last executing test programs: 15m50.466797622s ago: executing program 1 (id=4649): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 15m50.313971381s ago: executing program 1 (id=4651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, r2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x17, 0x0, 0x4f}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 15m48.578887735s ago: executing program 1 (id=4667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000007000000ff0f00000900000000000000", @ANYRES32, @ANYBLOB="efffffffffffffff0000000000000000000000000c1551579cb63cbae65611b09b29730b0fa0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000003c0)="e4", 0x1}, {&(0x7f0000000100)}], 0x3) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 15m46.749032557s ago: executing program 1 (id=4674): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 15m46.333318895s ago: executing program 1 (id=4679): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) read(0xffffffffffffffff, &(0x7f0000001600)=""/233, 0xe9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000040), 0x0, 0x4) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x54877) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x1e0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0x13c, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x106, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [{0x0, 0x1b, "e6b128f1f07453ed8e501a180f87875cfd93599c7b7c7b7d463ebbf31ccd5f74e3a7bd3733a8d38f0021f7f22a63a326918b97acaf2687d503915f0120fc9cea280f423304842e5f2304bc7b1b47d8c6a318e457835f611cf3e007035abd56a797edfa270e2aff92da93d302c3fc522106289f83307474eddcb2967e7dcbd5276cb0c196103ca44ef46bd3656202c2bc3d40e885b91412e4ba9a32c5d3e4e2779ed8dbe23fc5811fbd9cf5786ae1b8547e473be21317ff5d380a9eb7481ac2809b20c81f3afaa68459402d5022fb0948085417e498576f0000000000"}]}}}}}}, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000180)=0x1, 0x4) 15m46.048142854s ago: executing program 1 (id=4681): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a00", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 15m45.988133834s ago: executing program 32 (id=4681): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a00", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 6.224913345s ago: executing program 2 (id=9551): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000005c0)=ANY=[]) 5.920784223s ago: executing program 2 (id=9552): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14000000270001000000"], 0x14}], 0x1}, 0x0) 5.860873393s ago: executing program 2 (id=9555): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$eJzs3M9rHFUcAPDvzCb93SbWKrRWjRYx+CNp0qo9eFEUPFQU9FCPcZOW0m0jTQRbio0i9SJIQc/iUfAv8OZF1JPgVe9SKBqEVk+R2Z1JN9vdZNNsdmv384Fp39t5M/O+O+/tvJm3mwD61kj2TxKxKyJ+i4ihWnZlgZHafzcXL5X/WbxUTmJp6a0/k2q5G4uXykXRYrudeWY0jUg/SfKDxNb63c5duHhmqlKZOZ/nx+fPvjc+d+His6fPTp2aOTVzbvLYsaNHJl54fvK5tuJI1lifxXXjwIezB/e/9s7V18snrr7707fZNrvy9fVxdMpIFvhfS1WN657o9MF6bHddOhnoYUVYl1JEZKdrsNr/h6IUt07eULz6cU8rB2yq7Nq0tfXqhSXgHpbE2mX+7kZFgC4rLvTZ/W+xdGnocVe4/lLtBiiL+2a+1NYMRJqXGWy4v+2kkYg4sfDvV9kSm/QcAgCg3mflL4/HM83Gf2k8WFduTz6HMhwR90XE3oi4PyL2RcQDEVnZxiFlW0Ya8rePf9JrdxhaW7Lx34v53NbK8V8x+ovhUp7bXY1/MDl5ujJzOH9PRmNwa5afWOUY37/y6+et1tWP/7IlO34xFszrcW2g4QHd9NT8VHVQ2gHXP4o4MNAs/mR5JiCJiP0RcWB9u95TJE4/9c3B7QebF1o7/lV0YJ5p6euIJ2vnfyEa4i8kq89Pjm+Lyszh8aJV3O7nX6682er4LeLfsvHI2pOd/x0r239jkeGkfr52bv3HuPL7py3vae60/W9J3q6el+KN+mBqfv78RMSW5Hg1v+L1yVvbFvmifBb/6KHm/X9vvk12nIciImvCD0fEIxHxaF73xyLi8Yg4tEr8P76cJ5q01w21/w7I4p9u+vm33P4bzv/6E6UzP3xX7GzbuuPPzv/Ramo0f6X6+beGdiu40fcPAAAA/g/S6nfgk3RsOZ2mY2O17/Dvix1pZXZu/umTs++fm659V344BtPiSddQ3fPQiWQh32MtP5k/Ky7WH8mfG39R2l7Nj5VnK9M9jh363c4W/T/zR6nXtQM2XbN5tMmuTUEBvdTY/9OV2ctvdLMyQFf5vTb0rzX6f9qtegDd5/oP/atZ/7/ckDcXAPcm13/oX/o/9C/9H/qX/g99aSO/65fo50Sklcr0tojVCxd/EOjuqLNE+4lefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xn8BAAD///xQ9VA=") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2080082, &(0x7f0000000800)={[{@user_xattr}, {@noquota}, {@orlov}, {@jqfmt_vfsv1}, {@block_validity}, {@errors_remount}, {@noquota}, {@dax_always}, {@delalloc}, {@jqfmt_vfsv0}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x36bc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000200850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) mount$cgroup2(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB='fscontext=']) 5.832282453s ago: executing program 4 (id=9556): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@enum64={0xf, 0x0, 0x0, 0x13, 0x0, 0x4}, @ptr={0x9, 0x0, 0x0, 0x2, 0x5}, @typedef={0x0, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x30]}}, &(0x7f0000000180)=""/128, 0x3f, 0x80, 0x0, 0x4, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800054004000000", 0x58}], 0x1) socket$inet6(0xa, 0x80003, 0xff) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4) ftruncate(0xffffffffffffffff, 0x7) openat$vcs(0xffffffffffffff9c, 0x0, 0x4480, 0x0) 4.90983784s ago: executing program 4 (id=9559): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x40000000004) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2a, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x390, 0xf0, 0xffffffff, 0x2a0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private1, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@multicast1, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x726) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gre0\x00'}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 4.148018446s ago: executing program 5 (id=9561): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x94d, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 4.017444556s ago: executing program 3 (id=9563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$userns(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setreuid(0x0, 0xee00) 3.880690515s ago: executing program 5 (id=9565): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 3.547554374s ago: executing program 4 (id=9566): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e54e9d911d4993a8cfaa9fc0f67742d726f2c6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646f74732c646f74732c6e6f646f74732c6e6f647f0000006e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646973636172642c646f74732c646f74732c747a3d5554432c6572726f72733d636f6e74696e75652c6e6f646f74732c7379735f696d6d757461626c652c71756965742c646f74732c00"], 0xfd, 0x1bf, &(0x7f0000000840)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x40000000004) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/200, 0x8}) r6 = socket(0x200000000000011, 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000280)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2, 0x2}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x390, 0xf0, 0xffffffff, 0x2a0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private1, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@multicast1, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x726) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6gre0\x00'}) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) 3.515471904s ago: executing program 5 (id=9567): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0x12) 3.474271034s ago: executing program 5 (id=9568): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x558b, &(0x7f00000079c0)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) 2.890095941s ago: executing program 3 (id=9570): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x80000) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) getpeername$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="757466383d312c757466383d312c756e695f786c6174653d312c636f6465706167653d3835322c696f636861727365743d69736f383835392d372c756e695f786c6174653d302c73686f72746e616d653d77696e39352c696f636861727365743d6b6f69382d752c726f6469722c6e6f6e756d7461696c3d302c696f636861727365740500703733372c6e6f6e756d7461696c3d302c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c00"], 0x1, 0x2ad, &(0x7f0000000580)="$eJzs3c9qY1UYAPDvpmly1UWycCWKF3ThapjOE6RIBwazUrJQFyrODMgkCDNQ8A/GWQmu3Lj0CQRhdr6EG9/ABxDc2UXhyE3ubZKapL3QtP75/TY9Ped893znntuWLu6XD1+ePLpfxMOnX/4WeZ5FaxCDOMmiH62ofR0rBt8FAPBvdpJS/JHmmsRlEZHvLi0AYIca//1/tvOUAIAde+fd9946HA6P3i6KPO5Ovjkelf/Zl1/n44cP45MYx4O4Hb04jUhn5u27KaVpuyj14/XJ9HhURk4++KW6/uHvEbP4g+hFf9a1Gn9veHRQzC3FT8s8nq/WH5Txd6IXL65Z/97w6M6a+Bh14o3XlvK/Fb349eP4NMZxf5bEIv6rg6J4M33/5xfvl+mV8dn0eNSdzVtIe9d8NAAAAAAAAAAAAAAAAAAAAAAA/IfdqmrndGNWv6fsqurv7J2W3+xHUeuv1ueZx2f1hc7VB5qm+KGur3O7KIpUTVzEt+OldrRvZtcAAAAAAAAAAAAAAAAAAADwz/Lks88ffTQeP3h8JY26GkD9Wn/z6zybRQ2Wel6N7VHdxVqtqrllidir52QRW/MpN3FFt+WixnObcv7xp6YXzC+es1+ulW+aUx5hw0Xr417qibonW38Pu2eT8/oh+bnuSSmlTlxy9c6modTo8eusHeo1PsrOC7PGdMucyDYl9u0ri5/Laig7v4vOyn1eaexXjdh0gnmj5/nvvysy1ToAAAAAAAAAAAAAAAAAAGCnFi/9rhl8ujW0lbo7SwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArtXi8/8bNKZV8CUmd+LxkxveIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8DfwUAAP//o0VbPQ==") socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @empty}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000180)={[{@usrjquota}]}, 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x7fff, 0x8, [0x9c1, 0xf, 0x1, 0x100000001], &(0x7f0000000040)=[0x0]}) 2.54127681s ago: executing program 4 (id=9572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x4, 0x15, 0x20, 0x0, "c3fea293681a0fa1ff856aa471fe2617dfb4eb45d73158000000568e00"}) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000197a202c132af351de8fdb20c1e1870d14a0000000000006e47ab096c8b75545cd60592e6691d274f836bb6be4bf4418dab2cf8be3b090484d4a46c68c146caca85cea1b36296d2bff7ae1abcc926a4cd80a1ac34647db29543a276fc5d62078379a945d9561226eb634d"], 0x48) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan3\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c000000000085100000020000008500000005000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.370051869s ago: executing program 0 (id=9573): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) set_tid_address(0x0) 2.278030589s ago: executing program 0 (id=9574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000005c0)=ANY=[]) 2.227761478s ago: executing program 0 (id=9575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$userns(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f00000002c0)) 1.840401917s ago: executing program 0 (id=9576): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x4b52, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) bind$bt_hci(r5, 0x0, 0x0) write(r5, &(0x7f0000000040)="05000000010001", 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x38}}, 0x0) recvmsg(r5, &(0x7f0000000480)={&(0x7f0000000940)=@sco, 0x80, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x12000) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) 1.839800367s ago: executing program 3 (id=9577): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x40000000004) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2a, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@get={0x1, 0x0, 0x8}) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x390, 0xf0, 0xffffffff, 0x2a0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private1, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@multicast1, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x726) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gre0\x00'}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 1.779250487s ago: executing program 2 (id=9578): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.501334116s ago: executing program 5 (id=9579): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) 1.485578596s ago: executing program 4 (id=9580): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e54e9d911d4993a8cfaa9fc0f67742d726f2c6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646f74732c646f74732c6e6f646f74732c6e6f647f0000006e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646973636172642c646f74732c646f74732c747a3d5554432c6572726f72733d636f6e74696e75652c6e6f646f74732c7379735f696d6d757461626c652c71756965742c646f74732c00"], 0xfd, 0x1bf, &(0x7f0000000840)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x200000000000011, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6gre0\x00'}) 1.471884716s ago: executing program 0 (id=9581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$userns(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setreuid(0x0, 0xee00) 1.313847515s ago: executing program 3 (id=9582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r4 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)={0x14, r6, 0x607}, 0x14}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05000000000000000000220000000a000100777084682fff"], 0x20}}, 0x4000000) sendmsg$IEEE802154_START_REQ(r7, 0x0, 0x20000080) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000000c0)={0x1, {{0xa, 0x4204, 0xffffffff, @mcast1, 0xd57a}}}, 0x90) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') 783.193183ms ago: executing program 2 (id=9583): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x4}}}}]}, 0x4c}}, 0x0) 757.117672ms ago: executing program 5 (id=9584): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r8, 0x800, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) accept(r5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x200012, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES32], 0x1, 0x52b, &(0x7f0000001600)="$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") syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="0100000000ffc219352e110000000000030000005800028044000400200001000a000000000000005b8000000000000000000000000000200002000a0002000000000000000000000000000000000000000000000000000d"], 0x6c}}, 0x0) 268.206561ms ago: executing program 0 (id=9585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000005c0)=ANY=[]) 267.431051ms ago: executing program 3 (id=9586): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c00000014000180080003000100000008000100", @ANYRES32=r5], 0x28}}, 0x0) 153.91333ms ago: executing program 4 (id=9587): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000feffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 27.25209ms ago: executing program 2 (id=9588): ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000001c0)={0x1}) r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) getpeername$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="757466383d312c757466383d312c756e695f786c6174653d312c636f6465706167653d3835322c696f636861727365743d69736f383835392d372c756e695f786c6174653d302c73686f72746e616d653d77696e39352c696f636861727365743d6b6f69382d752c726f6469722c6e6f6e756d7461696c3d302c696f636861727365740500703733372c6e6f6e756d7461696c3d302c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c00"], 0x1, 0x2ad, &(0x7f0000000580)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @empty}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000180)={[{@usrjquota}]}, 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000080)={0x7fff, 0x8, [0x9c1, 0xf, 0x1, 0x100000001], &(0x7f0000000040)=[0x0]}) 0s ago: executing program 3 (id=9589): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) kernel console output (not intermixed with test programs): loop3): Directory bread(block 66) failed [ 1616.294448][T30340] FAT-fs (loop3): Directory bread(block 67) failed [ 1616.300798][T30340] FAT-fs (loop3): Directory bread(block 68) failed [ 1616.307188][T30340] FAT-fs (loop3): Directory bread(block 69) failed [ 1616.313607][T30340] FAT-fs (loop3): Directory bread(block 70) failed [ 1616.320144][T30340] FAT-fs (loop3): Directory bread(block 71) failed [ 1616.326600][T30340] FAT-fs (loop3): Directory bread(block 72) failed [ 1616.332971][T30340] FAT-fs (loop3): Directory bread(block 73) failed [ 1616.550660][T30350] loop5: detected capacity change from 0 to 512 [ 1616.598116][T30350] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.5.8881: corrupted xattr block 95 [ 1616.610647][T30350] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.8881: bg 0: block 7: invalid block bitmap [ 1616.772283][T30350] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1616.781282][T30350] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2932: inode #11: comm syz.5.8881: corrupted xattr block 95 [ 1616.793998][T30350] EXT4-fs warning (device loop5): ext4_evict_inode:303: xattr delete (err -117) [ 1616.802880][T30350] EXT4-fs (loop5): 1 orphan inode deleted [ 1616.808387][T30350] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1617.053508][T30358] loop3: detected capacity change from 0 to 128 [ 1617.585908][T30361] loop4: detected capacity change from 0 to 256 [ 1617.650303][T30361] FAT-fs (loop4): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1617.828724][T30372] loop5: detected capacity change from 0 to 128 [ 1618.720951][T30384] loop0: detected capacity change from 0 to 256 [ 1618.893352][T30384] FAT-fs (loop0): Directory bread(block 64) failed [ 1618.902803][T30384] FAT-fs (loop0): Directory bread(block 65) failed [ 1618.909432][T30384] FAT-fs (loop0): Directory bread(block 66) failed [ 1618.915894][T30384] FAT-fs (loop0): Directory bread(block 67) failed [ 1619.272372][T30401] loop4: detected capacity change from 0 to 512 [ 1619.280567][T30384] FAT-fs (loop0): Directory bread(block 68) failed [ 1619.286990][T30384] FAT-fs (loop0): Directory bread(block 69) failed [ 1619.299385][T30384] FAT-fs (loop0): Directory bread(block 70) failed [ 1619.305948][T30384] FAT-fs (loop0): Directory bread(block 71) failed [ 1619.318788][T30384] FAT-fs (loop0): Directory bread(block 72) failed [ 1619.331667][T30401] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.4.8897: corrupted xattr block 95 [ 1619.344431][T30401] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.8897: bg 0: block 7: invalid block bitmap [ 1619.357411][T30401] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1619.366334][T30401] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2932: inode #11: comm syz.4.8897: corrupted xattr block 95 [ 1619.378763][T30401] EXT4-fs warning (device loop4): ext4_evict_inode:303: xattr delete (err -117) [ 1619.387682][T30401] EXT4-fs (loop4): 1 orphan inode deleted [ 1619.393230][T30401] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1619.406449][T30384] FAT-fs (loop0): Directory bread(block 73) failed [ 1619.653372][T30409] loop2: detected capacity change from 0 to 128 [ 1619.700263][T30409] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1619.773793][T30417] loop3: detected capacity change from 0 to 128 [ 1619.790408][T30409] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1619.831877][T30409] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1619.931927][T30417] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1619.942099][T30417] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1619.954696][T30417] ext4 filesystem being mounted at /595/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1620.536389][T30409] tmpfs: Unknown parameter 'nolazytimeÙþ' [ 1620.552916][T30417] tmpfs: Unknown parameter 'nolazytimeÙþ' [ 1620.570341][T30427] loop5: detected capacity change from 0 to 256 [ 1620.639067][T30427] exfat: Deprecated parameter 'utf8' [ 1620.644265][T30427] exfat: Deprecated parameter 'namecase' [ 1620.650935][T30427] exfat: Deprecated parameter 'utf8' [ 1620.652974][T30429] loop4: detected capacity change from 0 to 256 [ 1620.658785][T30427] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1620.745513][T30429] FAT-fs (loop4): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1620.812935][T30435] loop5: detected capacity change from 0 to 512 [ 1620.910017][T30435] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.8907: inode #1: comm syz.5.8907: iget: illegal inode # [ 1620.924047][T30435] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.8907: error while reading EA inode 1 err=-117 [ 1621.149401][T30435] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.8907: inode #1: comm syz.5.8907: iget: illegal inode # [ 1621.227801][T30435] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.8907: error while reading EA inode 1 err=-117 [ 1621.254658][T30435] EXT4-fs (loop5): 1 orphan inode deleted [ 1621.263501][T30435] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 1621.393593][T30448] loop0: detected capacity change from 0 to 128 [ 1621.881369][T30456] loop4: detected capacity change from 0 to 512 [ 1621.916094][T30458] loop2: detected capacity change from 0 to 128 [ 1621.933177][T30456] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.4.8912: corrupted xattr block 95 [ 1621.949253][T30456] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.8912: bg 0: block 7: invalid block bitmap [ 1621.962179][T30456] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1621.970998][T30456] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2932: inode #11: comm syz.4.8912: corrupted xattr block 95 [ 1621.983200][T30456] EXT4-fs warning (device loop4): ext4_evict_inode:303: xattr delete (err -117) [ 1621.992150][T30456] EXT4-fs (loop4): 1 orphan inode deleted [ 1621.997651][T30456] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1622.009885][T30458] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1622.038880][T30458] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1622.087175][T30466] loop3: detected capacity change from 0 to 256 [ 1622.130367][T30466] exfat: Deprecated parameter 'utf8' [ 1622.299960][T30466] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xa943978a, utbl_chksum : 0xe619d30d) [ 1622.441185][ T1038] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1622.862552][T30479] loop4: detected capacity change from 0 to 512 [ 1622.873615][T30479] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1622.881261][T30479] EXT4-fs warning (device loop4): ext4_enable_quotas:6423: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1622.896178][T30479] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1622.903701][T30479] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz.4.8920: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1622.921933][T30479] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.8920: couldn't read orphan inode 13 (err -117) [ 1622.933839][T30479] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1622.946376][T30479] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1622.956118][T30479] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2 [ 1622.999111][T30483] loop0: detected capacity change from 0 to 1024 [ 1623.012712][T30485] loop4: detected capacity change from 0 to 256 [ 1623.059001][T30485] FAT-fs (loop4): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1623.088594][ T1038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1623.099372][ T1038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1623.108891][ T1038] usb 6-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 1623.117735][ T1038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.127848][ T1038] usb 6-1: config 0 descriptor?? [ 1623.139983][T30483] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1623.517918][T30491] loop3: detected capacity change from 0 to 512 [ 1623.607346][T30491] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.8924: inode #1: comm syz.3.8924: iget: illegal inode # [ 1623.620482][T30491] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.8924: error while reading EA inode 1 err=-117 [ 1623.632972][T30491] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.8924: inode #1: comm syz.3.8924: iget: illegal inode # [ 1623.646225][T30491] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.8924: error while reading EA inode 1 err=-117 [ 1623.659166][T30491] EXT4-fs (loop3): 1 orphan inode deleted [ 1623.664708][T30491] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 1623.742855][T30495] loop0: detected capacity change from 0 to 128 [ 1623.821753][ T1038] usbhid 6-1:0.0: can't add hid device: -71 [ 1623.832694][ T1038] usbhid: probe of 6-1:0.0 failed with error -71 [ 1624.021980][T30495] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1624.117955][ T1038] usb 6-1: USB disconnect, device number 27 [ 1624.135956][T30495] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1624.148604][T30495] ext4 filesystem being mounted at /573/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1624.175517][T30495] tmpfs: Unknown parameter 'nolazytimeÙþ' [ 1624.222323][T30501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.229190][T30501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.236681][T30501] device bridge_slave_0 entered promiscuous mode [ 1624.248256][T30501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.255315][T30501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.266948][T30501] device bridge_slave_1 entered promiscuous mode [ 1624.331258][T30501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.338154][T30501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1624.345263][T30501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.352030][T30501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1624.401429][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1624.410119][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.417329][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.550767][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1624.566308][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.573187][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1624.592060][T30517] loop5: detected capacity change from 0 to 128 [ 1624.624044][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1624.633558][T30519] loop3: detected capacity change from 0 to 128 [ 1624.637541][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.646493][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1624.676951][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1624.694982][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1624.726826][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1624.749520][T30501] device veth0_vlan entered promiscuous mode [ 1624.756053][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1624.775046][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1624.795227][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1624.823114][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1624.839643][T30501] device veth1_macvtap entered promiscuous mode [ 1624.860014][T24183] device bridge_slave_1 left promiscuous mode [ 1624.865946][T24183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.889850][T24183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.952298][T30232] Bluetooth: hci0: command 0x1003 tx timeout [ 1624.964207][T26280] Bluetooth: hci0: sending frame failed (-49) [ 1625.686064][T30526] overlayfs: missing 'workdir' [ 1625.730052][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1625.738667][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1625.749225][T30528] loop0: detected capacity change from 0 to 128 [ 1625.771255][T30530] loop4: detected capacity change from 0 to 512 [ 1625.810266][T30530] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1625.821331][T30530] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1625.834810][T30535] overlayfs: missing 'workdir' [ 1625.888168][T30528] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1625.898872][T30528] ext4 filesystem being mounted at /575/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1627.009756][T30549] loop0: detected capacity change from 0 to 256 [ 1627.016025][T30549] exfat: Deprecated parameter 'utf8' [ 1627.028548][ T1050] Bluetooth: hci0: command 0x1001 tx timeout [ 1627.034407][T26280] Bluetooth: hci0: sending frame failed (-49) [ 1627.061278][T30544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.068134][T30544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.081648][T30549] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xa943978a, utbl_chksum : 0xe619d30d) [ 1627.115045][T30544] device bridge_slave_0 entered promiscuous mode [ 1627.125154][T30544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.132135][T30544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.139489][T30544] device bridge_slave_1 entered promiscuous mode [ 1627.199738][T30555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8938'. [ 1627.208731][T30555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8938'. [ 1627.338690][T30563] loop5: detected capacity change from 0 to 128 [ 1627.365464][T30563] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1627.391325][T30544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.398189][T30544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1627.405315][T30544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.412069][T30544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1627.624971][T30569] IPv6: Can't replace route, no match found [ 1628.189546][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1628.196819][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.324422][T30563] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1628.336984][T30563] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1628.365213][T30563] tmpfs: Unknown parameter 'nolazytimeÙþ' [ 1628.365674][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1628.622835][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1628.630958][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1628.640758][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1628.649396][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.656233][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1628.664624][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1628.738961][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1628.747057][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.753922][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1629.108543][ T1038] Bluetooth: hci0: command 0x1009 tx timeout [ 1629.147124][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1629.155914][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1629.164647][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1629.172669][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1629.229609][T30544] device veth0_vlan entered promiscuous mode [ 1629.242466][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1629.253496][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1629.262788][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1629.271146][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1629.285155][T30544] device veth1_macvtap entered promiscuous mode [ 1629.292186][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1629.299990][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1629.319100][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1629.327588][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1629.337232][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1629.404554][T29819] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1629.423208][T30594] loop0: detected capacity change from 0 to 2048 [ 1629.582815][T29819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1629.595579][T30594] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: none. [ 1629.607027][T30594] ext4 filesystem being mounted at /579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1629.642413][T29819] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1629.663828][T29819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1629.761149][T24183] device bridge_slave_1 left promiscuous mode [ 1629.770548][T24183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.780288][T24183] device bridge_slave_0 left promiscuous mode [ 1629.781874][T30603] loop5: detected capacity change from 0 to 512 [ 1629.786281][T24183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.839990][T30603] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1629.851833][T24183] device veth1_macvtap left promiscuous mode [ 1629.852419][T30603] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1629.869490][T24183] device veth0_vlan left promiscuous mode [ 1630.047328][T30610] loop3: detected capacity change from 0 to 2048 [ 1630.546542][T30610] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1630.557288][T30610] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1630.897881][T30622] loop3: detected capacity change from 0 to 256 [ 1631.035663][T30622] FAT-fs (loop3): Directory bread(block 64) failed [ 1631.177767][T30622] FAT-fs (loop3): Directory bread(block 65) failed [ 1631.200570][T30622] FAT-fs (loop3): Directory bread(block 66) failed [ 1631.206923][T30622] FAT-fs (loop3): Directory bread(block 67) failed [ 1631.214578][T30622] FAT-fs (loop3): Directory bread(block 68) failed [ 1631.216186][T30630] loop0: detected capacity change from 0 to 128 [ 1631.227809][T30622] FAT-fs (loop3): Directory bread(block 69) failed [ 1631.234994][T30622] FAT-fs (loop3): Directory bread(block 70) failed [ 1631.241415][T30622] FAT-fs (loop3): Directory bread(block 71) failed [ 1631.247761][T30622] FAT-fs (loop3): Directory bread(block 72) failed [ 1631.254384][T30622] FAT-fs (loop3): Directory bread(block 73) failed [ 1631.266313][T30630] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1631.278783][T30630] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1631.292995][T30630] ext4 filesystem being mounted at /580/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1631.305630][T30630] tmpfs: Unknown parameter 'nolazytimeÙþ' [ 1631.411380][T30635] loop4: detected capacity change from 0 to 512 [ 1631.459480][T30635] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.4.8956: corrupted xattr block 95 [ 1631.472858][T30635] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.8956: bg 0: block 7: invalid block bitmap [ 1631.486002][T30635] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1631.495867][T30635] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2932: inode #11: comm syz.4.8956: corrupted xattr block 95 [ 1631.508396][T30635] EXT4-fs warning (device loop4): ext4_evict_inode:303: xattr delete (err -117) [ 1631.517397][T30635] EXT4-fs (loop4): 1 orphan inode deleted [ 1631.523049][T30635] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1633.100352][T30653] loop5: detected capacity change from 0 to 256 [ 1633.189137][T30653] exfat: Deprecated parameter 'namecase' [ 1633.208174][T30655] loop4: detected capacity change from 0 to 2048 [ 1633.220507][T30653] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1633.363937][T30660] loop2: detected capacity change from 0 to 256 [ 1633.424880][T30660] exfat: Deprecated parameter 'namecase' [ 1633.579021][T30660] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1633.625051][T30655] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1633.646875][T30655] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1633.747674][T30667] loop3: detected capacity change from 0 to 128 [ 1634.515309][T30667] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1634.533455][T30667] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1634.547114][T30667] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1634.560800][T30667] tmpfs: Unknown parameter 'nolazytimeÙþ' [ 1635.383481][T30700] loop2: detected capacity change from 0 to 512 [ 1635.642871][ T733] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1635.681897][T30700] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1635.691556][T30700] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.8973: bg 0: block 248: padding at end of block bitmap is not set [ 1635.752490][T30700] Quota error (device loop2): write_blk: dquota write failed [ 1635.783892][T30700] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1635.817917][T30700] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.8973: Failed to acquire dquot type 1 [ 1636.474426][T30700] EXT4-fs (loop2): 1 truncate cleaned up [ 1636.481821][T30700] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 1636.686563][T30706] loop5: detected capacity change from 0 to 2048 [ 1636.708904][ T733] usb 5-1: Using ep0 maxpacket: 32 [ 1636.778090][T30706] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1636.794089][T30706] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1636.868607][ T733] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 1636.886729][ T733] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.896944][ T733] usb 5-1: config 0 has no interface number 0 [ 1636.906181][ T733] usb 5-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1637.050086][T30732] loop5: detected capacity change from 0 to 256 [ 1637.107699][T30732] FAT-fs (loop5): Directory bread(block 64) failed [ 1637.114803][ T733] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1637.118822][T30732] FAT-fs (loop5): Directory bread(block 65) failed [ 1637.124416][ T733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.130645][T30732] FAT-fs (loop5): Directory bread(block 66) failed [ 1637.144172][ T733] usb 5-1: Product: syz [ 1637.144564][T30732] FAT-fs (loop5): Directory bread(block 67) failed [ 1637.148121][ T733] usb 5-1: Manufacturer: syz [ 1637.154811][T30732] FAT-fs (loop5): Directory bread(block 68) failed [ 1637.158965][ T733] usb 5-1: SerialNumber: syz [ 1637.165494][T30732] FAT-fs (loop5): Directory bread(block 69) failed [ 1637.174877][ T733] usb 5-1: config 0 descriptor?? [ 1637.176399][T30732] FAT-fs (loop5): Directory bread(block 70) failed [ 1637.187489][T30732] FAT-fs (loop5): Directory bread(block 71) failed [ 1637.194159][T30732] FAT-fs (loop5): Directory bread(block 72) failed [ 1637.201331][T30732] FAT-fs (loop5): Directory bread(block 73) failed [ 1637.527790][T30741] loop5: detected capacity change from 0 to 2048 [ 1637.570398][ T733] usb 5-1: USB disconnect, device number 34 [ 1637.600029][T30741] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1637.610532][T30741] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1638.003938][T30756] loop2: detected capacity change from 0 to 512 [ 1638.049177][T30756] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1638.072575][T30756] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1638.140985][T30768] loop3: detected capacity change from 0 to 512 [ 1638.184532][T30768] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.3.8990: corrupted xattr block 95 [ 1638.197576][T30768] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.8990: bg 0: block 7: invalid block bitmap [ 1638.209955][T30684] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1638.218050][T30768] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1638.227224][T30768] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2932: inode #11: comm syz.3.8990: corrupted xattr block 95 [ 1638.240019][T30768] EXT4-fs warning (device loop3): ext4_evict_inode:303: xattr delete (err -117) [ 1638.248956][T30768] EXT4-fs (loop3): 1 orphan inode deleted [ 1638.254466][T30768] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1638.460218][T30772] loop4: detected capacity change from 0 to 128 [ 1638.608848][T30684] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1638.643443][T30684] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1638.744682][T30772] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 1638.842206][T30684] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.856390][T30772] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1638.877961][T30684] usb 6-1: config 0 descriptor?? [ 1639.593195][T30790] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8999'. [ 1639.712988][T30684] logitech 0003:046D:C293.0013: collection stack underflow [ 1639.722733][T30684] logitech 0003:046D:C293.0013: item 0 4 0 12 parsing failed [ 1639.732392][T30684] logitech 0003:046D:C293.0013: parse failed [ 1639.738362][T30684] logitech: probe of 0003:046D:C293.0013 failed with error -22 [ 1639.915067][T30684] usb 6-1: USB disconnect, device number 28 [ 1640.368531][ T1050] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1640.475412][T30813] loop5: detected capacity change from 0 to 128 [ 1640.510481][T30805] loop4: detected capacity change from 0 to 40427 [ 1640.781817][T30805] F2FS-fs (loop4): fault_type options not supported [ 1640.802254][T30805] F2FS-fs (loop4): Unrecognized mount option "barrier" or missing value [ 1641.205196][ T1050] usb 1-1: Using ep0 maxpacket: 32 [ 1641.242171][T30820] overlayfs: missing 'workdir' [ 1641.368630][ T1050] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 1641.378534][ T1050] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1641.388730][ T1050] usb 1-1: config 0 has no interface number 0 [ 1641.394660][ T1050] usb 1-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1641.503040][T30826] loop5: detected capacity change from 0 to 128 [ 1641.578596][ T1050] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1641.587820][ T1050] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.595946][ T1050] usb 1-1: Product: syz [ 1641.598566][T30684] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1641.600202][ T1050] usb 1-1: Manufacturer: syz [ 1641.611873][ T1050] usb 1-1: SerialNumber: syz [ 1641.617363][T30826] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 1641.623688][ T1050] usb 1-1: config 0 descriptor?? [ 1641.636056][T30826] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1641.858662][T30684] usb 3-1: Using ep0 maxpacket: 16 [ 1641.978643][T30684] usb 3-1: config 0 has no interfaces? [ 1642.020199][ T1050] usb 1-1: USB disconnect, device number 36 [ 1642.041602][T30838] loop3: detected capacity change from 0 to 512 [ 1642.081869][T30838] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.9015: inode #1: comm syz.3.9015: iget: illegal inode # [ 1642.094848][T30838] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.9015: error while reading EA inode 1 err=-117 [ 1642.107193][T30838] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.9015: inode #1: comm syz.3.9015: iget: illegal inode # [ 1642.120276][T30838] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.9015: error while reading EA inode 1 err=-117 [ 1642.132335][T25058] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1642.132751][T30838] EXT4-fs (loop3): 1 orphan inode deleted [ 1642.145245][T30838] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 1642.158616][T30684] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1642.176546][T30684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.184393][T30684] usb 3-1: Product: syz [ 1642.188316][T30684] usb 3-1: Manufacturer: syz [ 1642.192780][T30684] usb 3-1: SerialNumber: syz [ 1642.197778][T30684] r8152-cfgselector 3-1: config 0 descriptor?? [ 1642.499029][T30684] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1642.667332][T30847] loop5: detected capacity change from 0 to 128 [ 1642.742720][T30684] r8152-cfgselector 3-1: USB disconnect, device number 28 [ 1642.857233][T25058] usb 5-1: config 0 has no interfaces? [ 1643.745598][T30858] IPv6: Can't replace route, no match found [ 1643.757525][T30847] overlayfs: missing 'workdir' [ 1643.788690][T25058] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1643.797697][T25058] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.805772][T25058] usb 5-1: Product: syz [ 1643.810243][T25058] usb 5-1: Manufacturer: syz [ 1643.814702][T25058] usb 5-1: SerialNumber: syz [ 1643.822304][T25058] r8152-cfgselector 5-1: config 0 descriptor?? [ 1643.966592][T30863] loop2: detected capacity change from 0 to 128 [ 1644.061451][T30870] loop3: detected capacity change from 0 to 256 [ 1644.076965][T30872] loop0: detected capacity change from 0 to 128 [ 1644.119205][T25058] r8152-cfgselector 5-1: Unknown version 0x0070 [ 1644.160502][T30872] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 1644.179292][T30870] FAT-fs (loop3): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1644.190500][T30872] ext4 filesystem being mounted at /593/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1646.103920][T30684] r8152-cfgselector 5-1: USB disconnect, device number 35 [ 1646.195423][ T1038] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1646.294459][T30897] loop0: detected capacity change from 0 to 128 [ 1646.607933][T30913] loop3: detected capacity change from 0 to 256 [ 1646.731602][ T1038] usb 6-1: Using ep0 maxpacket: 32 [ 1646.747200][T30913] FAT-fs (loop3): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1646.751093][ T30] audit: type=1326 audit(2000000190.970:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30914 comm="syz.4.9042" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7f5ff5d19 code=0x0 [ 1646.888586][ T1038] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 1646.896748][ T1038] usb 6-1: config 0 has no interface number 0 [ 1646.902700][ T1038] usb 6-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1646.915472][T30897] overlayfs: missing 'workdir' [ 1647.205735][T30928] loop0: detected capacity change from 0 to 128 [ 1647.248629][ T1038] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1647.259114][ T1038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.276031][ T1038] usb 6-1: config 0 descriptor?? [ 1647.305464][T30940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9051'. [ 1647.314714][ T1038] usb 6-1: can't set config #0, error -71 [ 1647.326815][ T1038] usb 6-1: USB disconnect, device number 29 [ 1647.352427][T30942] loop2: detected capacity change from 0 to 256 [ 1647.377163][T30942] FAT-fs (loop2): Directory bread(block 64) failed [ 1647.387779][T30942] FAT-fs (loop2): Directory bread(block 65) failed [ 1647.397443][T30942] FAT-fs (loop2): Directory bread(block 66) failed [ 1647.415975][T30942] FAT-fs (loop2): Directory bread(block 67) failed [ 1647.422672][T30942] FAT-fs (loop2): Directory bread(block 68) failed [ 1647.429234][T30942] FAT-fs (loop2): Directory bread(block 69) failed [ 1647.435576][T30942] FAT-fs (loop2): Directory bread(block 70) failed [ 1647.442151][T30942] FAT-fs (loop2): Directory bread(block 71) failed [ 1647.457977][T30942] FAT-fs (loop2): Directory bread(block 72) failed [ 1647.464572][T30942] FAT-fs (loop2): Directory bread(block 73) failed [ 1647.616927][T30952] loop4: detected capacity change from 0 to 128 [ 1647.786117][T30954] overlayfs: missing 'workdir' [ 1647.842597][ T819] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1647.857923][T30952] overlayfs: missing 'workdir' [ 1648.088535][ T819] usb 4-1: Using ep0 maxpacket: 32 [ 1648.228562][ T819] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 1648.236610][ T819] usb 4-1: config 0 has no interface number 0 [ 1648.242731][ T819] usb 4-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1648.315587][T30973] loop2: detected capacity change from 0 to 256 [ 1648.322254][T30963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.333476][T30963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.341026][T30963] device bridge_slave_0 entered promiscuous mode [ 1648.355532][T30963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.362440][T30963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.369955][T30973] FAT-fs (loop2): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1648.370186][T30963] device bridge_slave_1 entered promiscuous mode [ 1648.423611][T30963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.430456][T30963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1648.437522][T30963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.444346][T30963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1648.451821][ T819] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1648.461266][ T819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.482937][T24183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1648.490596][T24183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.497780][T24183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.540536][ T819] usb 4-1: Product: syz [ 1648.544613][ T819] usb 4-1: Manufacturer: syz [ 1648.549681][ T819] usb 4-1: SerialNumber: syz [ 1648.556871][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1648.569954][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1648.569998][ T819] usb 4-1: config 0 descriptor?? [ 1648.586765][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.593637][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1648.603454][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1648.619195][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.626049][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1648.636388][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1648.654054][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1648.689572][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1648.694894][T30984] loop4: detected capacity change from 0 to 128 [ 1648.721995][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1648.734030][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1648.752626][T30963] device veth0_vlan entered promiscuous mode [ 1648.799141][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1648.813561][T30963] device veth1_macvtap entered promiscuous mode [ 1648.843301][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1648.860838][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1648.880922][T29819] device bridge_slave_1 left promiscuous mode [ 1648.887680][T29819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.896862][T29819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.901965][ T819] usb 4-1: USB disconnect, device number 31 [ 1648.945926][T29819] device veth1_macvtap left promiscuous mode [ 1648.955361][T29819] device veth0_vlan left promiscuous mode [ 1649.304459][T30991] loop2: detected capacity change from 0 to 256 [ 1649.313792][T30984] overlayfs: missing 'workdir' [ 1649.319759][T30991] exfat: Deprecated parameter 'namecase' [ 1649.327564][T30991] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1650.216170][T31011] 9pnet: Insufficient options for proto=fd [ 1650.527457][T31018] loop4: detected capacity change from 0 to 256 [ 1650.564064][T31026] loop0: detected capacity change from 0 to 512 [ 1650.572268][T31018] FAT-fs (loop4): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1650.583565][T31031] loop3: detected capacity change from 0 to 128 [ 1650.639513][T31031] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1650.648308][T31031] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1650.660875][T31031] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1650.669451][T31026] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1650.675446][T31031] tmpfs: Unknown parameter 'nolazytimeÙþ' [ 1650.692837][T31026] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1650.839417][ T1038] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1651.078858][ T1038] usb 3-1: Using ep0 maxpacket: 32 [ 1651.095672][T31043] loop0: detected capacity change from 0 to 256 [ 1651.127074][T31043] exfat: Bad value for 'gid' [ 1651.198789][ T1038] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 1651.234044][ T1038] usb 3-1: config 0 has no interface number 0 [ 1651.241280][ T1038] usb 3-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1651.267166][T31043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=31043 comm=syz.0.9088 [ 1651.374290][T31048] loop0: detected capacity change from 0 to 128 [ 1651.486125][T31049] loop5: detected capacity change from 0 to 2048 [ 1651.528634][ T1038] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1651.546262][T31052] loop4: detected capacity change from 0 to 256 [ 1651.568556][ T1038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.594578][T31049] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: none. [ 1651.605979][T31049] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1651.624082][ T1038] usb 3-1: Product: syz [ 1651.632181][ T1038] usb 3-1: Manufacturer: syz [ 1651.639207][T31052] FAT-fs (loop4): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1651.654444][ T1038] usb 3-1: SerialNumber: syz [ 1651.739673][ T1038] usb 3-1: config 0 descriptor?? [ 1652.073009][ T1038] usb 3-1: USB disconnect, device number 29 [ 1652.084885][T31048] overlayfs: missing 'workdir' [ 1652.380629][T31067] loop3: detected capacity change from 0 to 256 [ 1652.391400][T31069] loop5: detected capacity change from 0 to 128 [ 1652.400922][T31071] loop0: detected capacity change from 0 to 256 [ 1652.429297][T31071] exfat: Deprecated parameter 'namecase' [ 1652.450002][T31071] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1652.463845][T31067] FAT-fs (loop3): Directory bread(block 64) failed [ 1652.478566][T31067] FAT-fs (loop3): Directory bread(block 65) failed [ 1652.488678][T31067] FAT-fs (loop3): Directory bread(block 66) failed [ 1652.495005][T31067] FAT-fs (loop3): Directory bread(block 67) failed [ 1652.511863][T31067] FAT-fs (loop3): Directory bread(block 68) failed [ 1652.528888][T31067] FAT-fs (loop3): Directory bread(block 69) failed [ 1652.535385][T31067] FAT-fs (loop3): Directory bread(block 70) failed [ 1652.549558][T31067] FAT-fs (loop3): Directory bread(block 71) failed [ 1652.566059][T31067] FAT-fs (loop3): Directory bread(block 72) failed [ 1652.576111][T31067] FAT-fs (loop3): Directory bread(block 73) failed [ 1653.389268][T31078] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9097'. [ 1653.580079][T31081] loop4: detected capacity change from 0 to 256 [ 1654.019544][T31081] FAT-fs (loop4): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1654.280234][T31097] loop2: detected capacity change from 0 to 256 [ 1654.323181][T31098] loop3: detected capacity change from 0 to 2048 [ 1654.353647][T31097] FAT-fs (loop2): Directory bread(block 64) failed [ 1654.373720][T31097] FAT-fs (loop2): Directory bread(block 65) failed [ 1654.523970][T31104] loop0: detected capacity change from 0 to 128 [ 1654.559363][T31097] FAT-fs (loop2): Directory bread(block 66) failed [ 1654.592687][T31097] FAT-fs (loop2): Directory bread(block 67) failed [ 1654.610860][T31098] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: none. [ 1654.628583][T31097] FAT-fs (loop2): Directory bread(block 68) failed [ 1654.648696][T31097] FAT-fs (loop2): Directory bread(block 69) failed [ 1654.669622][T31107] loop4: detected capacity change from 0 to 128 [ 1654.675810][T31097] FAT-fs (loop2): Directory bread(block 70) failed [ 1654.698613][T31097] FAT-fs (loop2): Directory bread(block 71) failed [ 1654.704994][T31097] FAT-fs (loop2): Directory bread(block 72) failed [ 1654.728635][T31098] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1654.731722][T31097] FAT-fs (loop2): Directory bread(block 73) failed [ 1655.819682][T31118] loop5: detected capacity change from 0 to 256 [ 1655.913547][T31104] overlayfs: missing 'workdir' [ 1655.924149][T31118] FAT-fs (loop5): Directory bread(block 64) failed [ 1655.938560][T31118] FAT-fs (loop5): Directory bread(block 65) failed [ 1655.955100][T31118] FAT-fs (loop5): Directory bread(block 66) failed [ 1655.965171][T31118] FAT-fs (loop5): Directory bread(block 67) failed [ 1655.977871][T31118] FAT-fs (loop5): Directory bread(block 68) failed [ 1655.984940][T31118] FAT-fs (loop5): Directory bread(block 69) failed [ 1656.003646][T31118] FAT-fs (loop5): Directory bread(block 70) failed [ 1656.017193][T31118] FAT-fs (loop5): Directory bread(block 71) failed [ 1656.030785][T31118] FAT-fs (loop5): Directory bread(block 72) failed [ 1656.044323][T31118] FAT-fs (loop5): Directory bread(block 73) failed [ 1656.315564][T31133] overlayfs: missing 'workdir' [ 1656.654137][T31142] loop2: detected capacity change from 0 to 512 [ 1656.987789][T31142] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.9116: inode #1: comm syz.2.9116: iget: illegal inode # [ 1657.001507][T31142] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.9116: error while reading EA inode 1 err=-117 [ 1657.013975][T31142] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.9116: inode #1: comm syz.2.9116: iget: illegal inode # [ 1657.026992][T31142] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.9116: error while reading EA inode 1 err=-117 [ 1657.041937][T31149] 9pnet: Insufficient options for proto=fd [ 1657.048614][ T39] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1657.049206][T31142] EXT4-fs (loop2): 1 orphan inode deleted [ 1657.061770][T31142] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 1657.147932][ T30] audit: type=1400 audit(2000000201.370:1361): avc: denied { create } for pid=31150 comm="syz.5.9118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1657.172989][T31151] loop5: detected capacity change from 0 to 1024 [ 1657.200696][T31151] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 1657.200696][T31151] [ 1657.213158][T31151] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 1657.213327][T31157] loop0: detected capacity change from 0 to 128 [ 1657.330756][T31151] loop5: detected capacity change from 0 to 2048 [ 1657.560939][T31160] loop3: detected capacity change from 0 to 128 [ 1657.561569][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1657.576625][ T39] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1657.585532][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.594664][ T39] usb 5-1: config 0 descriptor?? [ 1657.670451][T31165] loop5: detected capacity change from 0 to 256 [ 1657.708885][T31165] exfat: Deprecated parameter 'namecase' [ 1657.728806][T31165] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1658.303105][ T39] logitech 0003:046D:C293.0014: collection stack underflow [ 1658.333921][ T39] logitech 0003:046D:C293.0014: item 0 4 0 12 parsing failed [ 1658.410430][ T39] logitech 0003:046D:C293.0014: parse failed [ 1658.447149][ T39] logitech: probe of 0003:046D:C293.0014 failed with error -22 [ 1658.516200][ T39] usb 5-1: USB disconnect, device number 36 [ 1658.525354][T31160] overlayfs: missing 'workdir' [ 1658.581776][T31181] loop5: detected capacity change from 0 to 256 [ 1658.641506][T31182] overlayfs: missing 'workdir' [ 1658.672313][T31181] FAT-fs (loop5): Directory bread(block 64) failed [ 1658.708690][T31181] FAT-fs (loop5): Directory bread(block 65) failed [ 1658.715066][T31181] FAT-fs (loop5): Directory bread(block 66) failed [ 1658.738664][T31181] FAT-fs (loop5): Directory bread(block 67) failed [ 1658.745081][T31181] FAT-fs (loop5): Directory bread(block 68) failed [ 1658.758886][T31181] FAT-fs (loop5): Directory bread(block 69) failed [ 1658.765260][T31181] FAT-fs (loop5): Directory bread(block 70) failed [ 1658.778556][T31181] FAT-fs (loop5): Directory bread(block 71) failed [ 1658.784904][T31181] FAT-fs (loop5): Directory bread(block 72) failed [ 1658.795159][T31181] FAT-fs (loop5): Directory bread(block 73) failed [ 1658.816102][T31186] 9pnet: Insufficient options for proto=fd [ 1660.106658][T31203] loop0: detected capacity change from 0 to 256 [ 1660.214732][T31203] FAT-fs (loop0): Unrecognized mount option "iocharset" or missing value [ 1660.297468][T31203] loop0: detected capacity change from 0 to 2048 [ 1660.362202][T31213] loop4: detected capacity change from 0 to 128 [ 1660.517900][T31203] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: none. [ 1660.529425][T31203] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1661.082901][T31213] overlayfs: missing 'workdir' [ 1661.199074][T31231] loop0: detected capacity change from 0 to 128 [ 1661.288171][T31234] 9pnet: Insufficient options for proto=fd [ 1661.322058][T31238] loop4: detected capacity change from 0 to 256 [ 1661.339195][T31238] FAT-fs (loop4): Directory bread(block 64) failed [ 1661.345595][T31238] FAT-fs (loop4): Directory bread(block 65) failed [ 1661.352214][T31238] FAT-fs (loop4): Directory bread(block 66) failed [ 1661.358729][T31238] FAT-fs (loop4): Directory bread(block 67) failed [ 1661.365166][T31238] FAT-fs (loop4): Directory bread(block 68) failed [ 1661.371764][T31238] FAT-fs (loop4): Directory bread(block 69) failed [ 1661.378210][T31238] FAT-fs (loop4): Directory bread(block 70) failed [ 1661.384711][T31238] FAT-fs (loop4): Directory bread(block 71) failed [ 1661.391288][T31238] FAT-fs (loop4): Directory bread(block 72) failed [ 1661.397694][T31238] FAT-fs (loop4): Directory bread(block 73) failed [ 1661.638623][ T819] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1661.896208][T31242] overlayfs: missing 'workdir' [ 1662.342090][ T819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1663.070370][T31272] IPv6: Can't replace route, no match found [ 1663.119000][ T819] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1663.242763][T31278] loop4: detected capacity change from 0 to 256 [ 1663.268656][ T819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.287257][T31282] loop2: detected capacity change from 0 to 512 [ 1663.294115][ T819] usb 6-1: config 0 descriptor?? [ 1663.309705][T31282] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1663.347584][T31282] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.9156: bad orphan inode 131083 [ 1663.363150][T31278] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1663.392633][T31278] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1663.406757][T31282] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 1663.438643][T31278] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1663.786699][T31293] loop2: detected capacity change from 0 to 128 [ 1663.797654][ T819] logitech 0003:046D:C293.0015: collection stack underflow [ 1663.808046][T31292] loop4: detected capacity change from 0 to 512 [ 1663.822582][ T819] logitech 0003:046D:C293.0015: item 0 4 0 12 parsing failed [ 1663.841272][ T819] logitech 0003:046D:C293.0015: parse failed [ 1663.847162][ T819] logitech: probe of 0003:046D:C293.0015 failed with error -22 [ 1663.871443][T31292] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.9159: inode #1: comm syz.4.9159: iget: illegal inode # [ 1663.884456][T31292] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.9159: error while reading EA inode 1 err=-117 [ 1663.896708][T31292] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.9159: inode #1: comm syz.4.9159: iget: illegal inode # [ 1663.909690][T31292] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.9159: error while reading EA inode 1 err=-117 [ 1663.930035][T31292] EXT4-fs (loop4): 1 orphan inode deleted [ 1663.943694][T31292] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 1664.049228][ T819] usb 6-1: USB disconnect, device number 30 [ 1664.613986][T31304] loop3: detected capacity change from 0 to 256 [ 1664.659523][T31304] exfat: Deprecated parameter 'namecase' [ 1664.721990][T31304] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1664.860604][T31310] overlayfs: missing 'workdir' [ 1665.038399][T31315] loop5: detected capacity change from 0 to 128 [ 1665.139729][T31315] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1665.171070][T31315] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1665.326273][T31327] IPv6: Can't replace route, no match found [ 1665.496504][T31315] ext4 filesystem being mounted at /255/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1665.695305][T31332] syz.2.9171[31332] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1665.695462][T31332] syz.2.9171[31332] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1665.721474][T31315] tmpfs: Unknown parameter 'nolazytimeÙþ' [ 1665.738649][T31337] loop2: detected capacity change from 0 to 512 [ 1665.882389][T31337] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.9174: inode #1: comm syz.2.9174: iget: illegal inode # [ 1666.063233][T31337] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.9174: error while reading EA inode 1 err=-117 [ 1666.088067][T31337] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.9174: inode #1: comm syz.2.9174: iget: illegal inode # [ 1666.103785][T31346] loop3: detected capacity change from 0 to 256 [ 1666.111640][T31337] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.9174: error while reading EA inode 1 err=-117 [ 1666.124192][T31337] EXT4-fs (loop2): 1 orphan inode deleted [ 1666.131030][T31337] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 1666.160746][T31348] 9pnet: Insufficient options for proto=fd [ 1666.198678][T31346] FAT-fs (loop3): Directory bread(block 64) failed [ 1666.210960][T31346] FAT-fs (loop3): Directory bread(block 65) failed [ 1666.217408][T31346] FAT-fs (loop3): Directory bread(block 66) failed [ 1666.237411][T31346] FAT-fs (loop3): Directory bread(block 67) failed [ 1666.244702][T31346] FAT-fs (loop3): Directory bread(block 68) failed [ 1666.251324][T31346] FAT-fs (loop3): Directory bread(block 69) failed [ 1666.257787][T31346] FAT-fs (loop3): Directory bread(block 70) failed [ 1666.264399][T31346] FAT-fs (loop3): Directory bread(block 71) failed [ 1666.270995][T31346] FAT-fs (loop3): Directory bread(block 72) failed [ 1666.277660][T31346] FAT-fs (loop3): Directory bread(block 73) failed [ 1668.220164][T31377] loop4: detected capacity change from 0 to 256 [ 1668.240230][T31378] syz.3.9184[31378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1668.240308][T31378] syz.3.9184[31378] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1668.339597][T31377] FAT-fs (loop4): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1668.727314][T31395] loop5: detected capacity change from 0 to 128 [ 1669.674231][T31405] loop0: detected capacity change from 0 to 128 [ 1669.689355][T31405] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1669.937641][T31410] loop2: detected capacity change from 0 to 128 [ 1670.043131][T31405] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1670.075671][T31405] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1670.314389][T31405] tmpfs: Unknown parameter 'nolazytimeÙþ' [ 1670.430169][T31423] loop3: detected capacity change from 0 to 512 [ 1670.539134][T31423] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1670.559695][T31423] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.9201: bad orphan inode 131083 [ 1670.570191][T31423] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 1670.658839][T31427] overlayfs: missing 'workdir' [ 1670.910247][T31435] loop3: detected capacity change from 0 to 256 [ 1670.959026][T31435] FAT-fs (loop3): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1671.381624][T31446] overlayfs: missing 'workdir' [ 1671.852105][T31455] loop0: detected capacity change from 0 to 512 [ 1671.904723][T31455] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.0.9207: corrupted xattr block 95 [ 1671.917753][T31455] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.9207: bg 0: block 7: invalid block bitmap [ 1671.997242][T31455] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1672.006498][T31455] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2932: inode #11: comm syz.0.9207: corrupted xattr block 95 [ 1672.018955][T31455] EXT4-fs warning (device loop0): ext4_evict_inode:303: xattr delete (err -117) [ 1672.027896][T31455] EXT4-fs (loop0): 1 orphan inode deleted [ 1672.033510][T31455] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1672.369699][T26280] Bluetooth: hci0: sending frame failed (-49) [ 1672.995651][T31471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.002747][T31471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.080833][T31483] loop5: detected capacity change from 0 to 512 [ 1674.445869][T25058] Bluetooth: hci0: command 0x1003 tx timeout [ 1674.451783][T26280] Bluetooth: hci0: sending frame failed (-49) [ 1674.467757][T31488] loop2: detected capacity change from 0 to 128 [ 1674.519510][T31483] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.9216: inode #1: comm syz.5.9216: iget: illegal inode # [ 1674.532735][T31483] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.9216: error while reading EA inode 1 err=-117 [ 1674.546164][T31483] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.9216: inode #1: comm syz.5.9216: iget: illegal inode # [ 1674.559204][T31483] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.9216: error while reading EA inode 1 err=-117 [ 1674.604660][T31483] EXT4-fs (loop5): 1 orphan inode deleted [ 1674.610734][T31483] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 1675.915414][T31524] loop5: detected capacity change from 0 to 256 [ 1675.975916][T31524] FAT-fs (loop5): Directory bread(block 64) failed [ 1675.982764][T31524] FAT-fs (loop5): Directory bread(block 65) failed [ 1675.991825][T31524] FAT-fs (loop5): Directory bread(block 66) failed [ 1676.010444][T31526] overlayfs: missing 'workdir' [ 1676.015228][T31524] FAT-fs (loop5): Directory bread(block 67) failed [ 1676.028203][T31524] FAT-fs (loop5): Directory bread(block 68) failed [ 1676.036736][T31524] FAT-fs (loop5): Directory bread(block 69) failed [ 1676.044700][T31524] FAT-fs (loop5): Directory bread(block 70) failed [ 1676.052810][T31524] FAT-fs (loop5): Directory bread(block 71) failed [ 1676.061365][T31524] FAT-fs (loop5): Directory bread(block 72) failed [ 1676.069119][T31524] FAT-fs (loop5): Directory bread(block 73) failed [ 1676.071952][T31527] loop0: detected capacity change from 0 to 512 [ 1676.131762][T31527] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.0.9228: corrupted xattr block 95 [ 1676.144316][T31527] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.9228: bg 0: block 7: invalid block bitmap [ 1676.158026][T31527] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1676.166832][T31527] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2932: inode #11: comm syz.0.9228: corrupted xattr block 95 [ 1676.179155][T31527] EXT4-fs warning (device loop0): ext4_evict_inode:303: xattr delete (err -117) [ 1676.188088][T31527] EXT4-fs (loop0): 1 orphan inode deleted [ 1676.193674][T31527] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1677.389881][T31537] loop5: detected capacity change from 0 to 2048 [ 1677.464031][T31539] loop3: detected capacity change from 0 to 1024 [ 1677.533192][T31537] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1677.558347][T31537] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1677.579323][T31539] EXT4-fs (loop3): Ignoring removed orlov option [ 1677.585493][T31539] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1677.680097][T31539] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1677.691985][T13885] Bluetooth: hci0: command 0x1001 tx timeout [ 1677.708125][T26280] Bluetooth: hci0: sending frame failed (-49) [ 1678.101157][T31553] loop0: detected capacity change from 0 to 2048 [ 1678.206243][T31553] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: none. [ 1678.218037][T31553] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1679.143641][T31571] loop0: detected capacity change from 0 to 128 [ 1679.189325][T31571] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1679.196821][T31571] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1679.209506][T31571] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1679.481410][T31577] loop3: detected capacity change from 0 to 256 [ 1679.483776][T31571] tmpfs: Unknown parameter 'nolazytimeÙþ' [ 1679.529134][T31577] FAT-fs (loop3): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1679.578882][T31579] loop5: detected capacity change from 0 to 256 [ 1679.668884][T31579] FAT-fs (loop5): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1679.748573][T13885] Bluetooth: hci0: command 0x1009 tx timeout [ 1679.959478][T31586] loop2: detected capacity change from 0 to 128 [ 1680.019063][T31586] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1680.033637][T31586] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1680.053672][T31586] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1680.100156][T31586] tmpfs: Unknown parameter 'nolazytimeÙþ' [ 1680.243003][T31592] loop0: detected capacity change from 0 to 512 [ 1680.364185][T31592] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.0.9245: corrupted xattr block 95 [ 1680.377448][T31592] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.9245: bg 0: block 7: invalid block bitmap [ 1680.391380][T31592] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1680.400382][T31592] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2932: inode #11: comm syz.0.9245: corrupted xattr block 95 [ 1680.413623][T31592] EXT4-fs warning (device loop0): ext4_evict_inode:303: xattr delete (err -117) [ 1680.422520][T31592] EXT4-fs (loop0): 1 orphan inode deleted [ 1680.428020][T31592] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1681.385524][T31603] loop5: detected capacity change from 0 to 256 [ 1681.489139][T31603] exfat: Deprecated parameter 'namecase' [ 1681.510119][T31603] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1681.658850][T31614] 9pnet: Insufficient options for proto=fd [ 1681.713900][T31619] loop3: detected capacity change from 0 to 512 [ 1681.753586][T31625] loop0: detected capacity change from 0 to 256 [ 1681.771801][T31619] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.9254: inode #1: comm syz.3.9254: iget: illegal inode # [ 1681.784780][T31619] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.9254: error while reading EA inode 1 err=-117 [ 1681.797327][T31619] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.9254: inode #1: comm syz.3.9254: iget: illegal inode # [ 1681.810409][T31619] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.9254: error while reading EA inode 1 err=-117 [ 1681.822843][T31619] EXT4-fs (loop3): 1 orphan inode deleted [ 1681.829910][T31619] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 1681.835784][T31625] FAT-fs (loop0): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1681.869816][T31633] loop5: detected capacity change from 0 to 256 [ 1681.919326][T31633] FAT-fs (loop5): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1682.999565][T31658] loop4: detected capacity change from 0 to 256 [ 1683.094809][T31658] exfat: Deprecated parameter 'namecase' [ 1683.105533][T31664] loop0: detected capacity change from 0 to 256 [ 1683.124860][T31658] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1683.245139][T31667] tipc: Enabling of bearer rejected, failed to enable media [ 1683.669984][T31664] FAT-fs (loop0): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1684.277852][T31672] loop3: detected capacity change from 0 to 256 [ 1684.339278][T31672] FAT-fs (loop3): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1684.361781][T31674] loop2: detected capacity change from 0 to 128 [ 1684.388554][T20489] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1684.482523][T31679] loop4: detected capacity change from 0 to 512 [ 1684.515873][T31679] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.9275: inode #1: comm syz.4.9275: iget: illegal inode # [ 1684.538816][T31679] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.9275: error while reading EA inode 1 err=-117 [ 1684.557846][T31679] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.9275: inode #1: comm syz.4.9275: iget: illegal inode # [ 1684.570875][T31679] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.9275: error while reading EA inode 1 err=-117 [ 1684.590766][T31679] EXT4-fs (loop4): 1 orphan inode deleted [ 1684.652289][T31679] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 1684.670946][T31686] loop0: detected capacity change from 0 to 128 [ 1685.668535][T20489] usb 6-1: Using ep0 maxpacket: 16 [ 1685.878643][T20489] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1685.901419][T18655] Bluetooth: hci0: Frame reassembly failed (-84) [ 1685.921131][T20489] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1685.932553][T20489] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1685.939375][T31694] overlayfs: missing 'workdir' [ 1685.945609][T20489] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1685.960498][T20489] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.971832][T20489] usb 6-1: config 0 descriptor?? [ 1686.225205][T31699] loop4: detected capacity change from 0 to 40427 [ 1686.242245][T31699] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1686.251859][T31699] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1686.266348][T31699] F2FS-fs (loop4): invalid crc value [ 1686.299437][T31699] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1686.334673][T31699] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1686.341561][T31699] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1686.356035][ T30] audit: type=1400 audit(2000000230.580:1362): avc: denied { remove_name } for pid=31698 comm="syz.4.9280" name="file1" dev="loop4" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1686.379123][ T30] audit: type=1400 audit(2000000230.580:1363): avc: denied { rename } for pid=31698 comm="syz.4.9280" name="file1" dev="loop4" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1686.411865][T24183] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1686.421858][T24183] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1686.489719][T20489] hid-led 0003:27B8:01ED.0016: item fetching failed at offset 0/2 [ 1686.499239][T20489] hid-led: probe of 0003:27B8:01ED.0016 failed with error -22 [ 1686.509808][T31711] loop2: detected capacity change from 0 to 512 [ 1686.549428][T31711] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1686.560574][T31711] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.9284: bad orphan inode 131083 [ 1686.579870][T31711] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 1686.643664][T31718] loop2: detected capacity change from 0 to 256 [ 1686.699002][T31718] FAT-fs (loop2): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1686.710024][T20489] usb 6-1: USB disconnect, device number 31 [ 1686.913054][T31728] loop2: detected capacity change from 0 to 512 [ 1687.313039][T31728] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.9290: inode #1: comm syz.2.9290: iget: illegal inode # [ 1687.327150][T31728] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.9290: error while reading EA inode 1 err=-117 [ 1687.339538][T31728] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.9290: inode #1: comm syz.2.9290: iget: illegal inode # [ 1687.352596][T31728] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.9290: error while reading EA inode 1 err=-117 [ 1687.365015][T31728] EXT4-fs (loop2): 1 orphan inode deleted [ 1687.370589][T31728] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 1687.404397][T31734] loop5: detected capacity change from 0 to 512 [ 1687.491249][T31734] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.9291: inode #1: comm syz.5.9291: iget: illegal inode # [ 1687.504608][T31734] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.9291: error while reading EA inode 1 err=-117 [ 1687.518482][T31734] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.9291: inode #1: comm syz.5.9291: iget: illegal inode # [ 1687.533429][T31734] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.9291: error while reading EA inode 1 err=-117 [ 1687.546964][T31734] EXT4-fs (loop5): 1 orphan inode deleted [ 1687.553056][T31734] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 1687.810800][T31741] loop4: detected capacity change from 0 to 128 [ 1687.908618][T13885] Bluetooth: hci0: command 0x1003 tx timeout [ 1687.927130][T26280] Bluetooth: hci0: sending frame failed (-49) [ 1688.084125][T31755] IPv6: Can't replace route, no match found [ 1688.656064][T31756] loop2: detected capacity change from 0 to 128 [ 1689.100089][T31762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9299'. [ 1689.118792][T31762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9299'. [ 1689.135792][T31766] loop0: detected capacity change from 0 to 256 [ 1689.149106][T31766] FAT-fs (loop0): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1689.204998][T31768] loop2: detected capacity change from 0 to 256 [ 1689.214418][T31768] exfat: Deprecated parameter 'namecase' [ 1689.222831][T31768] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1690.111828][T13885] Bluetooth: hci0: command 0x1001 tx timeout [ 1690.117728][T26280] Bluetooth: hci0: sending frame failed (-49) [ 1690.121582][T31788] loop4: detected capacity change from 0 to 256 [ 1690.179103][T31788] exfat: Deprecated parameter 'namecase' [ 1690.187238][T31788] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1691.303232][T31800] IPv6: Can't replace route, no match found [ 1691.532573][T31809] tipc: Enabling of bearer rejected, failed to enable media [ 1691.553275][T31813] loop5: detected capacity change from 0 to 256 [ 1691.559849][T31811] loop2: detected capacity change from 0 to 512 [ 1691.611335][T31807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9311'. [ 1691.620093][T31807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9311'. [ 1691.628415][T31811] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.9312: inode #1: comm syz.2.9312: iget: illegal inode # [ 1691.650779][T31813] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1691.662923][T31811] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.9312: error while reading EA inode 1 err=-117 [ 1691.675669][T31811] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.9312: inode #1: comm syz.2.9312: iget: illegal inode # [ 1691.698595][T31811] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.9312: error while reading EA inode 1 err=-117 [ 1691.715163][ T30] audit: type=1400 audit(2000000235.940:1364): avc: denied { setattr } for pid=31812 comm="syz.5.9314" name="file0" dev="loop5" ino=1049003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1691.724396][T31820] loop0: detected capacity change from 0 to 128 [ 1691.744040][T31811] EXT4-fs (loop2): 1 orphan inode deleted [ 1691.750105][T31811] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 1691.776076][T31822] loop4: detected capacity change from 0 to 256 [ 1691.813381][T31822] FAT-fs (loop4): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1692.224353][T25058] Bluetooth: hci0: command 0x1009 tx timeout [ 1692.527823][T31838] overlayfs: missing 'workdir' [ 1692.838082][T31850] tipc: Enabling of bearer rejected, failed to enable media [ 1692.944405][T31854] IPv6: Can't replace route, no match found [ 1693.351927][T13885] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1693.425692][T31861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9328'. [ 1693.434647][T31861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9328'. [ 1693.471283][T31863] loop2: detected capacity change from 0 to 256 [ 1693.538679][T31863] FAT-fs (loop2): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1693.718589][T13885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1693.728297][T13885] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1693.737116][T13885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.958306][T13885] usb 5-1: config 0 descriptor?? [ 1693.975692][T31870] loop0: detected capacity change from 0 to 256 [ 1694.018968][T31870] exfat: Deprecated parameter 'namecase' [ 1694.050946][T31870] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1694.155597][T31872] loop0: detected capacity change from 0 to 256 [ 1694.199114][T31872] FAT-fs (loop0): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1694.439506][T13885] logitech 0003:046D:C293.0017: collection stack underflow [ 1694.446762][T13885] logitech 0003:046D:C293.0017: item 0 4 0 12 parsing failed [ 1694.740164][T13885] logitech 0003:046D:C293.0017: parse failed [ 1694.746002][T13885] logitech: probe of 0003:046D:C293.0017 failed with error -22 [ 1694.754353][T13885] usb 5-1: USB disconnect, device number 37 [ 1694.771464][T31881] loop5: detected capacity change from 0 to 128 [ 1695.077956][T31886] overlayfs: missing 'workdir' [ 1695.974934][T31901] loop4: detected capacity change from 0 to 256 [ 1695.987268][T31902] loop0: detected capacity change from 0 to 256 [ 1696.019144][T31901] FAT-fs (loop4): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1696.045838][T31902] FAT-fs (loop0): Directory bread(block 64) failed [ 1696.062441][T31902] FAT-fs (loop0): Directory bread(block 65) failed [ 1696.069825][T31902] FAT-fs (loop0): Directory bread(block 66) failed [ 1696.076385][T31902] FAT-fs (loop0): Directory bread(block 67) failed [ 1696.155136][T31902] FAT-fs (loop0): Directory bread(block 68) failed [ 1696.164474][T31902] FAT-fs (loop0): Directory bread(block 69) failed [ 1696.172325][T31902] FAT-fs (loop0): Directory bread(block 70) failed [ 1696.179831][T31902] FAT-fs (loop0): Directory bread(block 71) failed [ 1696.186507][T31902] FAT-fs (loop0): Directory bread(block 72) failed [ 1696.731145][T31902] FAT-fs (loop0): Directory bread(block 73) failed [ 1697.699528][T31918] loop3: detected capacity change from 0 to 512 [ 1697.816026][T31923] loop4: detected capacity change from 0 to 256 [ 1699.604559][T31923] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1699.643912][ T30] audit: type=1400 audit(2000000243.870:1365): avc: denied { setattr } for pid=31922 comm="syz.4.9347" name="file0" dev="loop4" ino=1049012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1699.669517][T31918] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.9345: inode #1: comm syz.3.9345: iget: illegal inode # [ 1699.687019][T31918] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.9345: error while reading EA inode 1 err=-117 [ 1699.799561][T31947] loop5: detected capacity change from 0 to 2048 [ 1699.807300][T31918] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.9345: inode #1: comm syz.3.9345: iget: illegal inode # [ 1699.824897][T31918] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.9345: error while reading EA inode 1 err=-117 [ 1699.839686][T31918] EXT4-fs (loop3): 1 orphan inode deleted [ 1699.845253][T31918] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 1700.071648][T31947] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: none. [ 1700.083479][T31947] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1700.768466][T31964] loop5: detected capacity change from 0 to 256 [ 1700.774706][ T1038] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1700.785995][T31959] 9pnet: Could not find request transport: rdma [ 1700.803979][T31964] FAT-fs (loop5): Directory bread(block 64) failed [ 1700.810409][T31964] FAT-fs (loop5): Directory bread(block 65) failed [ 1700.816744][T31964] FAT-fs (loop5): Directory bread(block 66) failed [ 1700.823454][T31964] FAT-fs (loop5): Directory bread(block 67) failed [ 1700.830329][T31964] FAT-fs (loop5): Directory bread(block 68) failed [ 1700.836815][T31964] FAT-fs (loop5): Directory bread(block 69) failed [ 1700.843512][T31964] FAT-fs (loop5): Directory bread(block 70) failed [ 1700.850448][T31964] FAT-fs (loop5): Directory bread(block 71) failed [ 1700.857157][T31964] FAT-fs (loop5): Directory bread(block 72) failed [ 1700.863841][T31964] FAT-fs (loop5): Directory bread(block 73) failed [ 1701.611108][T31975] loop4: detected capacity change from 0 to 128 [ 1701.686432][T31981] loop5: detected capacity change from 0 to 256 [ 1701.751620][T31981] FAT-fs (loop5): Directory bread(block 64) failed [ 1701.758302][T31981] FAT-fs (loop5): Directory bread(block 65) failed [ 1701.765080][T31981] FAT-fs (loop5): Directory bread(block 66) failed [ 1701.771670][T31981] FAT-fs (loop5): Directory bread(block 67) failed [ 1701.778153][T31981] FAT-fs (loop5): Directory bread(block 68) failed [ 1701.785041][T31981] FAT-fs (loop5): Directory bread(block 69) failed [ 1701.791587][T31981] FAT-fs (loop5): Directory bread(block 70) failed [ 1701.798140][T31981] FAT-fs (loop5): Directory bread(block 71) failed [ 1701.804666][T31981] FAT-fs (loop5): Directory bread(block 72) failed [ 1701.824437][T31981] FAT-fs (loop5): Directory bread(block 73) failed [ 1702.566403][ T1038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1702.590489][ T1038] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1702.621051][ T1038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.651764][ T1038] usb 3-1: config 0 descriptor?? [ 1702.734649][T31100] Bluetooth: hci0: command 0x1003 tx timeout [ 1702.740533][T26280] Bluetooth: hci0: sending frame failed (-49) [ 1702.798574][ T1038] usb 3-1: can't set config #0, error -71 [ 1702.833719][ T1038] usb 3-1: USB disconnect, device number 30 [ 1703.762639][T31988] loop2: detected capacity change from 0 to 40427 [ 1703.810657][T32005] loop3: detected capacity change from 0 to 256 [ 1703.839055][T32005] FAT-fs (loop3): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1703.849754][T31988] F2FS-fs (loop2): fault_type options not supported [ 1703.859435][T31988] F2FS-fs (loop2): Unrecognized mount option "barrier" or missing value [ 1703.905906][T32007] 9pnet: Could not find request transport: rdma [ 1704.078641][T32012] overlayfs: missing 'workdir' [ 1704.377460][T32017] loop4: detected capacity change from 0 to 256 [ 1704.396437][T32017] FAT-fs (loop4): Directory bread(block 64) failed [ 1704.403905][T32017] FAT-fs (loop4): Directory bread(block 65) failed [ 1704.410300][T32017] FAT-fs (loop4): Directory bread(block 66) failed [ 1704.416579][T32017] FAT-fs (loop4): Directory bread(block 67) failed [ 1704.422994][T32017] FAT-fs (loop4): Directory bread(block 68) failed [ 1704.429270][T32017] FAT-fs (loop4): Directory bread(block 69) failed [ 1704.435600][T32017] FAT-fs (loop4): Directory bread(block 70) failed [ 1704.441916][T32017] FAT-fs (loop4): Directory bread(block 71) failed [ 1704.448258][T32017] FAT-fs (loop4): Directory bread(block 72) failed [ 1704.454589][T32017] FAT-fs (loop4): Directory bread(block 73) failed [ 1704.788540][ T819] Bluetooth: hci0: command 0x1001 tx timeout [ 1704.795739][T26280] Bluetooth: hci0: sending frame failed (-49) [ 1705.500783][T25058] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1706.248576][ T30] audit: type=1400 audit(2000000250.470:1366): avc: denied { mount } for pid=32042 comm="syz.4.9382" name="/" dev="ramfs" ino=117219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1706.385425][T32055] 9pnet: Could not find request transport: rdma [ 1706.402558][T32058] loop5: detected capacity change from 0 to 256 [ 1706.468616][T25058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1706.478218][T25058] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1706.487428][T32058] FAT-fs (loop5): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1706.492979][T25058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.506493][T25058] usb 3-1: config 0 descriptor?? [ 1706.868577][ T819] Bluetooth: hci0: command 0x1009 tx timeout [ 1706.989406][T25058] logitech 0003:046D:C293.0018: collection stack underflow [ 1706.996484][T25058] logitech 0003:046D:C293.0018: item 0 4 0 12 parsing failed [ 1707.003941][T25058] logitech 0003:046D:C293.0018: parse failed [ 1707.009865][T25058] logitech: probe of 0003:046D:C293.0018 failed with error -22 [ 1707.191355][ T819] usb 3-1: USB disconnect, device number 31 [ 1707.211359][T32065] loop4: detected capacity change from 0 to 256 [ 1707.282668][T32065] FAT-fs (loop4): Directory bread(block 64) failed [ 1707.289208][T32065] FAT-fs (loop4): Directory bread(block 65) failed [ 1707.295606][T32065] FAT-fs (loop4): Directory bread(block 66) failed [ 1707.302657][T32065] FAT-fs (loop4): Directory bread(block 67) failed [ 1707.309883][T32065] FAT-fs (loop4): Directory bread(block 68) failed [ 1707.320717][T32065] FAT-fs (loop4): Directory bread(block 69) failed [ 1707.327072][T32065] FAT-fs (loop4): Directory bread(block 70) failed [ 1707.906986][T32065] FAT-fs (loop4): Directory bread(block 71) failed [ 1707.917543][T32065] FAT-fs (loop4): Directory bread(block 72) failed [ 1707.925037][T32065] FAT-fs (loop4): Directory bread(block 73) failed [ 1708.810663][T32083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9393'. [ 1708.820061][T32083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9393'. [ 1708.906038][T32088] IPv6: Can't replace route, no match found [ 1710.157914][T32103] loop3: detected capacity change from 0 to 256 [ 1710.181706][T32103] FAT-fs (loop3): Directory bread(block 64) failed [ 1710.188202][T32103] FAT-fs (loop3): Directory bread(block 65) failed [ 1710.195147][T32103] FAT-fs (loop3): Directory bread(block 66) failed [ 1710.201718][T32103] FAT-fs (loop3): Directory bread(block 67) failed [ 1710.208057][T32103] FAT-fs (loop3): Directory bread(block 68) failed [ 1710.214824][T32103] FAT-fs (loop3): Directory bread(block 69) failed [ 1710.221304][T32103] FAT-fs (loop3): Directory bread(block 70) failed [ 1710.227698][T32103] FAT-fs (loop3): Directory bread(block 71) failed [ 1710.234519][T32103] FAT-fs (loop3): Directory bread(block 72) failed [ 1710.241056][T32103] FAT-fs (loop3): Directory bread(block 73) failed [ 1711.282186][ T1038] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1711.290175][T32117] IPv6: Can't replace route, no match found [ 1711.698620][ T1038] usb 5-1: Using ep0 maxpacket: 16 [ 1711.714929][T32123] loop0: detected capacity change from 0 to 256 [ 1711.754016][T32127] loop5: detected capacity change from 0 to 256 [ 1711.758942][T32123] exfat: Deprecated parameter 'namecase' [ 1711.793790][T32127] FAT-fs (loop5): Directory bread(block 64) failed [ 1711.800203][T32127] FAT-fs (loop5): Directory bread(block 65) failed [ 1711.806517][T32127] FAT-fs (loop5): Directory bread(block 66) failed [ 1711.812826][T32127] FAT-fs (loop5): Directory bread(block 67) failed [ 1711.819209][ T1038] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.821258][T32123] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1711.829910][T32127] FAT-fs (loop5): Directory bread(block 68) failed [ 1711.848125][ T1038] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.857908][T32127] FAT-fs (loop5): Directory bread(block 69) failed [ 1711.864414][ T1038] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1711.877232][T32127] FAT-fs (loop5): Directory bread(block 70) failed [ 1711.883735][ T1038] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1711.892758][T32127] FAT-fs (loop5): Directory bread(block 71) failed [ 1711.899254][T32127] FAT-fs (loop5): Directory bread(block 72) failed [ 1711.905573][T32127] FAT-fs (loop5): Directory bread(block 73) failed [ 1711.912140][ T1038] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.920745][ T1038] usb 5-1: config 0 descriptor?? [ 1713.107709][ T733] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1713.132920][T32139] loop5: detected capacity change from 0 to 128 [ 1713.447296][T32147] loop0: detected capacity change from 0 to 256 [ 1713.468653][ T1038] usbhid 5-1:0.0: can't add hid device: -71 [ 1713.474812][ T1038] usbhid: probe of 5-1:0.0 failed with error -71 [ 1713.482133][ T1038] usb 5-1: USB disconnect, device number 38 [ 1713.654698][T32147] FAT-fs (loop0): Directory bread(block 64) failed [ 1713.705679][T32147] FAT-fs (loop0): Directory bread(block 65) failed [ 1713.764284][T32147] FAT-fs (loop0): Directory bread(block 66) failed [ 1713.822292][T32147] FAT-fs (loop0): Directory bread(block 67) failed [ 1713.886967][T26280] Bluetooth: hci0: sending frame failed (-49) [ 1713.900055][T32147] FAT-fs (loop0): Directory bread(block 68) failed [ 1713.934831][T32147] FAT-fs (loop0): Directory bread(block 69) failed [ 1713.969328][T32147] FAT-fs (loop0): Directory bread(block 70) failed [ 1714.001975][T32147] FAT-fs (loop0): Directory bread(block 71) failed [ 1714.034908][T32147] FAT-fs (loop0): Directory bread(block 72) failed [ 1714.068016][T32147] FAT-fs (loop0): Directory bread(block 73) failed [ 1717.466658][ T819] Bluetooth: hci0: command 0x1003 tx timeout [ 1717.472533][T26280] Bluetooth: hci0: sending frame failed (-49) [ 1717.514586][T32167] loop3: detected capacity change from 0 to 512 [ 1717.528265][T32169] loop0: detected capacity change from 0 to 256 [ 1717.541175][T32167] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.9418: inode #1: comm syz.3.9418: iget: illegal inode # [ 1717.547222][T32173] loop5: detected capacity change from 0 to 256 [ 1717.554256][T32167] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.9418: error while reading EA inode 1 err=-117 [ 1717.560533][T32169] FAT-fs (loop0): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1717.572723][T32167] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.9418: inode #1: comm syz.3.9418: iget: illegal inode # [ 1717.607152][T32173] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1717.618704][T32167] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.9418: error while reading EA inode 1 err=-117 [ 1717.631832][T32167] EXT4-fs (loop3): 1 orphan inode deleted [ 1717.637373][T32167] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 1717.673248][T32174] IPv6: Can't replace route, no match found [ 1717.708576][ T733] usb 3-1: device not accepting address 32, error -71 [ 1718.705388][T32194] loop3: detected capacity change from 0 to 256 [ 1718.948776][T32194] FAT-fs (loop3): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1719.008598][ T733] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1719.448307][T32202] loop0: detected capacity change from 0 to 256 [ 1719.458569][ T733] usb 3-1: Using ep0 maxpacket: 16 [ 1719.500549][T32202] FAT-fs (loop0): Directory bread(block 64) failed [ 1719.502566][T32204] loop5: detected capacity change from 0 to 1024 [ 1719.506983][T32202] FAT-fs (loop0): Directory bread(block 65) failed [ 1719.519530][T31100] Bluetooth: hci0: command 0x1001 tx timeout [ 1719.526390][T26280] Bluetooth: hci0: sending frame failed (-49) [ 1719.528043][T32202] FAT-fs (loop0): Directory bread(block 66) failed [ 1719.538702][T32202] FAT-fs (loop0): Directory bread(block 67) failed [ 1719.545010][T32202] FAT-fs (loop0): Directory bread(block 68) failed [ 1719.551369][T32202] FAT-fs (loop0): Directory bread(block 69) failed [ 1719.557664][T32202] FAT-fs (loop0): Directory bread(block 70) failed [ 1719.564036][T32202] FAT-fs (loop0): Directory bread(block 71) failed [ 1719.569245][T32204] EXT4-fs (loop5): Ignoring removed orlov option [ 1719.571989][T32202] FAT-fs (loop0): Directory bread(block 72) failed [ 1719.579344][ T733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1719.582997][T32202] FAT-fs (loop0): Directory bread(block 73) failed [ 1719.593916][T32204] EXT4-fs (loop5): Ignoring removed nobh option [ 1719.605964][ T733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1719.615616][ T733] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1719.628344][ T733] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1719.637710][ T733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.649599][ T733] usb 3-1: config 0 descriptor?? [ 1719.664263][T32204] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,orlov,barrier=0x0000000000000004,nobh,debug_want_extra_isize=0x0000000000000080,nodiscard,nodelalloc,acl,dioread_lock,,errors=continue. Quota mode: none. [ 1720.378623][ T733] usbhid 3-1:0.0: can't add hid device: -71 [ 1720.386538][ T733] usbhid: probe of 3-1:0.0 failed with error -71 [ 1720.413391][ T733] usb 3-1: USB disconnect, device number 33 [ 1720.811909][T32233] loop5: detected capacity change from 0 to 512 [ 1721.287227][T32233] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1721.387574][T32233] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.9433: bg 0: block 248: padding at end of block bitmap is not set [ 1721.444750][T32233] Quota error (device loop5): write_blk: dquota write failed [ 1721.452541][T32233] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1721.462442][T32233] EXT4-fs error (device loop5): ext4_acquire_dquot:6188: comm syz.5.9433: Failed to acquire dquot type 1 [ 1721.490499][T32233] EXT4-fs (loop5): 1 truncate cleaned up [ 1721.497587][T32233] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 1721.735802][T31100] Bluetooth: hci0: command 0x1009 tx timeout [ 1721.756184][T32244] loop3: detected capacity change from 0 to 512 [ 1721.842108][T32244] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1721.873634][T32244] EXT4-fs (loop3): 1 truncate cleaned up [ 1721.879395][T32244] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,init_itable=0x0000000000008001,errors=remount-ro,data_err=ignore,. Quota mode: none. [ 1721.961884][T32248] tipc: Enabling of bearer rejected, failed to enable media [ 1723.881624][T32268] loop3: detected capacity change from 0 to 256 [ 1724.348049][T32268] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1724.482165][T32273] loop0: detected capacity change from 0 to 256 [ 1724.672032][T32273] exfat: Deprecated parameter 'namecase' [ 1724.829468][T32273] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1724.994407][T32279] loop4: detected capacity change from 0 to 256 [ 1725.049011][T32266] loop5: detected capacity change from 0 to 40427 [ 1725.309996][T32279] FAT-fs (loop4): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1725.318073][T32266] F2FS-fs (loop5): fault_injection options not supported [ 1725.333676][T32266] F2FS-fs (loop5): invalid crc value [ 1725.360374][T32266] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1725.517499][T32266] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1725.683612][T32302] loop0: detected capacity change from 0 to 512 [ 1725.856366][T32302] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1725.864824][T32302] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.9450: bg 0: block 248: padding at end of block bitmap is not set [ 1725.881789][T32302] Quota error (device loop0): write_blk: dquota write failed [ 1725.889139][T32302] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1725.898946][T32302] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.9450: Failed to acquire dquot type 1 [ 1725.912742][T32302] EXT4-fs (loop0): 1 truncate cleaned up [ 1725.919495][T32302] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 1726.461494][T26444] attempt to access beyond end of device [ 1726.461494][T26444] loop5: rw=2049, want=45104, limit=40427 [ 1726.576364][T32312] loop4: detected capacity change from 0 to 256 [ 1726.634794][T32299] loop3: detected capacity change from 0 to 40427 [ 1726.663279][T32312] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1726.683823][T32314] loop0: detected capacity change from 0 to 512 [ 1726.699172][T32299] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1726.708386][T32299] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1726.731583][T32314] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.9458: inode #1: comm syz.0.9458: iget: illegal inode # [ 1726.774133][T32299] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1726.804111][T32314] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.9458: error while reading EA inode 1 err=-117 [ 1726.837793][T32314] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.9458: inode #1: comm syz.0.9458: iget: illegal inode # [ 1726.864217][T32314] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.9458: error while reading EA inode 1 err=-117 [ 1726.888093][T32314] EXT4-fs (loop0): 1 orphan inode deleted [ 1726.893714][T32314] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 1726.922754][T32299] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1727.631558][T32328] IPv6: Can't replace route, no match found [ 1728.097940][T32299] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1728.174317][T32334] loop2: detected capacity change from 0 to 256 [ 1728.207404][T32338] loop4: detected capacity change from 0 to 256 [ 1728.280425][T32334] exfat: Deprecated parameter 'namecase' [ 1728.322408][T32334] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1728.388648][ T1038] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1728.698432][T32343] loop0: detected capacity change from 0 to 40427 [ 1728.745191][T32343] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1728.756949][T32343] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1728.777247][T32343] F2FS-fs (loop0): invalid crc value [ 1728.794282][T32343] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1728.843125][T32343] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1728.856843][T32343] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1728.889258][T29819] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1728.898376][T29819] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1730.899081][T32364] loop2: detected capacity change from 0 to 256 [ 1731.000930][T32364] FAT-fs (loop2): Unrecognized mount option "iocharset" or missing value [ 1731.161444][T32364] loop2: detected capacity change from 0 to 2048 [ 1731.279612][ T1038] usb 4-1: New USB device found, idVendor=067b, idProduct=23c3, bcdDevice=18.a2 [ 1731.330452][T32364] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: none. [ 1731.350353][T32364] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1731.389884][ T1038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.398124][ T1038] usb 4-1: Product: syz [ 1731.403385][ T1038] usb 4-1: Manufacturer: syz [ 1731.488793][T32370] IPv6: Can't replace route, no match found [ 1731.559444][ T1038] usb 4-1: SerialNumber: syz [ 1731.564594][ T1038] usb 4-1: config 0 descriptor?? [ 1731.600275][ T1038] usb 4-1: can't set config #0, error -71 [ 1731.700377][ T1038] usb 4-1: USB disconnect, device number 32 [ 1731.786580][T32388] loop0: detected capacity change from 0 to 512 [ 1731.891359][T32388] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.9478: inode #1: comm syz.0.9478: iget: illegal inode # [ 1732.137132][T32394] loop2: detected capacity change from 0 to 2048 [ 1732.148539][ T30] audit: type=1400 audit(2000000276.360:1367): avc: denied { accept } for pid=32385 comm="syz.2.9477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1732.172728][T32388] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.9478: error while reading EA inode 1 err=-117 [ 1732.261352][T32388] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.9478: inode #1: comm syz.0.9478: iget: illegal inode # [ 1732.386266][T32388] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.9478: error while reading EA inode 1 err=-117 [ 1732.546985][T32399] loop5: detected capacity change from 0 to 256 [ 1732.554594][T32388] EXT4-fs (loop0): 1 orphan inode deleted [ 1732.682251][T32388] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 1732.838749][T32399] FAT-fs (loop5): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1732.881547][T32406] loop3: detected capacity change from 0 to 128 [ 1733.324215][T32412] loop2: detected capacity change from 0 to 256 [ 1733.383657][T32408] loop4: detected capacity change from 0 to 40427 [ 1733.424043][T32412] exfat: Deprecated parameter 'namecase' [ 1733.439419][T32408] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1733.452663][T32412] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1733.489610][T32408] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1733.559965][T32408] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1733.659301][T32429] loop0: detected capacity change from 0 to 512 [ 1734.528162][T32429] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1734.536810][T32429] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.9487: bg 0: block 248: padding at end of block bitmap is not set [ 1734.552559][T32429] Quota error (device loop0): write_blk: dquota write failed [ 1734.560004][T32429] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1734.569818][T32429] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.9487: Failed to acquire dquot type 1 [ 1734.582558][T32429] EXT4-fs (loop0): 1 truncate cleaned up [ 1734.589480][T32429] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 1734.703372][T32408] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1734.803821][T32408] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1734.875114][T32446] loop5: detected capacity change from 0 to 2048 [ 1735.058750][T32440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9492'. [ 1735.067573][T32440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9492'. [ 1735.312035][T32454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.319047][T32454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.384719][T32446] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1735.408716][T32446] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1735.447189][T32462] loop0: detected capacity change from 0 to 256 [ 1735.459071][T32464] loop2: detected capacity change from 0 to 256 [ 1735.500183][T32462] FAT-fs (loop0): Directory bread(block 64) failed [ 1735.506586][T32462] FAT-fs (loop0): Directory bread(block 65) failed [ 1735.513205][T32462] FAT-fs (loop0): Directory bread(block 66) failed [ 1735.520080][T32462] FAT-fs (loop0): Directory bread(block 67) failed [ 1735.526770][T32462] FAT-fs (loop0): Directory bread(block 68) failed [ 1736.345752][T32464] FAT-fs (loop2): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1736.350307][T32462] FAT-fs (loop0): Directory bread(block 69) failed [ 1736.365332][T32462] FAT-fs (loop0): Directory bread(block 70) failed [ 1736.372525][T32462] FAT-fs (loop0): Directory bread(block 71) failed [ 1736.378998][T32462] FAT-fs (loop0): Directory bread(block 72) failed [ 1736.385778][T32462] FAT-fs (loop0): Directory bread(block 73) failed [ 1736.404175][T32473] loop5: detected capacity change from 0 to 256 [ 1736.491751][T32473] exfat: Deprecated parameter 'namecase' [ 1736.499887][T32473] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1736.536848][T32475] loop3: detected capacity change from 0 to 128 [ 1737.678636][T32485] loop5: detected capacity change from 0 to 128 [ 1737.822614][T32485] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1737.849853][T32485] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1738.751604][T32494] loop0: detected capacity change from 0 to 256 [ 1738.781670][T32485] ext4 filesystem being mounted at /332/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1738.810881][T32494] FAT-fs (loop0): Unrecognized mount option "iocharset" or missing value [ 1739.007819][T32485] tmpfs: Unknown parameter 'nolazytimeÙþ' [ 1739.784511][T32482] loop4: detected capacity change from 0 to 40427 [ 1739.866889][T32502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9508'. [ 1739.875910][T32502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9508'. [ 1739.935691][T32509] 9pnet: Insufficient options for proto=fd [ 1739.952565][T32482] F2FS-fs (loop4): Invalid log blocks per segment (393225) [ 1739.963173][T32482] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1739.976192][T32482] F2FS-fs (loop4): invalid crc value [ 1740.091353][T32512] loop3: detected capacity change from 0 to 2048 [ 1740.250210][T32482] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1740.271721][T32512] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1740.287486][T32512] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1740.429800][T32482] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1740.540286][T32482] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1740.579529][T32529] loop0: detected capacity change from 0 to 256 [ 1740.589050][T32482] SELinux: Context @ is not valid (left unmapped). [ 1740.595607][ T30] audit: type=1400 audit(2000000284.820:1368): avc: denied { relabelto } for pid=32481 comm="syz.4.9504" name="cgroup.controllers" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 1740.631392][T30501] attempt to access beyond end of device [ 1740.631392][T30501] loop4: rw=2049, want=45104, limit=40427 [ 1740.719496][T32529] exfat: Deprecated parameter 'namecase' [ 1740.739286][T32529] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 1740.748207][T32535] loop2: detected capacity change from 0 to 128 [ 1740.765643][T32537] loop5: detected capacity change from 0 to 256 [ 1740.836603][T32540] tipc: Enabling of bearer rejected, failed to enable media [ 1740.955383][T32537] FAT-fs (loop5): Directory bread(block 64) failed [ 1741.042108][T32537] FAT-fs (loop5): Directory bread(block 65) failed [ 1741.251421][T32544] loop0: detected capacity change from 0 to 512 [ 1742.231458][T32537] FAT-fs (loop5): Directory bread(block 66) failed [ 1742.266330][T32544] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1742.274968][T32544] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.9519: bg 0: block 248: padding at end of block bitmap is not set [ 1742.290498][T32544] Quota error (device loop0): write_blk: dquota write failed [ 1742.297806][T32544] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1742.307589][T32544] EXT4-fs error (device loop0): ext4_acquire_dquot:6188: comm syz.0.9519: Failed to acquire dquot type 1 [ 1742.320392][T32544] EXT4-fs (loop0): 1 truncate cleaned up [ 1742.326633][T32544] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 1742.425378][T32547] loop3: detected capacity change from 0 to 512 [ 1742.441462][T32537] FAT-fs (loop5): Directory bread(block 67) failed [ 1742.537371][T32537] FAT-fs (loop5): Directory bread(block 68) failed [ 1742.564123][T32537] FAT-fs (loop5): Directory bread(block 69) failed [ 1742.604627][T32537] FAT-fs (loop5): Directory bread(block 70) failed [ 1742.620143][T32547] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1742.633118][T32537] FAT-fs (loop5): Directory bread(block 71) failed [ 1742.639652][T32537] FAT-fs (loop5): Directory bread(block 72) failed [ 1742.645972][T32537] FAT-fs (loop5): Directory bread(block 73) failed [ 1742.791431][T32547] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1743.941770][T32566] loop0: detected capacity change from 0 to 128 [ 1744.004560][T32564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9522'. [ 1744.013471][T32564] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9522'. [ 1744.071110][T32574] loop5: detected capacity change from 0 to 128 [ 1744.102228][T32574] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1744.188223][T32574] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1744.211306][T32574] ext4 filesystem being mounted at /335/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1744.529975][T32574] tmpfs: Unknown parameter 'nolazytimeÙþ' [ 1744.803725][T32593] loop2: detected capacity change from 0 to 256 [ 1748.693295][T32592] loop4: detected capacity change from 0 to 512 [ 1749.004939][T32593] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1749.096470][T32592] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1749.106618][T32592] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.9531: bg 0: block 248: padding at end of block bitmap is not set [ 1749.121563][T32592] Quota error (device loop4): write_blk: dquota write failed [ 1749.129213][T32592] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1749.138974][T32592] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.9531: Failed to acquire dquot type 1 [ 1749.150435][T32592] EXT4-fs (loop4): 1 truncate cleaned up [ 1749.156096][T32592] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 1749.209906][T32604] loop0: detected capacity change from 0 to 128 [ 1749.745744][T32610] loop4: detected capacity change from 0 to 512 [ 1749.811531][T25058] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1749.849442][T32610] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.9536: inode #1: comm syz.4.9536: iget: illegal inode # [ 1749.862608][T32610] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.9536: error while reading EA inode 1 err=-117 [ 1749.875071][T32610] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.9536: inode #1: comm syz.4.9536: iget: illegal inode # [ 1749.888202][T32610] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.9536: error while reading EA inode 1 err=-117 [ 1749.918927][T32610] EXT4-fs (loop4): 1 orphan inode deleted [ 1749.924531][T32610] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 1750.085403][T32617] overlayfs: missing 'workdir' [ 1750.210720][T25058] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1750.233163][T25058] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1750.265671][T25058] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.294999][T25058] usb 4-1: config 0 descriptor?? [ 1750.358221][T32619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9538'. [ 1750.387211][T32619] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9538'. [ 1750.471927][T32631] loop2: detected capacity change from 0 to 512 [ 1750.707694][T32631] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.2.9541: corrupted xattr block 95 [ 1750.720870][T32631] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.9541: bg 0: block 7: invalid block bitmap [ 1750.734006][T32631] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1750.743108][T32631] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2932: inode #11: comm syz.2.9541: corrupted xattr block 95 [ 1750.755874][T32631] EXT4-fs warning (device loop2): ext4_evict_inode:303: xattr delete (err -117) [ 1750.764881][T32631] EXT4-fs (loop2): 1 orphan inode deleted [ 1750.770486][T32631] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1751.542241][T32640] loop0: detected capacity change from 0 to 128 [ 1751.584631][T25058] logitech 0003:046D:C293.0019: collection stack underflow [ 1751.586558][T32647] loop5: detected capacity change from 0 to 256 [ 1751.591705][T25058] logitech 0003:046D:C293.0019: item 0 4 0 12 parsing failed [ 1751.591890][T25058] logitech 0003:046D:C293.0019: parse failed [ 1751.591922][T25058] logitech: probe of 0003:046D:C293.0019 failed with error -22 [ 1751.593492][T25058] usb 4-1: USB disconnect, device number 33 [ 1751.620806][T32649] syz.2.9547[32649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1751.624920][T32649] syz.2.9547[32649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1751.649113][T32647] FAT-fs (loop5): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1751.792170][T32654] loop2: detected capacity change from 0 to 16 [ 1751.839989][T32654] erofs: Unknown parameter 'ÿÿÿÿ !¸üo°þ±W_‘K' [ 1751.969647][T32654] incfs: Options parsing error. -22 [ 1751.994045][T32654] incfs: mount failed -22 [ 1752.545754][T32677] loop2: detected capacity change from 0 to 512 [ 1752.599476][T32684] 9pnet: Could not find request transport: rdma [ 1752.777136][T32687] loop3: detected capacity change from 0 to 512 [ 1753.538862][ T30] audit: type=1400 audit(2000000297.070:1369): avc: denied { create } for pid=32679 comm="syz.4.9556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1753.991285][T32687] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.3.9554: corrupted xattr block 95 [ 1754.004390][T32687] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.9554: bg 0: block 7: invalid block bitmap [ 1754.018974][T32687] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1754.028101][T32687] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2932: inode #11: comm syz.3.9554: corrupted xattr block 95 [ 1754.041373][T32687] EXT4-fs warning (device loop3): ext4_evict_inode:303: xattr delete (err -117) [ 1754.050357][T32687] EXT4-fs (loop3): 1 orphan inode deleted [ 1754.055927][T32687] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1754.084086][T32677] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.9555: inode #1: comm syz.2.9555: iget: illegal inode # [ 1754.258739][T32677] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.9555: error while reading EA inode 1 err=-117 [ 1754.280930][ T30] audit: type=1400 audit(2000000297.230:1370): avc: denied { write } for pid=32679 comm="syz.4.9556" path="socket:[119968]" dev="sockfs" ino=119968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1754.352569][T32677] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.9555: inode #1: comm syz.2.9555: iget: illegal inode # [ 1754.384631][ T30] audit: type=1400 audit(2000000297.230:1371): avc: denied { nlmsg_read } for pid=32679 comm="syz.4.9556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1754.405623][T32677] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.9555: error while reading EA inode 1 err=-117 [ 1754.427972][T32677] EXT4-fs (loop2): 1 orphan inode deleted [ 1754.433874][T32677] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 1754.491164][T32710] loop0: detected capacity change from 0 to 256 [ 1754.729043][T32710] FAT-fs (loop0): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1754.873817][T32721] loop4: detected capacity change from 0 to 256 [ 1754.889686][T32721] FAT-fs (loop4): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1755.718639][T32739] loop3: detected capacity change from 0 to 256 [ 1755.770463][T32739] FAT-fs (loop3): Unrecognized mount option "iocharset" or missing value [ 1755.830829][T32738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9571'. [ 1756.022432][T32742] 9pnet: Could not find request transport: rdma [ 1756.053107][T32728] loop5: detected capacity change from 0 to 40427 [ 1756.104554][T32728] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1756.125730][T32728] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1756.174965][T32728] F2FS-fs (loop5): invalid crc value [ 1756.276241][T32728] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1756.591975][T32728] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1756.600025][T32728] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1756.876101][ T30] audit: type=1400 audit(2000000301.100:1372): avc: denied { rmdir } for pid=26444 comm="syz-executor" name="file0" dev="loop5" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1757.000191][ T308] loop4: detected capacity change from 0 to 256 [ 1757.049331][ T308] FAT-fs (loop4): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 1758.284819][ T332] loop5: detected capacity change from 0 to 2048 [ 1758.350337][ T332] FAT-fs (loop5): Unrecognized mount option "ÿ18446744073709551615ÿÿÿÿ" or missing value [ 1858.478516][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1858.485292][ C0] (detected by 0, t=10002 jiffies, g=151701, q=358) [ 1858.491794][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10000 (4295123065-4295113065), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1858.504984][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g151701 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1858.516094][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1858.525899][ C0] rcu: RCU grace-period kthread stack dump: [ 1858.531629][ C0] task:rcu_preempt state:R running task stack:27912 pid: 14 ppid: 2 flags:0x00004000 [ 1858.542218][ C0] Call Trace: [ 1858.545340][ C0] [ 1858.548122][ C0] __schedule+0xccc/0x1590 [ 1858.552372][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1858.558099][ C0] ? del_timer_sync+0x1bc/0x230 [ 1858.562789][ C0] ? __kasan_check_write+0x14/0x20 [ 1858.567739][ C0] schedule+0x11f/0x1e0 [ 1858.571728][ C0] schedule_timeout+0x18c/0x370 [ 1858.576414][ C0] ? sysvec_reschedule_ipi+0x8c/0x160 [ 1858.581626][ C0] ? console_conditional_schedule+0x30/0x30 [ 1858.587347][ C0] ? update_process_times+0x200/0x200 [ 1858.592560][ C0] ? prepare_to_swait_event+0x308/0x320 [ 1858.597957][ C0] rcu_gp_fqs_loop+0x2af/0xf80 [ 1858.602542][ C0] ? dump_blkd_tasks+0x7e0/0x7e0 [ 1858.607309][ C0] ? rcu_gp_init+0xc30/0xc30 [ 1858.611741][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 1858.616771][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 1858.621201][ C0] rcu_gp_kthread+0xa4/0x350 [ 1858.625629][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 1858.630309][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 1858.634825][ C0] ? __kasan_check_read+0x11/0x20 [ 1858.639681][ C0] ? __kthread_parkme+0xb2/0x200 [ 1858.644457][ C0] kthread+0x421/0x510 [ 1858.648361][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 1858.652876][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1858.657300][ C0] ret_from_fork+0x1f/0x30 [ 1858.661557][ C0] [ 1858.664417][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1858.670589][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1858.675627][ C1] NMI backtrace for cpu 1 [ 1858.675638][ C1] CPU: 1 PID: 332 Comm: syz.5.9584 Tainted: G W 5.15.173-syzkaller-00161-gb4bd207b0380 #0 [ 1858.675655][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1858.675663][ C1] RIP: 0010:entry_SYSCALL_64_after_hwframe+0x57/0xd0 [ 1858.675684][ C1] Code: 45 31 e4 45 31 ed 45 31 f6 45 31 ff 48 89 e7 48 63 f0 66 90 b9 48 00 00 00 65 48 8b 14 25 a8 6d 02 00 89 d0 48 c1 ea 20 0f 30 <0f> 1f 44 00 00 e8 4b 12 00 00 e8 06 41 e1 ff 0f 1f 44 00 00 48 8b [ 1858.675697][ C1] RSP: 0018:ffffc90000c4ff58 EFLAGS: 00000046 [ 1858.675711][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000048 [ 1858.675721][ C1] RDX: 0000000000000000 RSI: 000000000000000f RDI: ffffc90000c4ff58 [ 1858.675731][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1858.675741][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1858.675750][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1858.675759][ C1] FS: 00007f992beda6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1858.675773][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1858.675785][ C1] CR2: 00007f992bab9000 CR3: 000000011a254000 CR4: 00000000003506a0 [ 1858.675799][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1858.675808][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1858.675818][ C1] Call Trace: [ 1858.675823][ C1] [ 1858.675828][ C1] ? show_regs+0x58/0x60 [ 1858.675844][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 1858.675860][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 1858.675877][ C1] ? entry_SYSCALL_64_after_hwframe+0x57/0xd0 [ 1858.675892][ C1] ? entry_SYSCALL_64_after_hwframe+0x57/0xd0 [ 1858.675907][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1858.675924][ C1] ? nmi_handle+0xa8/0x280 [ 1858.675939][ C1] ? entry_SYSCALL_64_after_hwframe+0x57/0xd0 [ 1858.675954][ C1] ? default_do_nmi+0x69/0x160 [ 1858.675970][ C1] ? exc_nmi+0xad/0x100 [ 1858.675983][ C1] ? end_repeat_nmi+0x16/0x31 [ 1858.676002][ C1] ? entry_SYSCALL_64_after_hwframe+0x57/0xd0 [ 1858.676018][ C1] ? entry_SYSCALL_64_after_hwframe+0x57/0xd0 [ 1858.676034][ C1] ? entry_SYSCALL_64_after_hwframe+0x57/0xd0 [ 1858.676049][ C1] [ 1858.676054][ C1] [ 1858.676062][ C1] [ 2005.748556][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 246s! [ 2005.757318][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=-20 stuck for 242s! [ 2005.766189][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 247s! [ 2005.774869][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 245s! [ 2005.783724][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 246s! [ 2005.791976][ C0] Showing busy workqueues and worker pools: [ 2005.797682][ C0] workqueue events: flags=0x0 [ 2005.802212][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 2005.802258][ C0] pending: destroy_super_work, pwq_unbound_release_workfn, kfree_rcu_monitor, rht_deferred_worker [ 2005.802369][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=7/256 refcnt=8 [ 2005.802406][ C0] in-flight: 25058:free_work [ 2005.802431][ C0] pending: destroy_list_workfn, psi_avgs_work, vmstat_shepherd, kfree_rcu_monitor, key_garbage_collector, rht_deferred_worker [ 2005.802533][ C0] workqueue events_long: flags=0x0 [ 2005.851117][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 2005.851166][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup [ 2005.851217][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2005.851256][ C0] pending: br_fdb_cleanup [ 2005.851277][ C0] workqueue events_unbound: flags=0x2 [ 2005.884227][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 2005.884269][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 2005.884317][ C0] workqueue events_power_efficient: flags=0x80 [ 2005.904617][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 2005.904659][ C0] pending: neigh_periodic_work, gc_worker, check_lifetime [ 2005.904711][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 2005.904746][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work [ 2005.904783][ C0] workqueue mm_percpu_wq: flags=0x8 [ 2005.939298][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2005.939341][ C0] pending: vmstat_update [ 2005.939371][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2005.939406][ C0] pending: vmstat_update [ 2005.939431][ C0] workqueue writeback: flags=0x4a [ 2005.968037][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/256 refcnt=6 [ 2005.968082][ C0] pending: wb_workfn, wb_workfn, wb_workfn, wb_workfn [ 2005.968154][ C0] workqueue kblockd: flags=0x18 [ 2005.986693][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=3/256 refcnt=4 [ 2005.986737][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work [ 2005.986788][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 2005.986825][ C0] pending: blk_mq_timeout_work [ 2005.986856][ C0] workqueue dm_bufio_cache: flags=0x8 [ 2006.020859][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2006.020907][ C0] pending: work_fn [ 2006.020941][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 2006.037681][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 [ 2006.037731][ C0] pending: addrconf_verify_work [ 2006.037804][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2006.055130][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2006.055177][ C0] pending: wg_packet_encrypt_worker [ 2006.055212][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2006.072849][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2006.072893][ C0] pending: wg_packet_handshake_send_worker [ 2006.072926][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2006.090984][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2006.091030][ C0] pending: wg_packet_encrypt_worker [ 2006.091059][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2006.091098][ C0] pending: wg_packet_encrypt_worker [ 2006.091125][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2006.121659][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 2006.121700][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 2006.121750][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2006.142667][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2006.142719][ C0] pending: wg_packet_encrypt_worker [ 2006.142751][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2006.142790][ C0] pending: wg_packet_encrypt_worker [ 2006.142830][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2006.173625][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2006.173681][ C0] pending: wg_packet_encrypt_worker [ 2006.173718][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2006.191585][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2006.191627][ C0] pending: wg_packet_encrypt_worker [ 2006.191663][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2006.191701][ C0] pending: wg_packet_encrypt_worker [ 2006.191729][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2006.222520][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2006.222567][ C0] pending: wg_packet_encrypt_worker [ 2006.222598][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2006.222636][ C0] pending: wg_packet_encrypt_worker [ 2006.222670][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=247s workers=4 idle: 733 1038 13885