last executing test programs: 7m56.108875417s ago: executing program 2 (id=68): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/meminfo\x00', 0x0, 0x0) pipe2(&(0x7f0000000000), 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x802, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) socket$kcm(0x29, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x420403, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000080), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 7m54.071382762s ago: executing program 2 (id=70): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 7m51.164097296s ago: executing program 2 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xf21e4000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m49.745375931s ago: executing program 2 (id=80): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f00000001c0), 0x1, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0xc0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x1) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8080c61) 7m45.043858552s ago: executing program 2 (id=88): connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) 7m38.104675996s ago: executing program 2 (id=96): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400c000) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) 7m22.144305819s ago: executing program 32 (id=96): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400c000) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) 4m38.208567446s ago: executing program 0 (id=356): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x578410eb) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10) listen(r5, 0xa) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x56, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000002, 0x20000000, 0x6, 0xe, 0x9, 0x4, 0xffff2d37, 0xffffff01, 0x31, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x1, 0x4, 0x5, 0x3, 0x800, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x846, 0x5, 0x7, 0x200, 0xffffffff, 0x7, 0x5, 0x3, 0x8f, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x7, 0x5, 0x4, 0x200001, 0x40], [0x10, 0x9, 0x8000012d, 0x8004, 0x8000005, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0x10, 0x3, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0xcf1, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x8, 0x401, 0x9, 0x2ae, 0xff, 0x3, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x89, 0x3, 0xd, 0x7, 0x47, 0x7ffd, 0x1, 0xfe000000, 0x7c, 0x2, 0x4, 0x9, 0x6, 0x3, 0x9, 0x1, 0x0, 0x3, 0xbc45, 0x3, 0x42, 0x401], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xd, 0x5, 0x7fff, 0x0, 0x5, 0x7, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x2, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xb, 0x1, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x3, 0x200, 0xffffff6a, 0x3, 0x1, 0x2950bfaf, 0x80001000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120201, 0x3, 0x1, 0x80a2ed, 0x4, 0x29], [0x2, 0xbb33, 0x7, 0xb, 0x5, 0x5, 0x6, 0xf3f, 0x0, 0xb9, 0xce7, 0x1ff, 0xf0f6, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0xa420, 0x200001, 0x78b, 0x0, 0x2, 0x2, 0x60a7, 0x6, 0x16, 0xffffffff, 0xd4cf, 0x4, 0x4, 0xcc, 0x1, 0xfffff000, 0x5, 0x3, 0x92, 0x100, 0x3, 0x7, 0x3, 0x8, 0x6, 0x226, 0x827, 0x4005, 0x8, 0x30b1d694, 0xa1f, 0x9, 0x7, 0x5b, 0x6c1b, 0x0, 0x4, 0x5, 0xb0e, 0xd7, 0x3f6, 0xffff343f, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) 4m28.108048591s ago: executing program 0 (id=370): r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x109801, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRESOCT], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) write$dsp(r0, 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000540)) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x74) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000940)=0x200000000) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r9 = syz_open_dev$video(&(0x7f0000000280), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x4}}) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000100)={0x2, @win={{0x7f, 0x4, 0x100, 0x2}, 0x3, 0x81, 0x0, 0x7, 0x0, 0x10}}) 4m26.132209864s ago: executing program 0 (id=374): io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0xd}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_get$uid(0x3, 0xffffffffffffffff) r3 = getpid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYBLOB='iocharset=cp874,umask=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=default,namecase\x00\x00,fmaskI00000000000100000000406,fmask=00000000000000000000011,fmask=00000000000000000000006,fm!sk=00000000000000000000003,\x00'], 0x1, 0x1524, &(0x7f00000037c0)="$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") sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x0, 0x8, 0x805}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) listen(r2, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x7, 0x20000000) io_destroy(r0) 4m24.40155387s ago: executing program 0 (id=378): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x0, 0xff, 0x0, 0xa, "aac7000000000840"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8004) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000340), 0x0, 0x0, 0x3) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0x3}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@ipv6_getrule={0x1c, 0x22, 0x2, 0x70bd28, 0x25dfdbfe, {0xa, 0x14, 0x20, 0x0, 0x68, 0x0, 0x0, 0x1, 0x4}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0xd801) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r4, &(0x7f0000000040)='\x00', 0x1, 0x1300) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r7, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) r8 = syz_open_procfs(0x0, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000000)=0x97, 0x4) read$FUSE(r8, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 4m19.992228302s ago: executing program 0 (id=385): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) unshare(0x2e020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfc, r0}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0xb, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) 4m17.396211965s ago: executing program 0 (id=389): r0 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x440d1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$key(0xffffffffffffffff, 0x0, 0x2000c804) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4040) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_GET_LAPIC(r7, 0x8400ae8e, &(0x7f0000000400)) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, 0x0, 0x0) close_range(r6, r7, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x4000) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) 4m0.15583389s ago: executing program 33 (id=389): r0 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x440d1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$key(0xffffffffffffffff, 0x0, 0x2000c804) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4040) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_GET_LAPIC(r7, 0x8400ae8e, &(0x7f0000000400)) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, 0x0, 0x0) close_range(r6, r7, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x4000) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) 8.528040795s ago: executing program 4 (id=1465): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r1, r2, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[], 0x0) 6.938497377s ago: executing program 5 (id=1472): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffbfffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1346, &(0x7f0000001dc0)=ANY=[], 0x0) 6.747223332s ago: executing program 5 (id=1475): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0xb, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) 6.480301411s ago: executing program 5 (id=1478): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) futimesat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x14}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="2012750000008ee40fee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000480)={0x0, 0x10, 0x41, "47a2d26f8b2f6760b6be45ca36dd2a8715ac8dc5318d7de1d286db22152812fc255af9cef9d37c79057cdf8260e1baadedeb923d73bd345f6346e0ba592a413223"}, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x80, 0x4}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x2f6a}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x19, 0x2, "ab96"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000980)={0x40, 0x21, 0x1}}) syz_open_dev$evdev(0x0, 0x2000088f, 0x0) 6.317215237s ago: executing program 4 (id=1481): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[], 0x0) 6.173550911s ago: executing program 4 (id=1483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$igmp6(0xa, 0x3, 0x2) r6 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000240)=@req={0x1, 0x8, 0x8, 0x6}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setsig(0x4203, r7, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000340)=0x39) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="110025bd7000ffdbdf255200000008000300", @ANYRES32=r9, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x40) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000b80)={[{@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xc}}, {@nobh}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@resuid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") 5.160856474s ago: executing program 4 (id=1485): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x10000000) 4.772372676s ago: executing program 4 (id=1487): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x0, 0x0, 0x0, 0x3}) syz_usb_disconnect(r0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.02142083s ago: executing program 5 (id=1492): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 3.204181617s ago: executing program 6 (id=1498): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000005180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x2}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x200008}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a000000009c1100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e244e20"], 0x0) syz_emit_ethernet(0xd2, &(0x7f00000000c0)=ANY=[], 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x5, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff03, 0x6, 0x3, 0x0, 0x5, 0x8000, 0x0, 0x7, 0x3c1b, 0x1, 0x76, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xd, 0x7, 0x3, 0x4, 0x4, 0x80000000, 0x5, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0xa, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x7c, 0x0, 0x5, 0x6, 0x8, 0x0, 0x1, 0x40], [0xd3ab, 0x5, 0x8000012f, 0x8004, 0x7fd, 0xffff7ff3, 0x129432e2, 0xca, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0x10, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0xffff, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8005, 0x47, 0x8000, 0x1, 0xfe000000, 0x0, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x2, 0x58, 0x4, 0x6, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x80004, 0x6, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x2, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x6, 0xa970bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x9, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x591f], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x46, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0xfe, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0x3, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x1003, 0x7e, 0x4100, 0x9602, 0x7f, 0x3ff, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x4, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x4, 0xa5bf, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.390013823s ago: executing program 1 (id=1500): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x482, 0x0, 0x1}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x80a0000, 0x26000, 0xe, 0x0, 0x8, 0x8, 0x1, 0x2, 0x0, 0x4, 0x9, 0x30}, {0x50000, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xa, 0x0, 0x7, 0x4, 0x0, 0xfd, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0xc, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4}, {0xeeee8000, 0xeeee0000, 0x9, 0x4, 0xff, 0x7, 0x0, 0xe, 0x0, 0x3c}, {0x8080000, 0x8000000, 0xc, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0xf000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfd}, {0xffffffff}, {0x58000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 2.368694843s ago: executing program 5 (id=1501): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0xc802, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0x1, 0x5f85, &(0x7f0000008340)="$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") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) pwrite64(r0, &(0x7f0000000280)='+', 0x1, 0x0) mount(&(0x7f0000000200)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xc, 0x800000200, 0x0, 0x0, 0x2, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d306e6d602000000000000000000010001", [0x204, 0xfffffffffffffffd]}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 2.331107665s ago: executing program 6 (id=1502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, 0x0) 2.104316642s ago: executing program 3 (id=1503): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@mblk_io_submit}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x0, @b}}) 2.040862734s ago: executing program 6 (id=1504): futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 2.040605204s ago: executing program 1 (id=1505): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x6000, &(0x7f0000000140)="b9ff0b078059268cb89e14f088a82de0ffff200000000001000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x6, 0x8, 0x5, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 1.947951357s ago: executing program 3 (id=1506): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7fff, 0x4, 0x20000000, 0x72b, 0x4}}]}, {0x4}, {0xc, 0x3f}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}]}, 0x88}}, 0x20040054) 1.813753221s ago: executing program 1 (id=1507): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0xc0040, 0x2c) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) 1.803129702s ago: executing program 6 (id=1508): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r1, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c0005"], 0x54}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1.632337637s ago: executing program 1 (id=1509): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) 1.603565748s ago: executing program 6 (id=1510): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) r5 = socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r5, r4, 0x0, 0x8010002b) r6 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) ptrace$getsig(0x4202, r1, 0xed62, &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 1.500407141s ago: executing program 3 (id=1511): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@noblock_validity}, {@delalloc}, {@quota}, {@errors_remount}, {@nomblk_io_submit}, {@dioread_nolock}, {@mb_optimize_scan}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) copy_file_range(r0, 0x0, r0, &(0x7f0000000500)=0xffff, 0x9, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x40, &(0x7f0000000080)={[{@bh}, {@mblk_io_submit}, {@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000003c0)={0x80d8, 0x0, 0x0, 0x0, 0x101}) 1.304417017s ago: executing program 4 (id=1512): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000140)='./file1\x00', 0x165001, 0x100) truncate(&(0x7f00000000c0)='./file1\x00', 0x6e3) open(&(0x7f0000001080)='./file1\x00', 0x20100, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/123, 0x7b, 0x841) 1.249741569s ago: executing program 3 (id=1513): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x10008, &(0x7f0000000140)=ANY=[], 0xfb, 0x6b6, &(0x7f0000000980)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000180)=ANY=[], 0x841, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200)=""/157, 0x19) 444.733146ms ago: executing program 6 (id=1514): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000080)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x2, &(0x7f0000000040)=0x8}) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000000080)={[{@noheap}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@background_gc_on}, {@fault_injection={'fault_injection', 0x3d, 0x10}}, {@discard}, {@noacl}, {@noinline_dentry}, {@alloc_mode_def}, {@segment_mode}, {@disable_ext_identify}, {@fault_type={'fault_type', 0x3d, 0xd74}}], [{@smackfsdef={'smackfsdef', 0x3d, 'fault_injection'}}, {@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x33, 0x63, 0x32, 0x64, 0x39, 0x34], 0x2d, [0x37, 0x63, 0x65, 0x33], 0x2d, [0x65, 0x39, 0x61, 0x61], 0x2d, [0x64, 0x61, 0x65, 0x36], 0x2d, [0x56, 0x30, 0x0, 0x63, 0x65, 0x61, 0x33, 0x33]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xce\xbb\xbf$\xd7\xaa\x99Y\xf9\xf7\xe5\x00\xf4#\xb7\xa9k^yq\x80\xe1\x9d\xa2\x04\xce\x8a\xe2_\xc4\xbf\x9c\x95\x93\xab\xa1\n\xb1\xd8\x1f;\xa0j{\xddn>\xc8l\xc78I\xd5_|\xc7%\x16\x8c\xb8N\xf9\x12\x1d\x86\xf0\x19\xec\xe6\x92]\x11\xc92A\xab\xed\xb2Z\xd2Z\xa6\x02\xf7\xc0o\xd1K\xc4\x8fU<\xbbs\xe368wS\x13\xa5\xb5\xce\xee\x1dk\xc4\xc5\xe4\xad\xe6O\x88\x9cTj\n\xbb,\xd3\"@;\xbfM\xeaf\n\xeaW\xdc@\x88\x10>\xee\xf7\xb5\x031\xe1#4#\xc8\xd8p\xa2\x14\xe7B\xb1O\x18\xd6|\x89\x05\x02,\xfb\xc7V'}}, {@dont_hash}, {@euid_eq}, {@pcr={'pcr', 0x3d, 0x1c}}]}, 0x1, 0x5505, &(0x7f0000000340)="$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") 267.917881ms ago: executing program 1 (id=1515): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x4, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) 264.632071ms ago: executing program 3 (id=1516): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1004002, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',fmask=00000000000000000000377,dmask=00000000000000000000357,discard,iocharset=cp437,errors=continue,discard,\x00'], 0x1, 0x1533, &(0x7f0000006800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 58.730327ms ago: executing program 1 (id=1517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$igmp6(0xa, 0x3, 0x2) r6 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000240)=@req={0x1, 0x8, 0x8, 0x6}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setsig(0x4203, r7, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000340)=0x39) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="110025bd7000ffdbdf255200000008000300", @ANYRES32=r9, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x40) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000b80)={[{@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xc}}, {@nobh}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@resuid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") 261.07µs ago: executing program 3 (id=1518): futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 0s ago: executing program 5 (id=1519): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000003c0)={[{@quota}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@block_validity}, {@nodelalloc}, {@quota}, {@nolazytime}, {@grpjquota}, {@mblk_io_submit}, {@barrier_val={'barrier', 0x3d, 0xff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}]}, 0x3, 0x452, &(0x7f0000000780)="$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") newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000900)=@v1={0x0, @aes128, 0x0, @desc4}) kernel console output (not intermixed with test programs): DDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.659499][ T4489] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.666729][ T4489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.688393][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 380.697648][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 380.710048][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 380.722563][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 380.731749][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 380.741542][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 380.751606][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 380.762277][ T6524] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 380.821000][ T6429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 380.832307][ T6429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.856018][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 380.866033][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 380.875094][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 380.884853][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 380.895400][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 381.137387][ T6524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.226077][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 381.247286][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 381.535445][ T6524] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.630225][ T6731] loop4: detected capacity change from 0 to 40427 [ 383.022982][ T6731] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 383.030805][ T6731] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 383.445554][ T6731] F2FS-fs (loop4): invalid crc value [ 383.651830][ T6731] F2FS-fs (loop4): Found nat_bits in checkpoint [ 383.729267][ T6731] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 383.736526][ T6731] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 384.029475][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 384.049516][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 384.592306][ T6756] Bluetooth: MGMT ver 1.22 [ 384.862145][ T4857] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.869473][ T4857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.960616][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 385.156989][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 385.165665][ T4857] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.172877][ T4857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.192185][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 385.317706][ T6767] xt_CT: You must specify a L4 protocol and not use inversions on it [ 386.238915][ T46] IPVS: stopping master sync thread 5138 ... [ 386.321175][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 386.328858][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.336482][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 386.345422][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 386.354514][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 386.365135][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 386.374519][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 386.401814][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 387.076664][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.083935][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.342951][ T6773] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 388.060789][ T6783] netlink: 52 bytes leftover after parsing attributes in process `syz.4.446'. [ 388.260675][ T6786] loop4: detected capacity change from 0 to 512 [ 388.280264][ T6786] EXT4-fs: Ignoring removed nobh option [ 389.023107][ T6785] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 389.507469][ T6785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.528805][ T6429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.550438][ T6786] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 389.562415][ T6786] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.446: invalid indirect mapped block 256 (level 1) [ 389.567376][ T6524] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.587649][ T6786] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.446: invalid indirect mapped block 2683928664 (level 1) [ 389.605823][ T6786] EXT4-fs (loop4): 1 truncate cleaned up [ 389.611921][ T6786] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 389.624739][ T6524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.642271][ T6786] EXT4-fs (loop4): unmounting filesystem. [ 389.705295][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 389.713657][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 389.791612][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 389.858251][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 389.880416][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 389.898735][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 390.102504][ T6797] netlink: 'syz.1.451': attribute type 10 has an invalid length. [ 390.167145][ T6797] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 392.605349][ T46] device hsr_slave_0 left promiscuous mode [ 392.625641][ T46] device hsr_slave_1 left promiscuous mode [ 392.653399][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.873470][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.974577][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.056293][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.166759][ T46] device bridge_slave_1 left promiscuous mode [ 393.238762][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.644504][ T6833] 9p: Unknown Cache mode readahead [ 394.668222][ T46] device bridge_slave_0 left promiscuous mode [ 394.685828][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.782791][ T46] device veth1_macvtap left promiscuous mode [ 394.797864][ T46] device veth0_macvtap left promiscuous mode [ 394.817580][ T46] device veth1_vlan left promiscuous mode [ 394.823467][ T46] device veth0_vlan left promiscuous mode [ 398.025424][ T46] team0 (unregistering): Port device team_slave_1 removed [ 398.100066][ T46] team0 (unregistering): Port device team_slave_0 removed [ 398.203264][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.303567][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.675640][ T46] bond0 (unregistering): Released all slaves [ 398.894715][ T6840] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 398.925645][ T6840] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 398.978069][ T6840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.048740][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 400.072763][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 400.116358][ T6524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.124874][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 401.185400][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 401.307768][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 401.329997][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 401.371666][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 401.392413][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 401.432310][ T6429] device veth0_vlan entered promiscuous mode [ 401.504286][ T6429] device veth1_vlan entered promiscuous mode [ 402.665971][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 402.674915][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 402.689879][ T6429] device veth0_macvtap entered promiscuous mode [ 402.782279][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 402.807219][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 402.834678][ T6429] device veth1_macvtap entered promiscuous mode [ 402.856413][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 402.875598][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 402.934179][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.980839][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.991138][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.030449][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.049531][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.071110][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.093842][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.109005][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 403.144634][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 403.193203][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.244745][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.254643][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.316974][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.339354][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.352527][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.367287][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.377675][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 403.430912][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 403.460428][ T6429] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.469712][ T6429] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.501719][ T6429] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.568451][ T6429] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.787161][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 403.806993][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 404.185252][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 404.228297][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 404.239241][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 404.255528][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 404.276931][ T6524] device veth0_vlan entered promiscuous mode [ 404.307718][ T4857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.314748][ T6524] device veth1_vlan entered promiscuous mode [ 404.318561][ T4857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.352959][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 404.368464][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 404.377103][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 404.424059][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 404.434478][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 404.449956][ T6524] device veth0_macvtap entered promiscuous mode [ 404.462365][ T4491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.472714][ T6524] device veth1_macvtap entered promiscuous mode [ 404.479641][ T4491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.494544][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 404.503825][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 404.519753][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 404.547722][ T6524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.563597][ T6524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.577128][ T6524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.588077][ T6524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.597957][ T6524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.609390][ T6524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.619269][ T6524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.630467][ T6524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.651570][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.670222][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 404.718866][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 404.753286][ T6524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.901791][ T6524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.911697][ T6524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.945305][ T6524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.955304][ T6524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.919910][ T6524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.929831][ T6524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.026482][ T6524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.045567][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 406.084922][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.144489][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 406.154568][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 406.170806][ T6938] 9p: Unknown Cache mode readahead [ 407.005953][ T6524] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.015149][ T6524] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.024042][ T6524] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.080738][ T6524] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.284691][ T4480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.324705][ T4480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.348912][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 408.712302][ T4857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.751462][ T6959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.969258][ T4857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.364777][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 410.620174][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.478'. [ 412.243118][ T6984] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 414.138889][ T7001] loop6: detected capacity change from 0 to 1024 [ 414.191150][ T7001] EXT4-fs: Ignoring removed orlov option [ 414.213190][ T7005] netlink: 132 bytes leftover after parsing attributes in process `syz.3.484'. [ 414.239561][ T7005] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 414.248062][ T7005] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 414.256855][ T7005] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 414.358300][ T7001] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 414.401802][ T27] audit: type=1800 audit(1780676778.254:9): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.482" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 414.486048][ T7006] loop5: detected capacity change from 0 to 4096 [ 414.628968][ T7006] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 415.722840][ T2187] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 415.994208][ T2187] usb 7-1: unable to get BOS descriptor or descriptor too short [ 416.069657][ T2187] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 18, changing to 8 [ 416.229478][ T2187] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 416.248093][ T2187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.274287][ T2187] usb 7-1: Product: syz [ 416.286211][ T2187] usb 7-1: Manufacturer: syz [ 416.316497][ T2187] usb 7-1: SerialNumber: syz [ 417.593082][ T7047] block device autoloading is deprecated and will be removed. [ 418.036368][ T7046] md: could not open device unknown-block(0,0). [ 418.043717][ T7046] md: md_import_device returned -6 [ 418.152274][ T6524] EXT4-fs (loop6): unmounting filesystem. [ 418.244448][ T2187] usb 7-1: USB disconnect, device number 2 [ 419.273846][ T7067] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 419.282083][ T7067] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 419.339725][ T7063] loop4: detected capacity change from 0 to 8 [ 419.964615][ T7067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.069649][ T7063] SQUASHFS error: zlib decompression failed, data probably corrupt [ 420.135108][ T7063] SQUASHFS error: Failed to read block 0x9b: -5 [ 420.141445][ T7063] SQUASHFS error: Unable to read metadata cache entry [99] [ 420.165417][ T7063] SQUASHFS error: Unable to read inode 0x127 [ 420.204229][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.490'. [ 420.295565][ T7056] udevd[7056]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.514953][ T7082] netlink: 92 bytes leftover after parsing attributes in process `syz.5.490'. [ 421.856489][ T7098] IPVS: set_ctl: invalid protocol: 62 10.1.1.2:20002 [ 423.103765][ T7109] loop4: detected capacity change from 0 to 128 [ 423.156429][ T7109] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 423.241019][ T7109] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.455989][ T7117] loop6: detected capacity change from 0 to 512 [ 423.474829][ T7117] EXT4-fs: Ignoring removed oldalloc option [ 423.536069][ T7117] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 423.717730][ T7018] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 424.417663][ T7129] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 424.427060][ T7129] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 425.558857][ T7129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.062202][ T7146] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 428.304471][ T7153] loop4: detected capacity change from 0 to 8 [ 428.326107][ T7150] loop6: detected capacity change from 0 to 512 [ 428.374793][ T7153] squashfs image failed sanity check [ 428.413405][ T7150] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 428.597756][ T7150] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.512: bad orphan inode 13 [ 428.660114][ T7150] ext4_test_bit(bit=12, block=18) = 1 [ 428.665574][ T7150] is_bad_inode(inode)=0 [ 428.695123][ T7150] NEXT_ORPHAN(inode)=0 [ 428.715964][ T7150] max_ino=32 [ 428.771852][ T7150] i_nlink=1 [ 429.576869][ T7150] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 429.898568][ T7174] loop5: detected capacity change from 0 to 4096 [ 429.966242][ T7174] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 430.099514][ T7162] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 430.136139][ T7173] loop4: detected capacity change from 0 to 8 [ 430.208151][ T7173] unable to read inode lookup table [ 430.406552][ T6524] EXT4-fs (loop6): unmounting filesystem. [ 433.959410][ T7221] netlink: 20 bytes leftover after parsing attributes in process `syz.6.534'. [ 437.562768][ T7250] loop6: detected capacity change from 0 to 512 [ 437.572499][ T7250] EXT4-fs: Ignoring removed nomblk_io_submit option [ 437.579439][ T7250] ext3: Unknown parameter 'nouser_xattr' [ 438.386245][ T6991] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 438.853249][ T7257] loop5: detected capacity change from 0 to 256 [ 439.875166][ T7257] FAT-fs (loop5): Directory bread(block 64) failed [ 439.888817][ T7240] syz.4.536 (7240): drop_caches: 2 [ 439.907876][ T7257] FAT-fs (loop5): Directory bread(block 65) failed [ 439.951370][ T7257] FAT-fs (loop5): Directory bread(block 66) failed [ 439.988784][ T7257] FAT-fs (loop5): Directory bread(block 67) failed [ 440.040112][ T7257] FAT-fs (loop5): Directory bread(block 68) failed [ 440.078147][ T7257] FAT-fs (loop5): Directory bread(block 69) failed [ 440.116380][ T7257] FAT-fs (loop5): Directory bread(block 70) failed [ 440.137393][ T7257] FAT-fs (loop5): Directory bread(block 71) failed [ 440.156803][ T7257] FAT-fs (loop5): Directory bread(block 72) failed [ 440.177268][ T7257] FAT-fs (loop5): Directory bread(block 73) failed [ 440.321512][ T7270] loop6: detected capacity change from 0 to 4096 [ 440.377777][ T7270] ntfs: (device loop6): parse_ntfs_boot_sector(): Mft record size (65536) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 440.444483][ T7280] loop4: detected capacity change from 0 to 16 [ 440.461813][ T7270] ntfs: (device loop6): ntfs_fill_super(): Unsupported NTFS filesystem. [ 440.487365][ T7280] erofs: (device loop4): mounted with root inode @ nid 36. [ 441.221233][ T7287] loop5: detected capacity change from 0 to 2048 [ 441.600741][ T7287] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 442.600597][ T7297] loop4: detected capacity change from 0 to 128 [ 443.717513][ T7313] loop6: detected capacity change from 0 to 256 [ 443.868174][ T7313] FAT-fs (loop6): Directory bread(block 64) failed [ 443.897283][ T7313] FAT-fs (loop6): Directory bread(block 65) failed [ 443.935590][ T7313] FAT-fs (loop6): Directory bread(block 66) failed [ 443.948977][ T7313] FAT-fs (loop6): Directory bread(block 67) failed [ 443.964915][ T7313] FAT-fs (loop6): Directory bread(block 68) failed [ 443.982652][ T7313] FAT-fs (loop6): Directory bread(block 69) failed [ 443.992288][ T7313] FAT-fs (loop6): Directory bread(block 70) failed [ 444.010648][ T7313] FAT-fs (loop6): Directory bread(block 71) failed [ 444.032312][ T7313] FAT-fs (loop6): Directory bread(block 72) failed [ 444.057086][ T7313] FAT-fs (loop6): Directory bread(block 73) failed [ 446.919051][ T4290] Bluetooth: Unexpected continuation frame (len 16) [ 448.487938][ T7365] kernel profiling enabled (shift: 63) [ 448.521886][ T7365] profiling shift: 63 too large [ 448.616533][ T7373] loop4: detected capacity change from 0 to 256 [ 448.633689][ T7370] loop5: detected capacity change from 0 to 1764 [ 448.666472][ T7373] exfat: Deprecated parameter 'namecase' [ 448.758169][ T7378] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 448.803241][ T7370] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 448.826775][ T7373] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 448.861200][ T7378] FAT-fs (loop6): unable to read boot sector [ 449.161735][ T7389] loop6: detected capacity change from 0 to 16 [ 449.180334][ T7390] loop5: detected capacity change from 0 to 64 [ 449.204890][ T7389] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 449.508444][ T7397] loop4: detected capacity change from 0 to 256 [ 449.554291][ T7397] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 449.708621][ T7397] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 449.725977][ T7397] exFAT-fs (loop4): Filesystem has been set read-only [ 450.968872][ T7455] loop5: detected capacity change from 0 to 8 [ 451.077225][ T7458] netlink: 'syz.3.616': attribute type 1 has an invalid length. [ 451.406881][ T7473] netlink: 'syz.3.624': attribute type 1 has an invalid length. [ 451.633025][ T7483] netlink: 'syz.1.628': attribute type 10 has an invalid length. [ 451.657890][ T7483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.628'. [ 451.667022][ T7479] loop5: detected capacity change from 0 to 1024 [ 451.784603][ T7483] device team0 entered promiscuous mode [ 451.803688][ T7483] device team_slave_0 entered promiscuous mode [ 451.865529][ T7483] device team_slave_1 entered promiscuous mode [ 451.926648][ T7483] bridge0: port 3(team0) entered blocking state [ 451.933125][ T7483] bridge0: port 3(team0) entered disabled state [ 453.582227][ T7534] loop6: detected capacity change from 0 to 512 [ 453.593050][ T7535] loop4: detected capacity change from 0 to 512 [ 453.605222][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 453.611622][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.633786][ T7535] EXT4-fs: Ignoring removed nobh option [ 453.661268][ T7535] EXT4-fs: Ignoring removed mblk_io_submit option [ 453.667936][ T7534] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 453.692853][ T7534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 453.698635][ T7535] EXT4-fs (loop4): orphan cleanup on readonly fs [ 453.708934][ T7535] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 453.736904][ T7534] System zones: 1-12 [ 453.742950][ T7535] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.645: attempt to clear invalid blocks 2 len 1 [ 453.795672][ T7534] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 453.808353][ T7535] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 453.866367][ T7534] EXT4-fs (loop6): 1 truncate cleaned up [ 453.872120][ T7534] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 453.878812][ T7535] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.645: invalid indirect mapped block 1819239214 (level 0) [ 453.930240][ T27] audit: type=1800 audit(1780676814.758:10): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.644" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 453.998973][ T7535] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.645: invalid indirect mapped block 1819239214 (level 1) [ 454.040649][ T7543] loop5: detected capacity change from 0 to 4096 [ 454.060932][ T6524] EXT4-fs (loop6): unmounting filesystem. [ 454.063887][ T7535] EXT4-fs (loop4): 1 truncate cleaned up [ 454.078535][ T7535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 454.119935][ T7543] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 454.187480][ T7535] EXT4-fs (loop4): Quota file not on filesystem root. Journaled quota will not work [ 454.289572][ T7556] loop6: detected capacity change from 0 to 16 [ 454.404489][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 454.697461][ T7569] loop4: detected capacity change from 0 to 64 [ 454.721514][ T7571] xt_hashlimit: max too large, truncated to 1048576 [ 454.808832][ T27] audit: type=1800 audit(1780676815.570:11): pid=7569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.656" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 454.819914][ T7569] hfs: keylen 1794 too large [ 455.069710][ T7578] Driver unsupported XDP return value 0 on prog (id 35) dev N/A, expect packet loss! [ 455.086126][ T4323] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 455.304844][ T4323] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 455.321416][ T4323] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.364821][ T4323] usb 6-1: config 0 has no interface number 0 [ 455.389852][ T4323] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 455.415117][ T7588] loop6: detected capacity change from 0 to 1024 [ 455.434789][ T4323] usb 6-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 455.522719][ T4323] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 455.574839][ T4323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.638477][ T4323] usb 6-1: Product: syz [ 455.650881][ T4323] usb 6-1: Manufacturer: syz [ 455.681737][ T4323] usb 6-1: SerialNumber: syz [ 455.739866][ T4323] usb 6-1: config 0 descriptor?? [ 456.035540][ T4322] usb 6-1: USB disconnect, device number 2 [ 456.102695][ T7609] loop6: detected capacity change from 0 to 256 [ 456.322367][ T7612] netlink: 52 bytes leftover after parsing attributes in process `syz.1.672'. [ 456.633940][ T7609] FAT-fs (loop6): Directory bread(block 64) failed [ 456.854761][ T7609] FAT-fs (loop6): Directory bread(block 65) failed [ 457.040333][ T7609] FAT-fs (loop6): Directory bread(block 66) failed [ 457.110723][ T7609] FAT-fs (loop6): Directory bread(block 67) failed [ 457.117683][ T7609] FAT-fs (loop6): Directory bread(block 68) failed [ 457.131904][ T7609] FAT-fs (loop6): Directory bread(block 69) failed [ 457.155049][ T7609] FAT-fs (loop6): Directory bread(block 70) failed [ 457.173924][ T7609] FAT-fs (loop6): Directory bread(block 71) failed [ 457.233948][ T7609] FAT-fs (loop6): Directory bread(block 72) failed [ 457.345326][ T7609] FAT-fs (loop6): Directory bread(block 73) failed [ 458.521741][ T7632] loop6: detected capacity change from 0 to 2048 [ 458.655727][ T7632] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 458.873595][ T7652] loop5: detected capacity change from 0 to 128 [ 458.878516][ T6524] EXT4-fs (loop6): unmounting filesystem. [ 458.940448][ T7652] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 459.037994][ T7652] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.544540][ T6429] EXT4-fs (loop5): unmounting filesystem. [ 460.288949][ T7676] batman_adv: batadv0: Adding interface: geneve2 [ 460.301994][ T7677] loop6: detected capacity change from 0 to 512 [ 460.325178][ T7676] batman_adv: batadv0: Interface activated: geneve2 [ 460.404621][ T7677] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 460.442549][ T7677] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 460.596494][ T27] audit: type=1800 audit(1780676820.906:12): pid=7677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.693" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 460.644363][ T7684] loop5: detected capacity change from 0 to 256 [ 460.725822][ T6524] EXT4-fs (loop6): unmounting filesystem. [ 461.184432][ T4322] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 461.201121][ T7667] loop4: detected capacity change from 0 to 32768 [ 461.308309][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.699'. [ 461.393892][ T4322] usb 7-1: Using ep0 maxpacket: 8 [ 461.406167][ T4322] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 461.449911][ T4322] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 461.522379][ T4322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.552680][ T4322] usb 7-1: Product: syz [ 461.569205][ T4322] usb 7-1: Manufacturer: syz [ 461.573893][ T4322] usb 7-1: SerialNumber: syz [ 461.605460][ T7702] loop5: detected capacity change from 0 to 64 [ 461.636778][ T4322] usb 7-1: config 0 descriptor?? [ 461.712731][ T4322] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 461.770017][ T4322] usb 7-1: setting power ON [ 461.775222][ T4322] dvb-usb: bulk message failed: -22 (2/0) [ 461.901949][ T4322] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 461.986201][ T4322] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 462.046911][ T4322] usb 7-1: media controller created [ 462.163815][ T4322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 462.287435][ T4322] usb 7-1: selecting invalid altsetting 6 [ 462.328767][ T4322] usb 7-1: digital interface selection failed (-22) [ 462.354453][ T4322] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 462.417291][ T4322] usb 7-1: setting power OFF [ 462.445404][ T4322] dvb-usb: bulk message failed: -22 (2/0) [ 462.479592][ T4322] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 462.520388][ T4322] (NULL device *): no alternate interface [ 462.657882][ T4322] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 462.700898][ T4291] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 462.733383][ T4322] usb 7-1: USB disconnect, device number 3 [ 462.919217][ T4291] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 462.935239][ T7708] loop4: detected capacity change from 0 to 32768 [ 462.942205][ T4291] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 462.986177][ T4291] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 463.003978][ T4291] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.028375][ T7708] XFS (loop4): Mounting V5 Filesystem [ 463.034187][ T4291] usb 6-1: Product: syz [ 463.038810][ T4291] usb 6-1: Manufacturer: syz [ 463.043448][ T4291] usb 6-1: SerialNumber: syz [ 463.076937][ T4291] usb 6-1: config 0 descriptor?? [ 463.084893][ T7720] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 463.108875][ T4291] usb 6-1: ucan: probing device on interface #0 [ 463.112985][ T7708] XFS (loop4): Ending clean mount [ 463.123095][ T4291] usb 6-1: ucan: invalid EP count (1) [ 463.138891][ T4291] usb 6-1: ucan: probe failed; try to update the device firmware [ 463.180677][ T4322] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 463.272350][ T4274] XFS (loop4): Unmounting Filesystem [ 463.399801][ T4322] usb 7-1: Using ep0 maxpacket: 32 [ 463.418261][ T4322] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 463.436897][ T4322] usb 7-1: config 0 has no interface number 0 [ 463.465807][ T4322] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 463.534178][ T4322] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 463.555617][ T4322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.589259][ T4322] usb 7-1: Product: syz [ 463.607337][ T4322] usb 7-1: Manufacturer: syz [ 463.612342][ T4322] usb 7-1: SerialNumber: syz [ 463.651298][ T4322] usb 7-1: config 0 descriptor?? [ 463.684884][ T7727] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 463.864226][ T7757] loop4: detected capacity change from 0 to 256 [ 463.877246][ T7757] exfat: Deprecated parameter 'utf8' [ 463.884948][ T7757] exfat: Deprecated parameter 'namecase' [ 463.930194][ T7757] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 464.391177][ T7768] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 464.409384][ T7763] loop4: detected capacity change from 0 to 32768 [ 465.309834][ T7790] loop4: detected capacity change from 0 to 512 [ 465.370576][ T7790] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.724: invalid indirect mapped block 10 (level 1) [ 465.409225][ T7790] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.724: invalid indirect mapped block 8 (level 1) [ 465.426750][ T7790] EXT4-fs (loop4): 1 truncate cleaned up [ 465.432657][ T7790] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 465.530778][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 465.705565][ T4291] usb 6-1: USB disconnect, device number 3 [ 465.876980][ T7796] loop4: detected capacity change from 0 to 4096 [ 465.993208][ T7796] NILFS (loop4): invalid segment: Checksum error in segment payload [ 466.027082][ T7796] NILFS (loop4): trying rollback from an earlier position [ 466.037185][ T7803] loop5: detected capacity change from 0 to 2048 [ 466.050844][ T4322] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 466.091930][ T4322] asix: probe of 7-1:0.188 failed with error -71 [ 466.126852][ T7796] NILFS (loop4): recovery complete [ 466.148210][ T4322] usb 7-1: USB disconnect, device number 4 [ 466.154178][ T7805] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 466.167614][ T7804] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 466.610753][ T7817] loop4: detected capacity change from 0 to 512 [ 466.657394][ T7817] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 466.712704][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 466.747597][ T7821] loop5: detected capacity change from 0 to 256 [ 466.879830][ T7825] loop4: detected capacity change from 0 to 512 [ 466.970815][ T7825] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 466.980839][ T7825] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.235484][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 467.320598][ T7839] loop6: detected capacity change from 0 to 512 [ 467.395267][ T7839] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 467.432498][ T7846] loop4: detected capacity change from 0 to 512 [ 467.465481][ T7839] EXT4-fs (loop6): warning: maximal mount count reached, running e2fsck is recommended [ 467.496599][ T7846] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 467.532046][ T7839] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.752: inode #15: comm syz.6.752: iget: illegal inode # [ 467.592781][ T7846] EXT4-fs (loop4): 1 truncate cleaned up [ 467.598668][ T7846] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 467.630089][ T7839] EXT4-fs (loop6): Remounting filesystem read-only [ 467.657048][ T7839] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.752: couldn't read orphan inode 15 (err -117) [ 467.712780][ T7839] EXT4-fs (loop6): Remounting filesystem read-only [ 467.745534][ T7839] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 467.798475][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 467.912071][ T6524] EXT4-fs (loop6): unmounting filesystem. [ 468.157663][ T7862] IPVS: Error connecting to the multicast addr [ 468.259153][ T7866] loop4: detected capacity change from 0 to 128 [ 468.272786][ T7860] loop6: detected capacity change from 0 to 4096 [ 468.323302][ T7866] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 468.344103][ T4291] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 468.394919][ T7866] hpfs: filesystem error: improperly stopped [ 468.429657][ T7866] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 468.481880][ T7866] hpfs: You really don't want any checks? You are crazy... [ 468.501552][ T7866] hpfs: hpfs_map_sector(): read error [ 468.514504][ T6524] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 468.531623][ T7866] hpfs: code page support is disabled [ 468.534636][ T6524] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 468.538579][ T7866] hpfs: hpfs_map_4sectors(): unaligned read [ 468.560720][ T4291] usb 6-1: Using ep0 maxpacket: 32 [ 468.567952][ T4291] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.594003][ T4291] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.628040][ T7866] hpfs: hpfs_map_4sectors(): unaligned read [ 468.634019][ T7866] hpfs: filesystem error: unable to find root dir [ 468.647468][ T4291] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.690270][ T4291] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.747589][ T4291] usb 6-1: config 0 interface 0 has no altsetting 0 [ 468.769465][ T4291] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 468.804232][ T4291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.856744][ T4291] usb 6-1: config 0 descriptor?? [ 469.351259][ T4291] corsair-psu 0003:1B1C:1C09.0002: item fetching failed at offset 4/5 [ 469.391680][ T4291] corsair-psu: probe of 0003:1B1C:1C09.0002 failed with error -22 [ 469.693777][ T7897] netlink: 52 bytes leftover after parsing attributes in process `syz.6.770'. [ 469.730977][ T7897] loop6: detected capacity change from 0 to 512 [ 469.740659][ T7897] EXT4-fs: Ignoring removed nobh option [ 470.008914][ T7897] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 470.024701][ T7897] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.770: invalid indirect mapped block 256 (level 1) [ 470.041898][ T7897] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.770: invalid indirect mapped block 2683928664 (level 1) [ 470.071319][ T7897] EXT4-fs (loop6): 1 truncate cleaned up [ 470.077328][ T7897] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 470.163707][ T4320] usb 6-1: USB disconnect, device number 4 [ 470.512532][ T6524] EXT4-fs (loop6): unmounting filesystem. [ 471.458463][ T7912] netlink: 96 bytes leftover after parsing attributes in process `syz.5.774'. [ 471.486736][ T7910] loop6: detected capacity change from 0 to 2048 [ 471.568285][ T7910] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 471.637178][ T7910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 471.786239][ T7881] loop4: detected capacity change from 0 to 32768 [ 472.966440][ T7934] loop6: detected capacity change from 0 to 128 [ 473.049499][ T7934] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 473.077993][ T7934] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 473.208504][ T7942] loop5: detected capacity change from 0 to 2048 [ 473.352358][ T6524] EXT4-fs (loop6): unmounting filesystem. [ 473.398362][ T7942] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 473.844570][ T7942] EXT4-fs error (device loop5): ext4_ext_precache:627: inode #2: comm syz.5.785: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 474.349348][ T6429] EXT4-fs (loop5): unmounting filesystem. [ 474.558774][ T7967] loop5: detected capacity change from 0 to 64 [ 474.898845][ T7980] loop5: detected capacity change from 0 to 128 [ 474.927573][ T7982] loop6: detected capacity change from 0 to 512 [ 474.934966][ T7982] EXT4-fs: Ignoring removed orlov option [ 474.945124][ T7982] EXT4-fs: Ignoring removed mblk_io_submit option [ 474.956958][ T7980] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 474.969538][ T7982] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.800: corrupted in-inode xattr [ 475.003962][ T7980] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 475.023029][ T7982] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.800: couldn't read orphan inode 15 (err -117) [ 475.567350][ T7982] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 476.039100][ T6524] EXT4-fs (loop6): unmounting filesystem. [ 476.058491][ T6429] EXT4-fs (loop5): unmounting filesystem. [ 476.565558][ T22] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 476.780767][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.796625][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.821494][ T22] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 476.857930][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.891372][ T22] usb 6-1: config 0 descriptor?? [ 477.365758][ T22] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 477.517458][ T8004] loop6: detected capacity change from 0 to 32768 [ 477.612981][ T22] usb 6-1: USB disconnect, device number 5 [ 477.749111][ T8022] loop4: detected capacity change from 0 to 16 [ 477.780778][ T8022] erofs: (device loop4): mounted with root inode @ nid 36. [ 477.829332][ T8013] fido_id[8013]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 477.918352][ T8004] XFS (loop6): Mounting V5 Filesystem [ 478.959427][ T8004] XFS (loop6): Ending clean mount [ 479.227899][ T6524] XFS (loop6): Unmounting Filesystem [ 480.146273][ T8039] loop5: detected capacity change from 0 to 32768 [ 480.230805][ T8039] (syz.5.811,8039,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 480.299685][ T8039] (syz.5.811,8039,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 480.378424][ T22] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 480.417297][ T8048] loop4: detected capacity change from 0 to 32768 [ 480.521638][ T8048] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.816 (8048) [ 480.550702][ T8039] JBD2: Ignoring recovery information on journal [ 480.595062][ T22] usb 7-1: Using ep0 maxpacket: 8 [ 480.602638][ T22] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.638753][ T22] usb 7-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 480.680786][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.714896][ T22] usb 7-1: config 0 descriptor?? [ 480.767838][ T8039] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 480.776913][ T22] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 480.838642][ T8048] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 480.884709][ T8048] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 480.908368][ T8048] BTRFS info (device loop4): using free space tree [ 481.025949][ T8055] netlink: 24 bytes leftover after parsing attributes in process `syz.6.814'. [ 481.057729][ T2187] usb 7-1: USB disconnect, device number 5 [ 481.212533][ T8048] BTRFS info (device loop4): enabling ssd optimizations [ 481.415766][ T6429] ocfs2: Unmounting device (7,5) on (node local) [ 481.595528][ T4274] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 481.930812][ T8093] loop6: detected capacity change from 0 to 512 [ 482.152817][ T8093] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 482.189972][ T8100] loop5: detected capacity change from 0 to 64 [ 482.190459][ T8093] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.349185][ T8100] hfs: request for non-existent node 1280 in B*Tree [ 482.394755][ T8100] hfs: request for non-existent node 1280 in B*Tree [ 482.527927][ T6991] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (6991) [ 482.544067][ T4855] hfs: request for non-existent node 1280 in B*Tree [ 482.551366][ T6524] EXT4-fs (loop6): unmounting filesystem. [ 482.575548][ T4855] hfs: request for non-existent node 1280 in B*Tree [ 485.610941][ T4281] Bluetooth: hci5: command 0x0406 tx timeout [ 485.698647][ T8122] loop6: detected capacity change from 0 to 512 [ 485.744321][ T8124] netlink: 52 bytes leftover after parsing attributes in process `syz.5.825'. [ 485.760648][ T8124] loop5: detected capacity change from 0 to 512 [ 485.767675][ T8124] EXT4-fs: Ignoring removed nobh option [ 485.874282][ T8124] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 485.887300][ T8124] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.825: invalid indirect mapped block 256 (level 1) [ 485.901923][ T8124] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.825: invalid indirect mapped block 2683928664 (level 1) [ 485.917194][ T8124] EXT4-fs (loop5): 1 truncate cleaned up [ 485.922956][ T8124] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 485.937162][ T8124] EXT4-fs (loop5): unmounting filesystem. [ 485.967902][ T8122] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 485.998261][ T8122] EXT4-fs: failed to create workqueue [ 486.018946][ T8122] EXT4-fs (loop6): mount failed [ 486.449687][ T8139] loop5: detected capacity change from 0 to 4096 [ 486.494102][ T8139] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 486.710778][ T8139] ntfs: volume version 3.1. [ 487.213797][ T8157] loop5: detected capacity change from 0 to 512 [ 487.250237][ T8157] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 487.300742][ T8157] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 487.354943][ T8157] System zones: 1-12 [ 487.407183][ T8157] EXT4-fs (loop5): 1 truncate cleaned up [ 487.412980][ T8157] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 487.512561][ T6429] EXT4-fs (loop5): unmounting filesystem. [ 487.680632][ T8145] loop4: detected capacity change from 0 to 32768 [ 487.918414][ T8144] loop6: detected capacity change from 0 to 32768 [ 488.022982][ T8144] ERROR: (device loop6): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 488.022982][ T8144] [ 488.113714][ T8144] ERROR: (device loop6): remounting filesystem as read-only [ 488.158328][ T8167] loop5: detected capacity change from 0 to 2048 [ 488.236107][ T8167] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 488.290890][ T8167] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 488.346729][ T8167] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 488.888139][ T8174] loop4: detected capacity change from 0 to 4096 [ 488.948305][ T8174] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 489.383280][ T8190] loop5: detected capacity change from 0 to 736 [ 489.859896][ T8172] loop6: detected capacity change from 0 to 32768 [ 489.935622][ T8172] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.839 (8172) [ 489.945410][ T8200] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 490.069157][ T8172] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 490.114024][ T8172] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 490.134756][ T8172] BTRFS info (device loop6): setting nodatasum [ 490.144647][ T8172] BTRFS info (device loop6): enabling auto defrag [ 490.154706][ T8172] BTRFS info (device loop6): disabling tree log [ 490.166731][ T8172] BTRFS info (device loop6): using free space tree [ 490.220403][ T6429] sysv_free_block: flc_count > flc_size [ 490.251444][ T6429] sysv_free_block: flc_count > flc_size [ 490.857474][ T8205] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 490.928994][ T6429] sysv_free_block: flc_count > flc_size [ 491.113765][ T6429] sysv_free_block: flc_count > flc_size [ 491.119549][ T6429] sysv_free_block: flc_count > flc_size [ 491.126467][ T8205] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 491.131494][ T6429] sysv_free_block: flc_count > flc_size [ 491.141835][ T6429] sysv_free_block: flc_count > flc_size [ 491.167133][ T6429] sysv_free_block: flc_count > flc_size [ 491.172754][ T6429] sysv_free_block: flc_count > flc_size [ 491.198633][ T8172] BTRFS info (device loop6): enabling ssd optimizations [ 491.252007][ T6429] sysv_free_block: flc_count > flc_size [ 491.283927][ T6429] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 491.375138][ T8172] BTRFS error (device loop6): balance: invalid convert system profile raid1 [ 491.509241][ T8232] netlink: 'syz.4.854': attribute type 10 has an invalid length. [ 491.540157][ T8232] batman_adv: batadv0: Interface deactivated: dummy0 [ 491.563687][ T6524] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 491.578633][ T8232] batman_adv: batadv0: Removing interface: dummy0 [ 491.734044][ T8232] team0: Port device dummy0 added [ 491.816756][ T8238] netlink: 'syz.4.854': attribute type 10 has an invalid length. [ 491.973639][ T8244] set_capacity_and_notify: 2 callbacks suppressed [ 491.977241][ T8244] loop5: detected capacity change from 0 to 4096 [ 492.102799][ T8247] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 492.236765][ T8238] team0: Port device dummy0 removed [ 492.272770][ T8238] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 492.563715][ T8256] loop4: detected capacity change from 0 to 1024 [ 492.725877][ T8253] loop6: detected capacity change from 0 to 4096 [ 492.778403][ T8253] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 493.015750][ T8265] capability: warning: `syz.4.864' uses deprecated v2 capabilities in a way that may be insecure [ 494.272290][ T8278] loop4: detected capacity change from 0 to 32768 [ 494.276123][ T8270] loop5: detected capacity change from 0 to 32768 [ 494.421820][ T8270] XFS (loop5): Mounting V5 Filesystem [ 494.470832][ T8278] XFS (loop4): Mounting V5 Filesystem [ 494.591948][ T8278] XFS (loop4): Ending clean mount [ 494.628605][ T8280] loop6: detected capacity change from 0 to 40427 [ 494.655620][ T8270] XFS (loop5): Ending clean mount [ 494.676404][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 494.696025][ T8311] netlink: 'syz.1.873': attribute type 10 has an invalid length. [ 494.747245][ T8280] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 494.774446][ T8280] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 494.783780][ T8270] XFS (loop5): Quotacheck needed: Please wait. [ 494.815803][ T8280] F2FS-fs (loop6): invalid crc value [ 494.842858][ T8311] device dummy0 entered promiscuous mode [ 494.863601][ T8280] F2FS-fs (loop6): Found nat_bits in checkpoint [ 494.883387][ T4274] XFS (loop4): Unmounting Filesystem [ 494.916110][ T8270] XFS (loop5): Quotacheck: Done. [ 494.973933][ T8311] team0: Port device dummy0 added [ 495.007691][ T27] audit: type=1800 audit(1780676852.673:13): pid=8270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.866" name="file1" dev="loop5" ino=9286 res=0 errno=0 [ 495.025802][ T8312] netlink: 'syz.1.873': attribute type 10 has an invalid length. [ 495.125880][ T8312] device dummy0 left promiscuous mode [ 495.160653][ T8312] team0: Port device dummy0 removed [ 495.170052][ T8280] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 495.192752][ T6429] XFS (loop5): Unmounting Filesystem [ 495.213491][ T8312] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 495.216833][ T8280] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 496.085172][ T8336] netlink: 52 bytes leftover after parsing attributes in process `syz.6.880'. [ 496.120066][ T8336] loop6: detected capacity change from 0 to 512 [ 496.128770][ T8336] EXT4-fs: Ignoring removed nobh option [ 496.355829][ T8336] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 496.369520][ T8336] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.880: invalid indirect mapped block 256 (level 1) [ 496.388447][ T8336] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.880: invalid indirect mapped block 2683928664 (level 1) [ 496.406931][ T8336] EXT4-fs (loop6): 1 truncate cleaned up [ 496.412759][ T8336] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 496.442879][ T8336] EXT4-fs (loop6): unmounting filesystem. [ 497.182624][ T8343] loop5: detected capacity change from 0 to 4096 [ 497.290611][ T8343] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 497.410973][ T8343] ntfs3: loop5: Failed to load $Extend. [ 497.530616][ T8343] ntfs3: loop5: ino=5, "/" directory corrupted [ 497.710130][ T8352] netlink: 'syz.3.883': attribute type 1 has an invalid length. [ 498.164284][ T4388] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 498.277628][ T8341] loop4: detected capacity change from 0 to 32768 [ 498.384881][ T4388] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 498.415438][ T4388] usb 6-1: config 0 has no interface number 0 [ 498.446900][ T4388] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 498.489438][ T4388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.501370][ T4388] usb 6-1: Product: syz [ 498.505592][ T4388] usb 6-1: Manufacturer: syz [ 498.538389][ T4388] usb 6-1: SerialNumber: syz [ 498.552338][ T8347] loop6: detected capacity change from 0 to 40427 [ 498.582150][ T4388] usb 6-1: config 0 descriptor?? [ 498.587377][ T8370] netlink: 'syz.3.888': attribute type 10 has an invalid length. [ 498.603056][ T4388] usb 6-1: selecting invalid altsetting 1 [ 498.626357][ T4388] dvb_ttusb_budget: ttusb_init_controller: error [ 498.633902][ T8347] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 498.640558][ T8347] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 498.664942][ T4388] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 498.702735][ T8370] team0: Port device dummy0 added [ 498.749909][ T8347] F2FS-fs (loop6): Found nat_bits in checkpoint [ 498.756380][ T8371] netlink: 'syz.3.888': attribute type 10 has an invalid length. [ 498.859505][ T8371] team0: Port device dummy0 removed [ 498.881317][ T8371] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 498.989304][ T8347] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 499.002472][ T4388] DVB: Unable to find symbol stv0299_attach() [ 499.015053][ T8347] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 499.252067][ T4388] DVB: Unable to find symbol tda8083_attach() [ 499.269495][ T4388] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 499.291587][ T4388] usb 6-1: USB disconnect, device number 6 [ 499.718057][ T8396] loop4: detected capacity change from 0 to 512 [ 499.752194][ T8396] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 499.852660][ T8396] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 499.874303][ T8396] Quota error (device loop4): write_blk: dquota write failed [ 499.882824][ T8396] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 499.892664][ T8396] Quota error (device loop4): write_blk: dquota write failed [ 499.900814][ T8396] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 499.911650][ T8396] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.894: Failed to acquire dquot type 1 [ 499.930521][ T8396] EXT4-fs (loop4): 1 truncate cleaned up [ 499.936385][ T8396] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 500.095988][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 500.965246][ T8424] loop5: detected capacity change from 0 to 512 [ 500.998141][ T8424] EXT4-fs: Ignoring removed oldalloc option [ 501.030833][ T8424] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 501.061686][ T8425] loop4: detected capacity change from 0 to 4096 [ 501.108862][ T8404] loop6: detected capacity change from 0 to 32768 [ 501.116497][ T8424] EXT4-fs (loop5): 1 truncate cleaned up [ 501.122287][ T8424] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 501.129709][ T8425] EXT4-fs: Ignoring removed mblk_io_submit option [ 501.229808][ T8404] XFS (loop6): Mounting V5 Filesystem [ 501.242741][ T6429] EXT4-fs (loop5): unmounting filesystem. [ 501.394868][ T8425] EXT4-fs (loop4): Test dummy encryption mode enabled [ 501.459090][ T8425] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 501.488728][ T8404] XFS (loop6): Ending clean mount [ 501.541231][ T8404] XFS (loop6): Quotacheck needed: Please wait. [ 501.655213][ T8404] XFS (loop6): Quotacheck: Done. [ 501.703209][ T27] audit: type=1800 audit(1780676858.859:14): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.903" name="file1" dev="loop6" ino=9286 res=0 errno=0 [ 501.786407][ T6524] XFS (loop6): Unmounting Filesystem [ 501.856003][ T8425] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 501.881770][ T8450] overlayfs: failed to resolve './bus': -2 [ 501.992299][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 502.109415][ T8458] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 502.152643][ T8458] FAT-fs (loop4): unable to read boot sector [ 502.645437][ T8449] loop5: detected capacity change from 0 to 40427 [ 502.688971][ T8449] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 502.707807][ T8449] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 502.722521][ T8449] F2FS-fs (loop5): invalid crc value [ 502.745176][ T8449] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 502.871327][ T8449] F2FS-fs (loop5): Start checkpoint disabled! [ 502.916634][ T8449] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 502.923946][ T8449] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 502.963018][ T4388] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 502.992263][ T8465] loop4: detected capacity change from 0 to 32768 [ 503.099433][ T4491] kworker/u4:37: attempt to access beyond end of device [ 503.099433][ T4491] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 503.169085][ T4388] usb 7-1: Using ep0 maxpacket: 16 [ 503.186368][ T4388] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 503.213083][ T4388] usb 7-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 503.232138][ T4388] usb 7-1: Product: syz [ 503.237949][ T4388] usb 7-1: Manufacturer: syz [ 503.242628][ T4388] usb 7-1: SerialNumber: syz [ 504.295526][ T4388] usb 7-1: reset high-speed USB device number 6 using dummy_hcd [ 504.727741][ T4388] usb 7-1: unable to get BOS descriptor or descriptor too short [ 504.890873][ T4388] usb 7-1: device firmware changed [ 504.903071][ T4388] usb 7-1: USB disconnect, device number 6 [ 505.116159][ T8480] loop5: detected capacity change from 0 to 40427 [ 505.168910][ T8480] F2FS-fs (loop5): Found nat_bits in checkpoint [ 505.289255][ T8480] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 505.298287][ T8480] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 505.769499][ T8503] loop5: detected capacity change from 0 to 4096 [ 505.849037][ T8503] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 505.860366][ T8506] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 505.913382][ T8503] Remounting filesystem read-only [ 506.060565][ T8510] loop4: detected capacity change from 0 to 256 [ 506.089633][ T8510] exfat: Deprecated parameter 'namecase' [ 506.110559][ T8510] exfat: Deprecated parameter 'namecase' [ 506.194242][ T8510] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d) [ 506.464212][ T8514] loop5: detected capacity change from 0 to 256 [ 506.509086][ T8514] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 506.579612][ T8514] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 506.625957][ T8514] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xdc69dc80, utbl_chksum : 0xe619d30d) [ 506.844861][ T8505] loop6: detected capacity change from 0 to 40427 [ 507.030538][ T8505] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 507.083741][ T8505] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 507.141299][ T8505] F2FS-fs (loop6): invalid crc value [ 507.625410][ T8505] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 507.871430][ T8525] device ipvlan2 entered promiscuous mode [ 507.878884][ T8525] bridge0: port 3(ipvlan2) entered blocking state [ 507.885755][ T8525] bridge0: port 3(ipvlan2) entered disabled state [ 507.999832][ T8505] F2FS-fs (loop6): Start checkpoint disabled! [ 508.032734][ T8505] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 508.053749][ T8505] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 508.294056][ T4490] kworker/u4:36: attempt to access beyond end of device [ 508.294056][ T4490] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 508.482019][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'. [ 509.234931][ T8531] loop5: detected capacity change from 0 to 40427 [ 509.301612][ T8531] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 509.324869][ T8531] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 509.383874][ T8531] F2FS-fs (loop5): invalid crc value [ 509.425937][ T8531] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 509.638588][ T8531] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 509.696425][ T8531] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 509.773314][ T8531] F2FS-fs (loop5): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem [ 509.863736][ T6429] syz-executor: attempt to access beyond end of device [ 509.863736][ T6429] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 509.932155][ T8544] loop6: detected capacity change from 0 to 40427 [ 510.056595][ T8544] F2FS-fs (loop6): Found nat_bits in checkpoint [ 510.190631][ T8544] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 510.213076][ T8544] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 510.812974][ T8577] loop5: detected capacity change from 0 to 2048 [ 510.923700][ T8579] loop6: detected capacity change from 0 to 64 [ 510.979216][ T8577] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 511.118662][ T6429] EXT4-fs (loop5): unmounting filesystem. [ 511.310074][ T8585] comedi: No check for data length of config insn id 6 is implemented [ 511.341468][ T8585] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 511.368389][ T8585] comedi: Assuming n=15 is correct [ 511.569743][ T8589] netlink: 52 bytes leftover after parsing attributes in process `syz.5.955'. [ 511.606336][ T8589] loop5: detected capacity change from 0 to 512 [ 511.615214][ T8589] EXT4-fs: Ignoring removed nobh option [ 511.806123][ T8589] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 511.821068][ T8589] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.955: invalid indirect mapped block 256 (level 1) [ 511.839670][ T8589] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.955: invalid indirect mapped block 2683928664 (level 1) [ 511.859895][ T8589] EXT4-fs (loop5): 1 truncate cleaned up [ 511.865984][ T8589] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 511.898896][ T8589] EXT4-fs (loop5): unmounting filesystem. [ 512.602904][ T8600] loop6: detected capacity change from 0 to 512 [ 512.629439][ T8600] EXT4-fs: Ignoring removed nobh option [ 512.637491][ T8600] EXT4-fs: Ignoring removed mblk_io_submit option [ 512.655251][ T8600] EXT4-fs (loop6): orphan cleanup on readonly fs [ 512.662350][ T8600] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 512.687522][ T8600] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.959: attempt to clear invalid blocks 2 len 1 [ 512.711723][ T8600] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 512.739500][ T8600] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.959: invalid indirect mapped block 1819239214 (level 0) [ 512.759136][ T8600] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.959: invalid indirect mapped block 1819239214 (level 1) [ 512.775570][ T8600] EXT4-fs (loop6): 1 truncate cleaned up [ 512.781455][ T8600] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 512.804760][ T8600] EXT4-fs (loop6): Quota file not on filesystem root. Journaled quota will not work [ 512.853405][ T6524] EXT4-fs (loop6): unmounting filesystem. [ 513.181528][ T8617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.968'. [ 513.227645][ T8613] loop5: detected capacity change from 0 to 4096 [ 513.388945][ T8621] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 513.445207][ T8613] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean [ 516.505416][ T8641] loop6: detected capacity change from 0 to 64 [ 516.518577][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'. [ 517.129220][ T8657] loop5: detected capacity change from 0 to 1024 [ 517.342647][ T9] hfsplus: b-tree write err: -5, ino 8 [ 517.459404][ T8630] loop4: detected capacity change from 0 to 40427 [ 517.499183][ T8630] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 517.517782][ T8630] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 517.550718][ T8630] F2FS-fs (loop4): invalid crc value [ 517.567867][ T8630] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 517.878497][ T8630] F2FS-fs (loop4): Start checkpoint disabled! [ 517.903157][ T8673] loop5: detected capacity change from 0 to 1024 [ 517.922269][ T8630] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 517.939095][ T8630] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 518.075156][ T8673] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 2: comm syz.5.991: lblock 2 mapped to illegal pblock 2 (length 1) [ 518.149398][ T8673] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 518.192778][ T4444] kworker/u4:15: attempt to access beyond end of device [ 518.192778][ T4444] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 518.212893][ T8673] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 48: comm syz.5.991: lblock 0 mapped to illegal pblock 48 (length 1) [ 518.249851][ T8673] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 518.294048][ T8673] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.991: Failed to acquire dquot type 0 [ 518.365384][ T8673] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 518.431303][ T8673] EXT4-fs error (device loop5): ext4_evict_inode:281: inode #11: comm syz.5.991: mark_inode_dirty error [ 518.486285][ T8673] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 518.499367][ T8683] loop6: detected capacity change from 0 to 512 [ 518.527755][ T8673] EXT4-fs (loop5): 1 orphan inode deleted [ 518.547078][ T4442] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 518.549343][ T8673] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 518.575139][ T8683] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 518.608596][ T4442] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 518.634965][ T8683] EXT4-fs (loop6): 1 truncate cleaned up [ 518.658777][ T4442] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:14: Failed to release dquot type 0 [ 518.690892][ T8683] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 518.871070][ T6429] EXT4-fs (loop5): unmounting filesystem. [ 518.918839][ T6429] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 519.008981][ T6429] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 519.050635][ T6429] EXT4-fs error (device loop5): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 519.114020][ T6524] EXT4-fs (loop6): unmounting filesystem. [ 519.278241][ T8689] netlink: 52 bytes leftover after parsing attributes in process `syz.4.995'. [ 519.314075][ T8689] loop4: detected capacity change from 0 to 512 [ 519.324474][ T8689] EXT4-fs: Ignoring removed nobh option [ 519.529114][ T8689] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 519.540391][ T8689] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.995: invalid indirect mapped block 256 (level 1) [ 519.556962][ T8689] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.995: invalid indirect mapped block 2683928664 (level 1) [ 519.576052][ T8689] EXT4-fs (loop4): 1 truncate cleaned up [ 519.582101][ T8689] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 519.603835][ T8689] EXT4-fs (loop4): unmounting filesystem. [ 520.156301][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 520.162731][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 521.254660][ T8716] loop4: detected capacity change from 0 to 8 [ 521.366758][ T8716] SQUASHFS error: Unable to read inode 0xe3 [ 521.745305][ T4291] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 521.812829][ T8728] bad cache= option: noner_zspages 0 [ 521.812829][ T8728] nr_free_cma 0 [ 521.812829][ T8728] numa_hit 2744891 [ 521.812829][ T8728] numa_miss 0 [ 521.812829][ T8728] numa_foreign 0 [ 521.812829][ T8728] numa_interleave 44032 [ 521.812829][ T8728] numa_local 2721402 [ 521.812829][ T8728] numa_other 23489 [ 521.812829][ T8728] nr_inactive_anon 0 [ 521.812829][ T8728] nr_active_anon 11179 [ 521.812829][ T8728] nr_inactive_file 40232 [ 521.812829][ T8728] nr_active_file 21101 [ 521.812829][ T8728] nr_unevictable 18821 [ 521.812829][ T8728] nr_slab_reclaimable 20596 [ 521.812829][ T8728] nr_slab_unreclaimable 100384 [ 521.812829][ T8728] nr_isolated_anon 0 [ 521.812829][ T8728] nr_isolated_file 0 [ 521.812829][ T8728] workingset_nodes 0 [ 521.812829][ T8728] workingset_refault_anon 2642 [ 521.812829][ T8728] workingset_refault_file 0 [ 521.812829][ T8728] workingset_activate_anon 0 [ 521.812829][ T8728] workingset_activate_file 0 [ 521.813211][ T8728] CIFS: VFS: bad cache= option: noner_zspages 0 [ 521.813211][ T8728] nr_free_cma 0 [ 521.813211][ T8728] numa_hit 2744891 [ 521.813211][ T8728] numa_miss 0 [ 521.813211][ T8728] numa_foreign 0 [ 521.813211][ T8728] numa_interleave 44032 [ 521.813211][ T8728] numa_local 2721402 [ 521.813211][ T8728] numa_other 23489 [ 521.813211][ T8728] nr_inactive_anon 0 [ 521.813211][ T8728] nr_active_anon 11179 [ 521.813211][ T8728] nr_inactive_file 40232 [ 521.813211][ T8728] nr_active_file 21101 [ 521.813211][ T8728] nr_unevictable 18821 [ 521.813211][ T8728] nr_slab_reclaimable 20596 [ 521.813211][ T8728] nr_slab_unreclaimable 100384 [ 521.813211][ T8728] nr_isolated_anon 0 [ 521.813211][ T8728] nr_isolated_file 0 [ 521.813211][ T8728] workingset_nodes 0 [ 521.813211][ T8728] workingset_refault_anon 2642 [ 521.813211][ T8728] workingset_refault_file 0 [ 521.813211][ T8728] workingset_activate_anon 0 [ 521.813211][ T8728] workingset_activate_file 0 [ 522.025765][ T4291] usb 6-1: config 0 has no interfaces? [ 522.173942][ T4291] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 522.205393][ T4291] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 522.238400][ T4291] usb 6-1: Product: syz [ 522.242821][ T4291] usb 6-1: Manufacturer: syz [ 522.248222][ T4291] usb 6-1: SerialNumber: syz [ 522.278593][ T4291] usb 6-1: config 0 descriptor?? [ 522.505827][ T4388] usb 6-1: USB disconnect, device number 7 [ 523.467150][ T8750] loop4: detected capacity change from 0 to 32768 [ 523.622963][ T8750] XFS (loop4): Mounting V5 Filesystem [ 523.756797][ T8750] XFS (loop4): Ending clean mount [ 523.949588][ T8796] bad cache= option: noner_zspages 0 [ 523.949588][ T8796] nr_free_cma 0 [ 523.949588][ T8796] numa_hit 2762464 [ 523.949588][ T8796] numa_miss 0 [ 523.949588][ T8796] numa_foreign 0 [ 523.949588][ T8796] numa_interleave 44032 [ 523.949588][ T8796] numa_local 2738975 [ 523.949588][ T8796] numa_other 23489 [ 523.949588][ T8796] nr_inactive_anon 0 [ 523.949588][ T8796] nr_active_anon 15889 [ 523.949588][ T8796] nr_inactive_file 40315 [ 523.949588][ T8796] nr_active_file 21101 [ 523.949588][ T8796] nr_unevictable 18821 [ 523.949588][ T8796] nr_slab_reclaimable 20596 [ 523.949588][ T8796] nr_slab_unreclaimable 99942 [ 523.949588][ T8796] nr_isolated_anon 0 [ 523.949588][ T8796] nr_isolated_file 0 [ 523.949588][ T8796] workingset_nodes 0 [ 523.949588][ T8796] workingset_refault_anon 2642 [ 523.949588][ T8796] workingset_refault_file 0 [ 523.949588][ T8796] workingset_activate_anon 0 [ 523.949588][ T8796] workingset_activate_file 0 [ 523.949760][ T8796] CIFS: VFS: bad cache= option: noner_zspages 0 [ 523.949760][ T8796] nr_free_cma 0 [ 523.949760][ T8796] numa_hit 2762464 [ 523.949760][ T8796] numa_miss 0 [ 523.949760][ T8796] numa_foreign 0 [ 523.949760][ T8796] numa_interleave 44032 [ 523.949760][ T8796] numa_local 2738975 [ 523.949760][ T8796] numa_other 23489 [ 523.949760][ T8796] nr_inactive_anon 0 [ 523.949760][ T8796] nr_active_anon 15889 [ 523.949760][ T8796] nr_inactive_file 40315 [ 523.949760][ T8796] nr_active_file 21101 [ 523.949760][ T8796] nr_unevictable 18821 [ 523.949760][ T8796] nr_slab_reclaimable 20596 [ 523.949760][ T8796] nr_slab_unreclaimable 99942 [ 523.949760][ T8796] nr_isolated_anon 0 [ 523.949760][ T8796] nr_isolated_file 0 [ 523.949760][ T8796] workingset_nodes 0 [ 523.949760][ T8796] workingset_refault_anon 2642 [ 523.949760][ T8796] workingset_refault_file 0 [ 523.949760][ T8796] workingset_activate_anon 0 [ 523.949760][ T8796] workingset_activate_file 0 [ 524.084192][ T4274] XFS (loop4): Unmounting Filesystem [ 525.026719][ T8822] loop5: detected capacity change from 0 to 256 [ 525.027445][ T4291] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 525.106725][ T8824] loop4: detected capacity change from 0 to 2048 [ 525.160669][ T8824] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 525.233879][ T8826] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 525.277272][ T4291] usb 7-1: Using ep0 maxpacket: 16 [ 525.286247][ T4291] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.324645][ T4291] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 525.368448][ T4291] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.421941][ T4291] usb 7-1: config 0 descriptor?? [ 525.889302][ T4291] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 525.899551][ T8839] loop5: detected capacity change from 0 to 4096 [ 526.020133][ T27] audit: type=1800 audit(1780676881.311:15): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1041" name="file0" dev="loop5" ino=0 res=0 errno=0 [ 526.130013][ T27] audit: type=1800 audit(1780676881.339:16): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1041" name="file0" dev="loop5" ino=0 res=0 errno=0 [ 526.329673][ T8108] usb 7-1: USB disconnect, device number 7 [ 526.978025][ T8870] loop4: detected capacity change from 0 to 16 [ 526.990321][ T8870] erofs: (device loop4): mounted with root inode @ nid 36. [ 527.003928][ T27] audit: type=1800 audit(1780676882.216:17): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1056" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 529.106963][ T8879] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1058'. [ 529.698278][ T8877] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1057'. [ 529.714334][ T8877] loop6: detected capacity change from 0 to 512 [ 529.721327][ T8877] EXT4-fs: Ignoring removed nobh option [ 529.785057][ T8877] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 529.795091][ T8877] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1057: invalid indirect mapped block 256 (level 1) [ 529.808974][ T8877] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1057: invalid indirect mapped block 2683928664 (level 1) [ 529.824107][ T8877] EXT4-fs (loop6): 1 truncate cleaned up [ 529.829888][ T8877] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 529.842984][ T8877] EXT4-fs (loop6): unmounting filesystem. [ 529.939845][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1060'. [ 529.988240][ T8887] syz_tun: Device is already in use. [ 530.090197][ T8889] loop5: detected capacity change from 0 to 1024 [ 530.160750][ T8889] hfsplus: bad catalog entry type [ 530.365224][ T4444] hfsplus: b-tree write err: -5, ino 25 [ 530.442233][ T4444] hfsplus: b-tree write err: -5, ino 4 [ 530.545354][ T4444] hfsplus: b-tree write err: -5, ino 2 [ 530.615137][ T4444] hfsplus: b-tree write err: -5, ino 26 [ 531.496848][ T8905] loop6: detected capacity change from 0 to 256 [ 531.576550][ T8905] FAT-fs (loop6): Directory bread(block 64) failed [ 531.591848][ T8905] FAT-fs (loop6): Directory bread(block 65) failed [ 531.609618][ T8905] FAT-fs (loop6): Directory bread(block 66) failed [ 531.631535][ T8905] FAT-fs (loop6): Directory bread(block 67) failed [ 531.678788][ T8905] FAT-fs (loop6): Directory bread(block 68) failed [ 531.685538][ T8905] FAT-fs (loop6): Directory bread(block 69) failed [ 531.718998][ T8905] FAT-fs (loop6): Directory bread(block 70) failed [ 531.740713][ T8905] FAT-fs (loop6): Directory bread(block 71) failed [ 531.759354][ T8905] FAT-fs (loop6): Directory bread(block 72) failed [ 531.768678][ T8905] FAT-fs (loop6): Directory bread(block 73) failed [ 531.868718][ T8900] loop5: detected capacity change from 0 to 40427 [ 531.912938][ T8900] F2FS-fs (loop5): Found nat_bits in checkpoint [ 531.966623][ T8918] device bridge0 entered promiscuous mode [ 531.978435][ T8915] device bridge0 left promiscuous mode [ 532.011658][ T8900] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 532.046666][ T8900] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 532.138011][ T8900] syz.5.1065: attempt to access beyond end of device [ 532.138011][ T8900] loop5: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 532.312890][ T8930] tap0: tun_chr_ioctl cmd 1074025677 [ 532.315585][ T6429] syz-executor: attempt to access beyond end of device [ 532.315585][ T6429] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 532.318448][ T8930] tap0: linktype set to 780 [ 532.777892][ T8944] program syz.6.1085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 532.832182][ T8942] loop5: detected capacity change from 0 to 4096 [ 532.864176][ T8942] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 532.959379][ T8942] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 534.370139][ T8981] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1100'. [ 536.410462][ T9003] kvm [9002]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0xcd [ 536.628452][ T8113] kernel write not supported for file bpf-prog (pid: 8113 comm: kworker/0:18) [ 536.638052][ T9017] tipc: Started in network mode [ 536.638088][ T9017] tipc: Node identity 000000002d00003a0040ffffe0000001, cluster identity 4711 [ 536.661637][ T9017] tipc: Enabling of bearer rejected, failed to enable media [ 537.198745][ T9035] loop6: detected capacity change from 0 to 1024 [ 537.225286][ T9035] EXT4-fs: Ignoring removed bh option [ 537.241563][ T9035] ext4: Bad value for 'journal_dev' [ 537.402086][ T27] audit: type=1326 audit(1780676891.817:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.1127" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca1079ce59 code=0x0 [ 537.645189][ T9049] loop6: detected capacity change from 0 to 64 [ 537.986957][ T9054] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1131'. [ 538.022383][ T9054] loop5: detected capacity change from 0 to 512 [ 538.031243][ T9054] EXT4-fs: Ignoring removed nobh option [ 538.132113][ T9054] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 538.145706][ T9054] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1131: invalid indirect mapped block 256 (level 1) [ 538.185007][ T9054] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1131: invalid indirect mapped block 2683928664 (level 1) [ 538.206022][ T9054] EXT4-fs (loop5): 1 truncate cleaned up [ 538.212196][ T9054] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 538.236810][ T9054] EXT4-fs (loop5): unmounting filesystem. [ 538.873313][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1133'. [ 538.884166][ T9029] loop4: detected capacity change from 0 to 32768 [ 539.095716][ T9029] XFS (loop4): Mounting V5 Filesystem [ 539.208372][ T9029] XFS (loop4): Ending clean mount [ 539.291743][ T9083] lo speed is unknown, defaulting to 1000 [ 539.299767][ T4274] XFS (loop4): Unmounting Filesystem [ 539.312022][ T9084] loop5: detected capacity change from 0 to 128 [ 539.399806][ T9084] EXT4-fs (loop5): Test dummy encryption mode enabled [ 539.423202][ T9084] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 539.440025][ T9084] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 539.481158][ T4291] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 539.701358][ T4291] usb 7-1: Using ep0 maxpacket: 32 [ 539.709687][ T4291] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 539.740684][ T4291] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 539.751110][ T4291] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 539.765365][ T4291] usb 7-1: Product: syz [ 539.769927][ T4291] usb 7-1: Manufacturer: syz [ 539.774664][ T4291] usb 7-1: SerialNumber: syz [ 539.797377][ T4291] usb 7-1: config 0 descriptor?? [ 539.803272][ T9079] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 539.811584][ T4291] hub 7-1:0.0: bad descriptor, ignoring hub [ 539.820028][ T4291] hub: probe of 7-1:0.0 failed with error -5 [ 539.973115][ T9084] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 540.077591][ T6429] EXT4-fs (loop5): unmounting filesystem. [ 541.055662][ T9113] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1146'. [ 541.119851][ T9079] usb 7-1: reset high-speed USB device number 8 using dummy_hcd [ 541.903236][ T9118] netlink: 'syz.5.1148': attribute type 16 has an invalid length. [ 541.997525][ T9079] usb 7-1: device firmware changed [ 542.025782][ T22] usb 7-1: USB disconnect, device number 8 [ 542.220347][ T22] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 542.434462][ T22] usb 7-1: Using ep0 maxpacket: 32 [ 542.636070][ T22] usb 7-1: device descriptor read/all, error -71 [ 542.875307][ T9133] loop6: detected capacity change from 0 to 1024 [ 542.989860][ T9133] hfsplus: bad catalog entry type [ 543.116729][ T9] hfsplus: b-tree write err: -5, ino 25 [ 543.122518][ T9] hfsplus: b-tree write err: -5, ino 4 [ 543.190741][ T9] hfsplus: b-tree write err: -5, ino 2 [ 543.232220][ T9] hfsplus: b-tree write err: -5, ino 26 [ 543.450332][ T9146] loop6: detected capacity change from 0 to 512 [ 543.596029][ T9146] EXT4-fs (loop6): 1 truncate cleaned up [ 543.601752][ T9146] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 543.684357][ T9154] loop4: detected capacity change from 0 to 512 [ 543.733563][ T27] audit: type=1800 audit(1780676897.661:19): pid=9146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1157" name="file0" dev="loop6" ino=13 res=0 errno=0 [ 543.765689][ T9154] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 543.774282][ T9146] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1157: bg 0: block 465: padding at end of block bitmap is not set [ 543.931612][ T9146] EXT4-fs (loop6): Remounting filesystem read-only [ 543.938221][ T9146] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 543.969047][ T9146] EXT4-fs (loop6): Remounting filesystem read-only [ 544.028309][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 544.159790][ T6524] EXT4-fs (loop6): unmounting filesystem. [ 544.567604][ T9176] loop4: detected capacity change from 0 to 1024 [ 544.677541][ T9176] hfsplus: bad catalog entry type [ 544.792025][ T9] hfsplus: b-tree write err: -5, ino 25 [ 544.806512][ T9] hfsplus: b-tree write err: -5, ino 4 [ 544.823602][ T9] hfsplus: b-tree write err: -5, ino 2 [ 544.856356][ T9] hfsplus: b-tree write err: -5, ino 26 [ 545.394577][ T9197] loop4: detected capacity change from 0 to 1024 [ 545.418212][ T9197] EXT4-fs: Ignoring removed bh option [ 545.636505][ T9206] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1181'. [ 545.672776][ T9206] loop6: detected capacity change from 0 to 512 [ 545.681737][ T9206] EXT4-fs: Ignoring removed nobh option [ 545.892357][ T9197] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 545.971723][ T9206] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 545.986794][ T9206] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1181: invalid indirect mapped block 256 (level 1) [ 546.004998][ T9206] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1181: invalid indirect mapped block 2683928664 (level 1) [ 546.024516][ T9206] EXT4-fs (loop6): 1 truncate cleaned up [ 546.030551][ T9206] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 546.062031][ T9206] EXT4-fs (loop6): unmounting filesystem. [ 546.450402][ T9197] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 546.634377][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 546.840116][ T9212] lo speed is unknown, defaulting to 1000 [ 548.131893][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1193'. [ 548.159134][ T9240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1193'. [ 548.971138][ T9258] loop4: detected capacity change from 0 to 128 [ 549.082130][ T9258] syz.4.1200: attempt to access beyond end of device [ 549.082130][ T9258] loop4: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 550.530248][ T9276] loop5: detected capacity change from 0 to 1024 [ 550.545111][ T9276] EXT4-fs: Ignoring removed bh option [ 550.591177][ T9276] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 550.894649][ T6429] EXT4-fs (loop5): unmounting filesystem. [ 551.235248][ T9289] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1209'. [ 551.271173][ T9289] loop4: detected capacity change from 0 to 512 [ 551.280120][ T9289] EXT4-fs: Ignoring removed nobh option [ 551.525602][ T9289] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 551.536388][ T9289] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1209: invalid indirect mapped block 256 (level 1) [ 551.553115][ T9289] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1209: invalid indirect mapped block 2683928664 (level 1) [ 551.570076][ T9289] EXT4-fs (loop4): 1 truncate cleaned up [ 551.576276][ T9289] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 551.598189][ T9289] EXT4-fs (loop4): unmounting filesystem. [ 552.750953][ T9312] loop4: detected capacity change from 0 to 4096 [ 552.981115][ T9312] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 553.636903][ T27] audit: type=1800 audit(1780676906.810:20): pid=9312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1214" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 553.660444][ T27] audit: type=1800 audit(1780676906.828:21): pid=9312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1214" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 553.702301][ T9327] loop6: detected capacity change from 0 to 256 [ 553.713203][ T9327] exfat: Deprecated parameter 'utf8' [ 554.674290][ T27] audit: type=1800 audit(1780676906.875:22): pid=9312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1214" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 554.708443][ T9327] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d) [ 554.867847][ T4852] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 554.869563][ T27] audit: type=1804 audit(1780676907.899:23): pid=9327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1219" name="/newroot/122/file0/file0" dev="loop6" ino=1048638 res=1 errno=0 [ 554.874877][ T4852] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 554.937958][ T4274] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22. [ 554.967927][ T27] audit: type=1804 audit(1780676907.982:24): pid=9327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1219" name="/newroot/122/file0/file0" dev="loop6" ino=1048638 res=1 errno=0 [ 555.197072][ T9340] loop5: detected capacity change from 0 to 512 [ 555.272226][ T9340] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 555.359628][ T9340] ext4 filesystem being mounted at /142/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.451900][ T9340] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 555.476480][ T9340] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 555.495503][ T9340] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1224: Failed to acquire dquot type 0 [ 555.646544][ T6429] EXT4-fs (loop5): unmounting filesystem. [ 557.004957][ T9371] loop5: detected capacity change from 0 to 32768 [ 557.130000][ T9390] loop4: detected capacity change from 0 to 4096 [ 557.193003][ T9371] XFS (loop5): Mounting V5 Filesystem [ 557.222851][ T9390] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 557.315701][ T9371] XFS (loop5): Ending clean mount [ 557.451412][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 557.520248][ T6429] XFS (loop5): Unmounting Filesystem [ 557.846978][ T9409] loop4: detected capacity change from 0 to 4096 [ 558.008687][ T9414] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 558.149893][ T9409] syz.4.1248 (9409) used greatest stack depth: 19152 bytes left [ 558.195294][ T9417] device syzkaller1 entered promiscuous mode [ 558.893004][ T9428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.388862][ T9430] lo speed is unknown, defaulting to 1000 [ 561.368460][ T22] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 561.584939][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 561.596152][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.660813][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.708369][ T22] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 561.725799][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.763097][ T22] usb 6-1: config 0 descriptor?? [ 561.966986][ T9477] loop4: detected capacity change from 0 to 32768 [ 561.980205][ T9477] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1271 (9477) [ 562.023900][ T9477] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 562.090357][ T9477] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 562.112662][ T9477] BTRFS info (device loop4): turning on sync discard [ 562.123770][ T9477] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 562.135451][ T9477] BTRFS info (device loop4): use zstd compression, level 3 [ 562.143930][ T9477] BTRFS info (device loop4): turning on async discard [ 562.203293][ T9477] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 562.242679][ T9477] BTRFS info (device loop4): trying to use backup root at mount time [ 562.273062][ T9477] BTRFS info (device loop4): enabling auto defrag [ 562.302253][ T9477] BTRFS info (device loop4): using free space tree [ 562.465085][ T22] usb 6-1: language id specifier not provided by device, defaulting to English [ 562.524432][ T4852] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 562.539096][ T9477] BTRFS error (device loop4): failed to load root extent [ 562.546223][ T9477] BTRFS warning (device loop4): try to load backup roots slot 1 [ 562.570074][ T4852] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 562.628106][ T9477] BTRFS warning (device loop4): couldn't read tree root [ 562.635138][ T9477] BTRFS warning (device loop4): try to load backup roots slot 2 [ 562.692283][ T9477] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 562.757983][ T9477] BTRFS warning (device loop4): couldn't read tree root [ 562.801922][ T9477] BTRFS warning (device loop4): try to load backup roots slot 3 [ 562.857417][ T9477] BTRFS info (device loop4): enabling ssd optimizations [ 562.867931][ T9477] BTRFS info (device loop4): rebuilding free space tree [ 562.901505][ T22] letsketch 0003:6161:4D15.0005: Device info:  [ 563.056785][ T9477] BTRFS info (device loop4): checking UUID tree [ 563.154478][ T27] audit: type=1800 audit(1780676915.590:25): pid=9477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1271" name="bus" dev="loop4" ino=257 res=0 errno=0 [ 563.184188][ T22] usb 6-1: Max retries (5) exceeded reading string descriptor 201 [ 563.206443][ T22] letsketch: probe of 0003:6161:4D15.0005 failed with error -71 [ 563.250942][ T22] usb 6-1: USB disconnect, device number 8 [ 563.358926][ T9497] loop6: detected capacity change from 0 to 32768 [ 563.410405][ T9497] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by syz.6.1278 (9497) [ 563.587273][ T4274] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 563.780210][ T6991] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by udevd (6991) [ 564.624274][ T9528] lo speed is unknown, defaulting to 1000 [ 566.722595][ T9630] overlayfs: failed to clone upperpath [ 566.903509][ T22] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 566.986022][ T9636] loop6: detected capacity change from 0 to 2048 [ 567.021064][ T9636] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 567.113496][ T22] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 567.131868][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.139935][ T22] usb 6-1: Product: syz [ 567.166356][ T22] usb 6-1: Manufacturer: syz [ 567.171029][ T22] usb 6-1: SerialNumber: syz [ 567.283313][ T9642] loop6: detected capacity change from 0 to 4096 [ 567.305756][ T9642] EXT4-fs: Ignoring removed mblk_io_submit option [ 567.319791][ T9642] EXT4-fs: inline encryption not supported [ 567.345382][ T9642] EXT4-fs (loop6): Test dummy encryption mode enabled [ 567.357377][ T9644] overlayfs: failed to clone upperpath [ 567.357392][ T9642] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 567.437571][ T6524] EXT4-fs (loop6): unmounting filesystem. [ 567.967026][ T9659] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1329'. [ 568.517739][ T22] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 568.781391][ T22] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 568.827520][ T22] usb 6-1: USB disconnect, device number 9 [ 568.834334][ T22] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 569.712623][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1341'. [ 570.571140][ T4290] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 570.581524][ T4290] CPU: 1 PID: 4290 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 570.589172][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 570.599261][ T4290] Workqueue: hci5 hci_rx_work [ 570.604048][ T4290] Call Trace: [ 570.607337][ T4290] [ 570.610283][ T4290] dump_stack_lvl+0x188/0x24e [ 570.615000][ T4290] ? show_regs_print_info+0x12/0x12 [ 570.620214][ T4290] ? load_image+0x400/0x400 [ 570.624753][ T4290] sysfs_create_dir_ns+0x26a/0x290 [ 570.629941][ T4290] ? sysfs_warn_dup+0xa0/0xa0 [ 570.634634][ T4290] ? do_raw_spin_unlock+0x11d/0x230 [ 570.640045][ T4290] kobject_add_internal+0x61c/0xcc0 [ 570.645294][ T4290] kobject_add+0x160/0x230 [ 570.649735][ T4290] ? kobject_init+0x1d0/0x1d0 [ 570.654450][ T4290] ? klist_children_get+0x50/0x50 [ 570.659529][ T4290] ? get_device_parent+0x121/0x3f0 [ 570.664655][ T4290] device_add+0x48c/0x1000 [ 570.669083][ T4290] ? kmem_cache_free+0xf7/0x290 [ 570.673987][ T4290] hci_conn_add_sysfs+0xd1/0x1e0 [ 570.678990][ T4290] le_conn_complete_evt+0x1062/0x1670 [ 570.684410][ T4290] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 570.690678][ T4290] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 570.696354][ T4290] ? skb_pull_data+0xf7/0x200 [ 570.701076][ T4290] hci_le_enh_conn_complete_evt+0x185/0x460 [ 570.706984][ T4290] ? hci_le_remote_conn_param_req_evt+0xce0/0xce0 [ 570.713431][ T4290] ? hci_remote_host_features_evt+0x270/0x270 [ 570.719506][ T4290] hci_event_packet+0x7b9/0x1280 [ 570.724458][ T4290] ? bis_list+0x280/0x280 [ 570.728790][ T4290] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 570.734727][ T4290] ? kcov_remote_start+0x4c7/0x7e0 [ 570.740024][ T4290] ? mt_dump_node+0x750/0x1920 [ 570.744797][ T4290] ? hci_send_to_monitor+0x9c/0x4a0 [ 570.750013][ T4290] hci_rx_work+0x3eb/0xd40 [ 570.754467][ T4290] ? _raw_spin_unlock+0x40/0x40 [ 570.759365][ T4290] ? process_one_work+0x7b0/0x1160 [ 570.764579][ T4290] process_one_work+0x8a2/0x1160 [ 570.769546][ T4290] ? worker_detach_from_pool+0x240/0x240 [ 570.775196][ T4290] ? _raw_spin_lock_irq+0xb7/0xf0 [ 570.780231][ T4290] ? _raw_spin_lock_irqsave+0x100/0x100 [ 570.785837][ T4290] ? kthread_data+0x4b/0xc0 [ 570.790398][ T4290] worker_thread+0xaa2/0x1270 [ 570.795103][ T4290] ? __kthread_parkme+0x162/0x1c0 [ 570.800147][ T4290] kthread+0x29d/0x330 [ 570.804229][ T4290] ? worker_clr_flags+0x1a0/0x1a0 [ 570.809279][ T4290] ? kthread_blkcg+0xd0/0xd0 [ 570.813883][ T4290] ret_from_fork+0x1f/0x30 [ 570.818365][ T4290] [ 570.835380][ T4290] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 570.849148][ T4290] Bluetooth: hci5: failed to register connection device [ 570.942504][ T9721] loop4: detected capacity change from 0 to 4096 [ 571.380416][ T4274] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 571.389475][ T4274] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 571.610513][ T9735] loop5: detected capacity change from 0 to 1024 [ 571.651393][ T9735] EXT4-fs: Ignoring removed bh option [ 571.702880][ T9737] netlink: 'syz.6.1356': attribute type 1 has an invalid length. [ 571.712122][ T9737] netlink: 'syz.6.1356': attribute type 2 has an invalid length. [ 571.735735][ T9735] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 571.831416][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'. [ 571.946887][ T6429] EXT4-fs (loop5): unmounting filesystem. [ 572.063841][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056cdec00: rx timeout, send abort [ 572.605516][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880585ad400: rx timeout, send abort [ 572.616126][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056cdec00: abort rx timeout. Force session deactivation [ 572.799922][ T9766] netlink: 'syz.6.1366': attribute type 3 has an invalid length. [ 572.997784][ T9770] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1367'. [ 573.035546][ T9770] loop5: detected capacity change from 0 to 512 [ 573.044684][ T9770] EXT4-fs: Ignoring removed nobh option [ 573.744964][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880585ad400: abort rx timeout. Force session deactivation [ 573.766989][ T9770] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 573.775899][ T9770] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1367: invalid indirect mapped block 256 (level 1) [ 573.789960][ T9770] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1367: invalid indirect mapped block 2683928664 (level 1) [ 573.805204][ T9770] EXT4-fs (loop5): 1 truncate cleaned up [ 573.811005][ T9770] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 573.822805][ T9770] EXT4-fs (loop5): unmounting filesystem. [ 575.128212][ T9814] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1382'. [ 575.967940][ T9817] loop6: detected capacity change from 0 to 4096 [ 576.043403][ T9817] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 576.154394][ T27] audit: type=1804 audit(1780676927.591:26): pid=9827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1383" name="/newroot/164/file1/file3" dev="loop6" ino=16 res=1 errno=0 [ 576.243247][ T6524] EXT4-fs (loop6): unmounting filesystem. [ 577.041472][ T9847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1392'. [ 577.065925][ T9844] loop5: detected capacity change from 0 to 32768 [ 577.103455][ T9844] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 577.124210][ T9847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 577.137392][ T9844] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 577.143467][ T9849] bond1: Unable to set down delay as MII monitoring is disabled [ 577.178943][ T9844] BTRFS info (device loop5): turning on sync discard [ 577.185920][ T9844] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 577.195876][ T9844] BTRFS info (device loop5): use zstd compression, level 3 [ 577.203138][ T9844] BTRFS info (device loop5): turning on async discard [ 577.210189][ T9844] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 577.220923][ T9844] BTRFS info (device loop5): trying to use backup root at mount time [ 577.229334][ T9844] BTRFS info (device loop5): enabling auto defrag [ 577.251138][ T9844] BTRFS info (device loop5): using free space tree [ 577.353474][ T9858] loop4: detected capacity change from 0 to 128 [ 577.509622][ T27] audit: type=1804 audit(1780676928.819:27): pid=9858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1393" name="/newroot/247/bus/bus" dev="loop4" ino=1048639 res=1 errno=0 [ 577.599924][ T9871] netlink: 'syz.3.1397': attribute type 1 has an invalid length. [ 577.602605][ T9873] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 577.627989][ T4457] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 577.638435][ T9873] FAT-fs (loop4): Filesystem has been set read-only [ 577.650161][ T9873] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 577.683381][ T9871] 8021q: adding VLAN 0 to HW filter on device bond2 [ 577.696506][ T9876] bond2: (slave geneve2): making interface the new active one [ 577.715619][ T9844] BTRFS error (device loop5): failed to load root extent [ 577.722758][ T9844] BTRFS warning (device loop5): try to load backup roots slot 1 [ 577.814998][ T41] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 577.829310][ T9876] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 577.851946][ T9844] BTRFS warning (device loop5): couldn't read tree root [ 577.871324][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 577.882169][ T9844] BTRFS warning (device loop5): try to load backup roots slot 2 [ 577.917722][ T9880] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 577.940715][ T9844] BTRFS error (device loop5): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 577.975751][ T9844] BTRFS warning (device loop5): couldn't read tree root [ 577.996271][ T9844] BTRFS warning (device loop5): try to load backup roots slot 3 [ 578.059603][ T9844] BTRFS info (device loop5): enabling ssd optimizations [ 578.088967][ T9844] BTRFS info (device loop5): rebuilding free space tree [ 578.115900][ T9858] syz.4.1393: attempt to access beyond end of device [ 578.115900][ T9858] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 578.131695][ T9858] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 578.240717][ T9844] BTRFS info (device loop5): checking UUID tree [ 578.472638][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1406'. [ 578.569886][ T6429] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 579.406492][ T9930] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 579.921734][ T9942] loop2: detected capacity change from 0 to 7 [ 579.954443][ T9942] Dev loop2: unable to read RDB block 7 [ 579.988895][ T9942] loop2: AHDI p1 p2 p3 [ 580.002023][ T9942] loop2: partition table partially beyond EOD, truncated [ 580.018743][ T9942] loop2: p1 start 1601398130 is beyond EOD, truncated [ 580.034416][ T9942] loop2: p2 start 1702059890 is beyond EOD, truncated [ 580.441904][ T4290] Bluetooth: Wrong link type (-71) [ 580.847475][ T9938] loop4: detected capacity change from 0 to 32768 [ 580.883041][ T9938] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1417 (9938) [ 580.927876][ T9938] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 580.956357][ T9938] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 581.003065][ T9938] BTRFS info (device loop4): enabling auto defrag [ 581.044352][ T9938] BTRFS info (device loop4): use no compression [ 581.054022][ T9938] BTRFS info (device loop4): max_inline at 4096 [ 581.063486][ T9938] BTRFS info (device loop4): using free space tree [ 581.286197][ T9938] BTRFS info (device loop4): enabling ssd optimizations [ 581.848036][ T4274] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 581.960171][ T9926] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 581.991665][ T9926] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 582.856492][T10042] loop6: detected capacity change from 0 to 512 [ 582.865646][T10042] EXT4-fs: Ignoring removed nobh option [ 583.089437][T10042] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 583.100580][T10042] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1446: invalid indirect mapped block 256 (level 1) [ 583.118070][T10042] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1446: invalid indirect mapped block 2683928664 (level 1) [ 583.141917][T10042] EXT4-fs (loop6): 1 truncate cleaned up [ 583.147816][T10042] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 583.182308][T10042] EXT4-fs (loop6): unmounting filesystem. [ 584.316363][ T9978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 584.936267][T10056] fido_id[10056]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 585.264169][T10066] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1453'. [ 585.280667][T10066] loop5: detected capacity change from 0 to 512 [ 585.287642][T10066] EXT4-fs: Ignoring removed nobh option [ 585.538507][T10066] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 585.551623][T10066] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1453: invalid indirect mapped block 256 (level 1) [ 585.567647][T10066] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1453: invalid indirect mapped block 2683928664 (level 1) [ 585.588642][T10066] EXT4-fs (loop5): 1 truncate cleaned up [ 585.594551][T10066] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 585.625631][T10066] EXT4-fs (loop5): unmounting filesystem. [ 586.530938][T10075] loop6: detected capacity change from 0 to 1024 [ 586.720745][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 586.727194][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 586.743874][T10081] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1458'. [ 586.763907][T10081] loop5: detected capacity change from 0 to 512 [ 586.771639][T10081] EXT4-fs: Ignoring removed nobh option [ 587.491153][T10081] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 587.501097][T10081] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1458: invalid indirect mapped block 256 (level 1) [ 587.625843][T10081] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1458: invalid indirect mapped block 2683928664 (level 1) [ 587.641469][T10081] EXT4-fs (loop5): 1 truncate cleaned up [ 587.647360][T10081] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 587.659179][T10081] EXT4-fs (loop5): unmounting filesystem. [ 588.630573][T10122] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1468'. [ 588.668098][T10122] loop5: detected capacity change from 0 to 512 [ 588.676032][T10122] EXT4-fs: Ignoring removed nobh option [ 588.824239][T10122] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 588.840853][T10122] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1468: invalid indirect mapped block 256 (level 1) [ 588.862204][T10122] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1468: invalid indirect mapped block 2683928664 (level 1) [ 588.880031][T10122] EXT4-fs (loop5): 1 truncate cleaned up [ 588.885905][T10122] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 588.914198][T10122] EXT4-fs (loop5): unmounting filesystem. [ 590.145870][ T27] audit: type=1326 audit(1780676940.507:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1478" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4b9ce59 code=0x7ffc0000 [ 590.192182][ T27] audit: type=1326 audit(1780676940.507:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1478" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4b9ce59 code=0x7ffc0000 [ 590.311159][ T27] audit: type=1326 audit(1780676940.534:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1478" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4b9ce59 code=0x7ffc0000 [ 590.401173][ T27] audit: type=1326 audit(1780676940.534:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1478" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4b9ce59 code=0x7ffc0000 [ 590.468574][ T27] audit: type=1326 audit(1780676940.534:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1478" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7ff2e4b9ce59 code=0x7ffc0000 [ 590.497867][ T4291] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 590.533719][ T27] audit: type=1326 audit(1780676940.534:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1478" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4b9ce59 code=0x7ffc0000 [ 590.598752][T10156] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1483'. [ 590.615840][T10156] loop4: detected capacity change from 0 to 512 [ 590.622935][T10156] EXT4-fs: Ignoring removed nobh option [ 590.641392][T10136] loop6: detected capacity change from 0 to 32768 [ 590.669581][ T27] audit: type=1326 audit(1780676940.534:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1478" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4b9ce59 code=0x7ffc0000 [ 590.704186][T10156] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 590.712960][ T27] audit: type=1326 audit(1780676940.534:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1478" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4b9ce59 code=0x7ffc0000 [ 590.713617][T10156] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1483: invalid indirect mapped block 256 (level 1) [ 590.737586][ T27] audit: type=1326 audit(1780676940.534:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1478" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e4b9ce59 code=0x7ffc0000 [ 590.754658][ T4291] usb 6-1: unable to get BOS descriptor or descriptor too short [ 590.775917][ T27] audit: type=1326 audit(1780676940.534:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1478" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2e4b5d68e code=0x7ffc0000 [ 590.785376][T10156] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1483: invalid indirect mapped block 2683928664 (level 1) [ 590.833427][T10156] EXT4-fs (loop4): 1 truncate cleaned up [ 590.839390][T10156] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 590.854342][T10136] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1474 (10136) [ 590.855657][T10156] EXT4-fs (loop4): unmounting filesystem. [ 590.891095][ T4291] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.902532][ T4291] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 590.917905][ T4291] usb 6-1: string descriptor 0 read error: -22 [ 590.924808][ T4291] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 590.934531][ T4291] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.958281][T10136] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 590.972613][T10136] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 590.985421][ T4291] usb 6-1: selecting invalid altsetting 1 [ 590.991671][ T4291] usb 6-1: unit 6 not found! [ 590.997812][T10136] BTRFS info (device loop6): turning on sync discard [ 591.020672][T10136] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 591.030645][T10136] BTRFS info (device loop6): use zstd compression, level 3 [ 591.039222][T10136] BTRFS info (device loop6): turning on async discard [ 591.046800][T10136] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 591.079269][T10136] BTRFS info (device loop6): trying to use backup root at mount time [ 591.101868][T10136] BTRFS info (device loop6): enabling auto defrag [ 591.119653][T10136] BTRFS info (device loop6): using free space tree [ 591.266482][ T4446] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 591.282441][T10136] BTRFS error (device loop6): failed to load root extent [ 591.290209][T10136] BTRFS warning (device loop6): try to load backup roots slot 1 [ 591.299848][ T4446] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 591.315049][T10136] BTRFS warning (device loop6): couldn't read tree root [ 591.339506][T10136] BTRFS warning (device loop6): try to load backup roots slot 2 [ 591.439929][T10136] BTRFS error (device loop6): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 591.492085][T10136] BTRFS warning (device loop6): couldn't read tree root [ 591.520444][T10136] BTRFS warning (device loop6): try to load backup roots slot 3 [ 591.610998][T10136] BTRFS info (device loop6): enabling ssd optimizations [ 591.632874][T10136] BTRFS info (device loop6): rebuilding free space tree [ 591.719127][T10136] BTRFS info (device loop6): checking UUID tree [ 591.875572][ T4291] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 591.958462][ T4291] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 591.992105][ T4291] usb 6-1: USB disconnect, device number 10 [ 592.015674][ T6524] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 592.063446][ T7018] udevd[7018]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 592.292051][ T6991] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop6 scanned by udevd (6991) [ 592.650655][T10206] loop5: detected capacity change from 0 to 128 [ 592.690409][T10206] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 592.720023][T10206] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 592.798769][T10206] syz.5.1492 (pid 10206) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 594.091512][T10212] fscrypt (loop5, inode 12): Error allocating 'adiantum(xchacha12,aes)' transform: -4 [ 594.195919][ T6429] EXT4-fs (loop5): unmounting filesystem. [ 596.017113][T10238] loop5: detected capacity change from 0 to 32768 [ 596.193310][T10238] loop5: detected capacity change from 32768 to 32767 [ 596.278030][T10271] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 596.278030][T10271] [ 596.334285][T10271] ERROR: (device loop5): remounting filesystem as read-only [ 596.353803][T10271] ERROR: (device loop5): duplicateIXtree: [ 596.353803][T10271] [ 596.662878][ T9771] ------------[ cut here ]------------ [ 596.669069][ T9771] kernel BUG at fs/jfs/inode.c:175! [ 596.675281][ T9771] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 596.681396][ T9771] CPU: 1 PID: 9771 Comm: syz.5.1367 Not tainted syzkaller #0 [ 596.688780][ T9771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 596.698864][ T9771] RIP: 0010:jfs_evict_inode+0x42d/0x430 [ 596.704428][ T9771] Code: e6 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 1d 9b e6 fe e9 16 fe ff ff e8 73 93 95 fe <0f> 0b 90 41 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff [ 596.724054][ T9771] RSP: 0018:ffffc900057df5e0 EFLAGS: 00010293 [ 596.730160][ T9771] RAX: ffffffff82ece82d RBX: ffff88807466e0b0 RCX: ffff888063913c00 [ 596.738163][ T9771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807466e0b0 [ 596.746137][ T9771] RBP: 0000000000000001 R08: ffffffff90aff3ff R09: 1ffffffff215fe7f [ 596.754200][ T9771] R10: dffffc0000000000 R11: fffffbfff215fe80 R12: dffffc0000000000 [ 596.762175][ T9771] R13: dffffc0000000000 R14: ffff88807466dd38 R15: ffff88807466e0d8 [ 596.770172][ T9771] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 596.779122][ T9771] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 596.785722][ T9771] CR2: 00002000000bd038 CR3: 0000000056ad7000 CR4: 00000000003526e0 [ 596.793709][ T9771] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 596.801699][ T9771] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 596.809677][ T9771] Call Trace: [ 596.813076][ T9771] [ 596.816032][ T9771] ? evict+0x4c3/0x8d0 [ 596.820161][ T9771] ? jfs_write_inode+0x220/0x220 [ 596.825115][ T9771] evict+0x4c9/0x8d0 [ 596.829033][ T9771] ? proc_nr_inodes+0x2f0/0x2f0 [ 596.833921][ T9771] ? do_raw_spin_unlock+0x11d/0x230 [ 596.839129][ T9771] ? do_raw_spin_unlock+0x11d/0x230 [ 596.844329][ T9771] evict_inodes+0x60c/0x6a0 [ 596.848837][ T9771] ? clear_inode+0x150/0x150 [ 596.853433][ T9771] generic_shutdown_super+0x93/0x340 [ 596.858774][ T9771] kill_block_super+0x7c/0xe0 [ 596.863454][ T9771] deactivate_locked_super+0x93/0xf0 [ 596.868763][ T9771] cleanup_mnt+0x42c/0x4b0 [ 596.873199][ T9771] ? lockdep_hardirqs_on+0x94/0x140 [ 596.878405][ T9771] task_work_run+0x1d0/0x260 [ 596.883018][ T9771] ? task_work_cancel+0x220/0x220 [ 596.888050][ T9771] ? do_exit+0x97d/0x2480 [ 596.892465][ T9771] ? kmem_cache_free+0xf7/0x290 [ 596.897325][ T9771] do_exit+0x982/0x2480 [ 596.901495][ T9771] ? put_task_struct+0x80/0x80 [ 596.906270][ T9771] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 596.912265][ T9771] ? lock_chain_count+0x20/0x20 [ 596.917145][ T9771] do_group_exit+0x217/0x2d0 [ 596.921744][ T9771] ? lockdep_hardirqs_on+0x94/0x140 [ 596.926997][ T9771] get_signal+0x1272/0x1350 [ 596.931603][ T9771] arch_do_signal_or_restart+0xc4/0x1350 [ 596.937362][ T9771] ? debug_object_free+0x2c2/0x470 [ 596.942520][ T9771] ? hrtimer_nanosleep+0x2ae/0x370 [ 596.947641][ T9771] ? get_sigframe_size+0x10/0x10 [ 596.952586][ T9771] ? __remove_hrtimer+0x470/0x470 [ 596.957621][ T9771] ? __se_sys_clock_nanosleep+0x30b/0x3a0 [ 596.963345][ T9771] ? exit_to_user_mode_loop+0x3b/0x110 [ 596.968866][ T9771] exit_to_user_mode_loop+0x70/0x110 [ 596.974164][ T9771] exit_to_user_mode_prepare+0xee/0x180 [ 596.979721][ T9771] syscall_exit_to_user_mode+0x16/0x40 [ 596.985187][ T9771] do_syscall_64+0x58/0xa0 [ 596.989694][ T9771] ? clear_bhb_loop+0x60/0xb0 [ 596.994404][ T9771] ? clear_bhb_loop+0x60/0xb0 [ 596.999126][ T9771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.005049][ T9771] RIP: 0033:0x7ff2e4b5d68e [ 597.009476][ T9771] Code: Unable to access opcode bytes at 0x7ff2e4b5d664. [ 597.017127][ T9771] RSP: 002b:00007ff2e5a40f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 597.025546][ T9771] RAX: fffffffffffffdfc RBX: 00007ff2e5a416c0 RCX: 00007ff2e4b5d68e [ 597.033540][ T9771] RDX: 00007ff2e5a40fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 597.041533][ T9771] RBP: 00007ff2e4c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 597.049521][ T9771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.057505][ T9771] R13: 00007ff2e4e16218 R14: 00007ff2e4e16180 R15: 00007ffef466d578 [ 597.065487][ T9771] [ 597.068517][ T9771] Modules linked in: [ 597.073082][ T9771] ---[ end trace 0000000000000000 ]--- [ 597.078577][ T9771] RIP: 0010:jfs_evict_inode+0x42d/0x430 [ 597.084191][ T9771] Code: e6 fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 1d 9b e6 fe e9 16 fe ff ff e8 73 93 95 fe <0f> 0b 90 41 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff [ 597.104491][ T9771] RSP: 0018:ffffc900057df5e0 EFLAGS: 00010293 [ 597.110945][ T9771] RAX: ffffffff82ece82d RBX: ffff88807466e0b0 RCX: ffff888063913c00 [ 597.119008][ T9771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807466e0b0 [ 597.127038][ T9771] RBP: 0000000000000001 R08: ffffffff90aff3ff R09: 1ffffffff215fe7f [ 597.135057][ T9771] R10: dffffc0000000000 R11: fffffbfff215fe80 R12: dffffc0000000000 [ 597.143118][ T9771] R13: dffffc0000000000 R14: ffff88807466dd38 R15: ffff88807466e0d8 [ 597.150792][T10287] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1517'. [ 597.151169][ T9771] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 597.169369][ T9771] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 597.175988][ T9771] CR2: 00002000000bd038 CR3: 0000000056ad7000 CR4: 00000000003526e0 [ 597.184127][ T9771] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 597.192388][ T9771] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 597.200439][ T9771] Kernel panic - not syncing: Fatal exception [ 597.206671][ T9771] Kernel Offset: disabled [ 597.210998][ T9771] Rebooting in 86400 seconds..