last executing test programs: 18m55.476880862s ago: executing program 2 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x81800) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000340)=""/245, 0xf5}], 0x1, 0x404, 0xc) 18m54.416259588s ago: executing program 2 (id=119): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 18m53.718028377s ago: executing program 2 (id=121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 18m52.29684406s ago: executing program 2 (id=125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x8, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f00000001c0)={0x1, 0x1, 0x10000000000000a, 0x10000}) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000"], 0x110) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 18m51.310518998s ago: executing program 2 (id=128): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], &(0x7f00000003c0)=""/120, 0xd9, 0x78, 0x1, 0x4, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = inotify_init1(0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 18m49.128192756s ago: executing program 2 (id=132): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x2000000, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x24) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000540)={[{@nombcache}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@uid_eq}, {@context={'context', 0x3d, 'unconfined_u'}}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) 18m33.819204428s ago: executing program 32 (id=132): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x2000000, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x24) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000540)={[{@nombcache}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@uid_eq}, {@context={'context', 0x3d, 'unconfined_u'}}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/cpuinfo\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) 27.716891799s ago: executing program 1 (id=3618): sched_setattr(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003041000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) 27.276994514s ago: executing program 1 (id=3621): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x40, 0x7, 0xf, 0xd, 0xffffffffffffff32, 0xb021, 0x0}) 27.226062399s ago: executing program 1 (id=3622): userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000004e350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00'}, 0x48) 25.489957464s ago: executing program 1 (id=3624): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c6661756c745f747970653d30303030303030303030303030303033323736372c6261636b67726f756e645f67633d6f66662c6e6f666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c636f6d70726573735f63616368652c616c6c6f635f6d6f64653d64656661756c742c6e6f696e6c696e655f78617474722c6772706a71756f74613d2c636865636b706f696e743d64697361626c652c00b49405881d23d0c95ec7f5f668e6544238"], 0x4, 0x550c, &(0x7f00000089c0)="$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") chdir(&(0x7f00000000c0)='./bus\x00') syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) close(0x3) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xb305, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xf, 0x5, 0x3, 0x1, 0x2, 0x3f, {0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0xa3b}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfb, 0x9}}}}}]}}]}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) setsockopt$ax25_int(r4, 0x101, 0xa, &(0x7f0000000180)=0x8, 0x4) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=r1, @ANYRES64=r3, @ANYRES64=r3, @ANYRES16=r2, @ANYBLOB="f8c24a82dd0e8be8e1103ec77748b75e3ec90e3e056f6797732b3020569b6e0010aa9b4f4ef645fa45023b7fae547dce1937469f21972429482a2a1487058cacd38c40a27ca01926a89cd5203c5d5859889eff5cf720dde5", @ANYRESOCT=r3, @ANYRES16=r2, @ANYBLOB="fdff9a48"], 0x48) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGETD(r5, 0x5424, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40) 21.028865003s ago: executing program 1 (id=3638): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0x30, 0x0, 0x80, 0x80000000, 0xfffffffb, 0x0, 0x2, {0xf4, 0x6}, {0x6, 0x40}, {0x6c, 0x2, 0x401}, {0x5, 0x200, 0x1}, 0x2, 0x1, 0x2, 0x2, 0x0, 0x401, 0x7, 0x40, 0x2, 0x7fffffff, 0x2, 0x5, 0x14, 0x2, 0x0, 0x6}) syz_socket_connect_nvme_tcp() prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r5, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r7, 0x100000000) 18.812999776s ago: executing program 1 (id=3645): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) 17.815804286s ago: executing program 33 (id=3645): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) 7.187668717s ago: executing program 4 (id=3671): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f0000000080)="018677", 0x3}], 0x1, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) write$cgroup_pid(r2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) 6.048838401s ago: executing program 4 (id=3673): sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)={0x50, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x300}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000041}, 0x4008047) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f00000009c0)=@framed, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.104676296s ago: executing program 4 (id=3676): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) setitimer(0x0, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000001fbc0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x150}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) r5 = openat$cgroup_freezer_state(r4, &(0x7f00000002c0), 0x2, 0x0) sendfile(r5, r5, 0x0, 0x8000002) 4.728482184s ago: executing program 0 (id=3679): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) setitimer(0x0, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000001fbc0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x150}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/xfrm_stat\x00') read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) 4.56840539s ago: executing program 0 (id=3680): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f0000000080)="018677", 0x3}], 0x1, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) write$cgroup_pid(r2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) 4.402040667s ago: executing program 3 (id=3681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x9, 0x3, [0x4, 0x7f, 0x8]}, &(0x7f0000000340)=0xe) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r6, 0x4068aea3, &(0x7f0000000580)={0xa4, 0x0, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000180)=@x86={0x0, 0x3, 0x10, 0x0, 0x8000, 0x6, 0x1, 0x10, 0x8, 0x8, 0x8, 0x4, 0x0, 0x1, 0x1e, 0x1, 0x45, 0xd8, 0x2, '\x00', 0x32, 0x11000}) r8 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x2000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r8, 0xc0305602, &(0x7f0000000100)={0x0, 0x7, 0x2007, 0x1}) 3.528874615s ago: executing program 4 (id=3682): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r2, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x8, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x1, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) write(r0, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) 3.527879635s ago: executing program 0 (id=3683): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000000000004) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000700)='sched_switch\x00'}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r7, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) sendmsg$802154_dgram(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x24, @short={0x2, 0x0, 0xffff}}, 0x3, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3, 0x4, r3}, 0x10) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x14, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0x3}}}}}}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) 2.838479165s ago: executing program 4 (id=3684): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r0, r1, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2e0000002420000004000000", @ANYRES32=r2], 0x20) 2.309476857s ago: executing program 0 (id=3685): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB, @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r2, 0x1, 0x8, 0x6, @remote}, 0x14) 2.307390518s ago: executing program 3 (id=3686): socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @broadcast}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet(r5, &(0x7f00000017c0)={0x0, 0x53, &(0x7f0000000640)=[{0x0}, {&(0x7f00000005c0)="0fdc22128e", 0x5}], 0x2}, 0x40) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f0000000c80)={{0x5, 0x3}, 0x100, './file0\x00'}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r7, 0x107, 0x2, 0x0, 0x0) 2.231346896s ago: executing program 4 (id=3687): r0 = syz_open_dev$evdev(&(0x7f0000001080), 0xb, 0xa602) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x2000200c}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000600)=""/84, 0x54, 0x0, &(0x7f0000000280)=""/26, 0x1a}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000500)=ANY=[@ANYBLOB="73686f727461642c66696c657365743d30303030303030303030106fd6303030303030303030352c756e686964652c6e6f7672732c766f6c756d653d3030303030303031303202000000643d69676e6f72652c7569643d666f726765742c616e63686f723d30303030303030303030303030303030303030302c696f636861727365743d63703836392c6e6f7672732c6e6f6164696e6963622c00520d70b1372dc75749b9786b6a151369f71f43f7f33d34552532321d1bdfbdd593727bd51de6f506a7088552c89396d0c7d4882a8817515faf6ba678d2b5038c44b3aed81fe0bee7860013f675cc1a98cf79723dfe8d8c8f000000000000"], 0xa, 0xc36, &(0x7f0000001a40)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port0\x00', 0x100, 0x131845, 0x0, 0x0, 0x7, 0x0, 0x100000, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x82}, 'port0\x00', 0x25, 0x60041, 0x8000, 0xfffffffe, 0x9, 0x0, 0x5, 0x0, 0x7, 0x9}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) tee(r6, r5, 0x42ea, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f00000002c0)) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r7, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x4}, 'port1\x00', 0x89, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) shutdown(0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_tables_targets\x00') preadv(r8, &(0x7f0000002240)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1, 0x29d3, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.867845782s ago: executing program 0 (id=3688): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) setitimer(0x0, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000001fbc0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x150}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/xfrm_stat\x00') read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) 1.676427702s ago: executing program 0 (id=3689): socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x62a1, &(0x7f000000c880)="$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") chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 1.556850533s ago: executing program 3 (id=3690): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x2f, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.447841325s ago: executing program 3 (id=3691): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0x30, 0x0, 0x80, 0x80000000, 0xfffffffb, 0x0, 0x2, {0xf4, 0x6}, {0x6, 0x40}, {0x6c, 0x2, 0x401}, {0x5, 0x200, 0x1}, 0x2, 0x1, 0x2, 0x2, 0x0, 0x401, 0x7, 0x40, 0x2, 0x7fffffff, 0x2, 0x5, 0x14, 0x2, 0x0, 0x6}) syz_socket_connect_nvme_tcp() prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r3, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) 1.144351235s ago: executing program 3 (id=3692): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0x400000d, 0xf, 0xba55, 0x8da8, 0x0, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0xfffffffe, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x7, 0x3, 0x9, 0x10000, 0x400, 0x8000, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x7ff, 0x5, 0x1, 0xfffffffd, 0x6, 0x5, 0x800, 0xffff, 0x1, 0x96, 0xfffffffd, 0x101, 0x0, 0x800, 0x2, 0xc, 0x3, 0x379, 0x9, 0x7ea, 0x5, 0x5, 0x6, 0x12, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x1e, 0x7, 0x5, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x1f1, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xeb, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x401, 0x5, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x3, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x3, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x6, 0x4, 0x80000008, 0x8a8, 0x2, 0x40, 0x7, 0x1, 0x2, 0x1, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4ede, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x10, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x7ffffff, &(0x7f0000000200)={0x4, 0x7, 0x86, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 846.968785ms ago: executing program 5 (id=3646): r0 = epoll_create1(0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d800000010008104", 0x8}], 0x1}, 0x20000004) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)) 624.493908ms ago: executing program 5 (id=3693): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000000000004) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000700)='sched_switch\x00'}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r7, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) sendmsg$802154_dgram(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x24, @short={0x2, 0x0, 0xffff}}, 0x3, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3, 0x4, r3}, 0x10) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x14, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0x3}}}}}}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) 0s ago: executing program 3 (id=3694): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1c, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) kernel console output (not intermixed with test programs): 000000000 r/w without journal. Quota mode: writeback. [ 960.286090][T16606] Quota error (device loop1): do_check_range: Getting block 59136 out of range 0-1 [ 960.367969][T16611] team0: Unable to change to the same mode the team is in [ 960.975681][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 960.987228][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 960.995485][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 961.003648][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 961.013836][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 961.022356][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 961.168328][ T8263] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.366549][T16610] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 961.465973][ T8263] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.466038][T16244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.668047][ T8263] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.716288][T16625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2486'. [ 961.783871][ T8263] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.020567][T16635] netlink: 680 bytes leftover after parsing attributes in process `syz.1.2492'. [ 962.153878][T16642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2491'. [ 962.411060][T16615] chnl_net:caif_netlink_parms(): no params data found [ 962.677131][ T8263] tipc: Left network mode [ 963.106845][ T50] Bluetooth: hci2: command tx timeout [ 963.248752][T16615] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.258087][T16615] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.267817][T16615] bridge_slave_0: entered allmulticast mode [ 963.279966][T16615] bridge_slave_0: entered promiscuous mode [ 963.338770][T16615] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.366880][T16615] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.395024][T16615] bridge_slave_1: entered allmulticast mode [ 963.402277][T16615] bridge_slave_1: entered promiscuous mode [ 963.763083][T16615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.890922][T16615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.155917][T16615] team0: Port device team_slave_0 added [ 964.247283][T16615] team0: Port device team_slave_1 added [ 964.426924][T16615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.453066][T16615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.530963][T16615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.666937][T16718] netlink: 'syz.4.2515': attribute type 29 has an invalid length. [ 964.801716][T16615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.835813][T16615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.937309][T16615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.205561][T16718] netlink: 'syz.4.2515': attribute type 29 has an invalid length. [ 965.213974][ T50] Bluetooth: hci2: command tx timeout [ 965.239958][T16720] netlink: 'syz.4.2515': attribute type 29 has an invalid length. [ 965.483623][T16732] loop0: detected capacity change from 0 to 512 [ 965.702825][T16615] hsr_slave_0: entered promiscuous mode [ 966.043611][T16615] hsr_slave_1: entered promiscuous mode [ 966.113467][T16615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 966.136517][T16615] Cannot create hsr debugfs directory [ 966.466234][T16736] tipc: Enabling of bearer rejected, failed to enable media [ 967.264869][ T50] Bluetooth: hci2: command tx timeout [ 967.828080][ T8263] hsr_slave_0: left promiscuous mode [ 967.834558][ T8263] hsr_slave_1: left promiscuous mode [ 967.880575][ T8263] bridge0: left promiscuous mode [ 967.910600][ T8263] bond0: left allmulticast mode [ 967.916287][ T8263] bond0: left promiscuous mode [ 967.931651][ T8263] veth1_macvtap: left promiscuous mode [ 967.940360][ T8263] veth0_macvtap: left promiscuous mode [ 967.958663][ T8263] veth1_vlan: left promiscuous mode [ 967.964024][ T8263] veth0_vlan: left promiscuous mode [ 968.175700][T16778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2529'. [ 968.786870][ T8263] bond4 (unregistering): Released all slaves [ 969.276941][ T8263] bond3 (unregistering): Released all slaves [ 969.358594][ T8263] bond2 (unregistering): Released all slaves [ 969.359083][ T50] Bluetooth: hci2: command tx timeout [ 969.560458][ T8263] bond1 (unregistering): Released all slaves [ 971.609096][ T8263] bond0 (unregistering): Released all slaves [ 971.728457][T16793] tipc: Enabling of bearer rejected, failed to enable media [ 971.770295][T16818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2540'. [ 971.884374][T16823] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2541'. [ 972.311060][T16835] loop0: detected capacity change from 0 to 512 [ 973.632487][T16835] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 974.043076][T16835] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 974.145299][T16835] EXT4-fs (loop0): 1 truncate cleaned up [ 974.152158][T16835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 975.328670][T16865] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2551'. [ 975.349017][T16846] team0: Port device team_slave_0 removed [ 975.598095][T15863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.967317][T16615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 976.998484][T16615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 977.025992][T16895] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2560'. [ 977.031623][T16615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 977.073120][T16896] tipc: Enabling of bearer rejected, failed to enable media [ 977.085939][T16896] syzkaller0: entered promiscuous mode [ 977.091462][T16896] syzkaller0: entered allmulticast mode [ 977.153786][T16615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 977.298615][T16902] loop0: detected capacity change from 0 to 512 [ 977.338258][T16902] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 977.389962][T16902] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 977.413322][T16915] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2563'. [ 977.484964][T16902] EXT4-fs (loop0): 1 truncate cleaned up [ 977.513478][T16615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.526752][T16902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.558377][T16615] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.700875][ T6710] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.708126][ T6710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.817248][ T6710] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.824453][ T6710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.009356][T16925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2564'. [ 978.483303][T15863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.553538][T16615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 979.258285][T16615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.291284][T16961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2572'. [ 979.461655][T16615] veth0_vlan: entered promiscuous mode [ 979.517041][T16615] veth1_vlan: entered promiscuous mode [ 979.626568][T16615] veth0_macvtap: entered promiscuous mode [ 979.637230][T16615] veth1_macvtap: entered promiscuous mode [ 979.655987][T16615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.667028][T16615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.676971][T16615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.688098][T16615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.713834][T16615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.786943][T16615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.808771][T16615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.815143][T16969] loop4: detected capacity change from 0 to 512 [ 979.841039][T16615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.852757][T16615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.883453][T16615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.908643][T16969] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2573: couldn't read orphan inode 26 (err -116) [ 979.922434][T16969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 979.927671][T16972] loop1: detected capacity change from 0 to 512 [ 979.943450][T16969] Quota error (device loop4): do_check_range: Getting block 59136 out of range 0-1 [ 979.974376][T16615] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.986683][T16615] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.996928][T16615] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.005825][T16615] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.034046][T16972] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 980.101332][T16972] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 980.148745][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.164898][T16972] EXT4-fs (loop1): 1 truncate cleaned up [ 980.173238][ T6710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.184524][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.198996][T16972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 980.215983][ T6710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.499592][ T6557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.246098][T16244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.300620][T17026] loop1: detected capacity change from 0 to 512 [ 982.404033][T17027] loop3: detected capacity change from 0 to 512 [ 982.585649][T17027] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2583: couldn't read orphan inode 26 (err -116) [ 982.605560][T17027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.729207][T17026] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 983.017050][T17026] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 983.174937][T17026] EXT4-fs (loop1): 1 truncate cleaned up [ 983.229021][T17026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.356022][T17032] syzkaller0: entered promiscuous mode [ 983.407570][T17032] syzkaller0: entered allmulticast mode [ 984.466750][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.810151][T17046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2588'. [ 986.838934][T17051] sch_tbf: burst 0 is lower than device veth0 mtu (1514) ! [ 986.937538][T16244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.176403][T17075] tap0: tun_chr_ioctl cmd 1074025692 [ 987.286566][T17083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2594'. [ 987.441142][T17088] loop3: detected capacity change from 0 to 512 [ 987.500601][T17088] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 987.575161][T17088] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 987.590583][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2602'. [ 987.607412][T17088] EXT4-fs (loop3): 1 truncate cleaned up [ 987.614600][T17088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.451394][T17111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2608'. [ 988.520197][T17111] team0: No ports can be present during mode change [ 988.596114][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.644201][T17114] syzkaller0: entered promiscuous mode [ 988.662487][T17114] syzkaller0: entered allmulticast mode [ 989.016627][T17127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2613'. [ 989.032915][T17127] vlan2: entered promiscuous mode [ 989.040752][T17127] batadv0: entered promiscuous mode [ 989.118392][T17129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2615'. [ 989.321872][T17131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2616'. [ 989.432313][T17142] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2620'. [ 989.730992][T17153] loop1: detected capacity change from 0 to 512 [ 989.748323][T17155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2627'. [ 989.788429][T17153] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #15: comm syz.1.2626: corrupted in-inode xattr: invalid ea_ino [ 989.808550][T17153] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2626: couldn't read orphan inode 15 (err -117) [ 989.858783][T17153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 990.699434][T17165] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2626'. [ 991.477551][T16244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.286885][T17170] team0: Port device team_slave_0 removed [ 992.666905][T17191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2637'. [ 993.188936][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.287866][T17217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2650'. [ 994.442036][T15865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 994.452633][T15865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 994.461241][T15865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 994.472997][T15865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 994.480745][T15865] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 994.488158][T15865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 994.859722][T17232] syzkaller0: entered promiscuous mode [ 994.889383][T17232] syzkaller0: entered allmulticast mode [ 996.555533][T15865] Bluetooth: hci1: command tx timeout [ 997.353179][T17249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2663'. [ 997.528790][T17256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2665'. [ 997.623463][T17259] team0: No ports can be present during mode change [ 997.704015][T17221] chnl_net:caif_netlink_parms(): no params data found [ 997.815330][T17269] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 997.942966][T17276] loop0: detected capacity change from 0 to 512 [ 998.001069][T17276] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2249: inode #15: comm syz.0.2672: corrupted in-inode xattr: invalid ea_ino [ 998.093602][T17276] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2672: couldn't read orphan inode 15 (err -117) [ 998.108045][T17221] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.116185][T17221] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.125944][T17221] bridge_slave_0: entered allmulticast mode [ 998.134307][T17221] bridge_slave_0: entered promiscuous mode [ 998.141974][T17276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 998.166700][T17282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2675'. [ 998.380195][T17221] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.387642][T17221] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.395281][T17221] bridge_slave_1: entered allmulticast mode [ 998.402533][T17221] bridge_slave_1: entered promiscuous mode [ 998.658864][T15865] Bluetooth: hci1: command tx timeout [ 998.899253][T17292] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2672'. [ 998.911798][T17221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.968164][T17221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.058639][T15863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.143153][T17221] team0: Port device team_slave_0 added [ 999.173332][T17221] team0: Port device team_slave_1 added [ 999.234607][T17221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.252661][T17221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.303122][T17221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.317400][T17221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.325869][T17221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.354195][T17221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.487408][T17221] hsr_slave_0: entered promiscuous mode [ 999.497652][T17221] hsr_slave_1: entered promiscuous mode [ 999.507673][T17221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 999.524226][T17221] Cannot create hsr debugfs directory [ 999.766861][T17309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2685'. [ 1000.705357][T15865] Bluetooth: hci1: command tx timeout [ 1000.744538][T17330] loop3: detected capacity change from 0 to 512 [ 1000.760703][T17332] loop1: detected capacity change from 0 to 512 [ 1000.771932][T17332] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #15: comm syz.1.2691: corrupted in-inode xattr: invalid ea_ino [ 1000.800025][T17332] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2691: couldn't read orphan inode 15 (err -117) [ 1000.874063][T17330] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #15: comm syz.3.2688: corrupted in-inode xattr: invalid ea_ino [ 1000.892814][T17221] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.918653][T17332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1000.942251][T17338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2693'. [ 1000.953990][T17330] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2688: couldn't read orphan inode 15 (err -117) [ 1001.015950][T17330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1001.142450][T17221] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.277830][T17340] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2691'. [ 1002.114301][T16244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.132608][T17221] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.232007][T17344] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2688'. [ 1002.354285][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.865012][T15865] Bluetooth: hci1: command tx timeout [ 1003.125968][T17221] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.142618][T17349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2695'. [ 1003.678293][T17221] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1003.779152][T17221] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1006.034867][T17221] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1006.092468][T17221] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1006.379947][T17221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.454173][T17221] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.517697][ T8263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.524878][ T8263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.592801][ T8263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.599999][ T8263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.646941][T17400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2711'. [ 1006.983565][T17407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2712'. [ 1008.802342][T17221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1009.027457][T17432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2721'. [ 1009.277046][T17441] team0: No ports can be present during mode change [ 1010.319961][T17221] veth0_vlan: entered promiscuous mode [ 1010.365524][T17458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2731'. [ 1010.388259][T17221] veth1_vlan: entered promiscuous mode [ 1010.488821][T17221] veth0_macvtap: entered promiscuous mode [ 1010.528643][T17221] veth1_macvtap: entered promiscuous mode [ 1010.581807][T17221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.635232][T17221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.670213][T17221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.717475][T17221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.759419][T17221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1010.789290][T17221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.844361][T17221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.925161][T17221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.943112][T17221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.953606][T17221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.966242][T17221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.977240][T17221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.987819][T17221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.005443][T17221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.272201][T17221] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.471566][T17221] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.622131][T17221] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.654803][T17221] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.742545][T17480] team0: No ports can be present during mode change [ 1011.891413][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.921215][ T6710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.949759][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.005469][ T6710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.030657][T17485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2739'. [ 1012.938364][T17494] loop3: detected capacity change from 0 to 512 [ 1013.057819][T17494] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #15: comm syz.3.2742: corrupted in-inode xattr: invalid ea_ino [ 1013.111157][T17494] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2742: couldn't read orphan inode 15 (err -117) [ 1013.361517][T17494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.120122][T17494] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2742'. [ 1014.998913][T17527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2749'. [ 1015.216490][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.229174][T17531] netlink: 'syz.4.2752': attribute type 3 has an invalid length. [ 1015.245392][T17531] netlink: 'syz.4.2752': attribute type 1 has an invalid length. [ 1015.253240][T17531] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.2752'. [ 1018.511292][T17565] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2760'. [ 1018.560554][T17566] loop0: detected capacity change from 0 to 512 [ 1018.614041][T17566] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2249: inode #15: comm syz.0.2759: corrupted in-inode xattr: invalid ea_ino [ 1018.635326][T17566] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2759: couldn't read orphan inode 15 (err -117) [ 1018.654629][T17566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.775714][T17571] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2762'. [ 1018.839257][T17574] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2759'. [ 1019.089704][T17583] syzkaller0: entered promiscuous mode [ 1019.095345][T17583] syzkaller0: entered allmulticast mode [ 1019.459480][T15863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.586202][T17595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2772'. [ 1019.640761][T17595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2772'. [ 1019.663297][T17595] vxcan0: entered promiscuous mode [ 1019.669694][T17595] vxcan0: entered allmulticast mode [ 1019.894585][T17611] loop1: detected capacity change from 0 to 512 [ 1019.945225][T17611] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #15: comm syz.1.2780: corrupted in-inode xattr: invalid ea_ino [ 1019.978944][T17611] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2780: couldn't read orphan inode 15 (err -117) [ 1020.040480][T17611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1020.245591][T17628] netlink: 5348 bytes leftover after parsing attributes in process `syz.0.2783'. [ 1020.454054][T17634] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2780'. [ 1021.024464][T16244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.038921][T17642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2787'. [ 1021.047988][T17642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2787'. [ 1021.330067][T17653] team0: No ports can be present during mode change [ 1022.590606][T17679] loop1: detected capacity change from 0 to 512 [ 1022.976117][T17679] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #15: comm syz.1.2797: corrupted in-inode xattr: invalid ea_ino [ 1023.239341][T17679] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2797: couldn't read orphan inode 15 (err -117) [ 1023.307975][T17679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1023.717729][T17696] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2797'. [ 1024.250919][T17702] team0: No ports can be present during mode change [ 1024.317531][T16244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.411664][T17707] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2804'. [ 1028.282104][T17766] loop3: detected capacity change from 0 to 512 [ 1028.412879][T17766] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #15: comm syz.3.2824: corrupted in-inode xattr: invalid ea_ino [ 1028.462008][T17774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2828'. [ 1028.505328][T17776] team0: No ports can be present during mode change [ 1028.505967][T17766] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2824: couldn't read orphan inode 15 (err -117) [ 1028.564010][T17766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1028.948940][T17786] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2824'. [ 1029.531583][T17794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2836'. [ 1029.562893][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.648871][T17797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2837'. [ 1029.720099][T17800] team0: No ports can be present during mode change [ 1031.662217][T17817] loop1: detected capacity change from 0 to 512 [ 1031.721467][T17803] team0: Port device team_slave_0 removed [ 1031.915734][ T6109] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1032.039498][T17826] loop3: detected capacity change from 0 to 512 [ 1032.185924][T17826] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #15: comm syz.3.2847: corrupted in-inode xattr: invalid ea_ino [ 1032.271906][T17826] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2847: couldn't read orphan inode 15 (err -117) [ 1032.312317][T17826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1033.106427][T17840] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2847'. [ 1033.910044][T17845] loop0: detected capacity change from 0 to 512 [ 1033.946930][T17847] tipc: Started in network mode [ 1033.951931][T17847] tipc: Node identity 365aad02406d, cluster identity 4711 [ 1033.960530][T17847] tipc: Enabled bearer , priority 0 [ 1033.977634][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.981512][T17847] syzkaller0: entered promiscuous mode [ 1033.992397][T17847] syzkaller0: entered allmulticast mode [ 1034.000847][T17845] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2249: inode #15: comm syz.0.2853: corrupted in-inode xattr: invalid ea_ino [ 1034.030146][T17845] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2853: couldn't read orphan inode 15 (err -117) [ 1034.057913][T17850] bridge_slave_0: left allmulticast mode [ 1034.065238][T17850] bridge_slave_0: left promiscuous mode [ 1034.081989][T17850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.090625][T17845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1034.112002][T17850] bridge_slave_1: left allmulticast mode [ 1034.128466][T17850] bridge_slave_1: left promiscuous mode [ 1034.134323][T17850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.161673][T17850] bond0: (slave bond_slave_0): Releasing backup interface [ 1034.236270][T17850] bond0: (slave bond_slave_1): Releasing backup interface [ 1034.280560][T17850] team0: Port device team_slave_1 removed [ 1034.287636][T17850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1034.299024][T17850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1034.310745][T17850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1034.327449][T17850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1034.423740][T17846] tipc: Resetting bearer [ 1034.551536][T17846] tipc: Disabling bearer [ 1035.209928][T15863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.287384][T17863] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2858'. [ 1035.851040][T17883] bridge_slave_0: left allmulticast mode [ 1035.864777][T17883] bridge_slave_0: left promiscuous mode [ 1035.871626][T17883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.897140][T17883] bridge_slave_1: left allmulticast mode [ 1035.912916][T17883] bridge_slave_1: left promiscuous mode [ 1035.925066][T17883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.951478][T17883] bond0: (slave bond_slave_0): Releasing backup interface [ 1035.981064][T17883] bond0: (slave bond_slave_1): Releasing backup interface [ 1036.069142][T17883] team0: Port device team_slave_1 removed [ 1036.084129][T17883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.092675][T17883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1036.101971][T17883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1036.122110][T17883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1036.219920][T17886] tipc: Started in network mode [ 1036.234833][T17886] tipc: Node identity deedc3f029e4, cluster identity 4711 [ 1036.255152][T17886] tipc: Enabled bearer , priority 0 [ 1036.290861][T17886] syzkaller0: entered promiscuous mode [ 1036.324551][T17886] syzkaller0: entered allmulticast mode [ 1036.396006][T17889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2867'. [ 1036.451845][T17885] tipc: Resetting bearer [ 1036.661374][T17885] tipc: Disabling bearer [ 1038.472602][T17927] loop4: detected capacity change from 0 to 4096 [ 1038.498485][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2881'. [ 1038.521741][T17931] Bluetooth: MGMT ver 1.22 [ 1038.533774][T17927] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1038.691141][T17927] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1038.712810][T17935] tipc: Enabled bearer , priority 0 [ 1038.734177][T17935] syzkaller0: entered promiscuous mode [ 1038.743900][T17935] syzkaller0: entered allmulticast mode [ 1038.789280][T17933] tipc: Resetting bearer [ 1038.893556][T17933] tipc: Disabling bearer [ 1039.761154][T17944] x_tables: duplicate underflow at hook 1 [ 1040.293605][T17946] loop3: detected capacity change from 0 to 512 [ 1040.331129][T17946] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1040.401827][T17946] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1040.423876][T17946] EXT4-fs (loop3): 1 truncate cleaned up [ 1040.448491][T17946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.462317][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.604008][T17963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2892'. [ 1041.632827][T17964] loop4: detected capacity change from 0 to 512 [ 1042.268544][T17960] loop0: detected capacity change from 0 to 32768 [ 1042.325592][T17960] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2890 (17960) [ 1042.521186][ T6109] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (6109) [ 1042.633705][T17968] loop3: detected capacity change from 0 to 32768 [ 1042.671057][T17968] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 scanned by syz.3.2894 (17968) [ 1042.782693][T17968] BTRFS info (device loop3): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1042.824396][T17968] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1042.864286][T17968] BTRFS info (device loop3): using free space tree [ 1043.128139][T17971] team0: Port device team_slave_0 removed [ 1043.405243][T17968] BTRFS info (device loop3): enabling ssd optimizations [ 1043.425060][T17968] BTRFS info (device loop3): auto enabling async discard [ 1044.284223][T18001] loop1: detected capacity change from 0 to 8 [ 1044.397175][T18001] SQUASHFS error: Unable to read directory block [629:26] [ 1044.723606][T16615] BTRFS info (device loop3): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 1046.003632][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1046.264925][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 1046.374257][ T23] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1046.601817][ T23] usb 1-1: config 0 has no interface number 0 [ 1046.610951][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1046.620537][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.634934][ T23] usb 1-1: Product: syz [ 1046.639123][ T23] usb 1-1: Manufacturer: syz [ 1046.643721][ T23] usb 1-1: SerialNumber: syz [ 1046.662225][ T23] usb 1-1: config 0 descriptor?? [ 1046.887705][ T23] usb 1-1: USB disconnect, device number 11 [ 1046.993601][T18025] loop1: detected capacity change from 0 to 512 [ 1048.787667][T18049] Process accounting resumed [ 1049.073573][T18059] loop3: detected capacity change from 0 to 512 [ 1049.100331][T18059] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1049.161970][T18059] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1049.191411][T18059] EXT4-fs (loop3): 1 truncate cleaned up [ 1049.206267][T18059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.233352][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.648670][T18089] loop0: detected capacity change from 0 to 1024 [ 1050.701693][T18089] EXT4-fs: Ignoring removed nobh option [ 1050.742133][T18089] EXT4-fs: Ignoring removed bh option [ 1050.785007][T18089] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1050.799792][T18089] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 1050.826603][T18089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1051.564934][T18092] loop1: detected capacity change from 0 to 4096 [ 1052.054792][T18102] mmap: syz.1.2927 (18102) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1052.201639][ T28] audit: type=1800 audit(1052.157:174): pid=18102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2927" name="file1" dev="loop1" ino=34 res=0 errno=0 [ 1053.890274][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1053.900364][ T50] CPU: 0 PID: 50 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1053.907767][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1053.917846][ T50] Workqueue: hci0 hci_rx_work [ 1053.922576][ T50] Call Trace: [ 1053.925875][ T50] [ 1053.928832][ T50] dump_stack_lvl+0x16c/0x230 [ 1053.933535][ T50] ? __lock_acquire+0x7c80/0x7c80 [ 1053.938588][ T50] ? show_regs_print_info+0x20/0x20 [ 1053.943993][ T50] ? load_image+0x3b0/0x3b0 [ 1053.948531][ T50] sysfs_create_dir_ns+0x256/0x280 [ 1053.953676][ T50] ? sysfs_warn_dup+0xa0/0xa0 [ 1053.958389][ T50] ? do_raw_spin_unlock+0x121/0x230 [ 1053.963606][ T50] kobject_add_internal+0x6b8/0xc70 [ 1053.968804][ T50] kobject_add+0x156/0x220 [ 1053.973212][ T50] ? kobject_init+0x1e0/0x1e0 [ 1053.977876][ T50] ? _raw_spin_unlock+0x3a/0x40 [ 1053.982710][ T50] ? get_device_parent+0x366/0x390 [ 1053.987809][ T50] device_add+0x408/0xc20 [ 1053.992128][ T50] hci_conn_add_sysfs+0xd5/0x1e0 [ 1053.997058][ T50] le_conn_complete_evt+0xf36/0x1500 [ 1054.002336][ T50] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 1054.008565][ T50] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1054.014182][ T50] ? lockdep_hardirqs_on+0x98/0x150 [ 1054.019405][ T50] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1054.025022][ T50] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1054.030909][ T50] ? hci_remote_host_features_evt+0x160/0x160 [ 1054.036966][ T50] hci_event_packet+0x795/0x1210 [ 1054.041911][ T50] ? bis_list+0x290/0x290 [ 1054.046229][ T50] ? _raw_read_unlock+0x3a/0x40 [ 1054.051071][ T50] hci_rx_work+0x43a/0xd80 [ 1054.055482][ T50] ? process_scheduled_works+0x957/0x15b0 [ 1054.061190][ T50] process_scheduled_works+0xa45/0x15b0 [ 1054.066749][ T50] ? assign_work+0x400/0x400 [ 1054.071326][ T50] ? assign_work+0x39e/0x400 [ 1054.075903][ T50] worker_thread+0xa55/0xfc0 [ 1054.080490][ T50] kthread+0x2fa/0x390 [ 1054.084542][ T50] ? pr_cont_work+0x560/0x560 [ 1054.089202][ T50] ? kthread_blkcg+0xd0/0xd0 [ 1054.093774][ T50] ret_from_fork+0x48/0x80 [ 1054.098175][ T50] ? kthread_blkcg+0xd0/0xd0 [ 1054.102748][ T50] ret_from_fork_asm+0x11/0x20 [ 1054.107515][ T50] [ 1054.171236][ T50] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1054.191330][ T50] Bluetooth: hci0: failed to register connection device [ 1054.633342][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.838338][ T28] audit: type=1326 audit(1054.797:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca358efc9 code=0x7ffc0000 [ 1054.882548][ T28] audit: type=1326 audit(1054.797:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca358efc9 code=0x7ffc0000 [ 1054.907372][T18089] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1054.936954][ T28] audit: type=1326 audit(1054.797:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ca358efc9 code=0x7ffc0000 [ 1054.941100][T18089] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1054.959349][ T28] audit: type=1326 audit(1054.797:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca358efc9 code=0x7ffc0000 [ 1054.959394][ T28] audit: type=1326 audit(1054.797:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca358efc9 code=0x7ffc0000 [ 1054.959430][ T28] audit: type=1326 audit(1054.797:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3ca358efc9 code=0x7ffc0000 [ 1054.959464][ T28] audit: type=1326 audit(1054.797:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca358efc9 code=0x7ffc0000 [ 1054.959500][ T28] audit: type=1326 audit(1054.797:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f3ca358efc9 code=0x7ffc0000 [ 1054.959535][ T28] audit: type=1326 audit(1054.797:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca358efc9 code=0x7ffc0000 [ 1055.121317][T18089] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1055.158208][T18089] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1055.179057][T18089] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1055.189425][T18089] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1055.198484][T18089] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1055.210725][T18089] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1055.217385][T18089] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1055.224569][T18089] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1055.232028][T18089] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1055.238106][T18089] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1055.250639][T18089] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1055.302544][T15863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.596775][T18157] bridge_slave_0: left allmulticast mode [ 1055.602692][T18157] bridge_slave_0: left promiscuous mode [ 1055.614103][T18157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.629663][T18157] bridge_slave_1: left allmulticast mode [ 1055.635444][T18157] bridge_slave_1: left promiscuous mode [ 1055.641208][T18157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.651802][T18157] bond0: (slave bond_slave_0): Releasing backup interface [ 1055.668376][T18157] bond0: (slave bond_slave_1): Releasing backup interface [ 1055.707349][T18157] team0: Port device team_slave_1 removed [ 1055.713727][T18157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1055.721601][T18157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.732344][T18157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1055.740103][T18157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.758664][T18155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2946'. [ 1055.825170][T15865] Bluetooth: hci0: command 0x0c1a tx timeout [ 1056.122914][T18167] kvm: pic: non byte write [ 1056.897142][T18185] loop0: detected capacity change from 0 to 512 [ 1057.185997][T15865] Bluetooth: hci3: command 0x0c1a tx timeout [ 1057.280647][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 1057.287431][T15865] Bluetooth: hci1: command 0x0c1a tx timeout [ 1057.406993][T18190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2958'. [ 1057.596488][T18197] loop3: detected capacity change from 0 to 64 [ 1057.841483][T18204] Core dump to core aborted: cannot preserve file permissions [ 1057.904933][T15865] Bluetooth: hci0: command 0x0c1a tx timeout [ 1059.275937][T18225] loop0: detected capacity change from 0 to 512 [ 1059.294951][T15865] Bluetooth: hci3: command 0x0c1a tx timeout [ 1059.442331][T15865] Bluetooth: hci1: command 0x0c1a tx timeout [ 1059.448510][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 1059.991118][T15865] Bluetooth: hci0: command 0x0c1a tx timeout [ 1060.575296][T18241] loop0: detected capacity change from 0 to 512 [ 1060.591780][T18241] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1060.776500][T18241] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1060.814862][T18241] EXT4-fs (loop0): 1 truncate cleaned up [ 1060.823474][T18241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1061.614226][T15865] Bluetooth: hci3: command 0x0c1a tx timeout [ 1061.614343][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 1061.620376][T15865] Bluetooth: hci2: command 0x0c1a tx timeout [ 1062.104900][T18254] Bluetooth: hci0: command 0x0c1a tx timeout [ 1062.325278][T15863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.368402][T18260] loop3: detected capacity change from 0 to 4096 [ 1062.731454][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1062.731499][ T28] audit: type=1800 audit(1062.687:194): pid=18263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2975" name="file1" dev="loop3" ino=34 res=0 errno=0 [ 1064.932982][T18287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2983'. [ 1065.790843][T18293] loop0: detected capacity change from 0 to 1024 [ 1065.833729][T18295] loop1: detected capacity change from 0 to 4096 [ 1066.021159][T18274] loop4: detected capacity change from 0 to 32768 [ 1066.855786][ T28] audit: type=1800 audit(1066.417:195): pid=18299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2987" name="file1" dev="loop1" ino=34 res=0 errno=0 [ 1067.465584][ T8173] hfsplus: b-tree write err: -5, ino 4 [ 1067.552234][T18274] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 1067.624048][T18274] (syz.4.2980,18274,0):ocfs2_initialize_super:2287 ERROR: status = -12 [ 1067.736084][T18274] (syz.4.2980,18274,1):ocfs2_fill_super:1178 ERROR: status = -12 [ 1068.392149][T18326] loop0: detected capacity change from 0 to 1764 [ 1068.502370][T18320] loop3: detected capacity change from 0 to 4096 [ 1068.559367][T18320] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1068.648308][T18320] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1069.277037][T18349] loop1: detected capacity change from 0 to 512 [ 1069.315575][T18349] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #15: comm syz.1.3006: corrupted in-inode xattr: invalid ea_ino [ 1069.340030][T18349] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3006: couldn't read orphan inode 15 (err -117) [ 1069.368554][T18349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1069.660073][T18358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3006'. [ 1069.998798][T18355] loop4: detected capacity change from 0 to 32768 [ 1070.024838][T18355] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.3008 (18355) [ 1070.087665][T18355] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1070.126419][T18355] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1070.159889][T18355] BTRFS info (device loop4): force clearing of disk cache [ 1070.188096][T18355] BTRFS info (device loop4): turning off barriers [ 1070.194593][T18355] BTRFS info (device loop4): disabling free space tree [ 1070.244758][T18355] BTRFS info (device loop4): enabling ssd optimizations [ 1070.280644][T16244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.280715][T18355] BTRFS info (device loop4): using spread ssd allocation scheme [ 1070.319939][T18355] BTRFS info (device loop4): not using ssd optimizations [ 1070.329136][T18355] BTRFS info (device loop4): not using spread ssd allocation scheme [ 1070.410886][T18368] loop3: detected capacity change from 0 to 4096 [ 1070.425220][T18368] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1070.554965][T18368] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1070.625514][T18355] BTRFS info (device loop4): rebuilding free space tree [ 1070.778425][T18355] BTRFS info (device loop4): disabling free space tree [ 1070.802379][T18355] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1070.864758][T18355] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1071.258497][T17221] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1071.876556][ T28] audit: type=1800 audit(1071.837:196): pid=18368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3012" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 1072.290385][T18395] loop0: detected capacity change from 0 to 32768 [ 1072.809305][T18395] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1072.911914][T18395] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1073.301466][T18395] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1073.448734][ T5854] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1073.551585][ T5854] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1074.173307][ T5854] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 621ms [ 1074.373275][ T5854] gfs2: fsid=syz:syz.0: jid=0: Done [ 1074.380613][T18395] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1074.419388][T18395] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 1074.428804][T18254] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 1074.444540][T18435] loop3: detected capacity change from 0 to 512 [ 1074.519572][ T6109] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1074.636098][T18441] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1074.666456][ T5795] IPVS: starting estimator thread 0... [ 1074.817247][T18442] IPVS: using max 19 ests per chain, 45600 per kthread [ 1075.491231][T18444] tipc: Failed to remove unknown binding: 66,1,1/0:1675548327/1675548329 [ 1075.506187][T18444] tipc: Failed to remove unknown binding: 66,1,1/0:1675548327/1675548329 [ 1075.523150][T18444] tipc: Failed to remove unknown binding: 66,1,1/0:1675548327/1675548329 [ 1077.225502][T18469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3039'. [ 1077.556936][T18476] loop3: detected capacity change from 0 to 512 [ 1078.477779][T18254] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1078.488223][T18254] Bluetooth: hci3: Injecting HCI hardware error event [ 1078.498649][ T5797] Bluetooth: hci3: hardware error 0x00 [ 1078.638837][T18471] loop0: detected capacity change from 0 to 40427 [ 1078.672239][T18471] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 1078.703843][T18471] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1078.732541][T18489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3047'. [ 1078.748290][T18471] F2FS-fs (loop0): invalid crc value [ 1078.786909][T18471] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1078.955918][T18471] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1078.963023][T18471] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1079.071462][T18501] loop3: detected capacity change from 0 to 512 [ 1079.099578][T18501] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1079.172346][T18501] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1079.207603][T15863] syz-executor: attempt to access beyond end of device [ 1079.207603][T15863] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1079.246846][T15863] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1079.267020][T18501] EXT4-fs (loop3): 1 truncate cleaned up [ 1079.285716][T18501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1080.263551][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.528546][T18515] syzkaller0: entered promiscuous mode [ 1080.726851][ T5797] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1080.921733][T18515] syzkaller0: entered allmulticast mode [ 1085.014284][T18536] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3060'. [ 1085.287690][T18541] tipc: Started in network mode [ 1085.293210][T18541] tipc: Node identity d60b0ee00dc7, cluster identity 4711 [ 1085.302755][T18541] tipc: Enabled bearer , priority 0 [ 1085.359063][T18541] syzkaller0: entered promiscuous mode [ 1085.368244][T18541] syzkaller0: entered allmulticast mode [ 1085.417661][T18541] tipc: Resetting bearer [ 1085.457032][T18540] tipc: Resetting bearer [ 1085.498878][T18540] tipc: Disabling bearer [ 1086.650575][T18557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3067'. [ 1087.715490][T18570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3071'. [ 1088.135699][T18584] tipc: Started in network mode [ 1088.140635][T18584] tipc: Node identity 66fa0030939b, cluster identity 4711 [ 1088.148673][T18584] tipc: Enabled bearer , priority 0 [ 1088.334424][T18586] syzkaller0: entered promiscuous mode [ 1088.498705][T18586] syzkaller0: entered allmulticast mode [ 1088.787016][T18591] tipc: Resetting bearer [ 1088.846694][T18581] tipc: Resetting bearer [ 1088.934085][T18581] tipc: Disabling bearer [ 1089.223170][T18602] loop4: detected capacity change from 0 to 512 [ 1089.295147][T18602] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1089.436457][T18602] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1089.506701][T18602] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.3080: bg 0: block 248: padding at end of block bitmap is not set [ 1089.605624][T18602] Quota error (device loop4): write_blk: dquota write failed [ 1089.682911][T18602] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1089.704880][T18602] EXT4-fs error (device loop4): ext4_acquire_dquot:6940: comm syz.4.3080: Failed to acquire dquot type 1 [ 1089.753918][T18602] EXT4-fs (loop4): 1 truncate cleaned up [ 1089.779372][T18602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1089.883655][T18602] EXT4-fs (loop4): shut down requested (1) [ 1089.946760][T17221] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1091.021783][T18616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3084'. [ 1091.413014][T18619] loop1: detected capacity change from 0 to 32768 [ 1092.513415][T18632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3088'. [ 1092.802504][T18636] loop0: detected capacity change from 0 to 256 [ 1092.816744][T18636] FAT-fs (loop0): Unrecognized mount option "uni_" or missing value [ 1093.659668][T18642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3092'. [ 1093.745767][T18644] loop1: detected capacity change from 0 to 8 [ 1094.394851][T18652] loop4: detected capacity change from 0 to 512 [ 1097.029441][T18663] syzkaller0: entered promiscuous mode [ 1097.059994][T18663] syzkaller0: entered allmulticast mode [ 1097.358016][T18676] loop4: detected capacity change from 0 to 512 [ 1097.422331][T18676] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1097.865586][T18676] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.3105: bg 0: block 104: invalid block bitmap [ 1098.080768][T18676] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 1098.151464][T18676] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3105: invalid indirect mapped block 1 (level 1) [ 1098.181612][T18676] EXT4-fs (loop4): 1 truncate cleaned up [ 1098.229784][T18676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1098.561090][T17221] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.041098][T18698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3111'. [ 1101.217645][T18705] loop1: detected capacity change from 0 to 8 [ 1101.671722][T18725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3118'. [ 1102.636676][T18734] loop3: detected capacity change from 0 to 8 [ 1102.662600][T18733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3122'. [ 1102.856516][T18736] syzkaller0: entered promiscuous mode [ 1102.870469][T18736] syzkaller0: entered allmulticast mode [ 1105.636967][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3132'. [ 1108.428294][T18788] loop4: detected capacity change from 0 to 8 [ 1110.648788][T18817] tipc: Enabled bearer , priority 0 [ 1110.665661][T18817] syzkaller0: entered promiscuous mode [ 1110.675694][T18817] syzkaller0: entered allmulticast mode [ 1110.745970][T18817] tipc: Resetting bearer [ 1110.772381][T18816] tipc: Resetting bearer [ 1110.820560][T18816] tipc: Disabling bearer [ 1111.044648][T18827] loop3: detected capacity change from 0 to 256 [ 1111.062002][T18827] FAT-fs (loop3): Unrecognized mount option "uni_" or missing value [ 1111.089239][T18829] loop1: detected capacity change from 0 to 8 [ 1111.157552][ T6109] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1111.272200][T18833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3160'. [ 1112.152409][T18833] macvtap1: entered promiscuous mode [ 1112.168002][T18833] bond0: entered promiscuous mode [ 1112.175450][T18833] macvtap1: entered allmulticast mode [ 1112.189646][T18833] bond0: entered allmulticast mode [ 1112.222040][T18843] loop1: detected capacity change from 0 to 4096 [ 1112.353662][T18833] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1114.071949][ T28] audit: type=1800 audit(1114.037:197): pid=18850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3161" name="file1" dev="loop1" ino=34 res=0 errno=0 [ 1114.461407][T18853] loop3: detected capacity change from 0 to 8 [ 1114.501054][T18853] squashfs: Unknown parameter 'ÿÿ' [ 1115.465191][T18869] loop3: detected capacity change from 0 to 8 [ 1115.551748][T18871] loop1: detected capacity change from 0 to 256 [ 1115.574362][T18871] FAT-fs (loop1): Unrecognized mount option "uni_" or missing value [ 1115.751821][T18877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3174'. [ 1116.133176][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.540675][T18878] loop0: detected capacity change from 0 to 4096 [ 1116.553710][T18878] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1116.831765][T18878] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 1118.550835][T14686] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1118.703120][T15863] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 1118.711643][T15863] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1118.756079][T18905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3184'. [ 1118.808143][T18905] macvtap1: entered promiscuous mode [ 1118.854621][T18905] bond0: entered promiscuous mode [ 1118.881001][T18905] macvtap1: entered allmulticast mode [ 1118.898187][T18905] bond0: entered allmulticast mode [ 1118.903761][T18905] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1118.957654][T14686] usb 1-1: device not accepting address 12, error -71 [ 1119.590232][T18917] loop3: detected capacity change from 0 to 256 [ 1119.620470][T18917] FAT-fs (loop3): Unrecognized mount option "uni_" or missing value [ 1119.697441][ T6109] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1120.732303][T18929] loop0: detected capacity change from 0 to 2048 [ 1120.816264][T18929] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1120.900434][T18929] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1121.496811][T18926] loop3: detected capacity change from 0 to 32768 [ 1121.521399][T18926] XFS: noikeep mount option is deprecated. [ 1121.684129][T18948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3196'. [ 1121.693800][T18926] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1121.723223][T18948] macvtap2: entered promiscuous mode [ 1121.728762][T18948] macvtap2: entered allmulticast mode [ 1121.734647][T18948] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1122.057837][T18926] XFS (loop3): Ending clean mount [ 1122.166486][T18926] XFS (loop3): Quotacheck needed: Please wait. [ 1122.328794][T18926] XFS (loop3): Quotacheck: Done. [ 1122.455169][T14686] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1123.483424][T18958] ceph: No mds server is up or the cluster is laggy [ 1123.493017][ T23] libceph: connect (1)[c::]:6789 error -101 [ 1123.501363][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 1123.514154][T14686] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.531312][T14686] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1123.541091][T14686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.556052][T14686] usb 1-1: config 0 descriptor?? [ 1123.741830][T16615] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1123.939802][T18962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.995176][T18962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.142488][T18966] loop4: detected capacity change from 0 to 256 [ 1124.145064][T14686] usbhid 1-1:0.0: can't add hid device: -71 [ 1124.164281][T18966] FAT-fs (loop4): Unrecognized mount option "uni_" or missing value [ 1124.192403][T14686] usbhid: probe of 1-1:0.0 failed with error -71 [ 1124.215934][T14686] usb 1-1: USB disconnect, device number 14 [ 1125.549006][T18978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3202'. [ 1125.628159][T18977] loop0: detected capacity change from 0 to 2048 [ 1125.649542][T18977] UDF-fs: bad mount option "fileset=0000000000oÖ0000000005" or missing value [ 1126.178007][T18987] syzkaller0: entered promiscuous mode [ 1126.184381][T18987] syzkaller0: entered allmulticast mode [ 1126.595132][T18992] loop1: detected capacity change from 0 to 4096 [ 1127.094830][ T28] audit: type=1800 audit(1126.907:198): pid=18994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3207" name="file1" dev="loop1" ino=34 res=0 errno=0 [ 1129.622314][T19003] loop4: detected capacity change from 0 to 256 [ 1129.638133][T19003] FAT-fs (loop4): Unrecognized mount option "uni_" or missing value [ 1131.572410][T19023] loop4: detected capacity change from 0 to 8 [ 1132.078550][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 1135.074052][T19050] loop0: detected capacity change from 0 to 8 [ 1135.761246][T19053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3226'. [ 1136.023244][T19060] bridge_slave_0: left allmulticast mode [ 1136.048250][T19060] bridge_slave_0: left promiscuous mode [ 1136.064718][T19060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.112461][T19060] bridge_slave_1: left allmulticast mode [ 1136.131382][T19060] bridge_slave_1: left promiscuous mode [ 1136.139019][T19060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.161251][T19060] bond0: (slave bond_slave_0): Releasing backup interface [ 1136.197064][T19060] bond0: (slave bond_slave_1): Releasing backup interface [ 1136.299735][T19060] team0: Port device team_slave_1 removed [ 1136.379853][T19060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1136.414193][T19060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1136.438021][T19060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1136.474918][T19060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1136.788768][T19070] syzkaller0: entered promiscuous mode [ 1136.794294][T19070] syzkaller0: entered allmulticast mode [ 1137.550587][T19095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3233'. [ 1140.342924][T19110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3240'. [ 1141.674418][T19127] loop1: detected capacity change from 0 to 512 [ 1141.727009][T19127] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #15: comm syz.1.3248: corrupted in-inode xattr: invalid ea_ino [ 1141.760150][T19127] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3248: couldn't read orphan inode 15 (err -117) [ 1141.842245][T19127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1142.002743][T19132] syzkaller0: entered promiscuous mode [ 1142.008356][T19132] syzkaller0: entered allmulticast mode [ 1142.160728][T19140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3251'. [ 1143.099258][ T5797] Bluetooth: hci1: command 0x0c1a tx timeout [ 1143.155444][T19139] loop0: detected capacity change from 0 to 512 [ 1143.197732][T19139] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1143.262498][T19139] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1143.311009][T19139] EXT4-fs (loop0): 1 truncate cleaned up [ 1143.318581][T19139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.818936][T19142] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3248'. [ 1146.946258][T15863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.959376][T16244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.207179][T19182] loop3: detected capacity change from 0 to 512 [ 1148.244009][T19182] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #15: comm syz.3.3261: corrupted in-inode xattr: invalid ea_ino [ 1148.272056][T19182] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3261: couldn't read orphan inode 15 (err -117) [ 1148.296202][T19182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1148.626761][T19190] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1148.993769][T19189] loop0: detected capacity change from 0 to 512 [ 1149.132233][T19189] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1149.185977][T19189] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1149.250041][T19189] EXT4-fs (loop0): 1 truncate cleaned up [ 1149.272965][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.277124][T19189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1149.489296][T19193] loop3: detected capacity change from 0 to 512 [ 1149.546337][T19193] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #15: comm syz.3.3264: corrupted in-inode xattr: invalid ea_ino [ 1149.581881][T19193] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3264: couldn't read orphan inode 15 (err -117) [ 1149.922527][T19193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1150.383611][T19198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3264'. [ 1151.176144][T15863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.348359][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.353492][T19201] loop1: detected capacity change from 0 to 8 [ 1151.568396][T19206] syzkaller0: entered promiscuous mode [ 1151.575304][T19206] syzkaller0: entered allmulticast mode [ 1154.760538][T19232] loop3: detected capacity change from 0 to 512 [ 1154.801417][T19233] loop1: detected capacity change from 0 to 512 [ 1154.836713][T19233] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1154.925133][T19232] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #15: comm syz.3.3275: corrupted in-inode xattr: invalid ea_ino [ 1154.946670][T19233] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1154.968569][T19233] EXT4-fs (loop1): 1 truncate cleaned up [ 1154.968696][T19232] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3275: couldn't read orphan inode 15 (err -117) [ 1154.976007][T19233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1155.384059][T19232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1156.079368][T19245] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3275'. [ 1158.320989][T16244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1158.421116][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.020820][T19262] loop3: detected capacity change from 0 to 512 [ 1160.591191][T19279] loop0: detected capacity change from 0 to 8 [ 1160.806130][T19279] overlayfs: missing 'lowerdir' [ 1161.451377][T19284] loop4: detected capacity change from 0 to 512 [ 1161.503484][T19287] loop3: detected capacity change from 0 to 512 [ 1161.523918][T19284] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2249: inode #15: comm syz.4.3286: corrupted in-inode xattr: invalid ea_ino [ 1161.558618][T19287] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1161.598616][T19284] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3286: couldn't read orphan inode 15 (err -117) [ 1161.643637][T19287] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1161.651888][T19284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1161.684938][T19287] EXT4-fs (loop3): 1 truncate cleaned up [ 1161.703981][T19287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1162.338473][T19298] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3286'. [ 1163.258311][T17221] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.581855][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.768714][T19306] loop0: detected capacity change from 0 to 512 [ 1164.355087][T19305] loop4: detected capacity change from 0 to 4096 [ 1164.397600][T19161] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1165.254800][ T28] audit: type=1800 audit(1165.217:199): pid=19310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3291" name="file1" dev="loop4" ino=34 res=0 errno=0 [ 1166.150727][T19332] loop0: detected capacity change from 0 to 8 [ 1166.943843][T19332] overlayfs: missing 'lowerdir' [ 1167.114900][T19338] loop1: detected capacity change from 0 to 512 [ 1167.178182][T19341] loop0: detected capacity change from 0 to 512 [ 1167.190932][T19341] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1167.235172][T19338] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #15: comm syz.1.3299: corrupted in-inode xattr: invalid ea_ino [ 1167.288092][T19341] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1167.313331][T19338] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3299: couldn't read orphan inode 15 (err -117) [ 1167.353156][T19341] EXT4-fs (loop0): 1 truncate cleaned up [ 1167.361831][T19338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1167.386529][T19341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1167.689180][T19346] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3299'. [ 1168.581601][T16244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1169.130275][T15863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.737415][T19357] loop1: detected capacity change from 0 to 512 [ 1171.466627][T19161] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1173.085465][T19380] tipc: Enabled bearer , priority 0 [ 1173.096292][T19380] syzkaller0: entered promiscuous mode [ 1173.101789][T19380] syzkaller0: entered allmulticast mode [ 1173.108752][T19382] loop1: detected capacity change from 0 to 512 [ 1173.112268][T19384] loop4: detected capacity change from 0 to 512 [ 1173.155706][T19382] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #15: comm syz.1.3309: corrupted in-inode xattr: invalid ea_ino [ 1173.158106][T19384] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1173.175440][T19380] tipc: Resetting bearer [ 1173.207422][T19379] tipc: Resetting bearer [ 1173.207892][T19382] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3309: couldn't read orphan inode 15 (err -117) [ 1173.257864][T19384] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1173.284568][T19382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1173.310552][T19384] EXT4-fs (loop4): 1 truncate cleaned up [ 1173.311843][T19384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1173.548036][T19379] tipc: Disabling bearer [ 1173.994746][T19394] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3309'. [ 1175.527507][T16244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.932396][T19406] loop0: detected capacity change from 0 to 4096 [ 1175.998032][T17221] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.068475][T19408] loop1: detected capacity change from 0 to 512 [ 1177.512060][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.573474][T19166] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1177.925023][ T28] audit: type=1800 audit(1177.887:200): pid=19411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3315" name="file1" dev="loop0" ino=34 res=0 errno=0 [ 1179.959860][T19433] loop3: detected capacity change from 0 to 512 [ 1180.023136][T19433] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #15: comm syz.3.3321: corrupted in-inode xattr: invalid ea_ino [ 1180.077572][T19433] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3321: couldn't read orphan inode 15 (err -117) [ 1180.113374][T19433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1180.605248][T19449] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3321'. [ 1181.280237][T19453] loop0: detected capacity change from 0 to 512 [ 1181.589696][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.175392][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3328'. [ 1182.616919][T19464] loop0: detected capacity change from 0 to 512 [ 1182.724370][T19464] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1182.884384][T19464] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1182.967243][T19464] EXT4-fs (loop0): 1 truncate cleaned up [ 1183.013043][T19464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1183.991738][T15863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.784922][T19493] loop0: detected capacity change from 0 to 512 [ 1184.821783][T19493] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2249: inode #15: comm syz.0.3335: corrupted in-inode xattr: invalid ea_ino [ 1184.855087][T19493] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3335: couldn't read orphan inode 15 (err -117) [ 1184.929474][T19493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1184.963906][T19502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3337'. [ 1185.510450][T19504] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3335'. [ 1186.065174][T19510] loop1: detected capacity change from 0 to 512 [ 1186.412368][T15863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.031500][T19520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3340'. [ 1187.550981][T19522] loop4: detected capacity change from 0 to 512 [ 1187.724904][T19522] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1187.788249][T19528] tipc: Enabled bearer , priority 0 [ 1187.795987][T19528] syzkaller0: entered promiscuous mode [ 1187.801711][T19528] syzkaller0: entered allmulticast mode [ 1187.853353][T19522] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1187.953099][T19522] EXT4-fs (loop4): 1 truncate cleaned up [ 1188.053766][T19528] tipc: Resetting bearer [ 1188.120399][T19522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1188.656960][T19527] tipc: Resetting bearer [ 1188.796326][ T5854] tipc: Node number set to 3687583456 [ 1189.124958][T19540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3347'. [ 1189.255801][T19527] tipc: Disabling bearer [ 1189.439295][T17221] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.511731][T19545] loop1: detected capacity change from 0 to 512 [ 1189.895682][T19552] loop0: detected capacity change from 0 to 512 [ 1191.616432][T19545] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #15: comm syz.1.3349: corrupted in-inode xattr: invalid ea_ino [ 1191.677396][T19545] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3349: couldn't read orphan inode 15 (err -117) [ 1191.726712][T19545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1192.056692][T19561] loop4: detected capacity change from 0 to 8 [ 1192.145594][T19563] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3349'. [ 1192.673728][T16244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.853900][T19571] loop3: detected capacity change from 0 to 512 [ 1192.884885][T19571] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1192.908484][T19571] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1192.955510][T19571] EXT4-fs (loop3): 1 truncate cleaned up [ 1192.995735][T19571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1193.144525][T19579] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3360'. [ 1194.058044][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1194.342478][T18254] Bluetooth: hci4: Malformed Event: 0x02 [ 1194.415779][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 1194.704033][T19589] tipc: Enabled bearer , priority 0 [ 1194.712195][T19589] syzkaller0: entered promiscuous mode [ 1194.717804][T19589] syzkaller0: entered allmulticast mode [ 1194.798515][T19589] sch_tbf: peakrate 1025 is lower than or equals to rate 14583 ! [ 1194.882125][T19594] tipc: Resetting bearer [ 1194.887655][T19596] loop4: detected capacity change from 0 to 8 [ 1194.912221][T19588] tipc: Resetting bearer [ 1194.997891][T19599] loop3: detected capacity change from 0 to 512 [ 1195.027769][T19599] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #15: comm syz.3.3367: corrupted in-inode xattr: invalid ea_ino [ 1195.046505][T19588] tipc: Disabling bearer [ 1195.071511][T19599] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3367: couldn't read orphan inode 15 (err -117) [ 1195.104137][T19599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1195.414293][T19611] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3371'. [ 1195.512954][T19614] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3367'. [ 1195.953489][T19616] loop0: detected capacity change from 0 to 512 [ 1195.995472][T19616] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1196.054799][T19616] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1196.098074][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1196.113733][T19616] EXT4-fs (loop0): 1 truncate cleaned up [ 1196.120811][T19616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1196.305185][T18254] Bluetooth: hci4: command 0x1003 tx timeout [ 1196.313689][ T5797] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1196.959488][T15863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1197.006787][T19631] loop3: detected capacity change from 0 to 4096 [ 1197.131146][T19637] tipc: Enabled bearer , priority 0 [ 1197.173156][T19637] syzkaller0: entered promiscuous mode [ 1197.312939][T19637] syzkaller0: entered allmulticast mode [ 1197.364940][T19645] loop4: detected capacity change from 0 to 512 [ 1197.439489][ T28] audit: type=1800 audit(1197.397:201): pid=19647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3377" name="file1" dev="loop3" ino=34 res=0 errno=0 [ 1197.555058][T19645] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2249: inode #15: comm syz.4.3381: corrupted in-inode xattr: invalid ea_ino [ 1197.570108][T19645] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3381: couldn't read orphan inode 15 (err -117) [ 1197.597861][T19645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1197.624623][T19644] sch_tbf: peakrate 1025 is lower than or equals to rate 14583 ! [ 1197.688031][T19636] tipc: Resetting bearer [ 1198.190556][T19636] tipc: Disabling bearer [ 1198.385270][T19651] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3381'. [ 1198.557863][ T9] tipc: Node number set to 4144612336 [ 1198.663472][T17221] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1199.826975][T19671] loop0: detected capacity change from 0 to 2048 [ 1199.844985][T19671] UDF-fs: bad mount option "fileset=0000000000oÖ0000000005" or missing value [ 1199.873015][T19675] loop4: detected capacity change from 0 to 512 [ 1199.920781][T19675] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1200.109770][T19675] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1200.210401][T19675] EXT4-fs (loop4): 1 truncate cleaned up [ 1200.237843][T19675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1200.805888][T19686] loop1: detected capacity change from 0 to 512 [ 1200.858050][T19688] tipc: Enabled bearer , priority 0 [ 1200.874581][T17221] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1200.882247][T19688] syzkaller0: entered promiscuous mode [ 1200.900188][T19688] syzkaller0: entered allmulticast mode [ 1200.902595][T19686] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #15: comm syz.1.3391: corrupted in-inode xattr: invalid ea_ino [ 1200.933462][T19686] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3391: couldn't read orphan inode 15 (err -117) [ 1201.038179][T19688] tipc: Resetting bearer [ 1201.049304][T19686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1201.068308][T19687] tipc: Resetting bearer [ 1201.131728][T19687] tipc: Disabling bearer [ 1201.422502][T19695] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3391'. [ 1201.989819][T16244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1202.168471][T19700] loop1: detected capacity change from 0 to 256 [ 1202.186225][T19700] FAT-fs (loop1): Unrecognized mount option "uni_" or missing value [ 1202.227908][T19161] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1203.408643][T19717] loop1: detected capacity change from 0 to 512 [ 1203.451843][T19717] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #15: comm syz.1.3403: corrupted in-inode xattr: invalid ea_ino [ 1203.507231][T19717] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3403: couldn't read orphan inode 15 (err -117) [ 1203.565217][T19717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1203.738886][T19718] loop4: detected capacity change from 0 to 4096 [ 1203.816958][T19728] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3403'. [ 1204.457267][T19730] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1204.496289][T16244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.633521][T19718] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '.' [ 1204.705698][T19718] Remounting filesystem read-only [ 1207.496976][T19759] loop0: detected capacity change from 0 to 512 [ 1207.520426][T19759] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2249: inode #15: comm syz.0.3412: corrupted in-inode xattr: invalid ea_ino [ 1207.558081][T19759] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3412: couldn't read orphan inode 15 (err -117) [ 1207.701831][T19759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1207.781845][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3413'. [ 1208.232149][T19767] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3414'. [ 1208.577876][T19772] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3412'. [ 1209.176463][T15863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.220877][T19779] loop4: detected capacity change from 0 to 256 [ 1209.272395][T19779] FAT-fs (loop4): Unrecognized mount option "uni_" or missing value [ 1211.293525][T19796] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3425'. [ 1211.619665][T19805] loop1: detected capacity change from 0 to 2048 [ 1211.634194][T19808] loop4: detected capacity change from 0 to 512 [ 1211.638260][T19805] UDF-fs: bad mount option "fileset=0000000000oÖ0000000005" or missing value [ 1211.716389][T19811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3426'. [ 1211.987083][T19808] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2249: inode #15: comm syz.4.3428: corrupted in-inode xattr: invalid ea_ino [ 1212.207759][T19808] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3428: couldn't read orphan inode 15 (err -117) [ 1212.286046][T19808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1212.321513][T19161] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1213.004025][T19823] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3428'. [ 1213.780581][T19818] syzkaller0: entered promiscuous mode [ 1213.791199][T19818] syzkaller0: entered allmulticast mode [ 1213.802237][T17221] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.965087][T19829] macsec1: entered promiscuous mode [ 1215.662897][T19829] team0: entered promiscuous mode [ 1215.669167][T19829] macsec1: entered allmulticast mode [ 1215.674603][T19829] team0: entered allmulticast mode [ 1215.688716][T19829] team0: Device macsec1 is already an upper device of the team interface [ 1215.745247][T19829] team0: left allmulticast mode [ 1215.750126][T19829] team0: left promiscuous mode [ 1216.044582][T19841] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3435'. [ 1216.536782][T19858] loop1: detected capacity change from 0 to 512 [ 1216.889526][T19858] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #15: comm syz.1.3441: corrupted in-inode xattr: invalid ea_ino [ 1217.016967][T19858] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3441: couldn't read orphan inode 15 (err -117) [ 1217.039041][T19858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1217.396268][T19870] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3441'. [ 1218.103764][T16244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.131706][T19879] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3448'. [ 1219.106002][T19892] loop3: detected capacity change from 0 to 4096 [ 1219.435692][T19899] loop0: detected capacity change from 0 to 512 [ 1219.465128][ T28] audit: type=1800 audit(1219.417:202): pid=19892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3453" name="file1" dev="loop3" ino=34 res=0 errno=0 [ 1219.568836][T19899] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2249: inode #15: comm syz.0.3455: corrupted in-inode xattr: invalid ea_ino [ 1219.655045][T19899] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3455: couldn't read orphan inode 15 (err -117) [ 1219.784097][T19899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1220.194100][T19911] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3455'. [ 1220.544322][T19913] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3458'. [ 1220.778259][T15863] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1222.075602][T19935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3467'. [ 1222.088024][T19935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3467'. [ 1222.153456][T19940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3468'. [ 1222.775784][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3473'. [ 1223.250078][T19966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3479'. [ 1223.259783][T19966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3479'. [ 1223.383180][T19968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3480'. [ 1223.713041][T19985] loop1: detected capacity change from 0 to 256 [ 1223.741033][T19985] FAT-fs (loop1): Unrecognized mount option "uni_" or missing value [ 1224.577117][T19998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3489'. [ 1224.602781][T19998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3489'. [ 1225.131688][T20016] loop3: detected capacity change from 0 to 256 [ 1225.169601][T20016] FAT-fs (loop3): Unrecognized mount option "uni_" or missing value [ 1225.880507][T20038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3504'. [ 1225.952812][T20038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3504'. [ 1226.380887][T20053] loop0: detected capacity change from 0 to 256 [ 1226.389675][T20053] exfat: Bad value for 'dmask' [ 1226.775897][T20068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3517'. [ 1226.817251][T20068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3517'. [ 1226.842983][T20073] loop1: detected capacity change from 0 to 256 [ 1226.899164][T20073] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1228.043530][T20099] loop4: detected capacity change from 0 to 4096 [ 1228.631143][ T28] audit: type=1800 audit(1228.487:203): pid=20106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3527" name="file1" dev="loop4" ino=34 res=0 errno=0 [ 1229.238347][T20084] loop0: detected capacity change from 0 to 32768 [ 1229.366594][T20084] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 1229.569131][T20084] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1230.511125][T15863] ocfs2: Unmounting device (7,0) on (node local) [ 1230.720457][T20137] loop3: detected capacity change from 0 to 512 [ 1230.776787][T20137] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #15: comm syz.3.3539: corrupted in-inode xattr: invalid ea_ino [ 1230.795190][T20137] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3539: couldn't read orphan inode 15 (err -117) [ 1230.813816][T20137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1231.166760][T20150] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3539'. [ 1231.696969][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.880889][T20160] loop0: detected capacity change from 0 to 256 [ 1231.944139][T20160] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1232.434036][T20177] loop3: detected capacity change from 0 to 512 [ 1232.679942][T20177] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #15: comm syz.3.3551: corrupted in-inode xattr: invalid ea_ino [ 1232.757036][T20177] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3551: couldn't read orphan inode 15 (err -117) [ 1232.822297][T20177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1233.069597][T20187] loop1: detected capacity change from 0 to 512 [ 1233.100994][T20187] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1233.192774][T20191] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3551'. [ 1234.063839][T20187] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1234.106053][T20187] EXT4-fs (loop1): 1 truncate cleaned up [ 1234.112970][T20187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1234.209553][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.075430][T16244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.746057][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3561'. [ 1235.839744][T20230] loop1: detected capacity change from 0 to 512 [ 1235.987507][T20230] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #15: comm syz.1.3565: corrupted in-inode xattr: invalid ea_ino [ 1236.056203][T20230] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3565: couldn't read orphan inode 15 (err -117) [ 1236.140020][T20230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1236.494094][T20237] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3565'. [ 1237.288678][T16244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.310834][T20240] loop0: detected capacity change from 0 to 4096 [ 1237.328596][T20244] loop3: detected capacity change from 0 to 512 [ 1237.364843][T20244] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1237.411438][T20244] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1237.513724][T20244] EXT4-fs (loop3): 1 truncate cleaned up [ 1237.523919][T20244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1237.857952][ T28] audit: type=1800 audit(1237.827:204): pid=20253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3566" name="file1" dev="loop0" ino=34 res=0 errno=0 [ 1238.509593][T20258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3570'. [ 1238.575629][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1238.975750][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.060146][T20271] syzkaller0: entered promiscuous mode [ 1239.079570][T20271] syzkaller0: entered allmulticast mode [ 1240.299073][T20285] loop3: detected capacity change from 0 to 512 [ 1240.327054][T20285] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #15: comm syz.3.3578: corrupted in-inode xattr: invalid ea_ino [ 1240.356092][T20285] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3578: couldn't read orphan inode 15 (err -117) [ 1240.492543][T20285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1240.889524][T20302] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3578'. [ 1241.345735][T20307] syzkaller0: entered promiscuous mode [ 1241.373523][T20307] syzkaller0: entered allmulticast mode [ 1241.467348][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1241.721054][T20315] loop4: detected capacity change from 0 to 4096 [ 1242.070101][ T28] audit: type=1800 audit(1242.007:205): pid=20320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3588" name="file1" dev="loop4" ino=34 res=0 errno=0 [ 1243.483799][T20338] syzkaller0: entered promiscuous mode [ 1243.489465][T20338] syzkaller0: entered allmulticast mode [ 1243.764880][T20347] loop1: detected capacity change from 0 to 2048 [ 1243.776484][T20347] UDF-fs: bad mount option "fileset=0000000000oÖ0000000005" or missing value [ 1245.087414][T20358] loop0: detected capacity change from 0 to 256 [ 1245.393303][T20358] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1248.352856][T20406] loop3: detected capacity change from 0 to 512 [ 1248.412001][T20406] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1248.452045][T20406] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 1248.481564][T20406] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1248.527301][T20406] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.3616: Failed to acquire dquot type 1 [ 1248.553481][T20392] loop0: detected capacity change from 0 to 32768 [ 1248.590472][T20406] EXT4-fs (loop3): 1 truncate cleaned up [ 1248.603591][T20406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1248.656051][T20392] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1248.665584][T20406] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1248.695429][T20406] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 8 [ 1248.796094][T16615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.950625][T20392] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1249.711729][T20392] XFS (loop0): Starting recovery (logdev: internal) [ 1249.941355][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3620'. [ 1250.473597][T20392] XFS (loop0): Ending recovery (logdev: internal) [ 1250.512579][ T1185] XFS (loop0): Metadata corruption detected at xfs_inobt_verify+0xc5/0x230, xfs_finobt block 0x8 [ 1250.600039][ T1185] XFS (loop0): Unmount and run xfs_repair [ 1250.642530][ T1185] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1250.677182][ T1185] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 1250.724793][ T1185] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 1250.733709][ T1185] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 1250.821939][ T1185] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 1250.842585][ T1185] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 1250.872744][ T1185] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1250.886268][T20438] loop3: detected capacity change from 0 to 4096 [ 1250.896125][ T1185] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1250.912260][ T1185] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1250.924225][T20438] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1250.948726][T20392] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x8 len 8 error 117 [ 1250.977084][T20392] XFS (loop0): Failed to initialize disk quotas. [ 1251.019364][T20438] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 1251.065348][T15863] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1251.334950][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1251.371331][T20440] loop1: detected capacity change from 0 to 40427 [ 1251.383531][T20440] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 1251.401396][T20440] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 1251.425202][T20440] F2FS-fs (loop1): Image doesn't support compression [ 1251.444215][T20440] F2FS-fs (loop1): invalid crc value [ 1251.451985][T20440] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1251.510703][T20440] F2FS-fs (loop1): Start checkpoint disabled! [ 1251.523027][T20440] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1251.539656][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.569150][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1251.586559][T20443] random: crng reseeded on system resumption [ 1251.594065][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1251.604910][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.658792][ T8] usb 4-1: config 0 descriptor?? [ 1251.864833][T19397] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1252.057789][T19397] usb 2-1: Using ep0 maxpacket: 32 [ 1252.112327][T19397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.176358][ T8] logitech 0003:046D:C29C.0002: unknown main item tag 0x0 [ 1252.185242][T19397] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1252.216154][ T8] logitech 0003:046D:C29C.0002: unknown main item tag 0x0 [ 1252.224233][T19397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.237524][ T8] logitech 0003:046D:C29C.0002: unknown main item tag 0x0 [ 1252.258333][T19397] usb 2-1: config 0 descriptor?? [ 1252.293440][ T8] logitech 0003:046D:C29C.0002: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 1252.310454][T19397] hub 2-1:0.0: bad descriptor, ignoring hub [ 1252.347562][T19397] hub: probe of 2-1:0.0 failed with error -5 [ 1252.363866][T19397] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1252.386987][ T8] logitech 0003:046D:C29C.0002: no inputs found [ 1252.440812][ T8] usb 4-1: USB disconnect, device number 15 [ 1253.060618][T16615] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 1253.067321][T16615] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1253.078249][T20440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.108033][T20440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.138882][T20440] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_page+0x1d7/0x910 [ 1253.202020][T20440] syz.1.3624: attempt to access beyond end of device [ 1253.202020][T20440] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1254.090110][T20472] netlink: 'syz.4.3633': attribute type 4 has an invalid length. [ 1254.102344][T20470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3632'. [ 1254.122451][T20472] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3633'. [ 1254.721534][T20480] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3635'. [ 1254.929730][ T5834] usb 2-1: USB disconnect, device number 17 [ 1255.124255][T16244] F2FS-fs (loop1): access invalid blkaddr:4043309056 [ 1255.190691][T16244] CPU: 0 PID: 16244 Comm: syz-executor Not tainted syzkaller #0 [ 1255.198371][T16244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1255.208436][T16244] Call Trace: [ 1255.211724][T16244] [ 1255.214658][T16244] dump_stack_lvl+0x16c/0x230 [ 1255.219350][T16244] ? show_regs_print_info+0x20/0x20 [ 1255.224554][T16244] ? __lock_acquire+0x1260/0x7c80 [ 1255.229590][T16244] ? f2fs_get_next_page_offset+0x690/0x690 [ 1255.235425][T16244] f2fs_is_valid_blkaddr+0xef8/0x1580 [ 1255.240815][T16244] f2fs_map_blocks+0xda2/0x3db0 [ 1255.245689][T16244] ? verify_lock_unused+0x140/0x140 [ 1255.250936][T16244] ? f2fs_get_block_locked+0xe0/0xe0 [ 1255.256233][T16244] ? __lock_acquire+0x7c80/0x7c80 [ 1255.261272][T16244] ? xas_descend+0x3a4/0x490 [ 1255.265874][T16244] ? xa_load+0x2c0/0x2e0 [ 1255.270120][T16244] ? xa_load+0x64/0x2e0 [ 1255.274281][T16244] ? page_index+0xe7/0x470 [ 1255.278708][T16244] f2fs_mpage_readpages+0x9f5/0x1ec0 [ 1255.284030][T16244] ? detach_page_private+0x4c0/0x4c0 [ 1255.289325][T16244] ? __mod_lruvec_page_state+0xa5/0x420 [ 1255.294907][T16244] ? f2fs_readahead+0x167/0x300 [ 1255.299779][T16244] ? f2fs_dirty_data_folio+0x810/0x810 [ 1255.305353][T16244] read_pages+0x177/0x840 [ 1255.309699][T16244] ? folio_put+0xd0/0xd0 [ 1255.313963][T16244] ? page_cache_ra_unbounded+0x770/0x770 [ 1255.319623][T16244] ? filemap_add_folio+0x192/0x3c0 [ 1255.324764][T16244] page_cache_ra_unbounded+0x692/0x770 [ 1255.330257][T16244] f2fs_readdir+0x44c/0x8c0 [ 1255.334792][T16244] ? f2fs_fill_dentries+0xbb0/0xbb0 [ 1255.340008][T16244] ? mutex_lock_nested+0x20/0x20 [ 1255.344954][T16244] ? end_current_label_crit_section+0x149/0x170 [ 1255.351310][T16244] ? down_read_killable+0x1d0/0x340 [ 1255.356523][T16244] ? fsnotify_perm+0x271/0x5e0 [ 1255.361310][T16244] iterate_dir+0x1c2/0x580 [ 1255.365755][T16244] __se_sys_getdents64+0xe9/0x260 [ 1255.370792][T16244] ? __x64_sys_getdents64+0x80/0x80 [ 1255.375999][T16244] ? filldir+0x680/0x680 [ 1255.380277][T16244] ? lock_chain_count+0x20/0x20 [ 1255.385141][T16244] ? lockdep_hardirqs_on+0x98/0x150 [ 1255.390353][T16244] do_syscall_64+0x55/0xb0 [ 1255.394778][T16244] ? clear_bhb_loop+0x40/0x90 [ 1255.399470][T16244] ? clear_bhb_loop+0x40/0x90 [ 1255.404165][T16244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1255.410078][T16244] RIP: 0033:0x7fbc52bc1933 [ 1255.414524][T16244] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 3d f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 1255.434161][T16244] RSP: 002b:00007ffe7ebcb888 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 1255.442603][T16244] RAX: ffffffffffffffda RBX: 000055557d3f7600 RCX: 00007fbc52bc1933 [ 1255.450598][T16244] RDX: 0000000000008000 RSI: 000055557d3f7600 RDI: 0000000000000005 [ 1255.458595][T16244] RBP: 000055557d3f75d4 R08: 0000000000000000 R09: 0000000000000000 [ 1255.466603][T16244] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 1255.474599][T16244] R13: 0000000000000010 R14: 000055557d3f75d0 R15: 00007ffe7ebcdb40 [ 1255.482614][T16244] [ 1255.540624][T16244] syz-executor: attempt to access beyond end of device [ 1255.540624][T16244] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 1255.581635][T16244] syz-executor: attempt to access beyond end of device [ 1255.581635][T16244] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1255.828966][ T7194] kworker/u4:15: attempt to access beyond end of device [ 1255.828966][ T7194] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 1255.845964][ T7194] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1255.855596][ T7194] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1255.871350][ T7194] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1255.880888][ T7194] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1256.044126][T20492] loop3: detected capacity change from 0 to 32768 [ 1256.058254][T20492] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.3639 (20492) [ 1256.126824][T20435] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1256.159542][T20492] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1256.178747][T20492] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1256.188519][T20492] BTRFS info (device loop3): using free space tree [ 1256.314951][T20435] usb 1-1: Using ep0 maxpacket: 16 [ 1256.335426][T20435] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.391061][T20435] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1256.573833][T20435] usb 1-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 1256.769330][T20435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.784587][ T8263] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.895824][T20435] usb 1-1: config 0 descriptor?? [ 1256.959420][T20492] BTRFS info (device loop3): enabling ssd optimizations [ 1256.974749][T20492] BTRFS info (device loop3): auto enabling async discard [ 1257.001572][ T8263] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.074233][ T28] audit: type=1800 audit(1257.037:206): pid=20492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3639" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 1257.204041][ T8263] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.291462][T16615] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1257.355817][ T8263] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.390826][T20435] logitech-hidpp-device 0003:046D:C091.0003: hidraw0: USB HID v0.00 Device [HID 046d:c091] on usb-dummy_hcd.0-1/input0 [ 1257.520799][T19161] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop3 scanned by udevd (19161) [ 1257.882050][T20528] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3644'. [ 1257.888720][T20494] loop0: detected capacity change from 0 to 40427 [ 1257.899553][T20494] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1257.908770][T20494] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1257.943542][T20494] F2FS-fs (loop0): invalid crc value [ 1258.005270][T20494] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1258.097636][T20494] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1258.104865][T20494] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1259.007723][ T28] audit: type=1800 audit(1258.417:207): pid=20535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3640" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1259.489707][T20537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3647'. [ 1259.576401][ T8263] tipc: Left network mode [ 1260.153605][T18254] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1260.171510][T18254] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1260.180272][T18254] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1260.190939][T18254] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1260.199770][T18254] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1260.207618][T18254] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1260.803376][T20435] usb 1-1: USB disconnect, device number 15 [ 1260.835105][T15863] syz-executor: attempt to access beyond end of device [ 1260.835105][T15863] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1260.858584][T15863] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1261.574044][T20552] chnl_net:caif_netlink_parms(): no params data found [ 1261.597081][T20564] loop4: detected capacity change from 0 to 40427 [ 1261.623919][T20564] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 1261.643462][T20564] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 1261.666484][T20564] F2FS-fs (loop4): Image doesn't support compression [ 1261.682922][T20564] F2FS-fs (loop4): invalid crc value [ 1261.707982][T20564] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1261.922640][T20564] F2FS-fs (loop4): Start checkpoint disabled! [ 1261.942600][T20581] loop3: detected capacity change from 0 to 256 [ 1261.956127][T20581] FAT-fs (loop3): Unrecognized mount option "uni_" or missing value [ 1261.984912][T20564] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1262.027320][T19161] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1262.305052][ T5797] Bluetooth: hci3: command tx timeout [ 1262.411511][T20552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.438640][T20552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.475508][T20552] bridge_slave_0: entered allmulticast mode [ 1262.482877][T20552] bridge_slave_0: entered promiscuous mode [ 1262.586581][ T8263] hsr_slave_0: left promiscuous mode [ 1262.632118][ T8263] hsr_slave_1: left promiscuous mode [ 1262.709585][ T8263] bond0: left allmulticast mode [ 1262.739724][ T8263] bond0: left promiscuous mode [ 1262.771423][ T8263] veth1_macvtap: left promiscuous mode [ 1262.787570][ T8263] veth0_macvtap: left promiscuous mode [ 1262.799759][ T8263] veth1_vlan: left promiscuous mode [ 1262.819166][ T8263] veth0_vlan: left promiscuous mode [ 1264.384887][ T5797] Bluetooth: hci3: command tx timeout [ 1264.604988][ T8263] bond0 (unregistering): Released all slaves [ 1264.675232][T20552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.692457][T20552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.700089][T20552] bridge_slave_1: entered allmulticast mode [ 1264.719542][T20552] bridge_slave_1: entered promiscuous mode [ 1264.757082][T20601] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3654'. [ 1264.905594][T20552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1264.951178][T20552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1265.129980][T20552] team0: Port device team_slave_0 added [ 1265.178736][T20552] team0: Port device team_slave_1 added [ 1265.330476][T20552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1265.352415][T20552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1265.430262][T20552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1265.490058][T20552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1265.504217][T20552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1265.561811][T20552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1265.663904][T20552] hsr_slave_0: entered promiscuous mode [ 1265.677997][T20552] hsr_slave_1: entered promiscuous mode [ 1265.710663][T20638] loop3: detected capacity change from 0 to 4096 [ 1265.734824][T20552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1265.777570][T20552] Cannot create hsr debugfs directory [ 1265.898317][T19397] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1265.915582][ T8263] IPVS: stop unused estimator thread 0... [ 1266.113053][ T28] audit: type=1800 audit(1266.077:208): pid=20643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3663" name="file1" dev="loop3" ino=34 res=0 errno=0 [ 1266.471697][ T5797] Bluetooth: hci3: command tx timeout [ 1267.951372][T19397] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1268.072680][T19397] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1268.255880][T19397] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1268.290736][T19397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.314930][T19397] usb 1-1: Product: syz [ 1268.357746][T19397] usb 1-1: Manufacturer: syz [ 1268.384948][T19397] usb 1-1: SerialNumber: syz [ 1268.432274][T19397] usb 1-1: config 0 descriptor?? [ 1268.475869][T20636] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1268.483237][T20636] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1268.545851][ T5797] Bluetooth: hci3: command tx timeout [ 1268.573237][T19397] usb 1-1: can't set config #0, error -71 [ 1268.616093][T19397] usb 1-1: USB disconnect, device number 16 [ 1269.040415][T20552] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1269.050999][T20552] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1269.131135][T20677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3670'. [ 1269.409467][T20552] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1269.437758][T20552] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1269.904553][T20552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.028761][T20552] 8021q: adding VLAN 0 to HW filter on device team0 [ 1270.090009][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.097304][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.176993][ T7644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.184200][ T7644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1270.975454][T20552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1270.986034][T20552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1271.259074][T20718] loop0: detected capacity change from 0 to 16 [ 1271.301617][T20718] erofs: (device loop0): mounted with root inode @ nid 36. [ 1271.721728][T20552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1272.972852][T20752] input: syz1 as /devices/virtual/input/input48 [ 1273.288054][T20552] veth0_vlan: entered promiscuous mode [ 1273.408218][T20552] veth1_vlan: entered promiscuous mode [ 1273.804256][T20552] veth0_macvtap: entered promiscuous mode [ 1273.887123][T20552] veth1_macvtap: entered promiscuous mode [ 1273.954627][T20552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1273.978114][T20552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1274.021945][T20552] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.044166][T20552] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.059969][T20552] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.089641][T20552] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.110856][T20770] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3685'. [ 1274.132961][T20773] loop4: detected capacity change from 0 to 2048 [ 1274.165675][T20773] UDF-fs: bad mount option "fileset=0000000000oÖ0000000005" or missing value [ 1274.556261][ T7647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.601863][ T7647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.020123][ T7647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.068388][ T7647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.278606][T20792] input: syz1 as /devices/virtual/input/input49 [ 1275.682168][T20784] loop0: detected capacity change from 0 to 32768 [ 1275.780931][T20784] [ 1275.780931][T20784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1275.780931][T20784] [ 1275.995296][T20784] read_mapping_page failed! [ 1276.013110][T20784] ERROR: (device loop0): txCommit: [ 1276.013110][T20784] [ 1276.155450][T20810] read_mapping_page failed! [ 1276.179517][T20810] ERROR: (device loop0): txCommit: [ 1276.179517][T20810] [ 1276.187742][T20801] team0: Port device team_slave_0 removed [ 1276.333229][T20811] ================================================================== [ 1276.341348][T20811] BUG: KASAN: slab-out-of-bounds in dtInsertEntry+0xe8b/0x13e0 [ 1276.348908][T20811] Read of size 4 at addr ffff888058a81b4c by task syz.0.3689/20811 [ 1276.356880][T20811] [ 1276.359202][T20811] CPU: 0 PID: 20811 Comm: syz.0.3689 Not tainted syzkaller #0 [ 1276.366643][T20811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1276.376686][T20811] Call Trace: [ 1276.379954][T20811] [ 1276.382874][T20811] dump_stack_lvl+0x16c/0x230 [ 1276.387547][T20811] ? read_lock_is_recursive+0x20/0x20 [ 1276.392910][T20811] ? show_regs_print_info+0x20/0x20 [ 1276.398095][T20811] ? load_image+0x3b0/0x3b0 [ 1276.402587][T20811] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 1276.407947][T20811] ? __virt_addr_valid+0x18c/0x540 [ 1276.413056][T20811] ? __virt_addr_valid+0x469/0x540 [ 1276.418156][T20811] print_report+0xac/0x220 [ 1276.422562][T20811] ? dtInsertEntry+0xe8b/0x13e0 [ 1276.427496][T20811] kasan_report+0x117/0x150 [ 1276.431995][T20811] ? dtInsertEntry+0xe8b/0x13e0 [ 1276.436838][T20811] dtInsertEntry+0xe8b/0x13e0 [ 1276.441510][T20811] ? release_metapage+0x703/0x870 [ 1276.446528][T20811] dtSplitPage+0x2a66/0x3b10 [ 1276.451127][T20811] dtInsert+0x108f/0x5f40 [ 1276.455451][T20811] ? kasan_quarantine_put+0xd8/0x220 [ 1276.460732][T20811] ? txLock+0x2b1/0x2090 [ 1276.464967][T20811] ? __rwlock_init+0x150/0x150 [ 1276.469753][T20811] ? slab_free_freelist_hook+0x130/0x1b0 [ 1276.475384][T20811] ? txLock+0xead/0x2090 [ 1276.479614][T20811] ? UniStrupr+0x2e0/0x2e0 [ 1276.484032][T20811] ? dtInitRoot+0x22a/0x670 [ 1276.488527][T20811] jfs_mkdir+0x6c6/0xa30 [ 1276.492759][T20811] ? jfs_symlink+0xe50/0xe50 [ 1276.497352][T20811] ? make_vfsuid+0x51/0xb0 [ 1276.501765][T20811] ? generic_permission+0x1f3/0x590 [ 1276.506958][T20811] ? inode_permission+0xf3/0x480 [ 1276.511885][T20811] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1276.516894][T20811] ? security_inode_mkdir+0xb7/0x100 [ 1276.522167][T20811] vfs_mkdir+0x296/0x440 [ 1276.526413][T20811] do_mkdirat+0x1d4/0x440 [ 1276.530741][T20811] ? vfs_mkdir+0x440/0x440 [ 1276.535170][T20811] __x64_sys_mkdirat+0x89/0xa0 [ 1276.539925][T20811] do_syscall_64+0x55/0xb0 [ 1276.544327][T20811] ? clear_bhb_loop+0x40/0x90 [ 1276.549002][T20811] ? clear_bhb_loop+0x40/0x90 [ 1276.553671][T20811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1276.559560][T20811] RIP: 0033:0x7f50c238efc9 [ 1276.563963][T20811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1276.583646][T20811] RSP: 002b:00007f50c05d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1276.592043][T20811] RAX: ffffffffffffffda RBX: 00007f50c25e6180 RCX: 00007f50c238efc9 [ 1276.600002][T20811] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1276.607966][T20811] RBP: 00007f50c2411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1276.615924][T20811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1276.623877][T20811] R13: 00007f50c25e6218 R14: 00007f50c25e6180 R15: 00007ffce0478f28 [ 1276.631839][T20811] [ 1276.634870][T20811] [ 1276.637177][T20811] Allocated by task 20784: [ 1276.641574][T20811] kasan_set_track+0x4e/0x70 [ 1276.646151][T20811] __kasan_slab_alloc+0x6c/0x80 [ 1276.650988][T20811] slab_post_alloc_hook+0x6e/0x4d0 [ 1276.656089][T20811] kmem_cache_alloc_lru+0x115/0x2e0 [ 1276.661274][T20811] jfs_alloc_inode+0x28/0x60 [ 1276.665852][T20811] iget_locked+0x1ad/0x840 [ 1276.670248][T20811] jfs_iget+0x24/0x3c0 [ 1276.674301][T20811] jfs_lookup+0x1c6/0x380 [ 1276.678618][T20811] __lookup_slow+0x281/0x3b0 [ 1276.683195][T20811] lookup_slow+0x53/0x70 [ 1276.687424][T20811] walk_component+0x2be/0x3f0 [ 1276.692082][T20811] path_lookupat+0x169/0x440 [ 1276.696656][T20811] filename_lookup+0x1f4/0x510 [ 1276.701408][T20811] user_path_at_empty+0x42/0x60 [ 1276.706248][T20811] __se_sys_chdir+0x95/0x290 [ 1276.710821][T20811] do_syscall_64+0x55/0xb0 [ 1276.715222][T20811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1276.721099][T20811] [ 1276.723404][T20811] The buggy address belongs to the object at ffff888058a81280 [ 1276.723404][T20811] which belongs to the cache jfs_ip of size 2240 [ 1276.737091][T20811] The buggy address is located 12 bytes to the right of [ 1276.737091][T20811] allocated 2240-byte region [ffff888058a81280, ffff888058a81b40) [ 1276.751739][T20811] [ 1276.754048][T20811] The buggy address belongs to the physical page: [ 1276.760448][T20811] page:ffffea000162a000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888058a80000 pfn:0x58a80 [ 1276.771883][T20811] head:ffffea000162a000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1276.780800][T20811] memcg:ffff88805accce01 [ 1276.785024][T20811] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1276.792992][T20811] page_type: 0xffffffff() [ 1276.797303][T20811] raw: 00fff00000000840 ffff888018f35780 dead000000000122 0000000000000000 [ 1276.805870][T20811] raw: ffff888058a80000 00000000800d000c 00000001ffffffff ffff88805accce01 [ 1276.814434][T20811] page dumped because: kasan: bad access detected [ 1276.820836][T20811] page_owner tracks the page as allocated [ 1276.826528][T20811] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 18619, tgid 18618 (syz.1.3085), ts 1091645512309, free_ts 961871112109 [ 1276.850568][T20811] post_alloc_hook+0x1cd/0x210 [ 1276.855325][T20811] get_page_from_freelist+0x195c/0x19f0 [ 1276.860859][T20811] __alloc_pages+0x1e3/0x460 [ 1276.865434][T20811] alloc_slab_page+0x5d/0x170 [ 1276.870100][T20811] new_slab+0x87/0x2e0 [ 1276.874151][T20811] ___slab_alloc+0xc6d/0x1300 [ 1276.878816][T20811] kmem_cache_alloc_lru+0x1ae/0x2e0 [ 1276.884001][T20811] jfs_alloc_inode+0x28/0x60 [ 1276.888576][T20811] iget_locked+0x1ad/0x840 [ 1276.893063][T20811] jfs_iget+0x24/0x3c0 [ 1276.897114][T20811] jfs_fill_super+0x70c/0xac0 [ 1276.901773][T20811] mount_bdev+0x22b/0x2d0 [ 1276.906084][T20811] legacy_get_tree+0xea/0x180 [ 1276.910743][T20811] vfs_get_tree+0x8c/0x280 [ 1276.915144][T20811] do_new_mount+0x24b/0xa40 [ 1276.919652][T20811] __se_sys_mount+0x2da/0x3c0 [ 1276.924311][T20811] page last free stack trace: [ 1276.928963][T20811] free_unref_page_prepare+0x7ce/0x8e0 [ 1276.934411][T20811] free_unref_page+0x32/0x2e0 [ 1276.939075][T20811] __slab_free+0x35e/0x410 [ 1276.943477][T20811] qlist_free_all+0x75/0xe0 [ 1276.947965][T20811] kasan_quarantine_reduce+0x143/0x160 [ 1276.953407][T20811] __kasan_slab_alloc+0x22/0x80 [ 1276.958242][T20811] slab_post_alloc_hook+0x6e/0x4d0 [ 1276.963341][T20811] kmem_cache_alloc+0x11e/0x2e0 [ 1276.968176][T20811] getname_flags+0xbb/0x500 [ 1276.972684][T20811] user_path_at_empty+0x2c/0x60 [ 1276.977523][T20811] do_readlinkat+0xd8/0x480 [ 1276.982008][T20811] __x64_sys_readlink+0x7f/0x90 [ 1276.986845][T20811] do_syscall_64+0x55/0xb0 [ 1276.991242][T20811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1276.997116][T20811] [ 1276.999425][T20811] Memory state around the buggy address: [ 1277.005033][T20811] ffff888058a81a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1277.013075][T20811] ffff888058a81a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1277.021117][T20811] >ffff888058a81b00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1277.029156][T20811] ^ [ 1277.035551][T20811] ffff888058a81b80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1277.043590][T20811] ffff888058a81c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1277.051627][T20811] ================================================================== [ 1277.099683][T20811] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1277.106919][T20811] CPU: 1 PID: 20811 Comm: syz.0.3689 Not tainted syzkaller #0 [ 1277.114378][T20811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1277.124450][T20811] Call Trace: [ 1277.127741][T20811] [ 1277.130675][T20811] dump_stack_lvl+0x16c/0x230 [ 1277.135366][T20811] ? show_regs_print_info+0x20/0x20 [ 1277.140577][T20811] ? load_image+0x3b0/0x3b0 [ 1277.145095][T20811] panic+0x2c0/0x710 [ 1277.148993][T20811] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1277.155150][T20811] ? bpf_jit_dump+0xd0/0xd0 [ 1277.159646][T20811] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 1277.165535][T20811] ? _raw_spin_unlock+0x40/0x40 [ 1277.170387][T20811] ? dtInsertEntry+0xe8b/0x13e0 [ 1277.175231][T20811] check_panic_on_warn+0x84/0xa0 [ 1277.180155][T20811] ? dtInsertEntry+0xe8b/0x13e0 [ 1277.185080][T20811] end_report+0x6f/0x140 [ 1277.189306][T20811] kasan_report+0x128/0x150 [ 1277.193791][T20811] ? dtInsertEntry+0xe8b/0x13e0 [ 1277.198633][T20811] dtInsertEntry+0xe8b/0x13e0 [ 1277.203304][T20811] ? release_metapage+0x703/0x870 [ 1277.208311][T20811] dtSplitPage+0x2a66/0x3b10 [ 1277.212909][T20811] dtInsert+0x108f/0x5f40 [ 1277.217227][T20811] ? kasan_quarantine_put+0xd8/0x220 [ 1277.222497][T20811] ? txLock+0x2b1/0x2090 [ 1277.226724][T20811] ? __rwlock_init+0x150/0x150 [ 1277.231470][T20811] ? slab_free_freelist_hook+0x130/0x1b0 [ 1277.237091][T20811] ? txLock+0xead/0x2090 [ 1277.241317][T20811] ? UniStrupr+0x2e0/0x2e0 [ 1277.245732][T20811] ? dtInitRoot+0x22a/0x670 [ 1277.250223][T20811] jfs_mkdir+0x6c6/0xa30 [ 1277.254452][T20811] ? jfs_symlink+0xe50/0xe50 [ 1277.259036][T20811] ? make_vfsuid+0x51/0xb0 [ 1277.263440][T20811] ? generic_permission+0x1f3/0x590 [ 1277.268629][T20811] ? inode_permission+0xf3/0x480 [ 1277.273555][T20811] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1277.278561][T20811] ? security_inode_mkdir+0xb7/0x100 [ 1277.283837][T20811] vfs_mkdir+0x296/0x440 [ 1277.288072][T20811] do_mkdirat+0x1d4/0x440 [ 1277.292478][T20811] ? vfs_mkdir+0x440/0x440 [ 1277.296888][T20811] __x64_sys_mkdirat+0x89/0xa0 [ 1277.301646][T20811] do_syscall_64+0x55/0xb0 [ 1277.306056][T20811] ? clear_bhb_loop+0x40/0x90 [ 1277.310715][T20811] ? clear_bhb_loop+0x40/0x90 [ 1277.315376][T20811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1277.321259][T20811] RIP: 0033:0x7f50c238efc9 [ 1277.325659][T20811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1277.345249][T20811] RSP: 002b:00007f50c05d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1277.353647][T20811] RAX: ffffffffffffffda RBX: 00007f50c25e6180 RCX: 00007f50c238efc9 [ 1277.361690][T20811] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1277.369658][T20811] RBP: 00007f50c2411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1277.377616][T20811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1277.385577][T20811] R13: 00007f50c25e6218 R14: 00007f50c25e6180 R15: 00007ffce0478f28 [ 1277.393538][T20811] [ 1277.396664][T20811] Kernel Offset: disabled [ 1277.400967][T20811] Rebooting in 86400 seconds..