last executing test programs: 1m53.872931434s ago: executing program 2 (id=410): prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x80000008b}, 0x0) io_setup(0xb, &(0x7f0000000040)=0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14337e, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000140)='p', 0x300}]) 1m53.200871242s ago: executing program 2 (id=413): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000300)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000380)={{0x200000, 0x8080000, 0x8, 0x6, 0xfb, 0x9, 0x40, 0x17, 0x0, 0x5, 0x19}, {0x60000, 0xffff1000, 0x0, 0x0, 0x22, 0x5, 0x79, 0x6, 0x5, 0x3, 0x3}, {0xeeef0003, 0x41000, 0x8, 0x5, 0x23, 0x3, 0x2, 0x19, 0x1, 0x3, 0x5, 0x81}, {0x8000000, 0x1, 0x8, 0x1, 0x0, 0x42, 0xb, 0x0, 0x6, 0x7, 0xc}, {0x7000, 0x126000, 0x8, 0xd, 0x15, 0x8, 0xab, 0x7f, 0x9, 0xa, 0x8, 0x83}, {0x8000000, 0x0, 0xc, 0xa3, 0xad, 0x8, 0x1, 0xf5, 0x8, 0x5, 0xff}, {0xddde0000, 0xffffffff, 0x0, 0x2, 0x8, 0x4, 0xd, 0x5, 0x5, 0x81, 0xff, 0x6d}, {0x50000, 0x1, 0xe, 0x5, 0xb, 0x5, 0x0, 0x34, 0x2, 0xb, 0x3, 0x80}, {0xa000, 0x400}, {0xdddd1000, 0x6}, 0x80000031, 0x0, 0xe000, 0x12235, 0x3, 0x9001, 0x80a0000, [0x6800000000000004, 0x6, 0x61, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m51.786047486s ago: executing program 2 (id=419): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000000)) r0 = socket(0xa, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4000810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="6a0ac4ff0000000071106500000000009500000000000000"], &(0x7f00000002c0)='GPL\x00'}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x28, r4, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884) 1m49.543937503s ago: executing program 2 (id=427): syz_mount_image$erofs(&(0x7f00000004c0), &(0x7f0000000500)='./file2\x00', 0x1018807, &(0x7f0000000540)=ANY=[], 0x41, 0x24e, &(0x7f0000000640)="$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") syz_open_dev$hiddev(&(0x7f0000000000), 0x5751799c, 0x8182) getpid() r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0xffffffff, 0xe) openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x20842, 0x63) 1m48.98479583s ago: executing program 2 (id=432): r0 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x202, 0x0) ioctl$DM_LIST_VERSIONS(r0, 0xc138fd0d, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xf, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000740), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000008000000000fc0200000000000000000000000000000000ffff000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000a80), 0x1003) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x20000, 0x0, 0x0, @by_dev={r1}, [@snapshot={0x0, 0x1010, 0x0, 0x70, 'snapshot-merge\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, 'n', 0x20, '16', ' 1 discard_zeroes_cow'}}]}) ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, &(0x7f0000000b80)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x600, 0x0, 0x0, @by_dev={r4}}) 1m48.380746821s ago: executing program 2 (id=437): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000000)) r0 = socket(0xa, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4000810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="6a0ac4ff0000000071106500000000009500000000000000"], &(0x7f00000002c0)='GPL\x00'}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x28, r4, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884) 1m47.886808861s ago: executing program 32 (id=437): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000000)) r0 = socket(0xa, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4000810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="6a0ac4ff0000000071106500000000009500000000000000"], &(0x7f00000002c0)='GPL\x00'}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000540), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x28, r4, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884) 1m34.417420156s ago: executing program 4 (id=494): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c) bind$inet6(r2, &(0x7f0000000200)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000380)={0xa, 0x4e20, 0x1, @mcast1, 0x7}, 0x1c) r9 = socket(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r10 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r10, &(0x7f0000000400)={0xa, 0xe20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 1m34.08679173s ago: executing program 4 (id=495): unshare(0x400) r0 = syz_open_dev$evdev(&(0x7f0000000580), 0x200000000000, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x81) 1m33.602934269s ago: executing program 4 (id=498): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000b40)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x39}}}}], 0x20}}, {{&(0x7f0000000bc0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000c00)=ANY=[], 0xe8}}], 0x2, 0x30) 1m33.49667227s ago: executing program 4 (id=500): openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000001100)='ext4\x00', &(0x7f0000001140)='./file1\x00', 0x8, &(0x7f0000001180)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f00000011c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000840)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x8, &(0x7f0000000940)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000a40)='./file1\x00', 0x0) unlink(&(0x7f0000000a80)='./file1\x00') mount$fuse(0x0, 0x0, 0x0, 0x20, 0x0) getdents64(r0, &(0x7f0000000b40)=""/50, 0x32) 1m32.71013987s ago: executing program 4 (id=502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000480)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0xaaaaaaaaaaaac71, 0xe, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x5836, 0x5, 0x7, 0xe51, 0xee2, 0x5479, 0x103d, 0x6, 0x1, 0x32a, 0xffffffffffffffff, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m25.796822711s ago: executing program 4 (id=512): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x7000000, {0xf0ffff}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x74, 0x0, 0x8, 0x20}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 1m25.245090457s ago: executing program 33 (id=512): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x7000000, {0xf0ffff}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x74, 0x0, 0x8, 0x20}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 15.340327004s ago: executing program 0 (id=706): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x200841a, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x5547, &(0x7f0000006800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f000000bd80)='./file0\x00', 0x181) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@resuid}, {@usrjquota, 0x2e}, {@jqfmt_vfsv1}, {@resuid}, {@grpquota}, {@errors_continue}, {@journal_checksum}], [], 0x2e}, 0x1, 0x472, &(0x7f00000002c0)="$eJzs20tvG0UcAPD/OnH6JqGURx9AoCAiHkmTFuiBCwikXpCQ4FCOIU2r0rRBTZBoVdGAUDmifgLgiMQn4AQXBJxAXEHigoSQKtQLhQNatPZu6ya28Stxi38/ye3M7mxm/rs79uyMHcDAGs/+SSK2R8RPIxGj1ezNBcar/127emHur6sX5pJI01f/SCrl/rx6Ya4oWhy3Lc9MlCJKHySxt069S+fOn5pdWJg/m+enlk+/NbV07vxTJ0/Pnpg/MX9m5vDhQwenn31m5umexLkja+uedxf37T7y+uWX545efuPbz7Pt2/P9tXFUjXVd53iM33wuazwa8Wuapl3XcavYUZNOhvvYENoyFBHZ5Spn/T9GYyhuXLzReOn9vjYOWFdpmqab1mwdKhIrKfA/lkS/WwD0R/FBnz3/Fq8NHH703ZXnqw9AWdzX8ld1z3CU8jLlVc+3vTQeEUdX/v44e0XdeQgAgN76Mhv/PFlv/FeKe2rK3RHVtaGxiLgzInZGxF0RsSsi7o6olL03Iu5rs/7xVfm1458ftnQUWIuy8d9z+drWzeO/YvQXY0N5bkcl/nJy/OTC/IH8nExEeVOWn25Sx1cv/vhRo32147/sldVfjAXzdvw+vGqC7tjs8mw3Mde68l7EnuF68SfXVwKSiNgdEXs6+PvZOTv5+Gf7Gu3/7/ib6ME6U/ppxGPV678Sq+IvJM3XJ6c2x8L8ganirljru+8vvdKo/q7i74Hs+m+te/9fj38sqV2vXWq/jks/f9jwmabT+38kea2SHsm3vTO7vHx2OmIkWVm7febGsUW+KJ/FP7G/fv/fGfHPJ/lxeyMiu4nvj4gHIuLBvO0PRcTDEbG/SfzfvPDIm53Hv76y+I+1df3bTwyd+vqLRvW3dv0PVVIT+ZZW3v9abWA35w4AAABuF0nlO/BJaTKf49wepdLkZPU7/Ltia2lhcWn5ieOLb585Vv2u/FiUS8VM12jNfOh0Pjdc5GdW5Q9W5o3TNE23VPKTc4sL67WmDrRmW4P+n/ltqN+tA9ZdW+tojX7RBtyW/F4TBpf+D4Or1f5fXud2ABvP5z8Mrnr9/2LEtT40BdhgPv9hcOn/MLj0fxhc+j8MpG5+198ssfNIx4enXdW+OQ+sw8N/WZez0SwxtIF19TIRpbq7yhFxi7SwSaJ0azSjmtgUEa0Wvtjpjd12os9vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3ybwAAAP//pCzokA==") prlimit64(0x0, 0xe, &(0x7f0000000740)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000d80)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000dc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000e40)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ec0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000f00), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r3 = gettid() syz_mount_image$vfat(&(0x7f0000000f40), &(0x7f0000000f80)='./file1\x00', 0x8, &(0x7f0000000fc0)={[{@shortname_win95}, {@utf8no}, {@uni_xlate}, {@fat=@check_strict}, {@rodir}, {@fat=@flush}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@fat=@dos1xfloppy}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@uni_xlateno}, {@rodir}, {@shortname_lower}]}, 0x1, 0x2a7, &(0x7f0000001080)="$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") rt_sigqueueinfo(r3, 0x1d, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xf, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x6, 0xd, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000001540)={0x802}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001640), r5) mount$9p_fd(0x0, 0x0, &(0x7f0000001680), 0x2010001, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000016c0)='.\x00', 0x100, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000001700), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) 13.373973173s ago: executing program 6 (id=713): r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)}}, {{&(0x7f0000000b00)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001640), 0x0, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80005}}], 0x60}}], 0x2, 0x4040880) 12.836366198s ago: executing program 6 (id=716): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x200841a, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x5547, &(0x7f0000006800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f000000bd80)='./file0\x00', 0x181) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@resuid}, {@usrjquota, 0x2e}, {@jqfmt_vfsv1}, {@resuid}, {@grpquota}, {@errors_continue}, {@journal_checksum}], [], 0x2e}, 0x1, 0x472, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000740)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000d80)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000dc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000e40)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ec0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000f00), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r3 = gettid() syz_mount_image$vfat(&(0x7f0000000f40), &(0x7f0000000f80)='./file1\x00', 0x8, &(0x7f0000000fc0)={[{@shortname_win95}, {@utf8no}, {@uni_xlate}, {@fat=@check_strict}, {@rodir}, {@fat=@flush}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@fat=@dos1xfloppy}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@uni_xlateno}, {@rodir}, {@shortname_lower}]}, 0x1, 0x2a7, &(0x7f0000001080)="$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") rt_sigqueueinfo(r3, 0x1d, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xf, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x6, 0xd, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000001540)={0x802}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001640), r5) mount$9p_fd(0x0, 0x0, &(0x7f0000001680), 0x2010001, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000016c0)='.\x00', 0x100, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000001700), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) 8.955713281s ago: executing program 1 (id=726): r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0}}, {{&(0x7f0000000b00)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001640), 0x0, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80005}}], 0x60}}], 0x2, 0x4040880) 8.656195632s ago: executing program 1 (id=729): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10002, &(0x7f0000000080), 0x1, 0x50a, &(0x7f00000000c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuset.effective_mems\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x408000000, 0xeed) write$cgroup_devices(r0, &(0x7f0000000640)={'b', ' *:* ', 'r\x00'}, 0x8) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 8.601962337s ago: executing program 6 (id=730): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80080, &(0x7f0000000180)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@orlov}]}, 0x0, 0x4ab, &(0x7f00000004c0)="$eJzs3c1rXFUbAPBnZpo0SfO+/XhfpK1gCxXqB83kA2miLnSlLgpiwY1Cjck01kwyITOpTegi1V0XLkRREBfu/Qvc2JVFENe6FxdS0RpBBWFk7syk+Zp20HQGcn8/mM6599ze55wMz+HOuffODSC1Ttb+yUQMRsQ3EXGwvrh5g5P1t7XbV6dqr0xUq+d/ziTb1Zabmzb/34GIWI2Ivoh46bmI1zPb45aXV2Yni8XCYmM5X5lbyJeXV85cmpucKcwU5kfGz05MjA+PjU7sWl+vv/vm9XOfv9D72e/v3Lr53pdf1Jo12Kjb2I/dVO96TxzesG5fRDx9P4J1Qa7Rn/5uN4R/pPb5/S8iTiX5fzByyacJpEG1Wq3+Vd3fqnq1CuxZ2eQYOJMdioh6OZsdGqofw/8/BrLFUrny+MXS0vx0/Vj5UPRkL14qFoYb3xUORU+mtjySlO8sj25ZHotIjoHfz/Uny0NTpeJ0Z4c6YIsDW/L/t1w9/+8h25HGAfefr/yQXvIf0kv+Q3rJf0gv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5DKr147lztVW3e/z59eXlptnT5zHShPDs0tzQ1NFVaXBiaKZVmknt25u61v2KptDDyRCxdyVcK5Uq+vLxyYa60NF+5kNzXf6HQ05FeAe04fOLGd5mIWH2yP3nV9Dbq5CrsbdVqJrp9DzLQHbluD0BA15j6g/TyHR/Y4Sd6N+lrVbGw+20BOsMPeUF6nT7m/B+klfl/SC/z/5BejvEB8/+QPub/Ib0GWzz/6z8bnt01HBH/jYhvcz37m8/6AvaC7I+ZxvH/6YMPD26t7c38kZwi6I2Itz4+/+GVyUplcaS2/pf19ZWPGutHu9F+oF3NPG3mMQCQXmu3r041X52M+9Oz9YsQtsff15ib7EvOUQ6sZTZdq5DZpWsXVq9FxNGd4mcazzuvn/kYWMtti3+k8Z6p7yJp777kuemdiX9sQ/yHNsQ//q//KpAON2rjz/BO+ZdNcjrW82/z+DO4S9dOtB7/suvjX67F+Hdi++52HBLf+OTtH1rGvxZxfMf4zXh9Sayt8WttO91mH2+9+vIDreqqn9b3s1P8plopX5lbyJeXV84kvyM3U5gfGT87MTE+PDY6kU/mqPPNmertnjr69c279X+gRfxW/X+m0aZH2+z/nw9+9crJu8R/5NTOn/+RFvFr+iPisTbj/zr6/Wut6mrxp1v0P3uX+LV1Y23GL3/w/P42NwUAOqC8vDI7WSwWFhUUFBTWC90emYD77U7Sd7slAAAAAAAAAAAAQLs6cTlxt/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAX/B0AAP//KpzWoQ==") prlimit64(0x0, 0xe, &(0x7f0000000980)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000a00)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000a40)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000b80), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000bc0)=0x2) syz_open_procfs(0x0, &(0x7f0000000c00)='pagemap\x00') mkdir(&(0x7f0000000000)='./file1\x00', 0x107) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r5, 0x5) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000040)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x7000)=nil, 0x7000, &(0x7f0000000080)='\x00\x00\xad\xddP\x04Do\x90\x986\xc7\"K3\xaf\xf3\xe7\xf7Dm\xebD\x04\xf9A\x86_\x8d\x93\xe2\x13\xbf\xc5\xc7c\xe3\xf9(\xfe\x8a\x1c\xa8\x15\xf6\x81\xf6\xfcAM\x86\xc1\xb1\xdaJoI\xef\xf0\xe6U\xc2\r!\x16\xda\x16Y\xc0\x13\xba\xacX\a9@\x00\xac\xd0\xf1\xb3\xa8\xa7\x86h3|\x03\x95@\xebM\xa6i\xb3S\x84\xa0yum\xcbZ$8\xd2e\x19\xdb\xeb\xf3\x1eK\x1a\xad\xc4w\xe5\xcd&f\x9e\xc4') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x9, &(0x7f0000000440)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0x79, 0x1, 0xa, 0xfff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r6}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000e40)={r6, &(0x7f0000000e80), &(0x7f0000000ec0)=@tcp=r4}, 0x20) sendto(r4, 0x0, 0xfffffffffffffff1, 0x0, 0x0, 0x0) 7.503122359s ago: executing program 1 (id=733): openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80942, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/dev_mcast\x00') r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYBLOB="07c6c700df5132"], 0x0) 6.50143051s ago: executing program 6 (id=735): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010040000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904000905820200020000000905030200"], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10) 5.9129522s ago: executing program 0 (id=738): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d00, &(0x7f00000006c0)="000001000000") 5.404970121s ago: executing program 0 (id=739): r0 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0}}, {{&(0x7f0000000b00)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001640), 0x0, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80005}}], 0x60}}], 0x2, 0x4040880) 5.262876716s ago: executing program 0 (id=741): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x200841a, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x5547, &(0x7f0000006800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f000000bd80)='./file0\x00', 0x181) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@resuid}, {@usrjquota, 0x2e}, {@jqfmt_vfsv1}, {@resuid}, {@grpquota}, {@errors_continue}, {@journal_checksum}], [], 0x2e}, 0x1, 0x472, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000740)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000d80)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000dc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000e40)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ec0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000f00), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r3 = gettid() syz_mount_image$vfat(&(0x7f0000000f40), &(0x7f0000000f80)='./file1\x00', 0x8, &(0x7f0000000fc0)={[{@shortname_win95}, {@utf8no}, {@uni_xlate}, {@fat=@check_strict}, {@rodir}, {@fat=@flush}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@fat=@dos1xfloppy}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@uni_xlateno}, {@rodir}, {@shortname_lower}]}, 0x1, 0x2a7, &(0x7f0000001080)="$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") rt_sigqueueinfo(r3, 0x1d, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xf, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x6, 0xd, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001640), r5) mount$9p_fd(0x0, 0x0, &(0x7f0000001680), 0x2010001, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000016c0)='.\x00', 0x100, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000001700), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) 5.008634452s ago: executing program 5 (id=742): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r3}, 0xc) 4.978679805s ago: executing program 6 (id=743): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x200841a, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x5547, &(0x7f0000006800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f000000bd80)='./file0\x00', 0x181) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@resuid}, {@usrjquota, 0x2e}, {@jqfmt_vfsv1}, {@resuid}, {@grpquota}, {@errors_continue}, {@journal_checksum}], [], 0x2e}, 0x1, 0x472, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000740)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000d80)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000dc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000e40)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ec0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000f00), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r3 = gettid() syz_mount_image$vfat(&(0x7f0000000f40), &(0x7f0000000f80)='./file1\x00', 0x8, &(0x7f0000000fc0)={[{@shortname_win95}, {@utf8no}, {@uni_xlate}, {@fat=@check_strict}, {@rodir}, {@fat=@flush}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@fat=@dos1xfloppy}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@uni_xlateno}, {@rodir}, {@shortname_lower}]}, 0x1, 0x2a7, &(0x7f0000001080)="$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") rt_sigqueueinfo(r3, 0x1d, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xf, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x6, 0xd, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)={0x14, 0x42, 0x201, 0x0, 0x25dfdbfd, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x400ccc0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001640), r5) mount$9p_fd(0x0, 0x0, &(0x7f0000001680), 0x2010001, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000016c0)='.\x00', 0x100, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) 4.841085718s ago: executing program 5 (id=744): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$DM_LIST_VERSIONS(r0, 0xc138fd0d, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000008000000000fc0200000000000000000000000000000000ffff000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000a80), 0x1003) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x20000, 0x0, 0x0, @by_dev={r1}, [@snapshot={0x0, 0x1010, 0x0, 0x70, 'snapshot-merge\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, 'n', 0x20, '16', ' 1 discard_zeroes_cow'}}]}) ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, &(0x7f0000000b80)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x600, 0x0, 0x0, @by_dev={r4}}) 4.62558729s ago: executing program 5 (id=745): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) fgetxattr(r0, &(0x7f0000000200)=@known='security.selinux\x00', 0x0, 0x0) 4.396826814s ago: executing program 5 (id=747): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c) bind$inet6(r2, &(0x7f0000000200)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000380)={0xa, 0x4e20, 0x1, @mcast1, 0x7}, 0x1c) r10 = socket(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r11 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r11, &(0x7f0000000400)={0xa, 0xe20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 4.2406597s ago: executing program 5 (id=748): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x2d]}}, 0x0, 0x1f}, 0x28) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x200040c2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) io_setup(0x3, &(0x7f0000002500)=0x0) io_submit(r3, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r2, &(0x7f00000000c0)=' ', 0x1, 0xe3}, 0x0]) write(r1, &(0x7f0000000200)='2', 0x1) 4.127358131s ago: executing program 1 (id=749): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x200841a, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x5547, &(0x7f0000006800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f000000bd80)='./file0\x00', 0x181) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@resuid}, {@usrjquota, 0x2e}, {@jqfmt_vfsv1}, {@resuid}, {@grpquota}, {@errors_continue}, {@journal_checksum}], [], 0x2e}, 0x1, 0x472, &(0x7f00000002c0)="$eJzs20tvG0UcAPD/OnH6JqGURx9AoCAiHkmTFuiBCwikXpCQ4FCOIU2r0rRBTZBoVdGAUDmifgLgiMQn4AQXBJxAXEHigoSQKtQLhQNatPZu6ya28Stxi38/ye3M7mxm/rs79uyMHcDAGs/+SSK2R8RPIxGj1ezNBcar/127emHur6sX5pJI01f/SCrl/rx6Ya4oWhy3Lc9MlCJKHySxt069S+fOn5pdWJg/m+enlk+/NbV07vxTJ0/Pnpg/MX9m5vDhQwenn31m5umexLkja+uedxf37T7y+uWX545efuPbz7Pt2/P9tXFUjXVd53iM33wuazwa8Wuapl3XcavYUZNOhvvYENoyFBHZ5Spn/T9GYyhuXLzReOn9vjYOWFdpmqab1mwdKhIrKfA/lkS/WwD0R/FBnz3/Fq8NHH703ZXnqw9AWdzX8ld1z3CU8jLlVc+3vTQeEUdX/v44e0XdeQgAgN76Mhv/PFlv/FeKe2rK3RHVtaGxiLgzInZGxF0RsSsi7o6olL03Iu5rs/7xVfm1458ftnQUWIuy8d9z+drWzeO/YvQXY0N5bkcl/nJy/OTC/IH8nExEeVOWn25Sx1cv/vhRo32147/sldVfjAXzdvw+vGqC7tjs8mw3Mde68l7EnuF68SfXVwKSiNgdEXs6+PvZOTv5+Gf7Gu3/7/ib6ME6U/ppxGPV678Sq+IvJM3XJ6c2x8L8ganirljru+8vvdKo/q7i74Hs+m+te/9fj38sqV2vXWq/jks/f9jwmabT+38kea2SHsm3vTO7vHx2OmIkWVm7febGsUW+KJ/FP7G/fv/fGfHPJ/lxeyMiu4nvj4gHIuLBvO0PRcTDEbG/SfzfvPDIm53Hv76y+I+1df3bTwyd+vqLRvW3dv0PVVIT+ZZW3v9abWA35w4AAABuF0nlO/BJaTKf49wepdLkZPU7/Ltia2lhcWn5ieOLb585Vv2u/FiUS8VM12jNfOh0Pjdc5GdW5Q9W5o3TNE23VPKTc4sL67WmDrRmW4P+n/ltqN+tA9ZdW+tojX7RBtyW/F4TBpf+D4Or1f5fXud2ABvP5z8Mrnr9/2LEtT40BdhgPv9hcOn/MLj0fxhc+j8MpG5+198ssfNIx4enXdW+OQ+sw8N/WZez0SwxtIF19TIRpbq7yhFxi7SwSaJ0azSjmtgUEa0Wvtjpjd12os9vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3ybwAAAP//pCzokA==") prlimit64(0x0, 0xe, &(0x7f0000000740)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000d80)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000dc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000e40)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ec0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000f00), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r3 = gettid() syz_mount_image$vfat(&(0x7f0000000f40), &(0x7f0000000f80)='./file1\x00', 0x8, &(0x7f0000000fc0)={[{@shortname_win95}, {@utf8no}, {@uni_xlate}, {@fat=@check_strict}, {@rodir}, {@fat=@flush}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@fat=@dos1xfloppy}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@uni_xlateno}, {@rodir}, {@shortname_lower}]}, 0x1, 0x2a7, &(0x7f0000001080)="$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") rt_sigqueueinfo(r3, 0x1d, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xf, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x6, 0xd, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000001540)={0x802}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001640), r5) mount$9p_fd(0x0, 0x0, &(0x7f0000001680), 0x2010001, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000016c0)='.\x00', 0x100, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000001700), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) 1.916725915s ago: executing program 0 (id=750): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000280), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r1, &(0x7f0000000300)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.231065665s ago: executing program 3 (id=752): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x74, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffffe, 0x7, 0x3, 0xffffffff, 0x2}}]}]}}}]}, 0x74}}, 0x0) sendto$packet(r0, &(0x7f0000000340)="44c33b69ebc9e05e9bdec0", 0xb, 0x830, &(0x7f0000000380)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) sendto$packet(r0, &(0x7f00000005c0)="bdc16d61bd3759d53efe072771598e02f68b5d7d71e0421c481478c4b8475a136ac71bb5fd09c30705985d0316366a16d429f674791c08d0243688f34d25ae5f1f98402242c2c3644727b70c0a82541d7c1b50bc6e112c309c689e8cec146057f4805df92699e3ca8347f6a077049c3e7ff320696ccdea4bdf24b318a3fddc70bf26764208609e719f4715ee09259fed85ef4efa113a87b10a5c1ba6ace8ef9a61852863efc9100624eb8c9b57cca8ced744f4769ef25e8d5eb07a8195170cfc229e8e20fc2f167eff5ec8664ceb9a3b9d6a9c3ea6c78f3a0d4dd37e1ebdee460359ca5b6910308a5970e8ef1667", 0xee, 0x4040000, &(0x7f00000006c0)={0x11, 0x18, r3, 0x1, 0x2}, 0x14) 860.890372ms ago: executing program 3 (id=753): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001380), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) write$UHID_INPUT(r0, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) 499.474789ms ago: executing program 6 (id=754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000580)={{0x1, 0x2000, 0xb, 0xad, 0x4, 0xff, 0x7f, 0x5, 0x0, 0x2b, 0x9}, {0x2, 0x70000, 0x0, 0x2a, 0x8, 0x0, 0x7f, 0x1, 0x3, 0xf0, 0x9, 0x5}, {0x2, 0x5000, 0x8, 0x5, 0x1, 0xf3, 0x0, 0xb, 0x0, 0x5, 0xb, 0x9}, {0x8000000, 0xffff1000, 0x0, 0xe7, 0x4, 0x2, 0x1, 0x86, 0x8, 0x8b, 0xd, 0xed}, {0x4, 0x8080000, 0x8, 0x3, 0x5, 0x86, 0x9, 0x7f, 0xa, 0x0, 0xf2, 0x43}, {0x70000, 0x6000, 0xb, 0x7c, 0xb1, 0x24, 0x7f, 0xaf, 0x83, 0xc, 0x15, 0x3d}, {0xd000, 0x100002, 0xd, 0x3, 0x2, 0x5, 0x0, 0x3, 0x5, 0x7f, 0x5}, {0x3000, 0xffff1000, 0x5, 0x5, 0x9, 0xf, 0x0, 0x37, 0x4, 0x9, 0xf0, 0x9}, {0xeeee8000, 0x2070}, {0x2, 0x7}, 0x80000033, 0x0, 0xeeef0000, 0x2104, 0x0, 0x0, 0x80a0000, [0x3, 0x7, 0x7, 0x9]}) 498.274459ms ago: executing program 1 (id=755): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$DM_LIST_VERSIONS(r0, 0xc138fd0d, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000008000000000fc0200000000000000000000000000000000ffff000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000a80), 0x1003) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x20000, 0x0, 0x0, @by_dev={r1}, [@snapshot={0x0, 0x1010, 0x0, 0x70, 'snapshot-merge\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, 'n', 0x20, '16', ' 1 discard_zeroes_cow'}}]}) ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, &(0x7f0000000b80)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x600, 0x0, 0x0, @by_dev={r4}}) 445.159604ms ago: executing program 3 (id=756): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001c00), &(0x7f0000001c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000340)={[{@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_lower}, {@uni_xlateno}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffc7c}}, {@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {}, {@shortname_win95}, {@fat=@discard}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@numtail}, {@utf8no}]}, 0x2, 0x291, &(0x7f0000001e40)="$eJzs3c1qK2UYAOB3mkmT6CJZuBLhDOjC1eHUK2iRI4gFQclCXWixKUgSCi0EqmLsyitw49brcSPegBeguLMLcWQ6kz+dtETapujzbPryft+b72/6s5mvn7wyHh6fnp9cfvlztNtJ7OzHflwl0YudmPk6av30a30eAHjkrvI8fstLrTJ1sdqjuaYy3bn3yQEA92L59/+25wIAPIz3P/jwnYPDw+fvZVk7YvzNpJ9E+bVsPziJz2IUg3gW3fgjIp8r47fePnweaVboxWvj6aRfVI4//qH6/INfIq7r96Ibvfr6vay0VD+d9JvxQjX+/igG734f3Xipvv6NRf1VXtVHfzdef3Vp/k+jGz9+GqcxiuMo/9aZ1X+1l2Vv5t/+/sVHRbaoT6aTfiuOV3Yqbzz02QAAAAAAAAAAAAAAAAAAAAAA8N/1NJvrrd6/M7v4/4b2G+4Hmi7dz/Msy7I8Kfsv6tN4OY10m2sHAAAAAAAAAAAAAAAAAACAx+L84vPh0Wg0OLvTYPZaf01T/LmaaUXEms9Jbx/ryUYTS6orDQqjJGKzdTWjdV15e+fGhjvWKeYzOEvSuLsjSOaZznLTkyjHKjKdMljKbDbEd/88uHZcB7NNHh4l6w53FrTrHpI7CPKax6+xtmr375lOtYKazp0bRt998V/NOe+uaUoiojnfzKqpU9+5uelGpeu/9YZHowf7EQQAAAAAAAAAAAAAAAAAAFQWL/3WNF5uYUIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsAWL//+/QTCtitf1yRtFkEaV2fISAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+B/4KwAA//+T5WeJ") openat(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', 0x20842, 0x4) 392.50875ms ago: executing program 5 (id=757): socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x80078b, &(0x7f0000000700)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@norecovery}, {@resgid}, {@sysvgroups}, {@nogrpid}]}, 0x0, 0x491, &(0x7f00000007c0)="$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") 180.884271ms ago: executing program 3 (id=758): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c) bind$inet6(r2, &(0x7f0000000200)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000380)={0xa, 0x4e20, 0x1, @mcast1, 0x7}, 0x1c) r10 = socket(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r11 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r11, &(0x7f0000000400)={0xa, 0xe20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 180.758341ms ago: executing program 0 (id=759): openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80942, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/dev_mcast\x00') r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYBLOB="07c6c700df5132"], 0x0) 80.694091ms ago: executing program 3 (id=760): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000fc0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000001100)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x70bd28, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xff, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_OIF={0x8, 0x4, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x0) 29.202296ms ago: executing program 3 (id=761): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x103a42, 0x32) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000180)='erofs\x00', 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0xb3, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100", @ANYRES8=r0], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=762): r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) kernel console output (not intermixed with test programs): 02164][ T5623] [ 179.905103][ T5623] dump_stack_lvl+0x188/0x24e [ 179.909815][ T5623] ? show_regs_print_info+0x12/0x12 [ 179.915037][ T5623] ? load_image+0x410/0x410 [ 179.919554][ T5623] ? __might_sleep+0xd0/0xd0 [ 179.924156][ T5623] ? __lock_acquire+0x7ea0/0x7ea0 [ 179.929202][ T5623] should_fail_ex+0x390/0x4c0 [ 179.933901][ T5623] should_failslab+0x5/0x20 [ 179.938419][ T5623] slab_pre_alloc_hook+0x59/0x300 [ 179.943459][ T5623] ? do_epoll_create+0x107/0x340 [ 179.948412][ T5623] __kmem_cache_alloc_node+0x4f/0x270 [ 179.953806][ T5623] ? do_epoll_create+0x107/0x340 [ 179.958770][ T5623] kmalloc_trace+0x26/0xe0 [ 179.963203][ T5623] do_epoll_create+0x107/0x340 [ 179.968009][ T5623] __x64_sys_epoll_create1+0x33/0x40 [ 179.973331][ T5623] do_syscall_64+0x4c/0xa0 [ 179.977768][ T5623] ? clear_bhb_loop+0x60/0xb0 [ 179.982464][ T5623] ? clear_bhb_loop+0x60/0xb0 [ 179.987165][ T5623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.993083][ T5623] RIP: 0033:0x7fbf789a94d9 [ 179.997513][ T5623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.017134][ T5623] RSP: 002b:00007fbf798b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 180.025567][ T5623] RAX: ffffffffffffffda RBX: 00007fbf78c25fa0 RCX: 00007fbf789a94d9 [ 180.033556][ T5623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 180.041540][ T5623] RBP: 00007fbf78a3804e R08: 0000000000000000 R09: 0000000000000000 [ 180.049522][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.057500][ T5623] R13: 00007fbf78c26038 R14: 00007fbf78c25fa0 R15: 00007ffe9e912fd8 [ 180.065501][ T5623] [ 180.070062][ T4374] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 180.136748][ T4374] usb 2-1: device descriptor read/8, error -71 [ 180.266351][ T4374] usb usb2-port1: unable to enumerate USB device [ 181.056196][ T7] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 182.741389][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 183.126960][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.400665][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 183.410125][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.513047][ T7] usb 2-1: Found UVC 1.00 device (046d:0825) [ 183.587909][ T5669] rxe_eth0 speed is unknown, defaulting to 1000 [ 183.670451][ T7] usb 2-1: No streaming interface found for terminal 2. [ 183.737303][ T5670] FAULT_INJECTION: forcing a failure. [ 183.737303][ T5670] name failslab, interval 1, probability 0, space 0, times 0 [ 183.820379][ T5670] CPU: 1 PID: 5670 Comm: syz.2.346 Not tainted syzkaller #0 [ 183.827717][ T5670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 183.837795][ T5670] Call Trace: [ 183.841089][ T5670] [ 183.844035][ T5670] dump_stack_lvl+0x188/0x24e [ 183.848743][ T5670] ? show_regs_print_info+0x12/0x12 [ 183.853962][ T5670] ? load_image+0x410/0x410 [ 183.858489][ T5670] ? __might_sleep+0xd0/0xd0 [ 183.863098][ T5670] ? __lock_acquire+0x7ea0/0x7ea0 [ 183.868154][ T5670] ? futex_unqueue+0xc7/0xf0 [ 183.872762][ T5670] should_fail_ex+0x390/0x4c0 [ 183.877463][ T5670] should_failslab+0x5/0x20 [ 183.881978][ T5670] slab_pre_alloc_hook+0x59/0x300 [ 183.887019][ T5670] ? futex_wait_setup+0x270/0x270 [ 183.892061][ T5670] kmem_cache_alloc+0x56/0x2f0 [ 183.896841][ T5670] ? lease_alloc+0x26/0x320 [ 183.901364][ T5670] lease_alloc+0x26/0x320 [ 183.905807][ T5670] fcntl_setlease+0x112/0x310 [ 183.910502][ T5670] ? vfs_setlease+0x100/0x100 [ 183.915212][ T5670] do_fcntl+0x117/0x12f0 [ 183.919491][ T5670] ? __ia32_sys_get_robust_list+0x100/0x100 [ 183.925400][ T5670] ? kill_fasync+0x4b0/0x4b0 [ 183.930015][ T5670] ? __fget_files+0x28/0x460 [ 183.934636][ T5670] ? __fget_files+0x3fc/0x460 [ 183.939348][ T5670] ? tomoyo_file_fcntl+0x74/0x210 [ 183.944399][ T5670] ? bpf_lsm_file_fcntl+0x5/0x10 [ 183.949362][ T5670] ? security_file_fcntl+0x7c/0xa0 [ 183.954496][ T5670] __se_sys_fcntl+0xc9/0x190 [ 183.959161][ T5670] do_syscall_64+0x4c/0xa0 [ 183.963613][ T5670] ? clear_bhb_loop+0x60/0xb0 [ 183.968316][ T5670] ? clear_bhb_loop+0x60/0xb0 [ 183.973017][ T5670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.978937][ T5670] RIP: 0033:0x7f66775a94d9 [ 183.983367][ T5670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.002998][ T5670] RSP: 002b:00007f6678421028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 184.011447][ T5670] RAX: ffffffffffffffda RBX: 00007f6677825fa0 RCX: 00007f66775a94d9 [ 184.019463][ T5670] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000006 [ 184.027460][ T5670] RBP: 00007f667763804e R08: 0000000000000000 R09: 0000000000000000 [ 184.035448][ T5670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.043433][ T5670] R13: 00007f6677826038 R14: 00007f6677825fa0 R15: 00007ffdf904a7b8 [ 184.051435][ T5670] [ 184.216792][ T4369] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 184.381484][ T4369] usb 4-1: device descriptor read/64, error -71 [ 184.678362][ T4369] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 184.708064][ T7] usb 2-1: USB disconnect, device number 7 [ 184.774540][ T5668] loop0: detected capacity change from 0 to 40427 [ 184.808603][ T5668] F2FS-fs (loop0): invalid crc value [ 184.831034][ T5668] F2FS-fs (loop0): Found nat_bits in checkpoint [ 184.876310][ T4369] usb 4-1: device descriptor read/64, error -71 [ 184.960789][ T5668] F2FS-fs (loop0): Start checkpoint disabled! [ 185.003800][ T5668] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 185.016086][ T4369] usb usb4-port1: attempt power cycle [ 185.426487][ T4369] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 185.474360][ T5687] kvm: pic: single mode not supported [ 185.474671][ T5687] kvm: pic: level sensitive irq not supported [ 185.492025][ T5687] kvm: pic: level sensitive irq not supported [ 185.500387][ T4369] usb 4-1: device descriptor read/8, error -71 [ 185.525669][ T4386] kworker/u4:6: attempt to access beyond end of device [ 185.525669][ T4386] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 185.527442][ T5687] kvm: pic: single mode not supported [ 185.646334][ T7] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 185.796138][ T4369] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 185.836836][ T4369] usb 4-1: device descriptor read/8, error -71 [ 185.867992][ T7] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 185.884776][ T7] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.913469][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 185.928124][ T7] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 185.948854][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.968969][ T7] usb 3-1: config 0 descriptor?? [ 185.971398][ T4369] usb usb4-port1: unable to enumerate USB device [ 186.381240][ T7] hid (null): global environment stack underflow [ 186.419627][ T7] hid_parser_main: 14 callbacks suppressed [ 186.419649][ T7] nintendo 0003:057E:2009.0006: unknown main item tag 0x7 [ 186.445960][ T5693] loop1: detected capacity change from 0 to 40427 [ 186.448196][ T7] nintendo 0003:057E:2009.0006: global environment stack underflow [ 186.485568][ T5693] F2FS-fs (loop1): invalid crc value [ 186.500271][ T5693] F2FS-fs (loop1): Found nat_bits in checkpoint [ 186.519464][ T7] nintendo 0003:057E:2009.0006: item 0 4 1 11 parsing failed [ 186.542976][ T7] nintendo 0003:057E:2009.0006: HID parse failed [ 186.556935][ T5693] F2FS-fs (loop1): Start checkpoint disabled! [ 186.596214][ T5693] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 186.646223][ T7] nintendo 0003:057E:2009.0006: probe - fail = -22 [ 186.658699][ T7] nintendo: probe of 0003:057E:2009.0006 failed with error -22 [ 186.679334][ T7] usb 3-1: USB disconnect, device number 7 [ 187.818090][ T5007] kworker/u4:15: attempt to access beyond end of device [ 187.818090][ T5007] loop1: rw=1, sector=77824, nr_sectors = 1376 limit=40427 [ 187.919858][ T5007] kworker/u4:15: attempt to access beyond end of device [ 187.919858][ T5007] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 188.886339][ T4374] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 189.223488][ T5717] rxe_eth0 speed is unknown, defaulting to 1000 [ 189.386107][ T4374] usb 3-1: Using ep0 maxpacket: 16 [ 189.393383][ T4374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.420472][ T4374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.496181][ T4374] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 189.576790][ T4374] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 189.627038][ T4374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.741342][ T4374] usb 3-1: config 0 descriptor?? [ 191.236805][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 191.242909][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 191.249199][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 191.255210][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 191.259428][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 191.272408][ T4374] usbhid 3-1:0.0: can't add hid device: -71 [ 191.282835][ T4374] usbhid: probe of 3-1:0.0 failed with error -71 [ 191.300640][ T4374] usb 3-1: USB disconnect, device number 8 [ 191.380011][ T5733] rxe_eth0 speed is unknown, defaulting to 1000 [ 191.399000][ T5734] loop4: detected capacity change from 0 to 34816 [ 191.486719][ T5734] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 191.550793][ T5734] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.796319][ T4374] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 192.056304][ T4374] usb 3-1: device descriptor read/64, error -71 [ 192.351258][ T4374] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 192.415500][ T5737] loop3: detected capacity change from 0 to 40427 [ 192.479842][ T5737] F2FS-fs (loop3): invalid crc value [ 192.514551][ T5731] rxe_eth0 speed is unknown, defaulting to 1000 [ 192.521223][ T4374] usb 3-1: device descriptor read/64, error -71 [ 192.538157][ T5737] F2FS-fs (loop3): Found nat_bits in checkpoint [ 192.646665][ T4374] usb usb3-port1: attempt power cycle [ 192.663579][ T5749] loop0: detected capacity change from 0 to 8192 [ 192.777389][ T5749] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.880433][ T5737] F2FS-fs (loop3): Start checkpoint disabled! [ 192.927413][ T5749] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.010469][ T5737] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 193.027324][ T5749] FAT-fs (loop0): Filesystem has been set read-only [ 193.066115][ T4374] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 193.117095][ T4374] usb 3-1: device descriptor read/8, error -71 [ 193.136998][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 193.246863][ T5749] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.362067][ T5749] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.371044][ T5749] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.373075][ T5737] rxe_eth0 speed is unknown, defaulting to 1000 [ 193.380454][ T5749] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.399927][ T5749] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.411467][ T5749] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.416069][ T4374] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 193.421963][ T5749] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.437497][ T5749] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.462955][ T5749] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 193.476784][ T4374] usb 3-1: device descriptor read/8, error -71 [ 193.482437][ T26] audit: type=1800 audit(1794733779.551:8): pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.371" name="file2" dev="loop0" ino=1048646 res=0 errno=0 [ 193.596268][ T4374] usb usb3-port1: unable to enumerate USB device [ 193.606445][ T4369] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 193.624740][ T5751] rxe_eth0 speed is unknown, defaulting to 1000 [ 193.775360][ T4478] kworker/u4:7: attempt to access beyond end of device [ 193.775360][ T4478] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 193.790172][ T4369] usb 2-1: Using ep0 maxpacket: 16 [ 193.797122][ T4369] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.808234][ T4369] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.818194][ T4369] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.831219][ T4369] usb 2-1: config 0 interface 0 has no altsetting 0 [ 193.838113][ T4369] usb 2-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 193.847568][ T4369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.865112][ T4369] usb 2-1: config 0 descriptor?? [ 194.149066][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.155475][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.502766][ T4369] input: HID 046d:c215 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:C215.0007/input/input13 [ 195.022074][ T4369] logitech 0003:046D:C215.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.1-1/input0 [ 195.096805][ T4369] usb 2-1: USB disconnect, device number 8 [ 195.594083][ T5762] fido_id[5762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 195.811511][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 196.961016][ T5781] loop0: detected capacity change from 0 to 33792 [ 197.088102][ T5781] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 197.115910][ T5766] loop1: detected capacity change from 0 to 40427 [ 197.209549][ T5766] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 197.273461][ T5766] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 197.294704][ T5777] rxe_eth0 speed is unknown, defaulting to 1000 [ 197.347030][ T5766] F2FS-fs (loop1): Found nat_bits in checkpoint [ 197.394619][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 197.475796][ T5798] loop3: detected capacity change from 0 to 33280 [ 197.534333][ T5798] EXT4-fs (loop3): invalid inodes per group: 65568 [ 197.534333][ T5798] [ 197.588308][ T5766] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 197.595389][ T5766] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 198.530942][ T5800] rxe_eth0 speed is unknown, defaulting to 1000 [ 199.028057][ T5812] loop2: detected capacity change from 0 to 16 [ 199.077080][ T5812] erofs: (device loop2): mounted with root inode @ nid 36. [ 200.298164][ T5820] KVM: debugfs: duplicate directory 5820-6 [ 200.574318][ T5818] loop0: detected capacity change from 0 to 49152 [ 200.608011][ T5818] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 200.731508][ T5818] EXT4-fs (loop0): mounted filesystem with writeback data mode. Quota mode: none. [ 201.258626][ T5830] loop1: detected capacity change from 0 to 8192 [ 201.298802][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 201.310653][ T5830] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 201.379945][ T5830] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 201.410528][ T5830] FAT-fs (loop1): Filesystem has been set read-only [ 201.437705][ T5830] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 201.467436][ T5836] loop2: detected capacity change from 0 to 256 [ 201.474889][ T5837] loop3: detected capacity change from 0 to 32896 [ 201.476110][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 201.539345][ T5830] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 201.552919][ T5837] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 201.570673][ T5830] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 201.637902][ T5837] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.652755][ T5830] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 201.662349][ T5830] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 201.671489][ T5830] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 201.681070][ T5830] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 201.690888][ T5830] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 201.700116][ T5830] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 201.726141][ T26] audit: type=1800 audit(1794733787.801:9): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.390" name="file2" dev="loop1" ino=1048647 res=0 errno=0 [ 201.838876][ T5830] rxe_eth0 speed is unknown, defaulting to 1000 [ 201.866187][ T14] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 202.056144][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 202.062996][ T14] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 202.094152][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.116620][ T5837] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 202.124898][ T14] usb 3-1: config 0 has no interfaces? [ 202.150047][ T14] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 202.169729][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.178646][ T5842] fscrypt: loop3: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 14 [ 202.186444][ T14] usb 3-1: Product: syz [ 202.206064][ T14] usb 3-1: Manufacturer: syz [ 202.210844][ T14] usb 3-1: SerialNumber: syz [ 202.222466][ T14] usb 3-1: config 0 descriptor?? [ 202.239499][ T4369] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 202.410804][ T26] audit: type=1326 audit(1794733788.481:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5849 comm="syz.1.397" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1a87a94d9 code=0x0 [ 202.467388][ T4369] usb 1-1: not running at top speed; connect to a high speed hub [ 202.480811][ T5852] loop1: detected capacity change from 0 to 33280 [ 202.488524][ T4369] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.500380][ T4369] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 202.509839][ T4369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.522559][ T5852] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.397: iget: bad i_size value: 38620345925642 [ 202.541068][ T4369] usb 1-1: Found UVC 1.00 device (046d:0825) [ 202.548546][ T5852] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.397: couldn't read orphan inode 15 (err -117) [ 202.560646][ T4369] usb 1-1: No streaming interface found for terminal 2. [ 202.572813][ T5852] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 202.614724][ T5852] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.397: bg 0: block 5: invalid block bitmap [ 202.671687][ T5852] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 202.688630][ T5852] EXT4-fs (loop1): This should not happen!! Data will be lost [ 202.688630][ T5852] [ 202.706957][ T5852] EXT4-fs (loop1): Total free blocks count 0 [ 202.713629][ T5852] EXT4-fs (loop1): Free/Dirty block details [ 202.724290][ T5852] EXT4-fs (loop1): free_blocks=0 [ 202.735551][ T7] usb 3-1: USB disconnect, device number 13 [ 202.742871][ T4369] usb 1-1: USB disconnect, device number 7 [ 202.755407][ T5852] EXT4-fs (loop1): dirty_blocks=16 [ 202.785644][ T5852] EXT4-fs (loop1): Block reservation details [ 202.813358][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 202.821050][ T5852] EXT4-fs (loop1): i_reserved_data_blocks=16 [ 203.018424][ T5859] loop3: detected capacity change from 0 to 33280 [ 203.051236][ T5859] EXT4-fs: Ignoring removed i_version option [ 203.057819][ T5859] ext3: Unknown parameter 'noacl' [ 203.433157][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 203.749068][ T5861] loop3: detected capacity change from 0 to 40427 [ 203.764645][ T5861] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 203.809790][ T5861] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 204.482932][ T5861] F2FS-fs (loop3): Found nat_bits in checkpoint [ 204.772426][ T5861] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 204.830395][ T5861] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 206.453132][ T5890] loop1: detected capacity change from 0 to 49152 [ 206.657000][ T5890] EXT4-fs (loop1): mounted filesystem with ordered data mode. Quota mode: none. [ 207.962401][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 209.564069][ T5931] loop1: detected capacity change from 0 to 256 [ 209.656983][ T5931] exfat: Deprecated parameter 'utf8' [ 209.712521][ T5931] exfat: Deprecated parameter 'utf8' [ 209.794403][ T5931] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 210.277243][ T5940] ip_tables: iptables: counters copy to user failed while replacing table [ 210.476319][ T5942] loop2: detected capacity change from 0 to 16 [ 210.550769][ T5942] erofs: (device loop2): mounted with root inode @ nid 36. [ 210.895674][ T4284] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 1099511627865 [ 210.933530][ T4284] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 211.068188][ T5950] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 211.302347][ T5962] loop4: detected capacity change from 0 to 33280 [ 211.304587][ T5935] loop3: detected capacity change from 0 to 40427 [ 211.349430][ T5935] F2FS-fs (loop3): invalid crc value [ 211.380959][ T5935] F2FS-fs (loop3): Found nat_bits in checkpoint [ 211.413084][ T5962] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 211.425496][ T5962] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.435: inode #15: comm syz.4.435: iget: illegal inode # [ 211.501860][ T5935] F2FS-fs (loop3): Start checkpoint disabled! [ 211.519836][ T5962] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.435: couldn't read orphan inode 15 (err -117) [ 211.551747][ T5962] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 211.571861][ T5935] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 211.608591][ T5962] EXT4-fs (loop4): shut down requested (1) [ 211.686791][ T4874] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.760918][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 211.890992][ T4874] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.064239][ T4874] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.205144][ T4644] kworker/u4:11: attempt to access beyond end of device [ 212.205144][ T4644] loop3: rw=1, sector=77824, nr_sectors = 2064 limit=40427 [ 212.234594][ T4644] kworker/u4:11: attempt to access beyond end of device [ 212.234594][ T4644] loop3: rw=1, sector=79888, nr_sectors = 656 limit=40427 [ 212.258899][ T4874] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.283786][ T4644] kworker/u4:11: attempt to access beyond end of device [ 212.283786][ T4644] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 212.893223][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.903625][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.911748][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.944027][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.951819][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.959491][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.040119][ T5996] rxe_eth0 speed is unknown, defaulting to 1000 [ 214.326395][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 214.529700][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 214.546772][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.583399][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.634703][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.674546][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.746154][ T7] usb 5-1: Product: syz [ 214.750379][ T7] usb 5-1: Manufacturer: syz [ 214.754979][ T7] usb 5-1: SerialNumber: syz [ 214.838840][ T5996] chnl_net:caif_netlink_parms(): no params data found [ 215.030900][ T4288] Bluetooth: hci4: command 0x0409 tx timeout [ 215.063483][ T7] usb 5-1: 0:2 : does not exist [ 215.091030][ T7] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 215.167437][ T7] usb 5-1: USB disconnect, device number 8 [ 215.243907][ T6043] loop3: detected capacity change from 0 to 49152 [ 215.342815][ T6043] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 215.439580][ T5430] udevd[5430]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.480995][ T6043] EXT4-fs (loop3): mounted filesystem with writeback data mode. Quota mode: none. [ 215.698199][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.736136][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.745225][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 215.747373][ T5996] device bridge_slave_0 entered promiscuous mode [ 215.775279][ T6063] loop4: detected capacity change from 0 to 256 [ 215.811814][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.844231][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.904414][ T5996] device bridge_slave_1 entered promiscuous mode [ 216.013772][ T4874] device hsr_slave_0 left promiscuous mode [ 216.044185][ T4874] device hsr_slave_1 left promiscuous mode [ 216.061566][ T4874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.087009][ T4874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.107146][ T4874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.121817][ T4874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.143069][ T4874] device bridge_slave_1 left promiscuous mode [ 216.177066][ T4874] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.216651][ T4874] device bridge_slave_0 left promiscuous mode [ 216.223303][ T4874] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.258234][ T5218] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 216.279974][ T6071] loop4: detected capacity change from 0 to 33280 [ 216.296189][ T4874] device veth1_macvtap left promiscuous mode [ 216.314448][ T4874] device veth0_macvtap left promiscuous mode [ 216.335134][ T4874] device veth1_vlan left promiscuous mode [ 216.366822][ T6074] process 'syz.4.470' launched './file0' with NULL argv: empty string added [ 216.471375][ T5218] usb 4-1: config 0 interface 0 altsetting 21 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.500074][ T5218] usb 4-1: config 0 interface 0 has no altsetting 0 [ 216.521409][ T5218] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 216.540787][ T5218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.563419][ T5218] usb 4-1: config 0 descriptor?? [ 216.838956][ T6055] loop1: detected capacity change from 0 to 131072 [ 216.892234][ T6055] F2FS-fs (loop1): invalid crc value [ 216.924074][ T6055] F2FS-fs (loop1): Found nat_bits in checkpoint [ 216.991053][ T5218] logitech 0003:046D:C294.0008: hidraw0: USB HID v10.01 Device [HID 046d:c294] on usb-dummy_hcd.3-1/input0 [ 217.004495][ T5218] logitech 0003:046D:C294.0008: no inputs found [ 217.022292][ T6055] F2FS-fs (loop1): access invalid blkaddr:0 [ 217.032262][ T6055] CPU: 0 PID: 6055 Comm: syz.1.465 Not tainted syzkaller #0 [ 217.039605][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 217.049689][ T6055] Call Trace: [ 217.052990][ T6055] [ 217.055948][ T6055] dump_stack_lvl+0x188/0x24e [ 217.060663][ T6055] ? show_regs_print_info+0x12/0x12 [ 217.065894][ T6055] ? __up_read+0x2b4/0x6b0 [ 217.070343][ T6055] ? __lock_acquire+0x7ea0/0x7ea0 [ 217.075400][ T6055] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 217.080820][ T6055] sanity_check_extent_cache+0xf8/0x1f0 [ 217.086397][ T6055] f2fs_iget+0x360c/0x4b20 [ 217.090865][ T6055] f2fs_fill_super+0x450d/0x6bb0 [ 217.095877][ T6055] ? kill_f2fs_super+0x3d0/0x3d0 [ 217.100840][ T6055] ? up_write+0x1b6/0x410 [ 217.105199][ T6055] ? set_blocksize+0x1d0/0x470 [ 217.109986][ T6055] ? sb_set_blocksize+0xa5/0xe0 [ 217.114847][ T6055] mount_bdev+0x28a/0x3c0 [ 217.119168][ T6055] ? kill_f2fs_super+0x3d0/0x3d0 [ 217.124096][ T6055] legacy_get_tree+0xe6/0x180 [ 217.126289][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 217.128754][ T6055] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 217.140896][ T6055] vfs_get_tree+0x88/0x270 [ 217.145329][ T6055] do_new_mount+0x247/0xa50 [ 217.149827][ T6055] __se_sys_mount+0x2e3/0x3d0 [ 217.154493][ T6055] ? __x64_sys_mount+0xc0/0xc0 [ 217.159243][ T6055] ? lockdep_hardirqs_on+0x94/0x140 [ 217.164438][ T6055] ? __x64_sys_mount+0x1c/0xc0 [ 217.169220][ T6055] do_syscall_64+0x4c/0xa0 [ 217.173670][ T6055] ? clear_bhb_loop+0x60/0xb0 [ 217.178368][ T6055] ? clear_bhb_loop+0x60/0xb0 [ 217.183072][ T6055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.188990][ T6055] RIP: 0033:0x7fb1a87aa77a [ 217.193424][ T6055] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.213047][ T6055] RSP: 002b:00007fb1a69f5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 217.221494][ T6055] RAX: ffffffffffffffda RBX: 00007fb1a69f5ee0 RCX: 00007fb1a87aa77a [ 217.229575][ T6055] RDX: 0000200000000140 RSI: 0000200000000180 RDI: 00007fb1a69f5ea0 [ 217.237572][ T6055] RBP: 0000200000000140 R08: 00007fb1a69f5ee0 R09: 0000000000000010 [ 217.245562][ T6055] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000000180 [ 217.253552][ T6055] R13: 00007fb1a69f5ea0 R14: 00000000000105d6 R15: 00002000000001c0 [ 217.261564][ T6055] [ 217.276514][ T26] audit: type=1800 audit(1794733803.341:11): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.470" name="/" dev="fuse" ino=4 res=0 errno=0 [ 217.306752][ T7] usb 4-1: USB disconnect, device number 10 [ 217.361457][ T6055] F2FS-fs (loop1): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix [ 217.402341][ T6055] F2FS-fs (loop1): Failed to read root inode [ 217.544950][ T6088] FAULT_INJECTION: forcing a failure. [ 217.544950][ T6088] name fail_futex, interval 1, probability 0, space 0, times 1 [ 217.586160][ T6088] CPU: 0 PID: 6088 Comm: syz.0.474 Not tainted syzkaller #0 [ 217.593507][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 217.603584][ T6088] Call Trace: [ 217.606887][ T6088] [ 217.609838][ T6088] dump_stack_lvl+0x188/0x24e [ 217.614550][ T6088] ? show_regs_print_info+0x12/0x12 [ 217.619792][ T6088] ? load_image+0x410/0x410 [ 217.624329][ T6088] ? __cgroup_rstat_updated+0xce/0x350 [ 217.629817][ T6088] ? rcu_read_lock_sched_held+0x86/0x110 [ 217.635479][ T6088] should_fail_ex+0x390/0x4c0 [ 217.640188][ T6088] get_futex_key+0x1a6/0xe70 [ 217.644805][ T6088] ? futex_setup_timer+0xc0/0xc0 [ 217.649761][ T6088] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 217.655770][ T6088] ? __lock_acquire+0x7ea0/0x7ea0 [ 217.660830][ T6088] ? lock_chain_count+0x20/0x20 [ 217.665713][ T6088] futex_wait_setup+0xb8/0x270 [ 217.670502][ T6088] ? futex_wait_multiple+0x970/0x970 [ 217.675805][ T6088] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 217.681716][ T6088] ? _raw_spin_unlock+0x40/0x40 [ 217.686591][ T6088] futex_wait+0x1cb/0x640 [ 217.690955][ T6088] ? futex_wait_setup+0x270/0x270 [ 217.696016][ T6088] ? file_end_write+0x156/0x250 [ 217.700877][ T6088] ? vfs_write+0x777/0x9a0 [ 217.705312][ T6088] do_futex+0x310/0x320 [ 217.709471][ T6088] ? __ia32_sys_get_robust_list+0x100/0x100 [ 217.715368][ T6088] __se_sys_futex+0x381/0x410 [ 217.720042][ T6088] ? __x64_sys_futex+0xf0/0xf0 [ 217.724799][ T6088] ? __x64_sys_futex+0x1d/0xf0 [ 217.729557][ T6088] do_syscall_64+0x4c/0xa0 [ 217.733975][ T6088] ? clear_bhb_loop+0x60/0xb0 [ 217.738651][ T6088] ? clear_bhb_loop+0x60/0xb0 [ 217.743324][ T6088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.749215][ T6088] RIP: 0033:0x7fbf789a94d9 [ 217.753628][ T6088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.773237][ T6088] RSP: 002b:00007fbf798b90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 217.781741][ T6088] RAX: ffffffffffffffda RBX: 00007fbf78c25fa8 RCX: 00007fbf789a94d9 [ 217.789706][ T6088] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbf78c25fa8 [ 217.797672][ T6088] RBP: 00007fbf78c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 217.805654][ T6088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.813621][ T6088] R13: 00007fbf78c26038 R14: 00007ffe9e912ef0 R15: 00007ffe9e912fd8 [ 217.821607][ T6088] [ 217.984294][ T6094] loop0: detected capacity change from 0 to 256 [ 218.016964][ T6094] exfat: Bad value for 'uid' [ 218.134017][ T6094] loop0: detected capacity change from 0 to 36864 [ 218.192266][ T6096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.477'. [ 218.207900][ T4874] team0 (unregistering): Port device team_slave_1 removed [ 218.373319][ T4874] team0 (unregistering): Port device team_slave_0 removed [ 218.512780][ T4874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.703890][ T6104] loop3: detected capacity change from 0 to 33280 [ 218.750259][ T4874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.763110][ T6104] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 218.852793][ T6104] EXT4-fs (loop3): 1 truncate cleaned up [ 218.881217][ T6104] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 218.942605][ T6092] loop4: detected capacity change from 0 to 40427 [ 219.197198][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 219.224457][ T6092] F2FS-fs (loop4): invalid crc value [ 219.464042][ T6092] F2FS-fs (loop4): Found nat_bits in checkpoint [ 219.701506][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 219.741437][ T6115] loop1: detected capacity change from 0 to 33280 [ 219.794035][ T6092] F2FS-fs (loop4): Start checkpoint disabled! [ 219.806811][ T6115] EXT4-fs (loop1): Test dummy encryption mode enabled [ 219.840860][ T6092] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 219.937332][ T6115] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.481: inode has both inline data and extents flags [ 219.953453][ T6115] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.481: couldn't read orphan inode 15 (err -117) [ 220.027102][ T6115] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 220.077521][ T6115] EXT4-fs error (device loop1): ext4_check_dx_root:2268: inode #2: comm syz.1.481: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 220.203930][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 220.209988][ T4374] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 220.426105][ T4374] usb 4-1: Using ep0 maxpacket: 16 [ 220.433092][ T4374] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.466189][ T4374] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.519289][ T4374] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.538036][ T4374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.569193][ T4374] usb 4-1: Product: syz [ 220.573452][ T4374] usb 4-1: Manufacturer: syz [ 220.587102][ T4874] bond0 (unregistering): Released all slaves [ 220.588639][ T4374] usb 4-1: SerialNumber: syz [ 220.679818][ T4643] kworker/u4:10: attempt to access beyond end of device [ 220.679818][ T4643] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 220.798614][ T5996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.837833][ T4374] usb 4-1: 0:2 : does not exist [ 220.849634][ T5996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.869334][ T4374] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 220.924189][ T4374] usb 4-1: USB disconnect, device number 11 [ 220.983669][ T5996] team0: Port device team_slave_0 added [ 221.037701][ T5996] team0: Port device team_slave_1 added [ 221.103490][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.130648][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.207517][ T5430] udevd[5430]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.213200][ T5996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.266074][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 221.298285][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.305288][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.426105][ T5996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.502898][ T6128] loop1: detected capacity change from 0 to 40427 [ 221.556591][ T6128] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 221.564461][ T6128] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 221.576964][ T5996] device hsr_slave_0 entered promiscuous mode [ 221.606435][ T5996] device hsr_slave_1 entered promiscuous mode [ 221.613643][ T5996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.634652][ T6128] F2FS-fs (loop1): Found nat_bits in checkpoint [ 221.656043][ T5996] Cannot create hsr debugfs directory [ 221.852681][ T6128] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 221.897241][ T6128] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 221.986178][ T5218] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 222.207742][ T5218] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.599164][ T5996] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 222.675680][ T5996] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 222.738610][ T5996] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 222.774734][ T5996] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 223.176216][ T5996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.267343][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.306405][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.359995][ T5996] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.396803][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.453378][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.472346][ T4644] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.479531][ T4644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.609821][ T5218] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 223.621874][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.623286][ T5218] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.638452][ T5218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.646529][ T5218] usb 5-1: Product: syz [ 223.650706][ T5218] usb 5-1: Manufacturer: syz [ 223.655315][ T5218] usb 5-1: SerialNumber: syz [ 223.697679][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.702116][ T6152] loop3: detected capacity change from 0 to 40427 [ 223.716689][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.760124][ T6152] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 223.778478][ T4644] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.785609][ T4644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.797269][ T6152] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 223.813687][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.849804][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.873334][ T6152] F2FS-fs (loop3): Found nat_bits in checkpoint [ 223.895675][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.932029][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.983011][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.012846][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.038006][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.051748][ T6152] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 224.072104][ T6152] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 224.083680][ T5996] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.114009][ T5996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.133360][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.143802][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.158430][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.173704][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.354443][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.978181][ T5218] cdc_ncm 5-1:1.0: bind() failure [ 225.993161][ T5218] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 226.000211][ T5218] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 226.007759][ T5218] usbtest: probe of 5-1:1.1 failed with error -71 [ 226.045839][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.080706][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.089023][ T5218] usb 5-1: USB disconnect, device number 9 [ 226.224718][ T5996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.518867][ T6200] loop4: detected capacity change from 0 to 33280 [ 226.541356][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 226.631574][ T6200] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 226.677084][ T6200] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.736096][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 226.742982][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.766093][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.787815][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.816195][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.846026][ T7] usb 2-1: Product: syz [ 226.860613][ T7] usb 2-1: Manufacturer: syz [ 226.865535][ T7] usb 2-1: SerialNumber: syz [ 227.060226][ T6195] loop0: detected capacity change from 0 to 40427 [ 227.115163][ T6195] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 227.126688][ T7] usb 2-1: 0:2 : does not exist [ 227.147836][ T7] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 227.157142][ T6195] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 227.195597][ T7] usb 2-1: USB disconnect, device number 9 [ 227.220662][ T4279] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 227.237358][ T6195] F2FS-fs (loop0): Found nat_bits in checkpoint [ 227.272067][ T4279] EXT4-fs (loop4): Remounting filesystem read-only [ 227.292632][ T4279] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 227.337559][ T4279] EXT4-fs (loop4): Remounting filesystem read-only [ 227.344562][ T4279] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 227.392307][ T6195] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 227.426064][ T6195] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 227.438386][ T4279] EXT4-fs (loop4): Remounting filesystem read-only [ 227.445324][ T4279] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 227.459213][ T5427] udevd[5427]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.488598][ T4279] EXT4-fs (loop4): Remounting filesystem read-only [ 227.508495][ T4279] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 227.658059][ T4279] EXT4-fs (loop4): Remounting filesystem read-only [ 227.679488][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.697818][ T4279] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 227.743549][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 227.989201][ T4279] EXT4-fs (loop4): Remounting filesystem read-only [ 228.164460][ T4279] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 228.226409][ T4279] EXT4-fs (loop4): Remounting filesystem read-only [ 228.234094][ T4279] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 228.303495][ T4279] EXT4-fs (loop4): Remounting filesystem read-only [ 228.988058][ T5996] device veth0_vlan entered promiscuous mode [ 229.000545][ T5996] device veth1_vlan entered promiscuous mode [ 229.753225][ T4279] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 229.813428][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 229.850277][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.866153][ T4279] EXT4-fs (loop4): Remounting filesystem read-only [ 229.870453][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.875889][ T4279] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 229.927211][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 230.130742][ T5996] device veth0_macvtap entered promiscuous mode [ 230.168177][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 230.197190][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 231.559291][ T6246] loop1: detected capacity change from 0 to 256 [ 231.588378][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.642868][ T6246] exfat: Bad value for 'uid' [ 231.647826][ T4279] EXT4-fs: 83 callbacks suppressed [ 231.647840][ T4279] EXT4-fs (loop4): Remounting filesystem read-only [ 231.665460][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.726652][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.768504][ T4279] EXT4-fs (loop4): Remounting filesystem read-only [ 231.842637][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.860807][ T4279] EXT4-fs (loop4): Remounting filesystem read-only [ 231.924398][ T4279] EXT4-fs (loop4): Remounting filesystem read-only [ 231.942158][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.961767][ T6246] loop1: detected capacity change from 0 to 36864 [ 232.001611][ T4279] EXT4-fs (loop4): Remounting filesystem read-only [ 232.031231][ T4279] EXT4-fs (loop4): Remounting filesystem read-only [ 232.082864][ T4279] EXT4-fs (loop4): Remounting filesystem read-only [ 232.479280][ T4279] EXT4-fs (loop4): Remounting filesystem read-only [ 232.487536][ T4279] EXT4-fs error: 90 callbacks suppressed [ 232.487572][ T4279] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #12: comm syz-executor: invalid size [ 232.538895][ T5996] device veth1_macvtap entered promiscuous mode [ 232.688493][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.718972][ T4279] EXT4-fs (loop4): Remounting filesystem read-only [ 232.806181][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.887806][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.994945][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.080046][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.164808][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.263302][ T5996] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.371409][ T5996] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.458023][ T5996] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.541304][ T5996] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.738120][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.767956][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.806711][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 233.833638][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 233.943817][ T6263] rxe_eth0 speed is unknown, defaulting to 1000 [ 233.972411][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 234.150289][ T4643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.174404][ T4643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.203740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 234.219881][ T6261] loop3: detected capacity change from 0 to 40427 [ 234.286430][ T6261] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 234.306026][ T6261] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 234.326385][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.334244][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.361540][ T6261] F2FS-fs (loop3): invalid crc value [ 234.401953][ T6261] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 234.413765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 234.526130][ T6258] loop0: detected capacity change from 0 to 40427 [ 234.553686][ T6258] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 234.600816][ T6258] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 234.694250][ T6261] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 234.706164][ T6261] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 234.728316][ T6258] F2FS-fs (loop0): Found nat_bits in checkpoint [ 235.016825][ T6258] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 235.036651][ T6258] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 236.229811][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.239878][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.249898][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.257782][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.265527][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 236.273211][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.433577][ T6291] rxe_eth0 speed is unknown, defaulting to 1000 [ 236.966043][ T4374] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 237.172180][ T4374] usb 6-1: Using ep0 maxpacket: 16 [ 237.196412][ T4374] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.246236][ T4374] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.283556][ T4374] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.326086][ T4374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.334205][ T4374] usb 6-1: Product: syz [ 237.353093][ T4374] usb 6-1: Manufacturer: syz [ 237.366849][ T4374] usb 6-1: SerialNumber: syz [ 237.618902][ T4374] usb 6-1: 0:2 : does not exist [ 237.629056][ T4374] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 237.671945][ T4374] usb 6-1: USB disconnect, device number 2 [ 237.723786][ T5430] udevd[5430]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.813579][ T6314] loop3: detected capacity change from 0 to 16 [ 237.855295][ T6314] erofs: (device loop3): mounted with root inode @ nid 36. [ 238.308127][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 238.464036][ T5427] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 238.617787][ T6304] loop1: detected capacity change from 0 to 40427 [ 238.672557][ T6304] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 238.702070][ T6319] loop5: detected capacity change from 0 to 33280 [ 238.702372][ T6291] chnl_net:caif_netlink_parms(): no params data found [ 238.746298][ T6304] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 238.792772][ T6319] EXT4-fs (loop5): Test dummy encryption mode enabled [ 238.842944][ T6304] F2FS-fs (loop1): Found nat_bits in checkpoint [ 238.923207][ T6319] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.521: inode has both inline data and extents flags [ 238.987772][ T6319] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.521: couldn't read orphan inode 15 (err -117) [ 239.001210][ T6319] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 239.061933][ T6304] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 239.071195][ T6304] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 240.386054][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 240.414372][ T6291] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.509536][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.546760][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 240.617944][ T6291] device bridge_slave_0 entered promiscuous mode [ 240.863222][ T6291] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.977720][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.049878][ T6291] device bridge_slave_1 entered promiscuous mode [ 241.130090][ T4386] device hsr_slave_0 left promiscuous mode [ 241.176151][ T4386] device hsr_slave_1 left promiscuous mode [ 241.209662][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.219650][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.232945][ T4386] device bridge_slave_1 left promiscuous mode [ 241.243538][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.279455][ T4386] device bridge_slave_0 left promiscuous mode [ 241.306321][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.829457][ T6370] netlink: 48 bytes leftover after parsing attributes in process `syz.0.530'. [ 241.862611][ T6373] loop5: detected capacity change from 0 to 256 [ 241.939103][ T6373] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 242.206899][ T6381] loop0: detected capacity change from 0 to 16 [ 242.217551][ T6381] erofs: (device loop0): mounted with root inode @ nid 36. [ 242.477324][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 244.064373][ T4386] team0 (unregistering): Port device team_slave_1 removed [ 244.114727][ T4386] team0 (unregistering): Port device team_slave_0 removed [ 244.175947][ T6398] loop5: detected capacity change from 0 to 33792 [ 244.225487][ T6398] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 244.247465][ T4386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.309542][ T6398] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842c018, mo2=0003] [ 244.355384][ T6398] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 244.364972][ T4386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.533600][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 244.556093][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 245.014280][ T6400] loop0: detected capacity change from 0 to 40427 [ 245.051408][ T6400] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 245.078684][ T6400] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 245.140662][ T6400] F2FS-fs (loop0): Found nat_bits in checkpoint [ 245.271341][ T6400] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 245.290276][ T6400] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 245.492144][ T4386] bond0 (unregistering): Released all slaves [ 246.517521][ T6291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.565134][ T6291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.694701][ T6291] team0: Port device team_slave_0 added [ 246.725201][ T6291] team0: Port device team_slave_1 added [ 246.801534][ T6291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.816054][ T6291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.888837][ T6291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.992601][ T34] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 247.375860][ T6427] loop3: detected capacity change from 0 to 16 [ 247.387097][ T6427] erofs: (device loop3): mounted with root inode @ nid 36. [ 247.430220][ T34] usb 6-1: not running at top speed; connect to a high speed hub [ 247.663439][ T6291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.755065][ T34] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.790560][ T6291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.817884][ T34] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 247.830048][ T5430] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 247.841084][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.861289][ T6291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.033510][ T34] usb 6-1: Found UVC 1.00 device (046d:0825) [ 248.096078][ T34] usb 6-1: No streaming interface found for terminal 2. [ 248.225720][ T34] usb 6-1: USB disconnect, device number 3 [ 248.290656][ T6291] device hsr_slave_0 entered promiscuous mode [ 248.326793][ T6291] device hsr_slave_1 entered promiscuous mode [ 248.463176][ T6432] netlink: 'syz.3.546': attribute type 1 has an invalid length. [ 248.964918][ T6291] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 249.048589][ T6291] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 249.080175][ T6291] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 249.081915][ T6429] loop1: detected capacity change from 0 to 40427 [ 249.117580][ T6291] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 249.135656][ T6429] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 249.169738][ T6429] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 249.255306][ T6429] F2FS-fs (loop1): Found nat_bits in checkpoint [ 249.416552][ T6291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.556345][ T6291] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.564538][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.584577][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.942378][ T6429] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 249.975706][ T6429] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 251.824788][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.047659][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.116696][ T4662] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.123872][ T4662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.200638][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.807620][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.812986][ T6479] loop0: detected capacity change from 0 to 40427 [ 252.831910][ T6479] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 252.840309][ T6479] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 252.857041][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.884614][ T4478] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.891840][ T4478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.981488][ T6479] F2FS-fs (loop0): Found nat_bits in checkpoint [ 253.203619][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.247923][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.269061][ T6479] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 253.288435][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.310358][ T6479] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 253.322232][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.336225][ T957] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 253.347287][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.382244][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.424641][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.536043][ T957] usb 4-1: Using ep0 maxpacket: 16 [ 253.543820][ T957] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.574409][ T957] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.597970][ T957] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.651884][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.496903][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.526607][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.570482][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.618681][ T6291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.810180][ T957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.824763][ T957] usb 4-1: Product: syz [ 254.829363][ T957] usb 4-1: Manufacturer: syz [ 254.833988][ T957] usb 4-1: SerialNumber: syz [ 255.448894][ T957] usb 4-1: can't set config #1, error -71 [ 255.456236][ T957] usb 4-1: USB disconnect, device number 12 [ 255.536197][ T4369] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 255.596164][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.602554][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.767388][ T4369] usb 6-1: not running at top speed; connect to a high speed hub [ 255.787042][ T4369] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.827695][ T4369] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 255.858776][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.866943][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.880452][ T4369] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.904163][ T6291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.941480][ T4369] usb 6-1: Found UVC 1.00 device (046d:0825) [ 255.986299][ T4369] usb 6-1: No streaming interface found for terminal 2. [ 256.137413][ T4369] usb 6-1: USB disconnect, device number 4 [ 256.666136][ T957] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 256.815305][ T6555] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 256.825149][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 256.843277][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 256.856156][ T957] usb 1-1: Using ep0 maxpacket: 16 [ 256.865201][ T957] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.906078][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 256.916140][ T957] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.946971][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 256.962662][ T957] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 256.986295][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 256.994256][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.006101][ T957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.034459][ T957] usb 1-1: Product: syz [ 257.038949][ T957] usb 1-1: Manufacturer: syz [ 257.043568][ T957] usb 1-1: SerialNumber: syz [ 257.048825][ T6558] netlink: 'syz.5.567': attribute type 30 has an invalid length. [ 257.107506][ T6291] device veth0_vlan entered promiscuous mode [ 257.157033][ T6291] device veth1_vlan entered promiscuous mode [ 257.233243][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 257.253467][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 257.273331][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.293409][ T957] usb 1-1: 0:2 : does not exist [ 257.304598][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.308985][ T957] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 257.351551][ T6291] device veth0_macvtap entered promiscuous mode [ 257.370076][ T6291] device veth1_macvtap entered promiscuous mode [ 257.386880][ T957] usb 1-1: USB disconnect, device number 8 [ 257.442761][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.451024][ T5430] udevd[5430]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.497758][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.524207][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.558794][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.570534][ T6291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.602410][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 257.632193][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 257.641062][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 257.675135][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 257.702876][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.726041][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.756504][ T6291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.767260][ T6291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.796259][ T6291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.824568][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 257.841994][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 257.932480][ T6291] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.956046][ T6291] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.985352][ T6291] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.015788][ T6291] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.240240][ T4478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.259911][ T4478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.298161][ T6573] device-mapper: table: 248:6: snapshot-merge: Snapshot exception store does not support snapshot-merge. (-EINVAL) [ 258.315614][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 258.358352][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.375211][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.392047][ T6573] device-mapper: ioctl: error adding target to table [ 258.408809][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 258.535208][ T6526] loop1: detected capacity change from 0 to 131072 [ 258.604786][ T6526] F2FS-fs (loop1): invalid crc value [ 258.672786][ T6526] F2FS-fs (loop1): Found nat_bits in checkpoint [ 258.699989][ T6586] loop6: detected capacity change from 0 to 33280 [ 258.768470][ T6586] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 258.822154][ T6568] loop0: detected capacity change from 0 to 40427 [ 258.838066][ T6586] EXT4-fs (loop6): 1 truncate cleaned up [ 258.855375][ T6586] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 258.875252][ T6568] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 258.925349][ T6568] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 259.213141][ T6568] F2FS-fs (loop0): Found nat_bits in checkpoint [ 259.739630][ T6291] EXT4-fs (loop6): unmounting filesystem. [ 259.935479][ T6568] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 259.969593][ T6568] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 260.102038][ T6571] loop3: detected capacity change from 0 to 40427 [ 260.134441][ T6571] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 260.170866][ T6571] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 260.202274][ T6571] F2FS-fs (loop3): invalid crc value [ 260.291924][ T6571] F2FS-fs (loop3): Found nat_bits in checkpoint [ 260.945800][ T6571] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 260.973157][ T6571] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 262.041651][ T6620] loop5: detected capacity change from 0 to 33280 [ 262.131898][ T6620] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 262.142564][ T5218] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 262.191663][ T6620] EXT4-fs (loop5): 1 truncate cleaned up [ 262.201406][ T6622] loop1: detected capacity change from 0 to 36864 [ 262.228991][ T6622] ext4: Unknown parameter 'noacl' [ 262.267180][ T5433] I/O error, dev loop1, sector 36736 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 262.281022][ T6620] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 262.306344][ T5218] usb 7-1: device descriptor read/64, error -71 [ 262.576188][ T5218] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 262.692474][ T6634] loop3: detected capacity change from 0 to 256 [ 262.715339][ T6634] exfat: Deprecated parameter 'utf8' [ 262.750168][ T5218] usb 7-1: device descriptor read/64, error -71 [ 262.796108][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 262.814865][ T6634] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xacdd6c1d, utbl_chksum : 0xe619d30d) [ 262.859311][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 262.884981][ T5218] usb usb7-port1: attempt power cycle [ 262.986114][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 262.993135][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.018700][ T6641] loop0: detected capacity change from 0 to 256 [ 263.024135][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.052144][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.065552][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.094932][ T6641] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 263.123716][ T7] usb 2-1: Product: syz [ 263.133834][ T7] usb 2-1: Manufacturer: syz [ 263.141959][ T7] usb 2-1: SerialNumber: syz [ 263.309968][ T5218] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 263.358586][ T5218] usb 7-1: device descriptor read/8, error -71 [ 263.376223][ T7] usb 2-1: 0:2 : does not exist [ 263.402856][ T7] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 263.464261][ T7] usb 2-1: USB disconnect, device number 10 [ 263.738464][ T5430] udevd[5430]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.128166][ T6672] loop1: detected capacity change from 0 to 16 [ 264.135714][ T6672] erofs: (device loop1): mounted with root inode @ nid 36. [ 264.166068][ T4374] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 264.180149][ T5430] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 264.260748][ T6656] loop6: detected capacity change from 0 to 40427 [ 264.290482][ T6656] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 264.323889][ T6651] loop0: detected capacity change from 0 to 40427 [ 264.332548][ T6656] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 264.353606][ T6651] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 264.378956][ T4374] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.380573][ T6651] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 264.414247][ T4374] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.440157][ T6656] F2FS-fs (loop6): Found nat_bits in checkpoint [ 264.465085][ T6651] F2FS-fs (loop0): Found nat_bits in checkpoint [ 264.501162][ T4374] usb 4-1: config 0 interface 0 has no altsetting 0 [ 264.530839][ T4374] usb 4-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 264.580839][ T4374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.592025][ T6651] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 264.610524][ T6651] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 264.624283][ T6656] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 264.633665][ T6656] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 264.666027][ T4374] usb 4-1: config 0 descriptor?? [ 265.704576][ T4374] hid (null): global environment stack underflow [ 265.734800][ T4374] wacom 0003:056A:003F.0009: global environment stack underflow [ 265.790166][ T6693] loop1: detected capacity change from 0 to 33280 [ 265.826127][ T4374] wacom 0003:056A:003F.0009: item 0 2 1 11 parsing failed [ 265.894908][ T4374] wacom 0003:056A:003F.0009: parse failed [ 265.951792][ T4374] wacom: probe of 0003:056A:003F.0009 failed with error -22 [ 266.020645][ T4374] usb 4-1: USB disconnect, device number 13 [ 266.052196][ T5441] I/O error, dev loop1, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 267.438871][ T6699] loop1: detected capacity change from 0 to 33792 [ 267.471353][ T6699] EXT4-fs: Ignoring removed bh option [ 267.524776][ T6702] loop3: detected capacity change from 0 to 33280 [ 267.567001][ T6699] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 267.568058][ T6702] EXT4-fs: quotafile must be on filesystem root [ 267.594499][ T6699] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.732546][ T6699] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 3: comm syz.1.593: lblock 3 mapped to illegal pblock 3 (length 3) [ 267.826166][ T6699] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 267.906265][ T6699] EXT4-fs (loop1): This should not happen!! Data will be lost [ 267.906265][ T6699] [ 267.966137][ T6707] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.593: lblock 3 mapped to illegal pblock 3 (length 1) [ 268.053761][ T6707] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.593: lblock 3 mapped to illegal pblock 3 (length 1) [ 268.185751][ T6698] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.593: lblock 3 mapped to illegal pblock 3 (length 1) [ 268.266746][ T6698] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.593: lblock 3 mapped to illegal pblock 3 (length 1) [ 268.342626][ T6707] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.593: lblock 3 mapped to illegal pblock 3 (length 1) [ 268.376117][ T34] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 268.398735][ T6699] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.593: lblock 3 mapped to illegal pblock 3 (length 1) [ 268.483959][ T6707] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.593: lblock 3 mapped to illegal pblock 3 (length 1) [ 268.506853][ T6729] netlink: 1536 bytes leftover after parsing attributes in process `syz.6.598'. [ 268.536189][ T6707] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.593: lblock 3 mapped to illegal pblock 3 (length 1) [ 268.556229][ T34] usb 4-1: device descriptor read/64, error -71 [ 268.576420][ T6699] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: block 3: comm syz.1.593: lblock 3 mapped to illegal pblock 3 (length 1) [ 268.596234][ T5218] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 268.697780][ T6736] loop6: detected capacity change from 0 to 256 [ 268.719124][ T6737] loop0: detected capacity change from 0 to 16 [ 268.723531][ T6736] exfat: Deprecated parameter 'utf8' [ 268.732661][ T6737] erofs: (device loop0): mounted with root inode @ nid 36. [ 268.736259][ T6736] exfat: Deprecated parameter 'utf8' [ 268.748697][ T77] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 268.790973][ T5218] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.819784][ T77] EXT4-fs (loop1): This should not happen!! Data will be lost [ 268.819784][ T77] [ 268.836234][ T34] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 268.849614][ T5218] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 268.865515][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 268.878756][ T6736] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 268.897285][ T5218] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.917227][ T5218] usb 6-1: Product: syz [ 268.934310][ T5218] usb 6-1: Manufacturer: syz [ 268.948741][ T5218] usb 6-1: SerialNumber: syz [ 269.006967][ T5218] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 269.013131][ T5218] cdc_wdm 6-1:1.0: Unknown control protocol [ 269.148036][ T34] usb 4-1: device descriptor read/64, error -71 [ 269.266404][ T34] usb usb4-port1: attempt power cycle [ 269.443118][ T4374] usb 6-1: USB disconnect, device number 5 [ 269.906294][ T34] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 270.325974][ T34] usb 4-1: device descriptor read/8, error -71 [ 270.606142][ T34] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 270.666876][ T34] usb 4-1: device descriptor read/8, error -71 [ 270.806343][ T34] usb usb4-port1: unable to enumerate USB device [ 271.258122][ T6741] loop1: detected capacity change from 0 to 40427 [ 271.388223][ T6741] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 271.415611][ T6741] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 271.459833][ T6761] device-mapper: table: 248:7: snapshot-merge: Snapshot exception store does not support snapshot-merge. (-EINVAL) [ 271.516235][ T6741] F2FS-fs (loop1): Found nat_bits in checkpoint [ 271.572718][ T6761] device-mapper: ioctl: error adding target to table [ 271.691711][ T6741] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 271.709075][ T6741] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 272.117047][ T6755] loop5: detected capacity change from 0 to 40427 [ 272.140213][ T6755] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 272.157001][ T6755] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 272.233395][ T6755] F2FS-fs (loop5): Found nat_bits in checkpoint [ 272.412514][ T6755] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 272.436115][ T6755] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 273.452681][ T6775] loop6: detected capacity change from 0 to 40427 [ 273.541782][ T6775] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 273.601392][ T6775] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 273.742472][ T6775] F2FS-fs (loop6): Found nat_bits in checkpoint [ 274.051899][ T6775] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 274.100552][ T6775] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 275.782019][ T6813] loop3: detected capacity change from 0 to 33280 [ 275.879939][ T6816] loop0: detected capacity change from 0 to 16 [ 275.896437][ T6816] erofs: (device loop0): mounted with root inode @ nid 36. [ 275.955903][ T6813] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 276.058020][ T6813] EXT4-fs (loop3): 1 truncate cleaned up [ 276.067634][ T6813] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 276.089842][ T5427] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 276.514431][ T6826] loop5: detected capacity change from 0 to 33280 [ 276.616422][ T6826] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 276.652535][ T6826] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.718035][ T26] audit: type=1800 audit(1794733862.791:12): pid=6826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.614" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 276.768693][ T6826] EXT4-fs warning (device loop5): ext4_group_extend:1894: will only finish group (16384 blocks, 16256 new) [ 276.797613][ T6826] EXT4-fs warning (device loop5): ext4_group_extend:1899: can't read last block, resize aborted [ 276.959831][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 277.079189][ T4374] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 277.118383][ T6835] loop5: detected capacity change from 0 to 33792 [ 277.143560][ T6835] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 277.222617][ T6835] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 277.241642][ T6835] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.256196][ T4374] usb 1-1: device descriptor read/64, error -71 [ 277.480800][ T4375] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:5: bg 0: block 112: padding at end of block bitmap is not set [ 277.536199][ T4374] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 277.546195][ T4375] EXT4-fs (loop5): Remounting filesystem read-only [ 277.553751][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.6.613'. [ 277.565134][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 277.701931][ T4374] usb 1-1: device descriptor read/64, error -71 [ 277.832898][ T4374] usb usb1-port1: attempt power cycle [ 277.941987][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 278.073327][ T6854] loop5: detected capacity change from 0 to 33280 [ 278.095665][ T6854] ext3: Unknown parameter '.' [ 278.251088][ T5430] I/O error, dev loop5, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 278.266363][ T4374] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 281.140183][ T4374] usb 1-1: device descriptor read/8, error -71 [ 282.305844][ T6882] loop6: detected capacity change from 0 to 33280 [ 282.348239][ T6882] EXT4-fs: Ignoring removed bh option [ 282.392268][ T6882] EXT4-fs error (device loop6): ext4_iget_extra_inode:4766: inode #15: comm syz.6.627: corrupted in-inode xattr [ 282.426314][ T6882] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.627: couldn't read orphan inode 15 (err -117) [ 282.456921][ T6882] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 282.468257][ T6888] loop5: detected capacity change from 0 to 16 [ 282.477608][ T6888] erofs: (device loop5): mounted with root inode @ nid 36. [ 282.549537][ T6882] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.627: Unrecognised inode hash code 4 [ 282.563304][ T5427] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 282.626252][ T6882] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.627: Corrupt directory, running e2fsck is recommended [ 282.657816][ T6882] EXT4-fs error (device loop6): ext4_iget_extra_inode:4766: inode #12: comm syz.6.627: corrupted in-inode xattr [ 282.770367][ T6890] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.627: Unrecognised inode hash code 4 [ 282.802266][ T6890] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.627: Corrupt directory, running e2fsck is recommended [ 282.825691][ T6890] EXT4-fs error (device loop6): ext4_iget_extra_inode:4766: inode #12: comm syz.6.627: corrupted in-inode xattr [ 282.866367][ T6891] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.627: Unrecognised inode hash code 4 [ 282.898407][ T6891] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.627: Corrupt directory, running e2fsck is recommended [ 282.938549][ T6891] EXT4-fs error (device loop6): ext4_iget_extra_inode:4766: inode #12: comm syz.6.627: corrupted in-inode xattr [ 282.978915][ T6892] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.627: Unrecognised inode hash code 4 [ 283.034101][ T6892] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.627: Corrupt directory, running e2fsck is recommended [ 283.076503][ T6892] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.627: Unrecognised inode hash code 4 [ 283.112859][ T6892] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.627: Corrupt directory, running e2fsck is recommended [ 283.135471][ T6875] loop3: detected capacity change from 0 to 40427 [ 283.163672][ T6875] F2FS-fs (loop3): invalid crc value [ 283.183885][ T6882] EXT4-fs error (device loop6): ext4_iget_extra_inode:4766: inode #12: comm syz.6.627: corrupted in-inode xattr [ 283.272251][ T6875] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 283.390184][ T6907] loop5: detected capacity change from 0 to 16 [ 283.435891][ T6907] erofs: (device loop5): mounted with root inode @ nid 36. [ 283.491139][ T6875] F2FS-fs (loop3): access invalid blkaddr:0 [ 283.510136][ T6291] EXT4-fs (loop6): unmounting filesystem. [ 283.521339][ T6875] CPU: 0 PID: 6875 Comm: syz.3.624 Not tainted syzkaller #0 [ 283.528665][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 283.538738][ T6875] Call Trace: [ 283.542030][ T6875] [ 283.544973][ T6875] dump_stack_lvl+0x188/0x24e [ 283.549686][ T6875] ? show_regs_print_info+0x12/0x12 [ 283.554920][ T6875] ? __up_read+0x2b4/0x6b0 [ 283.559360][ T6875] ? __lock_acquire+0x7ea0/0x7ea0 [ 283.564412][ T6875] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 283.569820][ T6875] sanity_check_extent_cache+0xf8/0x1f0 [ 283.575383][ T6875] f2fs_iget+0x360c/0x4b20 [ 283.579836][ T6875] f2fs_fill_super+0x450d/0x6bb0 [ 283.584837][ T6875] ? kill_f2fs_super+0x3d0/0x3d0 [ 283.589798][ T6875] ? up_write+0x1b6/0x410 [ 283.594156][ T6875] ? set_blocksize+0x1d0/0x470 [ 283.598922][ T6875] ? sb_set_blocksize+0xa5/0xe0 [ 283.603807][ T6875] mount_bdev+0x28a/0x3c0 [ 283.608132][ T6875] ? kill_f2fs_super+0x3d0/0x3d0 [ 283.613073][ T6875] legacy_get_tree+0xe6/0x180 [ 283.617750][ T6875] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 283.623903][ T6875] vfs_get_tree+0x88/0x270 [ 283.628320][ T6875] do_new_mount+0x247/0xa50 [ 283.632827][ T6875] __se_sys_mount+0x2e3/0x3d0 [ 283.637532][ T6875] ? __x64_sys_mount+0xc0/0xc0 [ 283.642303][ T6875] ? lockdep_hardirqs_on+0x94/0x140 [ 283.647500][ T6875] ? __x64_sys_mount+0x1c/0xc0 [ 283.652266][ T6875] do_syscall_64+0x4c/0xa0 [ 283.656682][ T6875] ? clear_bhb_loop+0x60/0xb0 [ 283.661365][ T6875] ? clear_bhb_loop+0x60/0xb0 [ 283.666040][ T6875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.671931][ T6875] RIP: 0033:0x7f0dd1daa77a [ 283.676361][ T6875] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.695976][ T6875] RSP: 002b:00007f0dd2b89e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 283.704395][ T6875] RAX: ffffffffffffffda RBX: 00007f0dd2b89ee0 RCX: 00007f0dd1daa77a [ 283.712367][ T6875] RDX: 00002000000014c0 RSI: 0000200000001440 RDI: 00007f0dd2b89ea0 [ 283.720334][ T6875] RBP: 00002000000014c0 R08: 00007f0dd2b89ee0 R09: 0000000000204000 [ 283.728300][ T6875] R10: 0000000000204000 R11: 0000000000000246 R12: 0000200000001440 [ 283.736267][ T6875] R13: 00007f0dd2b89ea0 R14: 0000000000005544 R15: 0000200000001480 [ 283.744249][ T6875] [ 283.751267][ T6875] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 24244] is incorrect, run fsck to fix [ 284.020185][ T6875] F2FS-fs (loop3): Failed to read root inode [ 284.116792][ T6917] loop5: detected capacity change from 0 to 33280 [ 284.156051][ T957] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 284.255361][ T6917] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 284.295286][ T6917] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.347254][ T957] usb 7-1: Using ep0 maxpacket: 32 [ 284.354163][ T957] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 284.364639][ T6917] EXT4-fs error (device loop5): ext4_ext_remove_space:2945: inode #15: comm syz.5.631: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 284.393263][ T957] usb 7-1: config 0 has no interface number 0 [ 284.413553][ T957] usb 7-1: config 0 interface 184 has no altsetting 0 [ 284.431442][ T6917] EXT4-fs error (device loop5): ext4_evict_inode:292: comm syz.5.631: couldn't truncate inode 15 (err -117) [ 284.447116][ T957] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 284.470649][ T957] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.482099][ T957] usb 7-1: Product: syz [ 284.486056][ T4374] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 284.504021][ T957] usb 7-1: Manufacturer: syz [ 284.523206][ T957] usb 7-1: SerialNumber: syz [ 284.534852][ T957] usb 7-1: config 0 descriptor?? [ 284.555544][ T957] smsc75xx v1.0.0 [ 284.581801][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 284.646133][ T4374] usb 2-1: device descriptor read/64, error -71 [ 284.916369][ T4374] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 285.170180][ T957] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 285.202195][ T957] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 285.726009][ T4374] usb 2-1: device descriptor read/64, error -71 [ 285.834188][ T6938] usb usb5: usbfs: process 6938 (syz.3.635) did not claim interface 0 before use [ 285.846185][ T4374] usb usb2-port1: attempt power cycle [ 285.860707][ T6936] loop5: detected capacity change from 0 to 33280 [ 285.981669][ T6936] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 286.039507][ T6936] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.082248][ T6936] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 66 vs 96 free clusters [ 286.113394][ T6936] Quota error (device loop5): write_blk: dquota write failed [ 286.133020][ T6936] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 286.179345][ T6936] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 286.233463][ T6936] EXT4-fs error (device loop5): ext4_acquire_dquot:6848: comm syz.5.636: Failed to acquire dquot type 1 [ 286.266133][ T4374] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 286.312926][ T4374] usb 2-1: device descriptor read/8, error -71 [ 286.358996][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 286.479708][ T6948] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 286.528307][ T6952] loop5: detected capacity change from 0 to 16 [ 286.539081][ T6952] erofs: (device loop5): mounted with root inode @ nid 36. [ 286.616029][ T4374] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 286.656570][ T4374] usb 2-1: device descriptor read/8, error -71 [ 286.679437][ T6954] loop3: detected capacity change from 0 to 33280 [ 286.707325][ T957] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 286.724087][ T957] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 286.731396][ T6954] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 286.762733][ T957] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 286.776284][ T4374] usb usb2-port1: unable to enumerate USB device [ 286.791806][ T957] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 286.812372][ T6954] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 286.822288][ T6954] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.823678][ T957] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 286.877817][ T957] usb 7-1: USB disconnect, device number 6 [ 286.915740][ T6954] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.640: bg 0: block 298: padding at end of block bitmap is not set [ 286.972617][ T6954] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6195: Corrupt filesystem [ 287.062449][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 287.162631][ T6961] loop3: detected capacity change from 0 to 33280 [ 287.197034][ T6961] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 287.237652][ T6961] EXT4-fs (loop3): 1 truncate cleaned up [ 287.255081][ T6961] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 288.195549][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 289.341478][ T14] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 289.496232][ T14] usb 4-1: device descriptor read/64, error -71 [ 289.505720][ T7006] loop1: detected capacity change from 0 to 16 [ 289.546598][ T7006] erofs: (device loop1): mounted with root inode @ nid 36. [ 289.579595][ T7006] syz.1.651: attempt to access beyond end of device [ 289.579595][ T7006] loop1: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 289.665907][ T7006] syz.1.651: attempt to access beyond end of device [ 289.665907][ T7006] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 289.700269][ T26] audit: type=1800 audit(1794733875.771:13): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.651" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 289.786131][ T14] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 289.956066][ T14] usb 4-1: device descriptor read/64, error -71 [ 290.018922][ T957] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 290.086269][ T14] usb usb4-port1: attempt power cycle [ 290.196079][ T957] usb 7-1: device descriptor read/64, error -71 [ 290.290167][ T7030] loop0: detected capacity change from 0 to 16 [ 290.313078][ T7030] erofs: (device loop0): mounted with root inode @ nid 36. [ 290.476128][ T957] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 290.496210][ T14] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 290.537199][ T14] usb 4-1: device descriptor read/8, error -71 [ 290.636122][ T957] usb 7-1: device descriptor read/64, error -71 [ 290.766503][ T957] usb usb7-port1: attempt power cycle [ 290.836030][ T14] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 290.876865][ T14] usb 4-1: device descriptor read/8, error -71 [ 290.999416][ T14] usb usb4-port1: unable to enumerate USB device [ 291.134604][ T7045] loop0: detected capacity change from 0 to 33280 [ 291.176110][ T957] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 291.196081][ T7045] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 291.226786][ T957] usb 7-1: device descriptor read/8, error -71 [ 291.265291][ T7045] EXT4-fs (loop0): 1 truncate cleaned up [ 291.318134][ T7045] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 291.509280][ T957] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 292.014912][ T7043] loop1: detected capacity change from 0 to 40427 [ 292.053090][ T7043] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 292.124343][ T7043] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 292.150245][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 292.166756][ T957] usb 7-1: device descriptor read/8, error -71 [ 292.236425][ T7043] F2FS-fs (loop1): Found nat_bits in checkpoint [ 292.286258][ T957] usb usb7-port1: unable to enumerate USB device [ 292.435799][ T7066] loop0: detected capacity change from 0 to 256 [ 292.446321][ T7043] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 292.453390][ T7043] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 294.057150][ T7059] loop3: detected capacity change from 0 to 40427 [ 294.082533][ T7059] F2FS-fs (loop3): invalid crc value [ 294.239029][ T7059] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 294.528440][ T7059] F2FS-fs (loop3): access invalid blkaddr:0 [ 294.534403][ T7059] CPU: 0 PID: 7059 Comm: syz.3.658 Not tainted syzkaller #0 [ 294.541710][ T7059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 294.551771][ T7059] Call Trace: [ 294.555048][ T7059] [ 294.557973][ T7059] dump_stack_lvl+0x188/0x24e [ 294.562662][ T7059] ? show_regs_print_info+0x12/0x12 [ 294.567873][ T7059] ? __up_read+0x2b4/0x6b0 [ 294.572284][ T7059] ? __lock_acquire+0x7ea0/0x7ea0 [ 294.577310][ T7059] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 294.582692][ T7059] sanity_check_extent_cache+0xf8/0x1f0 [ 294.588242][ T7059] f2fs_iget+0x360c/0x4b20 [ 294.592679][ T7059] f2fs_fill_super+0x450d/0x6bb0 [ 294.597641][ T7059] ? kill_f2fs_super+0x3d0/0x3d0 [ 294.602579][ T7059] ? up_write+0x1b6/0x410 [ 294.606909][ T7059] ? set_blocksize+0x1d0/0x470 [ 294.611668][ T7059] ? sb_set_blocksize+0xa5/0xe0 [ 294.616514][ T7059] mount_bdev+0x28a/0x3c0 [ 294.620834][ T7059] ? kill_f2fs_super+0x3d0/0x3d0 [ 294.625774][ T7059] legacy_get_tree+0xe6/0x180 [ 294.630445][ T7059] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 294.636596][ T7059] vfs_get_tree+0x88/0x270 [ 294.641096][ T7059] do_new_mount+0x247/0xa50 [ 294.645600][ T7059] __se_sys_mount+0x2e3/0x3d0 [ 294.650275][ T7059] ? __x64_sys_mount+0xc0/0xc0 [ 294.655034][ T7059] ? lockdep_hardirqs_on+0x94/0x140 [ 294.660228][ T7059] ? __x64_sys_mount+0x1c/0xc0 [ 294.664988][ T7059] do_syscall_64+0x4c/0xa0 [ 294.669401][ T7059] ? clear_bhb_loop+0x60/0xb0 [ 294.674075][ T7059] ? clear_bhb_loop+0x60/0xb0 [ 294.678750][ T7059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.684640][ T7059] RIP: 0033:0x7f0dd1daa77a [ 294.689055][ T7059] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.708657][ T7059] RSP: 002b:00007f0dd2b89e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 294.717072][ T7059] RAX: ffffffffffffffda RBX: 00007f0dd2b89ee0 RCX: 00007f0dd1daa77a [ 294.725045][ T7059] RDX: 00002000000014c0 RSI: 0000200000001440 RDI: 00007f0dd2b89ea0 [ 294.733018][ T7059] RBP: 00002000000014c0 R08: 00007f0dd2b89ee0 R09: 0000000000204000 [ 294.740979][ T7059] R10: 0000000000204000 R11: 0000000000000246 R12: 0000200000001440 [ 294.748941][ T7059] R13: 00007f0dd2b89ea0 R14: 0000000000005544 R15: 0000200000001480 [ 294.756919][ T7059] [ 294.859922][ T7079] loop6: detected capacity change from 0 to 40427 [ 294.907495][ T7079] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 294.914018][ T7079] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 294.991094][ T7079] F2FS-fs (loop6): invalid crc value [ 295.085133][ T7079] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 295.092312][ T7059] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 24244] is incorrect, run fsck to fix [ 295.173552][ T7059] F2FS-fs (loop3): Failed to read root inode [ 295.306927][ T7079] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 295.316878][ T7079] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 295.386203][ T14] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 295.429746][ T6291] syz-executor: attempt to access beyond end of device [ 295.429746][ T6291] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 295.556353][ T14] usb 6-1: device descriptor read/64, error -71 [ 295.830586][ T14] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 295.907823][ T7122] loop3: detected capacity change from 0 to 16 [ 295.928736][ T7122] erofs: (device loop3): mounted with root inode @ nid 36. [ 296.006095][ T14] usb 6-1: device descriptor read/64, error -71 [ 296.012526][ T957] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 296.136530][ T14] usb usb6-port1: attempt power cycle [ 296.176498][ T957] usb 1-1: device descriptor read/64, error -71 [ 296.429756][ T7114] loop1: detected capacity change from 0 to 40427 [ 296.450470][ T7114] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 296.456708][ T957] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 296.466133][ T7114] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 296.493084][ T7114] F2FS-fs (loop1): Found nat_bits in checkpoint [ 296.546900][ T14] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 296.575612][ T7114] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 296.591704][ T7114] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 296.607235][ T14] usb 6-1: device descriptor read/8, error -71 [ 296.646030][ T957] usb 1-1: device descriptor read/64, error -71 [ 296.766379][ T957] usb usb1-port1: attempt power cycle [ 296.920356][ T14] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 296.953961][ T7147] rxe_eth0 speed is unknown, defaulting to 1000 [ 296.978850][ T14] usb 6-1: device descriptor read/8, error -71 [ 298.456308][ T7173] loop3: detected capacity change from 0 to 33280 [ 298.533613][ T7173] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 298.622664][ T7173] EXT4-fs (loop3): 1 truncate cleaned up [ 298.653434][ T7173] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 298.659783][ T957] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 298.670797][ T14] usb usb6-port1: unable to enumerate USB device [ 298.789858][ T957] usb 1-1: device descriptor read/8, error -71 [ 298.948083][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 299.259474][ T7205] loop6: detected capacity change from 0 to 16 [ 299.286414][ T957] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 299.314302][ T7205] erofs: (device loop6): mounted with root inode @ nid 36. [ 299.340165][ T957] usb 1-1: Using ep0 maxpacket: 8 [ 299.350231][ T7204] loop3: detected capacity change from 0 to 33280 [ 299.377182][ T957] usb 1-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 299.438378][ T957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.459180][ T7204] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 299.524384][ T957] usb 1-1: Product: syz [ 299.551210][ T957] usb 1-1: Manufacturer: syz [ 299.555863][ T957] usb 1-1: SerialNumber: syz [ 299.588987][ T5430] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 299.620470][ T7204] EXT4-fs (loop3): 1 truncate cleaned up [ 299.650495][ T7204] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 300.492872][ T957] usb 1-1: USB disconnect, device number 16 [ 300.538363][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 300.736929][ T5433] udevd[5433]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.757840][ T7224] loop3: detected capacity change from 0 to 34816 [ 300.797075][ T7224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 300.803746][ T7224] EXT4-fs: Ignoring removed i_version option [ 300.866254][ T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 300.875684][ T7224] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 301.016142][ T7] usb 2-1: device descriptor read/64, error -71 [ 301.024914][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 301.101334][ T4369] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 301.297354][ T4369] usb 7-1: not running at top speed; connect to a high speed hub [ 301.309177][ T7] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 301.309189][ T4369] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.309210][ T4369] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 301.356155][ T4369] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 301.375738][ T4369] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.430209][ T4369] usb 7-1: Found UVC 1.00 device (046d:0825) [ 301.446491][ T4369] usb 7-1: No valid video chain found. [ 301.479183][ T7] usb 2-1: device descriptor read/64, error -71 [ 301.606812][ T7] usb usb2-port1: attempt power cycle [ 301.622877][ T4369] usb 7-1: USB disconnect, device number 11 [ 301.801998][ T7241] loop3: detected capacity change from 0 to 40427 [ 301.810822][ T7241] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 301.839354][ T7241] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 301.894981][ T7264] loop0: detected capacity change from 0 to 16 [ 301.906375][ T7264] erofs: (device loop0): mounted with root inode @ nid 36. [ 301.978808][ T7241] F2FS-fs (loop3): Found nat_bits in checkpoint [ 302.032070][ T7] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 302.090764][ T7] usb 2-1: device descriptor read/8, error -71 [ 302.172235][ T7241] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 302.204612][ T7241] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 302.260237][ T7274] loop0: detected capacity change from 0 to 33280 [ 302.308373][ T7274] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 302.365886][ T7274] EXT4-fs (loop0): 1 truncate cleaned up [ 302.371979][ T7] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 302.423218][ T7274] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 302.426977][ T7] usb 2-1: device descriptor read/8, error -71 [ 304.042505][ T7] usb usb2-port1: unable to enumerate USB device [ 304.591700][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 305.105283][ T7296] loop1: detected capacity change from 0 to 33280 [ 305.215534][ T7296] EXT4-fs: inline encryption not supported [ 305.266396][ T7296] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 305.327033][ T7280] loop6: detected capacity change from 0 to 40427 [ 305.368800][ T7296] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 305.386247][ T7296] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.478832][ T7290] loop0: detected capacity change from 0 to 40427 [ 305.492117][ T7290] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 305.500021][ T7290] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 305.512473][ T7290] F2FS-fs (loop0): Found nat_bits in checkpoint [ 305.783650][ T7304] loop3: detected capacity change from 0 to 8192 [ 305.809775][ T7290] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 305.834147][ T7290] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 305.926752][ T7304] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 306.525215][ T7324] loop5: detected capacity change from 0 to 16 [ 306.588504][ T7324] erofs: (device loop5): mounted with root inode @ nid 36. [ 307.247551][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 307.486102][ T7] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 307.686050][ T34] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 307.712644][ T7] usb 4-1: not running at top speed; connect to a high speed hub [ 307.737459][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.778441][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 307.806043][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 307.813484][ T7346] loop5: detected capacity change from 0 to 33280 [ 307.835557][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.846152][ T34] usb 2-1: device descriptor read/64, error -71 [ 307.870049][ T7346] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 307.889494][ T7] usb 4-1: Found UVC 1.00 device (046d:0825) [ 307.916953][ T7346] EXT4-fs (loop5): 1 truncate cleaned up [ 307.943469][ T7] usb 4-1: No valid video chain found. [ 307.992252][ T7346] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 308.089956][ T14] usb 4-1: USB disconnect, device number 22 [ 308.126316][ T34] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 308.304698][ T34] usb 2-1: device descriptor read/64, error -71 [ 308.566675][ T34] usb usb2-port1: attempt power cycle [ 308.744167][ T7338] loop6: detected capacity change from 0 to 40427 [ 308.788068][ T7338] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 308.846243][ T7338] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 308.859565][ T5996] EXT4-fs (loop5): unmounting filesystem. [ 308.929406][ T7338] F2FS-fs (loop6): Found nat_bits in checkpoint [ 308.978717][ T7358] loop3: detected capacity change from 0 to 128 [ 308.995140][ T34] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 309.031608][ T7358] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 309.052099][ T34] usb 2-1: device descriptor read/8, error -71 [ 309.107534][ T7358] VFS: Lookup of 'file0' in vfat loop3 would have caused loop [ 309.140047][ T7338] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 309.159075][ T7338] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 309.326150][ T34] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 309.513986][ T34] usb 2-1: device descriptor read/8, error -71 [ 309.674669][ T34] usb usb2-port1: unable to enumerate USB device [ 311.274389][ T7395] loop3: detected capacity change from 0 to 34816 [ 311.289284][ T7394] loop5: detected capacity change from 0 to 16 [ 311.309464][ T7394] erofs: (device loop5): mounted with root inode @ nid 36. [ 311.452733][ T7401] loop1: detected capacity change from 0 to 33280 [ 311.467927][ T7395] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 311.554705][ T7395] EXT4-fs error (device loop3): ext4_lookup:1852: inode #2: comm syz.3.728: bad inode number: 15 [ 311.611323][ T7401] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.729: iget: bad i_size value: 38620345925642 [ 311.633031][ T7401] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.729: couldn't read orphan inode 15 (err -117) [ 311.665650][ T7395] EXT4-fs (loop3): Remounting filesystem read-only [ 311.696535][ T7405] EXT4-fs error (device loop3): ext4_lookup:1852: inode #2: comm syz.3.728: bad inode number: 15 [ 311.736114][ T34] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 311.747344][ T7401] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 311.786615][ T7405] EXT4-fs (loop3): Remounting filesystem read-only [ 311.833548][ T7401] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.729: bg 0: block 5: invalid block bitmap [ 311.890674][ T7401] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 311.946922][ T34] usb 6-1: not running at top speed; connect to a high speed hub [ 311.956482][ T7401] EXT4-fs (loop1): This should not happen!! Data will be lost [ 311.956482][ T7401] [ 311.972940][ T34] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.985039][ T4285] EXT4-fs (loop3): unmounting filesystem. [ 311.991269][ T7401] EXT4-fs (loop1): Total free blocks count 0 [ 312.004161][ T34] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 312.023183][ T34] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 312.025431][ T7401] EXT4-fs (loop1): Free/Dirty block details [ 312.061012][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.079086][ T7401] EXT4-fs (loop1): free_blocks=0 [ 312.106188][ T7401] EXT4-fs (loop1): dirty_blocks=1 [ 312.109900][ T34] usb 6-1: Found UVC 1.00 device (046d:0825) [ 312.139062][ T7401] EXT4-fs (loop1): Block reservation details [ 312.139846][ T34] usb 6-1: No valid video chain found. [ 312.179926][ T7401] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 312.312223][ T34] usb 6-1: USB disconnect, device number 10 [ 312.373033][ T7418] loop6: detected capacity change from 0 to 33280 [ 312.401525][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 312.467291][ T7216] I/O error, dev loop6, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 313.681288][ T7] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 313.688999][ T957] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 313.766028][ T14] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 313.846040][ T957] usb 2-1: device descriptor read/64, error -71 [ 313.876047][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 313.883626][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 313.904283][ T7] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 313.924557][ T7] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 313.944094][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.953382][ T7] usb 4-1: Product: syz [ 313.958138][ T7] usb 4-1: Manufacturer: syz [ 313.963671][ T7] usb 4-1: SerialNumber: syz [ 313.973693][ T14] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.999557][ T14] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.012746][ T14] usb 7-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 314.026199][ T14] usb 7-1: config 1 interface 0 has no altsetting 1 [ 314.038482][ T14] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 314.058823][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.084471][ T14] usb 7-1: Product: syz [ 314.094697][ T14] usb 7-1: Manufacturer: syz [ 314.099888][ T14] usb 7-1: SerialNumber: syz [ 314.116184][ T957] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 314.134578][ T14] usb 7-1: selecting invalid altsetting 1 [ 314.223931][ T7] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 314.243561][ T7] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 314.260790][ T7] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 314.291370][ T957] usb 2-1: device descriptor read/64, error -71 [ 314.334348][ T14] cdc_ncm 7-1:1.0: bind() failure [ 314.358015][ T14] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 314.374055][ T14] cdc_ncm 7-1:1.1: bind() failure [ 314.378668][ T7455] mtrr: base(0x10000) is not aligned on a size(0x0000) boundary [ 314.403951][ T14] usb 7-1: USB disconnect, device number 12 [ 314.416462][ T957] usb usb2-port1: attempt power cycle [ 314.565693][ T7460] loop5: detected capacity change from 0 to 16 [ 314.583480][ T7460] erofs: (device loop5): mounted with root inode @ nid 36. [ 314.614933][ T7460] syz.5.740: attempt to access beyond end of device [ 314.614933][ T7460] loop5: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 314.630661][ T7460] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -11 in[50, 4046] out[4096] [ 314.653957][ T26] audit: type=1800 audit(1794733900.721:14): pid=7460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.740" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 314.695291][ T14] usb 4-1: USB disconnect, device number 23 [ 314.826084][ T957] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 314.880641][ T957] usb 2-1: device descriptor read/8, error -71 [ 315.156108][ T957] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 315.210749][ T957] usb 2-1: device descriptor read/8, error -71 [ 315.358585][ T957] usb usb2-port1: unable to enumerate USB device [ 315.498344][ T7463] loop0: detected capacity change from 0 to 40427 [ 315.525769][ T7463] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 315.549674][ T7463] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 315.600268][ T7480] loop6: detected capacity change from 0 to 40427 [ 315.604951][ T7463] F2FS-fs (loop0): Found nat_bits in checkpoint [ 315.634376][ T7480] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 315.656283][ T4369] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 315.680367][ T7480] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 315.763223][ T7480] F2FS-fs (loop6): Found nat_bits in checkpoint [ 315.803642][ T7463] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 315.823983][ T7463] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 315.847488][ T4369] usb 4-1: not running at top speed; connect to a high speed hub [ 315.877545][ T4369] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.926032][ T4369] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 315.961870][ T7480] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 315.969193][ T4369] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 315.984547][ T7480] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 316.166077][ T4369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.202012][ T4369] usb 4-1: Found UVC 1.00 device (046d:0825) [ 316.220233][ T7507] FAULT_INJECTION: forcing a failure. [ 316.220233][ T7507] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 316.635036][ T4369] usb 4-1: No streaming interface found for terminal 2. [ 316.861208][ T7507] CPU: 1 PID: 7507 Comm: syz.5.748 Not tainted syzkaller #0 [ 316.868569][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 316.878648][ T7507] Call Trace: [ 316.881939][ T7507] [ 316.884878][ T7507] dump_stack_lvl+0x188/0x24e [ 316.889579][ T7507] ? show_regs_print_info+0x12/0x12 [ 316.894802][ T7507] ? load_image+0x410/0x410 [ 316.899335][ T7507] should_fail_ex+0x390/0x4c0 [ 316.904029][ T7507] copy_fpstate_to_sigframe+0xaae/0xd70 [ 316.909587][ T7507] ? copy_fpstate_to_sigframe+0x26a/0xd70 [ 316.915349][ T7507] ? fpregs_set+0x5f0/0x5f0 [ 316.919894][ T7507] ? _raw_spin_unlock_irq+0x3c/0x40 [ 316.925122][ T7507] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 316.931125][ T7507] ? lock_chain_count+0x20/0x20 [ 316.935995][ T7507] ? arch_do_signal_or_restart+0x23b/0x1310 [ 316.941904][ T7507] ? fpu__alloc_mathframe+0xa3/0x120 [ 316.947209][ T7507] arch_do_signal_or_restart+0x67a/0x1310 [ 316.952955][ T7507] ? percpu_ref_put+0x1e/0x230 [ 316.957736][ T7507] ? get_sigframe_size+0x10/0x10 [ 316.962693][ T7507] ? percpu_ref_put+0x1e/0x230 [ 316.967480][ T7507] ? __x64_sys_io_submit+0x80/0x80 [ 316.972608][ T7507] ? exit_to_user_mode_loop+0x3b/0x110 [ 316.978096][ T7507] exit_to_user_mode_loop+0x70/0x110 [ 316.983404][ T7507] exit_to_user_mode_prepare+0xee/0x180 [ 316.988968][ T7507] syscall_exit_to_user_mode+0x16/0x40 [ 316.994443][ T7507] do_syscall_64+0x58/0xa0 [ 316.998876][ T7507] ? clear_bhb_loop+0x60/0xb0 [ 317.003594][ T7507] ? clear_bhb_loop+0x60/0xb0 [ 317.008305][ T7507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.014220][ T7507] RIP: 0033:0x7f20273a94d9 [ 317.018648][ T7507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.038278][ T7507] RSP: 002b:00007f202823a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 317.046720][ T7507] RAX: 0000000000000001 RBX: 00007f2027625fa0 RCX: 00007f20273a94d9 [ 317.054706][ T7507] RDX: 00002000000011c0 RSI: 0000000000000002 RDI: 00007f20281f8000 [ 317.062688][ T7507] RBP: 00007f202743804e R08: 0000000000000000 R09: 0000000000000000 [ 317.070669][ T7507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.078654][ T7507] R13: 00007f2027626038 R14: 00007f2027625fa0 R15: 00007ffe58856c48 [ 317.086658][ T7507] [ 317.897391][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.903780][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.029376][ T4369] usb 4-1: USB disconnect, device number 24 [ 319.135874][ T4369] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 319.228958][ T4369] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 319.519297][ T7541] loop3: detected capacity change from 0 to 256 [ 319.548988][ T7534] fido_id[7534]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 319.635190][ T7546] loop5: detected capacity change from 0 to 33280 [ 319.761756][ T7546] EXT4-fs (loop5): orphan cleanup on readonly fs [ 319.832611][ T7546] ------------[ cut here ]------------ [ 319.838720][ T7546] EA inode 11 i_nlink=2 [ 319.886507][ T7546] WARNING: CPU: 1 PID: 7546 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4fe/0x560 [ 319.901014][ T7546] Modules linked in: [ 319.904940][ T7546] CPU: 1 PID: 7546 Comm: syz.5.757 Not tainted syzkaller #0 [ 319.912547][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 319.922675][ T7546] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560 [ 319.929341][ T7546] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 b5 85 9b ff 49 8b 34 24 48 c7 c7 c0 b0 c0 8a 44 89 fa e8 92 83 15 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 319.949022][ T7546] RSP: 0018:ffffc9000366f380 EFLAGS: 00010246 [ 319.955121][ T7546] RAX: 81963ff94a83df00 RBX: ffff8880544922c0 RCX: 0000000000080000 [ 319.963235][ T7546] RDX: ffffc9001d800000 RSI: 000000000000a9de RDI: 000000000000a9df [ 319.971272][ T7546] RBP: ffffc9000366f470 R08: ffff8880b8d279db R09: 1ffff110171a4f3b [ 319.979312][ T7546] R10: dffffc0000000000 R11: ffffed10171a4f3c R12: ffff888054492108 [ 319.987447][ T7546] R13: dffffc0000000000 R14: ffff8880544920c8 R15: 0000000000000002 [ 319.995451][ T7546] FS: 00007f202823a6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 320.004553][ T7546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.011195][ T7546] CR2: 00007fb5743e7000 CR3: 0000000060503000 CR4: 00000000003506e0 [ 320.019235][ T7546] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 320.027269][ T7546] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 320.035280][ T7546] Call Trace: [ 320.038617][ T7546] [ 320.041574][ T7546] ? ext4_xattr_block_csum+0x560/0x560 [ 320.047122][ T7546] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 320.053219][ T7546] ext4_xattr_inode_dec_ref_all+0xadc/0x1050 [ 320.059295][ T7546] ? errseq_check+0x3c/0x70 [ 320.063839][ T7546] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 320.069558][ T7546] ? __ext4_journal_ensure_credits+0x450/0x450 [ 320.075752][ T7546] ext4_xattr_delete_inode+0xada/0xca0 [ 320.081311][ T7546] ? ext4_expand_extra_isize_ea+0x1d50/0x1d50 [ 320.087460][ T7546] ? __ext4_mark_inode_dirty+0x52e/0x7b0 [ 320.093137][ T7546] ext4_evict_inode+0xc1e/0x10e0 [ 320.098161][ T7546] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 320.104097][ T7546] ? do_raw_spin_unlock+0x11d/0x230 [ 320.109372][ T7546] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 320.115298][ T7546] evict+0x4b2/0x9d0 [ 320.119320][ T7546] ? proc_nr_inodes+0x2f0/0x2f0 [ 320.124204][ T7546] ? do_raw_spin_unlock+0x11d/0x230 [ 320.129488][ T7546] ? _raw_spin_unlock+0x24/0x40 [ 320.134365][ T7546] ? iput+0x79f/0x9c0 [ 320.138434][ T7546] ext4_orphan_cleanup+0xdfe/0x1650 [ 320.143664][ T7546] ? ext4_orphan_file_block_trigger+0x430/0x430 [ 320.149817][ T7] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 320.149969][ T7546] ? ext4_mb_init+0x182f/0x20f0 [ 320.162368][ T7546] ? ext4_orphan_del+0xc90/0xc90 [ 320.167389][ T7546] ? ext4_register_li_request+0x17e/0x920 [ 320.173132][ T7546] ? errseq_check_and_advance+0x62/0x120 [ 320.178855][ T7546] ext4_fill_super+0x6cd4/0x77b0 [ 320.183858][ T7546] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 320.190206][ T7546] ? set_blocksize+0x1d0/0x470 [ 320.195013][ T7546] ? sb_set_blocksize+0xa5/0xe0 [ 320.199948][ T7546] get_tree_bdev+0x3e6/0x610 [ 320.204579][ T7546] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 320.210908][ T7546] vfs_get_tree+0x88/0x270 [ 320.215357][ T7546] do_new_mount+0x247/0xa50 [ 320.219951][ T7546] __se_sys_mount+0x2e3/0x3d0 [ 320.224672][ T7546] ? __x64_sys_mount+0xc0/0xc0 [ 320.229528][ T7546] ? lockdep_hardirqs_on+0x94/0x140 [ 320.234754][ T7546] ? __x64_sys_mount+0x1c/0xc0 [ 320.239605][ T7546] do_syscall_64+0x4c/0xa0 [ 320.244051][ T7546] ? clear_bhb_loop+0x60/0xb0 [ 320.248819][ T7546] ? clear_bhb_loop+0x60/0xb0 [ 320.253525][ T7546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.259507][ T7546] RIP: 0033:0x7f20273aa77a [ 320.264000][ T7546] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.272789][ T7565] loop1: detected capacity change from 0 to 33280 [ 320.283682][ T7546] RSP: 002b:00007f2028239e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 320.283714][ T7546] RAX: ffffffffffffffda RBX: 00007f2028239ee0 RCX: 00007f20273aa77a [ 320.283727][ T7546] RDX: 0000200000000340 RSI: 00002000000006c0 RDI: 00007f2028239ea0 [ 320.283740][ T7546] RBP: 0000200000000340 R08: 00007f2028239ee0 R09: 000000000080078b [ 320.283751][ T7546] R10: 000000000080078b R11: 0000000000000246 R12: 00002000000006c0 [ 320.283763][ T7546] R13: 00007f2028239ea0 R14: 0000000000000491 R15: 0000200000000700 [ 320.283792][ T7546] [ 320.341762][ T7546] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 320.349052][ T7546] CPU: 1 PID: 7546 Comm: syz.5.757 Not tainted syzkaller #0 [ 320.356351][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 320.357720][ T7] usb 4-1: not running at top speed; connect to a high speed hub [ 320.358703][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.358721][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 320.358759][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 320.358778][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.409946][ T7546] Call Trace: [ 320.413227][ T7546] [ 320.416157][ T7546] dump_stack_lvl+0x188/0x24e [ 320.420835][ T7546] ? memcpy+0x3c/0x60 [ 320.424813][ T7546] ? show_regs_print_info+0x12/0x12 [ 320.430012][ T7546] ? load_image+0x410/0x410 [ 320.434520][ T7546] panic+0x2d3/0x710 [ 320.438419][ T7546] ? bpf_jit_dump+0xd0/0xd0 [ 320.442923][ T7546] __warn+0x2f8/0x4f0 [ 320.446897][ T7546] ? ext4_xattr_inode_update_ref+0x4fe/0x560 [ 320.452944][ T7546] ? ext4_xattr_inode_update_ref+0x4fe/0x560 [ 320.458927][ T7546] report_bug+0x2ba/0x4f0 [ 320.463259][ T7546] ? ext4_xattr_inode_update_ref+0x4fe/0x560 [ 320.469245][ T7546] handle_bug+0x3a/0x70 [ 320.473390][ T7546] exc_invalid_op+0x16/0x40 [ 320.477881][ T7546] asm_exc_invalid_op+0x16/0x20 [ 320.482725][ T7546] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560 [ 320.489314][ T7546] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 b5 85 9b ff 49 8b 34 24 48 c7 c7 c0 b0 c0 8a 44 89 fa e8 92 83 15 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 320.508918][ T7546] RSP: 0018:ffffc9000366f380 EFLAGS: 00010246 [ 320.514980][ T7546] RAX: 81963ff94a83df00 RBX: ffff8880544922c0 RCX: 0000000000080000 [ 320.522952][ T7546] RDX: ffffc9001d800000 RSI: 000000000000a9de RDI: 000000000000a9df [ 320.530916][ T7546] RBP: ffffc9000366f470 R08: ffff8880b8d279db R09: 1ffff110171a4f3b [ 320.538879][ T7546] R10: dffffc0000000000 R11: ffffed10171a4f3c R12: ffff888054492108 [ 320.546932][ T7546] R13: dffffc0000000000 R14: ffff8880544920c8 R15: 0000000000000002 [ 320.554922][ T7546] ? ext4_xattr_block_csum+0x560/0x560 [ 320.560476][ T7546] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 320.566544][ T7546] ext4_xattr_inode_dec_ref_all+0xadc/0x1050 [ 320.572529][ T7546] ? errseq_check+0x3c/0x70 [ 320.577037][ T7546] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 320.582756][ T7546] ? __ext4_journal_ensure_credits+0x450/0x450 [ 320.588908][ T7546] ext4_xattr_delete_inode+0xada/0xca0 [ 320.594374][ T7546] ? ext4_expand_extra_isize_ea+0x1d50/0x1d50 [ 320.600437][ T7546] ? __ext4_mark_inode_dirty+0x52e/0x7b0 [ 320.606070][ T7546] ext4_evict_inode+0xc1e/0x10e0 [ 320.611008][ T7546] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 320.616897][ T7546] ? do_raw_spin_unlock+0x11d/0x230 [ 320.622090][ T7546] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 320.627974][ T7546] evict+0x4b2/0x9d0 [ 320.631872][ T7546] ? proc_nr_inodes+0x2f0/0x2f0 [ 320.636715][ T7546] ? do_raw_spin_unlock+0x11d/0x230 [ 320.641911][ T7546] ? _raw_spin_unlock+0x24/0x40 [ 320.646761][ T7546] ? iput+0x79f/0x9c0 [ 320.650743][ T7546] ext4_orphan_cleanup+0xdfe/0x1650 [ 320.655943][ T7546] ? ext4_orphan_file_block_trigger+0x430/0x430 [ 320.662181][ T7546] ? ext4_mb_init+0x182f/0x20f0 [ 320.667028][ T7546] ? ext4_orphan_del+0xc90/0xc90 [ 320.671964][ T7546] ? ext4_register_li_request+0x17e/0x920 [ 320.677688][ T7546] ? errseq_check_and_advance+0x62/0x120 [ 320.683326][ T7546] ext4_fill_super+0x6cd4/0x77b0 [ 320.688289][ T7546] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 320.694542][ T7546] ? set_blocksize+0x1d0/0x470 [ 320.699300][ T7546] ? sb_set_blocksize+0xa5/0xe0 [ 320.704162][ T7546] get_tree_bdev+0x3e6/0x610 [ 320.708751][ T7546] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 320.715014][ T7546] vfs_get_tree+0x88/0x270 [ 320.719457][ T7546] do_new_mount+0x247/0xa50 [ 320.723976][ T7546] __se_sys_mount+0x2e3/0x3d0 [ 320.728654][ T7546] ? __x64_sys_mount+0xc0/0xc0 [ 320.733418][ T7546] ? lockdep_hardirqs_on+0x94/0x140 [ 320.738610][ T7546] ? __x64_sys_mount+0x1c/0xc0 [ 320.743371][ T7546] do_syscall_64+0x4c/0xa0 [ 320.747784][ T7546] ? clear_bhb_loop+0x60/0xb0 [ 320.752463][ T7546] ? clear_bhb_loop+0x60/0xb0 [ 320.757137][ T7546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.763021][ T7546] RIP: 0033:0x7f20273aa77a [ 320.767429][ T7546] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.787032][ T7546] RSP: 002b:00007f2028239e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 320.795443][ T7546] RAX: ffffffffffffffda RBX: 00007f2028239ee0 RCX: 00007f20273aa77a [ 320.803408][ T7546] RDX: 0000200000000340 RSI: 00002000000006c0 RDI: 00007f2028239ea0 [ 320.811388][ T7546] RBP: 0000200000000340 R08: 00007f2028239ee0 R09: 000000000080078b [ 320.819351][ T7546] R10: 000000000080078b R11: 0000000000000246 R12: 00002000000006c0 [ 320.827315][ T7546] R13: 00007f2028239ea0 R14: 0000000000000491 R15: 0000200000000700 [ 320.835294][ T7546] [ 320.838443][ T7546] Kernel Offset: disabled [ 320.842888][ T7546] Rebooting in 86400 seconds..