device loop5): parse_ntfs_boot_sector(): Mft record size (32768) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 765.639994][T11088] ntfs: (device loop5): ntfs_fill_super(): Unsupported NTFS filesystem. [ 765.942971][T11103] loop5: detected capacity change from 0 to 1024 [ 766.053483][T11103] hfsplus: failed to load root directory [ 766.837505][T11118] loop5: detected capacity change from 0 to 64 [ 768.111411][T11137] attempt to access beyond end of device [ 768.111411][T11137] loop5: rw=34817, want=549, limit=64 [ 772.838134][T11180] loop5: detected capacity change from 0 to 1024 [ 772.869217][T11180] EXT4-fs (loop5): unsupported descriptor size 0 [ 777.229842][T11237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2061'. [ 779.756275][T11261] loop5: detected capacity change from 0 to 128 [ 779.847375][T11261] hpfs: Bad magic ... probably not HPFS [ 780.023659][T11270] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2073'. [ 781.108295][T11276] overlayfs: missing 'lowerdir' [ 781.114891][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2076'. [ 781.193235][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2077'. [ 786.254320][T11364] loop5: detected capacity change from 0 to 128 [ 786.690193][T11374] loop5: detected capacity change from 0 to 512 [ 786.786900][T11378] Device name cannot be null; rc = [-22] [ 786.862774][T11374] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 786.878817][T11374] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.2112: corrupted in-inode xattr [ 786.884140][T11374] EXT4-fs (loop5): Remounting filesystem read-only [ 786.885917][T11374] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.2112: couldn't read orphan inode 15 (err -117) [ 786.889491][T11374] EXT4-fs (loop5): Remounting filesystem read-only [ 786.891123][T11374] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,bsddf,errors=remount-ro,init_itable,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpid,norecovery,. Quota mode: none. [ 787.260277][T11389] netlink: 'syz.1.2117': attribute type 72 has an invalid length. [ 787.438520][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2117'. [ 787.503829][T11393] loop5: detected capacity change from 0 to 64 [ 787.791292][T11393] attempt to access beyond end of device [ 787.791292][T11393] loop5: rw=34817, want=549, limit=64 [ 790.228220][T11436] loop5: detected capacity change from 0 to 64 [ 790.340603][T11436] UBIFS error (pid: 11436): cannot open "", error -22 [ 791.880401][T11459] loop5: detected capacity change from 0 to 256 [ 792.040199][T11459] FAT-fs (loop5): Directory bread(block 64) failed [ 792.053072][T11459] FAT-fs (loop5): Directory bread(block 65) failed [ 792.054755][T11459] FAT-fs (loop5): Directory bread(block 66) failed [ 792.056556][T11459] FAT-fs (loop5): Directory bread(block 67) failed [ 792.058251][T11459] FAT-fs (loop5): Directory bread(block 68) failed [ 792.059805][T11459] FAT-fs (loop5): Directory bread(block 69) failed [ 792.061468][T11459] FAT-fs (loop5): Directory bread(block 70) failed [ 792.063251][T11459] FAT-fs (loop5): Directory bread(block 71) failed [ 792.064902][T11459] FAT-fs (loop5): Directory bread(block 72) failed [ 792.066580][T11459] FAT-fs (loop5): Directory bread(block 73) failed [ 792.516017][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2146'. [ 792.779106][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2149'. [ 797.190894][T11553] loop5: detected capacity change from 0 to 256 [ 797.329943][T11553] FAT-fs (loop5): Directory bread(block 64) failed [ 797.339926][T11553] FAT-fs (loop5): Directory bread(block 65) failed [ 797.342564][T11553] FAT-fs (loop5): Directory bread(block 66) failed [ 797.344307][T11553] FAT-fs (loop5): Directory bread(block 67) failed [ 797.346143][T11553] FAT-fs (loop5): Directory bread(block 68) failed [ 797.348592][T11553] FAT-fs (loop5): Directory bread(block 69) failed [ 797.350842][T11553] FAT-fs (loop5): Directory bread(block 70) failed [ 797.384801][T11553] FAT-fs (loop5): Directory bread(block 71) failed [ 797.390355][T11553] FAT-fs (loop5): Directory bread(block 72) failed [ 797.394959][T11553] FAT-fs (loop5): Directory bread(block 73) failed [ 804.977298][T11664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2222'. [ 805.976748][T11670] SET target dimension over the limit! [ 806.068104][T11679] xt_ecn: cannot match TCP bits for non-tcp packets [ 807.208461][T11702] hsr0: VLAN not yet supported [ 809.861355][T11750] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2256'. [ 811.543598][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.634748][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.018576][T11807] cgroup: Unexpected value for 'cpuset_v2_mode' [ 819.649400][T11886] loop5: detected capacity change from 0 to 32768 [ 819.847809][T11886] XFS (loop5): Mounting V5 Filesystem [ 820.791746][T11886] XFS (loop5): Ending clean mount [ 820.841884][T11886] XFS (loop5): Quotacheck needed: Please wait. [ 820.951627][T11886] XFS (loop5): Quotacheck: Done. [ 821.373717][T11886] orangefs_mount: mount request failed with -4 [ 821.642535][ T5241] XFS (loop5): Unmounting Filesystem [ 821.877878][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2319'. [ 821.920660][T11923] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2320'. [ 824.931132][T11956] loop5: detected capacity change from 0 to 128 [ 825.973022][T11956] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 826.002634][T11956] EXT4-fs warning (device loop5): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 828.750778][T11979] loop5: detected capacity change from 0 to 32768 [ 828.792965][T11979] XFS: noikeep mount option is deprecated. [ 828.794527][T11979] XFS: attr2 mount option is deprecated. [ 828.918009][T11979] XFS (loop5): Mounting V5 Filesystem [ 828.960374][T12012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2349'. [ 828.989321][T11979] XFS (loop5): Ending clean mount [ 828.994291][T11979] XFS (loop5): Quotacheck needed: Please wait. [ 829.042899][T11979] XFS (loop5): Quotacheck: Done. [ 829.139501][ T5241] XFS (loop5): Unmounting Filesystem [ 833.449446][T12082] netlink: 'syz.5.2373': attribute type 13 has an invalid length. [ 833.452161][T12082] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2373'. [ 833.464772][T12082] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 837.802508][T12138] loop5: detected capacity change from 0 to 1764 [ 837.984879][T12138] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 838.034211][T12153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2399'. [ 842.832155][T12191] loop5: detected capacity change from 0 to 32768 [ 846.629622][T12248] loop5: detected capacity change from 0 to 8 [ 847.105935][T12272] loop5: detected capacity change from 0 to 1024 [ 849.546179][T12297] hub 6-0:1.0: USB hub found [ 849.557614][T12297] hub 6-0:1.0: 8 ports detected [ 852.380667][T12335] loop5: detected capacity change from 0 to 512 [ 852.468647][T12335] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 852.503394][T12335] EXT4-fs (loop5): 1 truncate cleaned up [ 852.504783][T12335] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 855.163526][T12374] loop5: detected capacity change from 0 to 16 [ 855.229336][T12374] erofs: (device loop5): mounted with root inode @ nid 36. [ 856.588401][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2485'. [ 858.060424][T12413] tipc: Started in network mode [ 858.061698][T12413] tipc: Node identity 6, cluster identity 4711 [ 858.070453][T12413] tipc: Node number set to 6 [ 858.553634][T12416] loop5: detected capacity change from 0 to 4096 [ 860.009612][T12416] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 860.084347][T12416] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 860.118465][T12416] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 860.144960][T12440] xt_CT: You must specify a L4 protocol and not use inversions on it [ 860.146218][T12416] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 860.175849][T12416] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 860.200467][T12416] ntfs: volume version 3.1. [ 860.217116][T12416] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 860.256902][T12416] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 860.292175][T12416] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 860.294951][T12416] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 860.297865][T12416] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 863.575476][T12466] loop5: detected capacity change from 0 to 32768 [ 864.187704][T12466] JBD2: Ignoring recovery information on journal [ 864.373562][T12466] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 864.456199][ T5241] ocfs2: Unmounting device (7,5) on (node local) [ 866.589026][T12531] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2539'. [ 867.927473][T12538] loop5: detected capacity change from 0 to 2048 [ 868.128972][T12538] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 869.880634][T12569] loop5: detected capacity change from 0 to 256 [ 869.946301][T12575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2552'. [ 873.054251][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 873.055995][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.086901][T12624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2568'. [ 880.533222][T12660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2581'. [ 882.781255][T12686] loop5: detected capacity change from 0 to 64 [ 883.742811][T12696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2595'. [ 885.604653][T12721] loop5: detected capacity change from 0 to 2048 [ 886.565953][T12721] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 892.819343][T12786] loop5: detected capacity change from 0 to 8192 [ 894.457266][T12801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2633'. [ 896.499487][T12842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2649'. [ 908.420230][T12945] loop5: detected capacity change from 0 to 32768 [ 908.582758][T12945] JBD2: Ignoring recovery information on journal [ 909.173621][T12945] JBD2: recovery failed [ 909.314123][T12945] (syz.5.2687,12945,1):ocfs2_journal_load:1083 ERROR: Failed to load journal! [ 909.596911][T12945] (syz.5.2687,12945,0):ocfs2_check_volume:2434 ERROR: ocfs2 journal load failed! -5 [ 909.609648][T12945] (syz.5.2687,12945,1):ocfs2_check_volume:2490 ERROR: status = -5 [ 909.615457][T12945] (syz.5.2687,12945,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 909.652175][T12945] (syz.5.2687,12945,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 911.643905][T13012] loop5: detected capacity change from 0 to 64 [ 912.388806][T13018] attempt to access beyond end of device [ 912.388806][T13018] loop5: rw=34817, want=545, limit=64 [ 923.228653][T13178] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2775'. [ 926.079970][T13189] loop5: detected capacity change from 0 to 8192 [ 927.016119][T13207] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2788'. [ 927.933274][T13218] lo speed is unknown, defaulting to 1000 [ 927.936115][T13218] lo speed is unknown, defaulting to 1000 [ 927.940641][T13218] lo speed is unknown, defaulting to 1000 [ 927.948953][T13218] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 927.969207][T13218] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 927.976628][T13223] loop5: detected capacity change from 0 to 64 [ 928.066215][T13218] lo speed is unknown, defaulting to 1000 [ 928.071181][T13218] lo speed is unknown, defaulting to 1000 [ 928.088435][T13218] lo speed is unknown, defaulting to 1000 [ 928.105200][T13218] lo speed is unknown, defaulting to 1000 [ 928.107671][T13218] lo speed is unknown, defaulting to 1000 [ 928.126188][T13226] vxcan1 speed is unknown, defaulting to 1000 [ 928.151054][T13226] vxcan1 speed is unknown, defaulting to 1000 [ 928.161844][T13226] vxcan1 speed is unknown, defaulting to 1000 [ 928.186248][T13223] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 928.188116][T13223] BFS-fs: bfs_fill_super(): Impossible last inode number 1048735 > 513 on loop5 [ 928.923673][T10586] vxcan1 speed is unknown, defaulting to 1000 [ 928.983043][T13226] infiniband syz1: set active [ 928.984619][T13226] infiniband syz1: added vxcan1 [ 929.003596][T13226] infiniband syz1: Couldn't open port 1 [ 929.106038][T13226] RDS/IB: syz1: added [ 929.124921][T13226] smc: adding ib device syz1 with port count 1 [ 929.161859][T13226] smc: ib device syz1 port 1 has pnetid [ 929.188279][ T3606] vxcan1 speed is unknown, defaulting to 1000 [ 929.233581][T13226] vxcan1 speed is unknown, defaulting to 1000 [ 929.516506][T13226] vxcan1 speed is unknown, defaulting to 1000 [ 929.704123][T13226] vxcan1 speed is unknown, defaulting to 1000 [ 929.768478][T13226] vxcan1 speed is unknown, defaulting to 1000 [ 929.941456][T13226] vxcan1 speed is unknown, defaulting to 1000 [ 930.111207][T13223] loop5: detected capacity change from 0 to 32768 [ 930.658940][T13223] (syz.5.2791,13223,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 930.661662][T13223] (syz.5.2791,13223,1):ocfs2_read_locked_inode:521 ERROR: status = -12 [ 930.743904][T13223] (syz.5.2791,13223,1):_ocfs2_get_system_file_inode:144 ERROR: status = -12 [ 930.746339][T13223] (syz.5.2791,13223,1):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 930.748684][T13223] (syz.5.2791,13223,1):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 930.748712][T13223] (syz.5.2791,13223,1):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 930.822043][T13223] (syz.5.2791,13223,1):ocfs2_initialize_super:2278 ERROR: status = -22 [ 930.824173][T13223] (syz.5.2791,13223,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 934.682445][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.684102][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.657523][T13304] ptrace attach of "./syz-executor exec"[4033] was attempted by "\x22ÿE‚ŠüGIÚ\x0d UEBä¿hP‘ÿ()J» ªhˆü\x0b*ò%Åh7 Tûãù“\x07È”§Ý PU<Äú¿DP‘ÿ()A» ªDˆü—\x0c*ò%%i7 T•\x0c‘ÿRAEþ£¤í€ªR!òŒAþ#¥4퀪Ò!ò_&¨È””¡Ý PU&Dþo*ò%·Ón ¨º=DþËù’²´\x1b ªÊ†ÈÿAEþ£äÚ\x0d Uw„ȹ \x22ÿQRŽv@U¹ù¿3¨È”ÜI» êÎù/Tä?JÊÓn ¨*\x22ÿ‚ŠüGIÚ\x0d UBä¿bP‘ÿ(©H» ªbˆüW\x0a*ò%•h7 TU\x0a‘ÿÊAEþ£¤2퀪Ê!ò_%¨È”T¡Ý PU%Dþ«ù’ª´\x1b ªª†Èµ \x22ÿQRv@Uµù¯Tä?JªÓn ¨ª\x22ÿ5‚ŠüGI\x0dÚ\x0d U5Bä¿fP‘ÿ(©I» ªfˆü×\x0a*ò%µh7 TÕ\x0a‘ÿ»‚ŠüGÉ]´\x1b ªî\x0a‘ÿÚAM—ù_jþ!µi7 TÕ‘ÿ:AÅú?JêÐn ¨ª\x22ÿuƒŠüGI]Ú\x0d UuCä¿^P‘ÿ(©G» ª^ˆü×*ò%õi7 TÕ‘ÿAEþ£¤í€ª!òß0¨È”4¤Ý PÕ0Dþ\x1bù’F´\x1b ª…Èã \x22ÿQÒ˜v@UãùoTä?JšÐn ¨j\x22ÿMƒŠüGISÚ\x0d UMCäÿî \x22ÿQr7퀪»Cä¿YP‘ÿ(iF» ªYˆü7*ò%Íi7 T5‘ÿAEþ£¤í€ª!òOP‘ÿ(¹‡v@Õ=!òß2¨È”´¤Ý PÕ2Dþï\x0d*ò%÷Òn ¨º÷·ü§ÉúÕóß*¨È”´¢Ý PÕ*Äú¿uP‘ÿ(iM» ªuˆü·\x09*ò%mh7 Tµ\x09‘ÿ¶AEþ£¤-퀪¶!òß.¨È”´£Ý PÕ.Dþï\x0b*ò%÷Ñn ¨º/DþÛ\x07ù’ö´\x1b ªÚ‡È‡ \x22ÿQÒv@U‡ùïTä?J: [ 935.799782][T13311] loop5: detected capacity change from 0 to 8192 [ 936.573934][T13321] netlink: 'syz.2.2823': attribute type 3 has an invalid length. [ 936.576021][T13321] netlink: 'syz.2.2823': attribute type 1 has an invalid length. [ 936.577885][T13321] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2823'. [ 942.214042][T13365] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 942.216246][T13365] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 942.218502][T13365] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 942.258106][T13365] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 952.726441][T13449] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 952.737909][T13449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 952.760515][T13449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 952.834321][T13452] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2868'. [ 952.874215][T10584] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 954.025579][T10588] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 954.380260][T13486] loop5: detected capacity change from 0 to 1024 [ 954.480491][T13486] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 954.800856][T13491] loop5: detected capacity change from 0 to 1024 [ 954.965250][ T7312] hfsplus: bad catalog file entry [ 954.967008][ T7312] hfsplus: b-tree write err: -5, ino 3 [ 954.986236][T13495] bond0: option primary_reselect: invalid value (3) [ 955.243723][T13507] loop5: detected capacity change from 0 to 512 [ 956.069019][T13507] EXT2-fs (loop5): warning: mounting ext3 filesystem as ext2 [ 956.432768][T13534] loop5: detected capacity change from 0 to 256 [ 959.216866][T13557] loop5: detected capacity change from 0 to 256 [ 959.311340][T13558] overlayfs: failed to clone upperpath [ 959.336210][T13557] FAT-fs (loop5): Directory bread(block 64) failed [ 959.338310][T13557] FAT-fs (loop5): Directory bread(block 65) failed [ 959.348744][T13557] FAT-fs (loop5): Directory bread(block 66) failed [ 959.352656][T13557] FAT-fs (loop5): Directory bread(block 67) failed [ 959.358574][T13557] FAT-fs (loop5): Directory bread(block 68) failed [ 959.360226][T13557] FAT-fs (loop5): Directory bread(block 69) failed [ 959.400958][T13557] FAT-fs (loop5): Directory bread(block 70) failed [ 959.410465][T13557] FAT-fs (loop5): Directory bread(block 71) failed [ 959.418598][T13557] FAT-fs (loop5): Directory bread(block 72) failed [ 959.420392][T13557] FAT-fs (loop5): Directory bread(block 73) failed [ 959.649637][T13581] SET target dimension over the limit! [ 961.914824][T13604] ODEBUG: Out of memory. ODEBUG disabled [ 962.098863][T13616] loop5: detected capacity change from 0 to 256 [ 962.126792][T13616] exfat: Deprecated parameter 'namecase' [ 962.171007][T13616] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 963.849830][T13638] loop5: detected capacity change from 0 to 8192 [ 966.553437][T13714] loop5: detected capacity change from 0 to 1024 [ 966.815123][T13720] loop5: detected capacity change from 0 to 64 [ 966.951078][T13726] loop5: detected capacity change from 0 to 16 [ 966.964600][T13726] erofs: (device loop5): mounted with root inode @ nid 36. [ 967.117604][T13728] loop5: detected capacity change from 0 to 8192 [ 970.657468][T13750] loop5: detected capacity change from 0 to 32768 [ 970.705421][T13750] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.2984 (13750) [ 970.759454][T13750] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 970.761839][T13750] BTRFS info (device loop5): using free space tree [ 970.771289][T13750] BTRFS info (device loop5): has skinny extents [ 971.422135][T13750] BTRFS info (device loop5): enabling ssd optimizations [ 972.235074][T13854] loop5: detected capacity change from 0 to 128 [ 973.182256][T13854] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 973.209120][T13854] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 974.338549][T13882] sctp: [Deprecated]: syz.1.3029 (pid 13882) Use of int in maxseg socket option. [ 974.338549][T13882] Use struct sctp_assoc_value instead [ 974.586495][T13892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3033'. [ 976.661911][T13929] loop5: detected capacity change from 0 to 4096 [ 976.836835][T13940] team0: Device gtp0 is of different type [ 978.089867][T13970] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3068'. [ 978.220007][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 978.240090][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 978.276032][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 978.280771][T13980] loop5: detected capacity change from 0 to 8192 [ 978.371710][ T13] lo speed is unknown, defaulting to 1000 [ 978.544918][T13996] bond0: option primary_reselect: invalid value (3) [ 979.179799][T14005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3082'. [ 979.234378][T14008] bridge0: port 4(vlan4) entered blocking state [ 979.258169][T14008] bridge0: port 4(vlan4) entered disabled state [ 979.419247][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'. [ 979.450728][T14023] siw: device registration error -23 [ 980.696601][T14041] loop5: detected capacity change from 0 to 8192 [ 981.385182][T14041] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 981.387912][T14041] REISERFS (device loop5): using ordered data mode [ 981.440852][T14041] reiserfs: using flush barriers [ 981.478304][T14041] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 981.483488][T14041] REISERFS (device loop5): checking transaction log (loop5) [ 981.489443][T14041] REISERFS (device loop5): Using r5 hash to sort names [ 981.491376][T14041] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 981.517267][T14041] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 981.601520][T14041] ================================================================== [ 981.605413][T14041] BUG: KASAN: use-after-free in strlen+0x54/0x70 [ 981.607035][T14041] Read of size 1 at addr ffff0000f5dd3008 by task syz.5.3097/14041 [ 981.609020][T14041] [ 981.609628][T14041] CPU: 1 PID: 14041 Comm: syz.5.3097 Not tainted 5.15.179-syzkaller #0 [ 981.611762][T14041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 981.614249][T14041] Call trace: [ 981.615071][T14041] dump_backtrace+0x0/0x530 [ 981.616287][T14041] show_stack+0x2c/0x3c [ 981.617375][T14041] dump_stack_lvl+0x108/0x170 [ 981.618550][T14041] print_address_description+0x7c/0x3f0 [ 981.619923][T14041] kasan_report+0x174/0x1e4 [ 981.621093][T14041] __asan_report_load1_noabort+0x44/0x50 [ 981.622682][T14041] strlen+0x54/0x70 [ 981.623569][T14041] search_by_entry_key+0x7d0/0xe88 [ 981.624902][T14041] reiserfs_readdir_inode+0x230/0xf30 [ 981.626266][T14041] reiserfs_readdir+0x48/0x58 [ 981.627473][T14041] iterate_dir+0x1f4/0x4ec [ 981.628701][T14041] __arm64_sys_getdents64+0x1c4/0x4c4 [ 981.630056][T14041] invoke_syscall+0x98/0x2b8 [ 981.631262][T14041] el0_svc_common+0x138/0x258 [ 981.632448][T14041] do_el0_svc+0x58/0x14c [ 981.633491][T14041] el0_svc+0x7c/0x1f0 [ 981.634542][T14041] el0t_64_sync_handler+0x84/0xe4 [ 981.635858][T14041] el0t_64_sync+0x1a0/0x1a4 [ 981.637067][T14041] [ 981.637646][T14041] The buggy address belongs to the page: [ 981.639137][T14041] page:00000000fe2dbec6 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x135dd3 [ 981.641728][T14041] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 981.643520][T14041] raw: 05ffc00000000000 fffffc0003d77508 fffffc0003a3e0c8 0000000000000000 [ 981.645695][T14041] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 981.647832][T14041] page dumped because: kasan: bad access detected [ 981.649431][T14041] [ 981.650000][T14041] Memory state around the buggy address: [ 981.651450][T14041] ffff0000f5dd2f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 981.653484][T14041] ffff0000f5dd2f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 981.655511][T14041] >ffff0000f5dd3000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 981.657548][T14041] ^ [ 981.658706][T14041] ffff0000f5dd3080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 981.660687][T14041] ffff0000f5dd3100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 981.662646][T14041] ================================================================== [ 981.664629][T14041] Disabling lock debugging due to kernel taint