last executing test programs: 3m4.89328529s ago: executing program 1 (id=15): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket(0x10, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0003001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3m4.113246952s ago: executing program 1 (id=18): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000002fc0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000180), 0x64, 0x526, &(0x7f0000000200)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3m3.241757004s ago: executing program 1 (id=22): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000140)={@desc={0x1, 0x0, @desc3}}) 3m2.795763231s ago: executing program 1 (id=23): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0xfffffffffffffffc]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) 3m2.053470341s ago: executing program 1 (id=26): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000300)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303030372c757365667265652c7569643d1ba9f5be01c019f7c76251258fa46421b6e0c2b364b38a76811c00e2726ee527e77f78ead48d950549aa7d30e43923ab70506545e26b599c790456a691d30397a6609222462f80701298dec32b4a73380fb3ed9a769504196a2c8be02ca5dde80e144d352a4ca0e2cf327690267d39294ca896d345a664aaefe1e5d81e296ff6540547122db79b97c47c02cded843583845c98", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,tz=UTC,nodots,flush,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_extract_tcp_res(&(0x7f0000000000), 0x5, 0x401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2208086, &(0x7f00000007c0), 0xff, 0x4a9, &(0x7f0000000cc0)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x0, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000100)={0x5, 0x401}, 0x0) accept$unix(r4, &(0x7f0000000180), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x401, 0x100) getdents64(r5, &(0x7f0000000180)=""/53, 0x35) 2m58.219857007s ago: executing program 1 (id=34): unshare(0x2040400) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) 2m57.34856343s ago: executing program 32 (id=34): unshare(0x2040400) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) 46.801265399s ago: executing program 2 (id=332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$9p(r3, &(0x7f00000000c0)="9025b8daf4e5d70d458aa373c5553e24e4a00f76893e41c777d5dca1b7640567c3346fece8639283dad8d5c0a032143222479b6d5ee15cc6f639acd495ffc8389bdaefe8768cc89d28be94e83e30bd5e0dd3e6a7230ff3709077025abc22", 0x5e) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0x5, 0xa, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='clear_refs\x00') writev(r4, &(0x7f0000002440)=[{&(0x7f0000000280)='3', 0x1}], 0x1) 43.738032553s ago: executing program 2 (id=335): r0 = syz_open_dev$loop(&(0x7f0000000140), 0xffffffffffffffff, 0x2400) ioctl$BLKGETDISKSEQ(r0, 0x80081280, 0x0) 43.322909259s ago: executing program 2 (id=336): read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64, @ANYRESOCT, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC, @ANYRESHEX], 0x1, 0x14ee, &(0x7f0000002400)="$eJzs3Au0jtX2MPA511qPW9Kb5L7mmg9v2lgkSS5JckmSJElyS0iSJAmJTW5JSELuSe4hucVO7vdb7klyJEkSEpKsb+ic89ep842+b5y+z/8/9vyNscZecz97rneud77jfZ/n2WPvbzsOrlq/WqW6zAz/Efz7l1QAyAQA/QDgGgCIAKBU9lLZLx3PrDH1P3sQ8dd6aNqVrkBcSdL/9E36n75J/9M36X/6Jv1P36T/6Zv0P32T/guRnm2dnudaGel3yP3/9Ew+/9M36X/6Jv1P36T/6Zv0P32T/qdv0v/0Tfqfvkn/hUjPrvT95/85I+M/nrErXcdfO67wy08IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghRDpxLlxmAOCf8ytdlxBCCCGEEEIIIf46IeOVrkAIIYQQQgghhBD/7yEo0GAgggyQETJBZsgCV0FWuBqywTWQgGshO1wHOeB6yAm5IDfkgbyQD/KDBQIHDDEUgIKQhBugENwIKVAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6Ai3AmV4C6oDFWgKlSDu6E63AM14F6oCfdBLbgfzpX5e5V14SGoBw9DfXgEGsCj0BAaQWNoAk1/n48I8Jv82vAA1IEHf5f/InSFl6AbdIdU6AE94WXoBb2hD/SFfvAK9IdXYQC8BgNhEAyG12EIvAFD4U0YBsNhBLwFI2EUjIYxMBbGwXh4GybAOzAR3oVJMBmmwFSYBtNhBrwHM2EWzIb3YQ58AHNhHsyHBbAQPoRFsBjS4CNYAh/DUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW+AS2wXbYATthF+yGPfAp7IXPYB98Dvvhi//L/LO/y++EgIAKFRo0mAEzYCbMhFkwC2bFrJgNs2ECE5gds//XiyU35sa8mBfzY34kJGRkLIAFMIlJLISFMAVTsAgWQY8ei2NxLIE3Y0ksiaWwFJbG0lgGy2JZLI/lsQJWwIpYESthJayMlbEqVsW78W68B2tgDayJNbEW1sLaWBvrYB2si3WxHtbD+lgfG2ADbIgNsTE2xqbYFJthM2yOzbEltsRW2ApbY2tsg22wLbbFdtgO22N77IAdsCN2xE7YGTvji/givoQvYXesrHpgT+yJvbAX9sG+2Bdfwf74Kr6Kr+FAHISD8XV8Hd/AoXgGh+FwHIEjsIIahaNxDLIah+NxPE7ACTgRJ+IknIyTcSpOw+k4A2fgTJyFs/B9nIMf4Ac4D+fhAlyIC3ERLsY0TMMleBaX4jJcjitwJa7ClbgG1+IaXI8bcD1uwk24BbfgJ/gJbsftuBN34m7cjZ/ip/gZfoYDcT/uxwN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOB7HE3gST+FJPI2n8QyexXN4Ds/jebyAz+f9ut7uwusGgrrEKKMyqAwqk8qksqgsKqvKqrKpbCqhEiq7yq5yqBwqp8qpcqvcKq/Kq/Kr/IoUKVaxKqAKqKRKqkKqkEpRKaqIKqK88qq4Kq5KqBKqpCqpSqlbVWl1myqjyqoWvrwqryqolr6iulNVUpVUZVVFVVXVVDVVXVVXNVQNVVPVVLVULVVbPaDqqB7YBx9SlzpTXw3CBmowNlSNVGPVRL2Bj6lmaig2Vy1US/WEGo7DsLVq5tuop1VbNRrbqWfVGHxOdVDjsKN6QXVSnVUX9aLqqpr7bqq7moQ9VE81FXup3qqP6qtmYhV1qWNV1WtqoBqkBqvX1QJ8Qw1Vb6phargaod5SI9UoNVqNUWPVODVeva0mqHfURPWumqQmqylqqpqmpqsZ6j01U81Ss9X7ao76QM1V89R8tUAtVB+qRWqxSlMfqSXqY7VULVPL1Qq1Uq1Sq9UatVatU+vVBrVRbVKb1Ra1VX2itqntaofaqXap3WqP+lTtVZ+pfepztV99oQ4oTAX4Uh1SX6nD6mt1RH2jjqpv1TH1nTquvlcn1El1Sv2gTqsf1Zlf3xsBQP2sLqhf1EUVFGjUSmttdKQz6Iw6k86ss+irdFZ9tc6mr9EJfa3Orq/TOfT1OqfOpXPrPDqvzqfza6tJO8061gV0QZ3UN+hC+kadogvrIrqo9rqYLq5v0iX0zbqkvkWX0rfq0vo2XUaX1eV0eX27rqDv0BX1nbqSvktX1lV0VV1N362r63t0DX2vrqnv07X0/bq2fkDX0Q/quvohXU8/rOvrR3QD/ahuqBvpxrqJbqof083047q5bqFb6id0K/2kbq2f0m3007qtfka308/q9vo53UE/rzvqF3Qn3Vl30b/oizrobrq7TtU9dE/9su6le+s+uq/up1/R/fWreoB+TQ/Ug/Rg/boeot/QQ/Wbepgerkfot/RIPUqP1mP0WD1Oj9dv6wn6HT1Rv6sn6cl6ip6qp+npus8/Vpr9f5D/zr/JH/Dro2/RW/UnepvernfonXqX3q336D16r96r9+l9er/erw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6JP6J/2DPq1/1Gf0WX1W/6TP6/P6wj+eAzBolNHGmMhkMBlNJpPZZDFXmazmapPNXGMS5lqT3VxncpjrTU6Ty+Q2eUxek8/kN9aQcYZNbAqYgiZpbjCFzI0mxRQ2RUxR400xU9zc9B/n/1l9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL532RSpSkYlMlCHKEGWKMkVZoixR1ihrlC3KFiWiRJQ9yh7liK6Pcka5otxRnihvlC/KH9mIIhdxFEcFooJRMrohKhTdGKVEhaMiUdHIR8Wi4tFNUYno5qhkdEtUKro1Kh3dFpWJykblovLR7VGF6I6oYnRnVCm6K6ocVYmqRtWiu6Pq0T1RjejeqGZ0X1Qruj+qHT0Q1YkejOpGD0X1ooej+tEjUYPo0ahh1ChqHDWJmv6l64dwJtfjvpvtblNtD9vTvmx72d62j+1r+9lXbH/7qh1gX7MD7SA72L5uh9g37FD7ph1mh9sR9i070o6yo+0YO9aOs+Pt23aCfcdOtO/aSXaynWKn2ml2up1h37Mz7Sw7275v59gP7Fw7z863C+xC+6FdZBfbNPuRXWI/tkvtMrvcrrAr7Sq72q6xa+06u95usBvtJrvZbrFb7Sd2m91ud9iddpfdbffYT+1e+5ndZz+3++0X9oD9m1XwpT1kv7KH7df2iP3GHrXf2mP2O3vcfm9P2JP2lP3BnrY/2jP2rD1nf7Ln7c/2gv3FXrTh0sn9pY93MmQoA2WgTJSJslAWykpZKRtlowQlKDtlpxyUg3JSTspNuSkv5aX8lJ8uYWIqQAUoSUkqRIUohVKoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qA76U66i+6iKlSFqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVAml9llcVe5rO5ql81d434f53Z5XF6Xz+V31uV0uf4lJudciivsiriizrtirri76Q9xGVfWlXPl3e2ugrvDVfxDXN3d42q4e11Nd5+r5u7+l7iWu9/Vdo+4Ou5RV9c1cvVcE1ffPeIauEddQ9fINXZNXCv3pGvtnnJt3NOurXvmD/Eit9itdevcerfB7XWfuXPuJ3fUfevOu59dN9fd9XOvuP7uVTfAveYGukF/iEe4t9xIN8qNdmPcWDfuD/EUN9VNc9PdDPeem+lm/SFe6D50c1yam+vmufluwa/xpZrS3EduifvYLXXL3HK3wq10q9xqt+a/al3hNrnNbovb4z5129x2t8PtdLvc7l/jS/vY5z53+90X7oj7xh10X7pD7pg77L7+Nb60v2PuO3fcfe9OuJPulPvBnXY/ujPu7K/7v7T3H9wv7qILDhhZsWbDEWfgjJyJM3MWvoqz8tWcja/hBF/L2fk6zsHXc07Oxbk5D+flfJyfLRM7Zo65ABfkJN/AhfhGTuHCXISLsudiXJxv4hJ8M5fkW7gU38ql+TYuw2W5HJfn27kC38EV+U6uxHdxZa7CVbka383V+R6uwfdyTb6Pa/H9XJsf4Dr8INflh7geP8z1+RFuwI9yQ27EjbkJN+XHuBk/zs25BbfkJ7gVP8mt+Sluw09zW36G2/Gz3J6f4w78PHfkF7gTd+Yu/CJ35Ze4G3fnVO7BPfll7sW9uQ/35X78CvfnV3kAv8YDeRAP5td5CL/BQ/lNHsbDeQS/xSN5FI/mMTyWx/F4fpsn8Ds8kd/lSTyZp/BUnsbTeQa/xzN5Fs/m93kOf8BzeR7P5wW8kD/kRbyY0/gjXsIf81Jexst5Ba/kVbya1/BaXsfreQNv5E28mbfwVv6Et/F23sE7eRfv5j38Ke/lz3gff877+Qs+wH/jg/wlH+Kv+DB/zUf4Gz7K3/Ix/o6P8/d8gk/yKf6BT/OPfIbP8jn+ic/zz3yBf+GLHBhijFWsYxNHcYY4Y5wpzhxnia+Ks8ZXx9nia+JEfG2cPb4uzhFfH+eMc8W54zxx3jhfnD+2McUu5jiOC8QF42R8Q1wovjFOiQvHReKisY+LxcXjm+IS8c1xyfiWuFR8a1w6vi0uE5eNH7mvfHx7XCG+I64Y3xlXiu+KK8dV4qpxtfjuuHp8T1wjvjeuGd8Xl4zvj2vHD8R14gfjuvFDcb344bh+/EjcIH40bhg3ihvHTeKm8WNxs/jxuHncIm4ZPxG3ip+MW8dPxW3ip+O28TN/ejw17hH3jF+OX45DuFfPTy5ILkx+mFyUXJxMS36UXJL8OLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklGUK1jODRK6+98ZHP4DP6TD6zz+Kv8ln91T6bv8Yn/LU+u7/O5/DX+5w+l8/t8/i8Pp/P760n7zz72BfwBX3S3+AL+Rt9ii/si/ii3vtivrhv4pv6pr6Zf9w39y18S/+Ef8I/6Z/0T/mn/NO+rX/Gt/PP+vb+Od/BP++f9y/4Tr6z7+Jf9F39S76b7+5Tfarv6Xv6Xr6X7xOB7+f7+f6+vx/gB/iBfqAf7Af7IX6IH+qH+mF+mB/hR/iRfqQf7Uf7sX6sH+/H+wl+gp/oJ/pJfpKf4qf4aX6an+Fn+Jl+pp/tZ/s5KXP8XD/Xz/fz/UK/0C/yi3yaT/NL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/lD/uv/RH/jT/qv/XH/Hf+uP/en/An/Sn/gz/tf/Rn/Fl/zv/kz/uf/QX/i7/ogx+feDsxIfFOYmLi3cSkzJMTUxJTE9MS0xMzEu8lZiZmJWYn3k/MSXyQmJuYl5ifWJBYmPgwsSixOJGW+CixJPFxYmliWWJ5YkViZWJVIoR82+JQIBQMyXBDKBRuDCmhcCgSigYfioXi4aZQItwcSoZbQqlwaygdbgtlQtlQLjwaGoZGoXFoEpqGx0Kz8HhoHlqEluGJ0Co8GVqHp0Kb8HRoG54J7cKzoX14LnQIz4eO4YXQKXQOXcKLoWt4KXQL3UNq6BF6hpdDr9A79Al9Q7/wSugfXg0DwmthYBgUBofXw5DwRhga3gzDwvAwIrwVRoZRYXQYE8aGcWF8eDtMCO+EieHdMClMDlPC1DAtTA8zwnthZpgVZof3w5zwQZgb5oX5YUFYGD4Mi8LikBY+CkvCx2FpWBaWhxVhZVgVVoc1YW1YF9aHDWFj2BQ2hy1ha/gkbAvbw46wM+wKu8Oe8GnYGz4L+8LnYX/4IhwIfwsHw5fhUPgqHA5fhyPhm3A0fBuOhe/C8fB9OBFOhlPhh3A6/BjOhLPhXPgpnA8/hwvhl3Dx179Z636lbqILIYQQQvyPkfonx3v8m++pf4xLegLA1dvzHP7tcQ0AG3P+fd5b5W2VAICnu3d86J+jcuXU1H8+7lINUcF5AJC4nJ8BLsfLoCU8CW2gBZSAf/766rd6q87n+U/WT94KkOU3OZngcnx5/Zv/7f57q1Fz/nT9eQApBS/nZIbL8eX1S/5v1s/V7E/Wz/zleIDmv8nJCpfjy+sXh8fhGWjzLz8phBBCCCGEEEL8XW9Vrv2fXd9euj7Pay7nZITL8W+vz4UQQgghhBBCCPHf03Oduzz1WJs2LdrL5L/jZLe0SSZXZnKF35iEEEIIIYQQf7nLJ/1XuhIhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEECL9+v/x78Su9B6FEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIK+1/BQAA///apiom") syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2/../file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x3, 0x87) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) lseek(r3, 0x8000000000000000, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'hugetlb'}, {0x2b, 'rlimit'}, {0x2d, 'pids'}, {0x2d, 'pids'}, {0x2d, 'pids'}, {0x2d, 'devices'}, {0x2d, 'cpuset'}]}, 0x34) link(&(0x7f0000000200)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@nogrpid}, {@quota}], [{@smackfsfloor={'smackfsfloor', 0x3d, '+%('}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'nogrpid'}}, {@smackfsdef={'smackfsdef', 0x3d, 'nogrpid'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@context={'context', 0x3d, 'staff_u'}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") creat(&(0x7f0000000e40)='./bus\x00', 0x19) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0xa0c42, 0x180) socket(0x10, 0x803, 0x0) 41.540203525s ago: executing program 2 (id=340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f00000008c0), &(0x7f0000000900)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2467, &(0x7f00000004c0)=ANY=[], 0x0) 41.078349332s ago: executing program 2 (id=342): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfb, 0x100) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000240)=""/100) 40.655744768s ago: executing program 2 (id=343): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x153e, &(0x7f00000034c0)="$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") socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f00000000c0)=""/25, &(0x7f0000000080)=0xfffffffffffffe29) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x2401bb0aae70405e, &(0x7f0000000340)={0x0, 0x14}}, 0x20000000) syz_io_uring_complete(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa0) getdents64(r2, &(0x7f0000001280)=""/4089, 0xff9) 23.978362791s ago: executing program 33 (id=343): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x153e, &(0x7f00000034c0)="$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") socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f00000000c0)=""/25, &(0x7f0000000080)=0xfffffffffffffe29) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x2401bb0aae70405e, &(0x7f0000000340)={0x0, 0x14}}, 0x20000000) syz_io_uring_complete(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa0) getdents64(r2, &(0x7f0000001280)=""/4089, 0xff9) 11.328078965s ago: executing program 0 (id=368): r0 = timerfd_create(0x0, 0x800) write(0xffffffffffffffff, 0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) clock_settime(0x0, 0x0) rt_sigtimedwait(0x0, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r1, r1) setpgid(0x0, r1) wait4(r1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast1}, {@empty}, {@dev}]}]}}}}}}}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180)='FROZEN\x00', 0x7) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) waitid(0x2, r1, 0x0, 0x4, 0x0) setpgid(r2, r2) 10.615407665s ago: executing program 4 (id=370): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001140)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@rodir}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@shortname_win95}, {@uni_xlate}, {@fat=@check_strict}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlate}, {@utf8no}, {@rodir}, {@utf8no}]}, 0x7f, 0x2b1, &(0x7f00000015c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {@nodiscard}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0], 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x10000, &(0x7f0000000100)={[{}, {@nofavordynmods}, {@name={'name', 0x3d, '/dev/loop'}}, {@cpuset_v2_mode}]}) 8.600406744s ago: executing program 0 (id=372): memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xe5\xb8$\f\xd6s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00\x92\x0em<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0\a\x00\x00\x00%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x17\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x879\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xaejh\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@dVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd\x031XWel0V\x0f&\xf3\x7f\xb9\x8a%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\b\t\x00\x00\x00\x00\x00\x00\x00\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\xf3\xdc\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<\x00\x00?\xd3\x06\'x\xab\xd11\xc5\xa7\x02 \xdev\nd\x95\x0ev\x99\xad8\x01\x04\x00\x00\xb0\xc6\x06%r\a\x80\xa9\xf5\x82`\xc9s\x91\"\x8d!\xca\xba\x17\xe9F\xbc\xd6?x\x03\xfe\xe4\xdd\xe6\xd9\v\xc6p{\x9f\x8e\x9d\x06\xa2\xcc\xa0\x93J\xe1\xbb\xd6\xcc\"M\x80\bj\xd7\xe0\xb9\xb5\x1dF\xa7\xfdOu75\xf6\xd5\xb6\\\x00\xc7J\x8d\xa08\xf2\xcb\x86\xe9\xd0U\x87\xe7M\x89\x9d\xcc\x1c\xfd\xb6f\xf4\x8b\x17\xaaC\xd6c,\xad\xda\xec\x16\x06\xdd\x90\x9a\x1aDq\x13\x02%\x90\xabb\xbd\x17^\xb3\xd7+\xabp\xd04\xb9~\xa2\x1c\f\xb0J\x84x\x96\x15\xffO\xba\xcby\f\xef\xcd\x8e\x81)O.q\xc3\xd3\xe8\a;f\\\x99Z\x9b\t\x98-\xb6\xa5\xcd\xe2\xe6I0\xb8\xee\xe6\xca\x8c}7\xeb\xea\xa1\xac\x7f\xae{uQ\x98j\x0f=\xe7\x7fdO\x91\x83s\xf7rI\xab\xa1\xd4\x11\x12\x90\xcf\x12\xeb\x96\x0f?\xa1\x80\xaf\x9e{$Z\xce\x878/\x89\xba\xb2\xb08\xba\x1a\xc1\xed\xf36q\xa1A\xc1\xf0\x15`\x81^\xc1\xcf4\x1c\xc0\xa0\xa4jBY\xd8\xa8*##\x11\x8c\'\xa7y\x12\x1dDU\xbcAL\xbd\xe9y\xf3\xe8\xef\xe4\x13,Y7\xb3+\xf5\x95\xf7E\x9a\x8f+\x97\xf7U\x0f\xfdV\x90\xb4^\x1cY\x83\x15cn\x98#\xa2z\xaf\xc0\xe6\xadc7\x87\x1d\xbb\xc7\x8a\xc9\xdc\x10\x9b\x9d\xaf/\xd0\xc0\xbf\xd9oS\xd35\r\x94S\x8fD\x84\xa1\x1f~\xe8O\xc4j\x9f;\xdb\xb7A\xd2\tJ8\'s\x18\xaa\xd6\v\x81', 0x0) socket(0x23, 0x803, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xdd9ef000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @local}, 0xc) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x1, 0x4002) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000600)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc008e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29103"}, 0x48, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote, @private0, @mcast2, 0xcea, 0x40, 0x5, 0x100, 0x0, 0x590043, r6}) 4.812533499s ago: executing program 0 (id=376): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x4000) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.676445301s ago: executing program 4 (id=377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000040)={0x160003, 0x0, {[0x7f, 0xc, 0x80, 0x1, 0x17c1, 0xefc, 0x7, 0xfff]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.139766709s ago: executing program 0 (id=378): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) inotify_add_watch(0xffffffffffffffff, 0x0, 0x13000040) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600040000010000000000000003003e00ebffffff940200000200000040000000000000000000000000000000000000002d8f38000100feff0200070003000000970f00000800000000000000007139"], 0xf1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004058}, 0x48004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000380)={0xc0, 0x0, 0xa000}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x1, 0x2}, 0x6) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.09912434s ago: executing program 4 (id=379): r0 = timerfd_create(0x0, 0x800) write(0xffffffffffffffff, 0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) clock_settime(0x0, 0x0) rt_sigtimedwait(0x0, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r1, r1) setpgid(0x0, r1) wait4(r1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast1}, {@empty}, {@dev}]}]}}}}}}}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180)='FROZEN\x00', 0x7) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) waitid(0x2, r1, 0x0, 0x4, 0x0) setpgid(0x0, r2) 3.796248774s ago: executing program 0 (id=380): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000018000108"], 0x4c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.571779487s ago: executing program 0 (id=381): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000300)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303030372c757365667265652c7569643d1ba9f5be01c019f7c76251258fa46421b6e0c2b364b38a76811c00e2726ee527e77f78ead48d950549aa7d30e43923ab70506545e26b599c790456a691d30397a6609222462f80701298dec32b4a73380fb3ed9a769504196a2c8be02ca5dde80e144d352a4ca0e2cf327690267d39294ca896d345a664aaefe1e5d81e296ff6540547122db79b97c47c02cded843583845c98", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,tz=UTC,nodots,flush,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_extract_tcp_res(&(0x7f0000000000), 0x5, 0x401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2208086, &(0x7f00000007c0), 0xff, 0x4a9, &(0x7f0000000cc0)="$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") 2.924292837s ago: executing program 4 (id=382): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x4000) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.897185377s ago: executing program 3 (id=383): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) 2.555653552s ago: executing program 3 (id=384): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001140)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@rodir}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@shortname_win95}, {@uni_xlate}, {@fat=@check_strict}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlate}, {@utf8no}, {@rodir}, {@utf8no}]}, 0x7f, 0x2b1, &(0x7f00000015c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {@nodiscard}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0], 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x10000, &(0x7f0000000100)={[{}, {@nofavordynmods}, {@name={'name', 0x3d, '/dev/loop'}}, {@cpuset_v2_mode}]}) 2.503597193s ago: executing program 5 (id=354): r0 = timerfd_create(0x0, 0x800) write(0xffffffffffffffff, 0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) clock_settime(0x0, 0x0) rt_sigtimedwait(0x0, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r1, r1) setpgid(0x0, r1) wait4(r1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast1}, {@empty}, {@dev}]}]}}}}}}}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180)='FROZEN\x00', 0x7) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) waitid(0x2, r1, 0x0, 0x4, 0x0) setpgid(0x0, r2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.255786327s ago: executing program 4 (id=385): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x4000) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.140131213s ago: executing program 3 (id=386): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r0, 0xb09, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x78}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xcc000}, 0x20000814) 1.083876273s ago: executing program 5 (id=387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x63, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x5}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r1, 0x1}, 0x20) 1.064924354s ago: executing program 5 (id=388): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e00000002001b0002000000da16c167d803f1f8050006"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 931.247416ms ago: executing program 4 (id=389): r0 = timerfd_create(0x0, 0x800) write(0xffffffffffffffff, 0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) clock_settime(0x0, 0x0) rt_sigtimedwait(0x0, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r1, r1) setpgid(0x0, r1) wait4(r1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast1}, {@empty}, {@dev}]}]}}}}}}}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180)='FROZEN\x00', 0x7) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) waitid(0x2, r1, 0x0, 0x4, 0x0) setpgid(0x0, r2) 859.825427ms ago: executing program 5 (id=390): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 759.800898ms ago: executing program 3 (id=391): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000007740)=[{{&(0x7f00000004c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}, 0x4}], 0x1, 0x40010000, 0x0) 616.92722ms ago: executing program 5 (id=392): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000002040)=[{0x200000000006, 0x20, 0xff, 0x7ffc0002}]}) timerfd_gettime(0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x64) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) chdir(&(0x7f0000000040)='./file0\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6=@mcast1}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f00000003c0)=0xe8) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001b80)={[{@nombcache}, {@dioread_nolock}, {@nodelalloc}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@dioread_lock}]}, 0x1, 0x47a, &(0x7f00000006c0)="$eJzs28uPFMUfAPBv9z6AH4/lh/gAUVeJyUbjLrugcvCi0cQYjCZ6wOM6O5ANA2vY1QgSWYzxZGJI9Ew8Gv0LvBkTo55MuHryZEiIcgE8remebpgdZni4M8yy8/kkPVPVXT1VNdWP6qqZAPrWaPaSRGyKiN8jYqQeXZ5gtP525dKpytVLpypJLC299VeSp7t86VSlTFrut7GIjKUR6adJkcly8ydOHpmu1arHi/jEwtH3JuZPnHzmg6PTh6uHq8em9u/ft3fy+eemnu1IPbN6Xd758dyuHa++c/b1ysGz7/7yXVbeTcX2xnp0ymhW8b+Xcs3bnux0Zj22uSGcDPawINyRgYjImmsoP/9HYiCuN95IvPJJTwsHdFV2b1rXfvPiErCGJdHrEgC9Ud7os+ffcrlLXY9V4eKL9QegrN5XiqW+ZTDSIs1Q0/NtJ41GxMHFf85lS3RpHAIAoNHnla8ODEfER1e/fS3re4xERDke9ED++kf+uqWYQ9kaEf+PiG0RcV9EbI+I+4u0D0bEQyssz439n/TCCj/yprL+3wvF3Nby/l/Z+4utA0Vsc17/oeTQbK26J9bl38lYDK3L4pM3yeOHl89/0W5bY/8vW7L8y75gUY4Lg00DdDPTC9N5p7QDLp6J2DnYqv7JtZmAJCJ2RMTOO/voLWVg9qlvdrVL1Lr+l8/dVg4dmGda+jqr3mJW/8Voqn8paZyfnL1hfnJifdSqeybqR0Urv/722Zvt8r91+3fXxWr9vaH9m5NsTRrna+c7m/9/PP7T4eTtfJ55uFj34fTCwvHJiOHkQB5ftn7q+r5lvEyfHf9ju1uf/9uKfbL6PxwR2UH8SEQ8GhGPFWV/PCKeiIjdN6njzy/duv6R9qj9z0TMtLz+XTv+m9r/zgMDR376vl3+t9f++/LQWLEmv/7dQqviZJeL5gKu5LsDAACAe0Wa/wY+ScevhdN0fLz+G/7t8b+0Nje/8PShufePzcT5LfXxz7Qc6RopxkNrs7XqZLJYfGJ9fHSqGCsux0v3FuPGXw5syOPjlbnaTI/rDv1uY5vzP/PnQK9LB3TZhpZrp4bvekGAHmieR0+XR0+/ES4GsFb5vzb0r/L8b/O83/g/GGCNcf+H/tXq/D/dFDcXAGuT+z/0L+c/9Kn0xxXs7KkA7nXu/9CXVvK//i4G1q+OYvQmsFobJQ9ElIF0VZRHoEuBXl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuPfAAAA//+Pc+dq") r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000400)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084) sendmmsg(r3, &(0x7f0000000000), 0x400000000000047, 0x0) mremap(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x4000, 0x6, &(0x7f0000d7f000/0x4000)=nil) mlockall(0x7) 519.367222ms ago: executing program 3 (id=393): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x4000) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 3 (id=394): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000001000)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file7\x00', 0x400008, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 623][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.236902][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.244548][ T5774] bridge_slave_0: entered allmulticast mode [ 84.252200][ T5774] bridge_slave_0: entered promiscuous mode [ 84.271479][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.283070][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 84.295205][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.302711][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.309842][ T5774] bridge_slave_1: entered allmulticast mode [ 84.317220][ T5774] bridge_slave_1: entered promiscuous mode [ 84.376369][ T5772] team0: Port device team_slave_0 added [ 84.396320][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.435269][ T5772] team0: Port device team_slave_1 added [ 84.443471][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.526207][ T5774] team0: Port device team_slave_0 added [ 84.549777][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.557184][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.567506][ T5773] bridge_slave_0: entered allmulticast mode [ 84.574646][ T5773] bridge_slave_0: entered promiscuous mode [ 84.583508][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.590663][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.597942][ T5773] bridge_slave_1: entered allmulticast mode [ 84.605392][ T5773] bridge_slave_1: entered promiscuous mode [ 84.614237][ T5774] team0: Port device team_slave_1 added [ 84.637557][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.644926][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.670910][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.728842][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.735972][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.762178][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.775604][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.789703][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.799557][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.806996][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.832997][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.860751][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.868093][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.875345][ T5771] bridge_slave_0: entered allmulticast mode [ 84.885267][ T5771] bridge_slave_0: entered promiscuous mode [ 84.913018][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.919982][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.946350][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.966284][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.973703][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.981609][ T5771] bridge_slave_1: entered allmulticast mode [ 84.988901][ T5771] bridge_slave_1: entered promiscuous mode [ 85.009408][ T5773] team0: Port device team_slave_0 added [ 85.019356][ T5773] team0: Port device team_slave_1 added [ 85.110206][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.125121][ T5772] hsr_slave_0: entered promiscuous mode [ 85.133072][ T5772] hsr_slave_1: entered promiscuous mode [ 85.140373][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.147700][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.176660][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.194031][ T5774] hsr_slave_0: entered promiscuous mode [ 85.200668][ T5774] hsr_slave_1: entered promiscuous mode [ 85.207569][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.216086][ T5774] Cannot create hsr debugfs directory [ 85.223993][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.255628][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.265494][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.294977][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.328776][ T5771] team0: Port device team_slave_0 added [ 85.377081][ T5771] team0: Port device team_slave_1 added [ 85.424108][ T5773] hsr_slave_0: entered promiscuous mode [ 85.433260][ T5773] hsr_slave_1: entered promiscuous mode [ 85.439631][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.447983][ T5773] Cannot create hsr debugfs directory [ 85.448295][ T51] Bluetooth: hci0: command tx timeout [ 85.470884][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.478371][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.512530][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.523264][ T51] Bluetooth: hci1: command tx timeout [ 85.529227][ T5778] Bluetooth: hci3: command tx timeout [ 85.535117][ T5788] Bluetooth: hci2: command tx timeout [ 85.535183][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.547814][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.575702][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.702118][ T5771] hsr_slave_0: entered promiscuous mode [ 85.709693][ T5771] hsr_slave_1: entered promiscuous mode [ 85.716409][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.724090][ T5771] Cannot create hsr debugfs directory [ 86.043101][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.065326][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.076588][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.087578][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.185057][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.204152][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.215581][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.244872][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.302540][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.317081][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.331643][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.350136][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.458756][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.469276][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.484352][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.497759][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.525405][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.606936][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.647880][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.667275][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.698879][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.706562][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.742810][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.750054][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.763376][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.770515][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.804437][ T3442] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.811641][ T3442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.868220][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.913032][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.933368][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.940488][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.008203][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.015423][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.068055][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.212238][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.254780][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.262021][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.318449][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.325707][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.527412][ T5788] Bluetooth: hci0: command tx timeout [ 87.548029][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.602186][ T5788] Bluetooth: hci3: command tx timeout [ 87.607652][ T5788] Bluetooth: hci2: command tx timeout [ 87.610950][ T5778] Bluetooth: hci1: command tx timeout [ 87.734603][ T5774] veth0_vlan: entered promiscuous mode [ 87.780702][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.827183][ T5774] veth1_vlan: entered promiscuous mode [ 87.866096][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.047332][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.064270][ T5774] veth0_macvtap: entered promiscuous mode [ 88.094807][ T5773] veth0_vlan: entered promiscuous mode [ 88.124228][ T5772] veth0_vlan: entered promiscuous mode [ 88.135883][ T5774] veth1_macvtap: entered promiscuous mode [ 88.148033][ T5773] veth1_vlan: entered promiscuous mode [ 88.191333][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.206349][ T5772] veth1_vlan: entered promiscuous mode [ 88.227280][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.256351][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.266123][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.276026][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.285243][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.343650][ T5773] veth0_macvtap: entered promiscuous mode [ 88.383132][ T5773] veth1_macvtap: entered promiscuous mode [ 88.408679][ T5771] veth0_vlan: entered promiscuous mode [ 88.419924][ T5772] veth0_macvtap: entered promiscuous mode [ 88.450466][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.466559][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.495279][ T5772] veth1_macvtap: entered promiscuous mode [ 88.555194][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.563469][ T5771] veth1_vlan: entered promiscuous mode [ 88.573965][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.590010][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.601795][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.616966][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.633651][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.647435][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.657739][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.668650][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.685154][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.715044][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.735273][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.754465][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.768661][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.786891][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.797214][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.811631][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.823480][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.838513][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.848467][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.857832][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.866887][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.900726][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.915656][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.925072][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.951288][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.096876][ T5771] veth0_macvtap: entered promiscuous mode [ 89.214190][ T5771] veth1_macvtap: entered promiscuous mode [ 89.278591][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.297637][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.600999][ T5778] Bluetooth: hci0: command tx timeout [ 89.694268][ T5788] Bluetooth: hci2: command tx timeout [ 89.699929][ T51] Bluetooth: hci3: command tx timeout [ 89.705603][ T5778] Bluetooth: hci1: command tx timeout [ 90.028980][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.037280][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.188227][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.210158][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.221244][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.232007][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.242664][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.253715][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.268981][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.317639][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.335528][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.346698][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.365948][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.377219][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.389136][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.399133][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.411340][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.423471][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.464886][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.476009][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.487668][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.499405][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.521173][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.529045][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.796164][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.856394][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.042373][ T5862] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 91.265023][ T5846] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.693439][ T5778] Bluetooth: hci0: command tx timeout [ 91.731604][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.761680][ T5778] Bluetooth: hci1: command tx timeout [ 91.767224][ T5778] Bluetooth: hci3: command tx timeout [ 91.777417][ T5778] Bluetooth: hci2: command tx timeout [ 91.810932][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.978572][ T5846] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 92.005809][ T5846] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 92.016462][ T5868] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.027418][ T5846] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.040194][ T10] cfg80211: failed to load regulatory.db [ 92.092989][ T5846] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 92.131229][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 92.139418][ T5846] usb 3-1: Product: syz [ 92.178309][ T5846] usb 3-1: Manufacturer: syz [ 92.187767][ T5846] usb 3-1: SerialNumber: syz [ 92.234923][ T5874] syz.3.4[5874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.460459][ T5846] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 92.856734][ T5874] loop3: detected capacity change from 0 to 40427 [ 92.883736][ T5874] F2FS-fs (loop3): invalid crc value [ 92.935658][ T5874] F2FS-fs (loop3): Found nat_bits in checkpoint [ 93.063505][ T5874] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 93.229162][ T5890] loop0: detected capacity change from 0 to 256 [ 93.263656][ T5816] usb 3-1: USB disconnect, device number 2 [ 93.275340][ T5874] syz.3.4: attempt to access beyond end of device [ 93.275340][ T5874] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.318309][ T5816] usblp0: removed [ 93.333230][ T5874] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 93.582128][ T5892] loop2: detected capacity change from 0 to 512 [ 93.610011][ T5892] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.718555][ T5894] loop0: detected capacity change from 0 to 512 [ 93.883922][ T5894] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.12: invalid block [ 93.919385][ T5894] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.12: invalid indirect mapped block 10 (level 1) [ 93.936468][ T5894] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.12: invalid indirect mapped block 8 (level 1) [ 93.988393][ T5894] EXT4-fs (loop0): 1 truncate cleaned up [ 94.004766][ T5894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.288072][ T5892] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.831978][ T5892] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.924503][ T5892] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 95.029934][ T5892] EXT4-fs (loop2): 1 truncate cleaned up [ 95.066539][ T5892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.320787][ C0] sched: RT throttling activated [ 95.442732][ T5771] syz-executor: attempt to access beyond end of device [ 95.442732][ T5771] loop3: rw=2051, sector=36912, nr_sectors = 8144 limit=40427 [ 95.490611][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 95.506859][ T5771] syz-executor: attempt to access beyond end of device [ 95.506859][ T5771] loop3: rw=2051, sector=45104, nr_sectors = 85968 limit=40427 [ 95.557550][ T5901] bond_slave_0: entered promiscuous mode [ 95.563567][ T5901] bond_slave_1: entered promiscuous mode [ 95.580688][ T5771] F2FS-fs (loop3): Issue discard(4614, 4614, 1018) failed, ret: -5 [ 95.607223][ T5771] F2FS-fs (loop3): Issue discard(5638, 5638, 10746) failed, ret: -5 [ 95.626529][ T5901] vlan2: entered promiscuous mode [ 95.659944][ T5901] bond0: entered promiscuous mode [ 95.667831][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.996437][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.296319][ T5907] loop1: detected capacity change from 0 to 512 [ 96.314320][ T5907] ======================================================= [ 96.314320][ T5907] WARNING: The mand mount option has been deprecated and [ 96.314320][ T5907] and is ignored by this kernel. Remove the mand [ 96.314320][ T5907] option from the mount to silence this warning. [ 96.314320][ T5907] ======================================================= [ 96.349234][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.462226][ T5911] loop2: detected capacity change from 0 to 1024 [ 96.462420][ T5907] EXT4-fs (loop1): orphan cleanup on readonly fs [ 96.483799][ T5911] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.505695][ T5907] EXT4-fs error (device loop1): ext4_ext_check_inode:530: inode #4: comm syz.1.18: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 96.523315][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.542400][ T5907] EXT4-fs error (device loop1): ext4_quota_enable:7147: comm syz.1.18: Bad quota inode: 4, type: 1 [ 96.561046][ T5907] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.593464][ T5911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.631102][ T5907] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 96.640532][ T5911] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 96.662424][ T5907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.739550][ T5911] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49152 with max blocks 16 with error 28 [ 96.760507][ T5911] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.760507][ T5911] [ 96.777361][ T5911] EXT4-fs (loop2): Total free blocks count 0 [ 96.783928][ T5911] EXT4-fs (loop2): Free/Dirty block details [ 96.790437][ T5911] EXT4-fs (loop2): free_blocks=20480 [ 96.815004][ T5911] EXT4-fs (loop2): dirty_blocks=32 [ 96.815041][ T5911] EXT4-fs (loop2): Block reservation details [ 96.815055][ T5911] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 96.935588][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.039259][ T5925] loop1: detected capacity change from 0 to 512 [ 97.094723][ T5925] EXT4-fs (loop1): 1 orphan inode deleted [ 97.118165][ T5925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.133319][ T5925] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.144063][ T5897] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 97.193656][ T5897] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:10: Failed to release dquot type 1 [ 97.388346][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.529694][ T5931] loop1: detected capacity change from 0 to 512 [ 97.594169][ T5931] EXT4-fs (loop1): invalid journal inode [ 97.614150][ T5931] EXT4-fs (loop1): can't get journal size [ 97.645456][ T5931] EXT4-fs (loop1): 1 truncate cleaned up [ 97.658738][ T5931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.778000][ T5937] loop3: detected capacity change from 0 to 512 [ 97.825452][ T5937] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.873637][ T5937] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.899406][ T5937] EXT4-fs (loop3): 1 truncate cleaned up [ 97.905841][ T5931] loop1: detected capacity change from 512 to 0 [ 97.933656][ T5937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.949229][ T5939] syz.1.23: attempt to access beyond end of device [ 97.949229][ T5939] loop1: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 97.999413][ T5939] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.23: error -5 reading directory block [ 98.123284][ T5774] syz-executor: attempt to access beyond end of device [ 98.123284][ T5774] loop1: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 98.151673][ T5774] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 98.182848][ T5774] syz-executor: attempt to access beyond end of device [ 98.182848][ T5774] loop1: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 98.217159][ T5774] syz-executor: attempt to access beyond end of device [ 98.217159][ T5774] loop1: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 98.251035][ T5774] syz-executor: attempt to access beyond end of device [ 98.251035][ T5774] loop1: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 98.285230][ T5774] syz-executor: attempt to access beyond end of device [ 98.285230][ T5774] loop1: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 98.327047][ T5774] syz-executor: attempt to access beyond end of device [ 98.327047][ T5774] loop1: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 98.357980][ T5774] syz-executor: attempt to access beyond end of device [ 98.357980][ T5774] loop1: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 98.399874][ T5774] syz-executor: attempt to access beyond end of device [ 98.399874][ T5774] loop1: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 98.416568][ T5774] syz-executor: attempt to access beyond end of device [ 98.416568][ T5774] loop1: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 98.430519][ T5774] syz-executor: attempt to access beyond end of device [ 98.430519][ T5774] loop1: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 98.431991][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.446190][ T5774] EXT4-fs error (device loop1): ext4_get_inode_loc:4634: inode #2: block 5: comm syz-executor: unable to read itable block [ 98.471766][ T5896] ext4lazyinit: attempt to access beyond end of device [ 98.471766][ T5896] loop1: rw=2057, sector=10, nr_sectors = 16 limit=0 [ 98.511503][ T5942] Zero length message leads to an empty skb [ 98.531501][ T5896] ext4lazyinit: attempt to access beyond end of device [ 98.531501][ T5896] loop1: rw=2049, sector=10, nr_sectors = 16 limit=0 [ 98.564564][ T5774] syz-executor: attempt to access beyond end of device [ 98.564564][ T5774] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 98.703615][ T5774] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 98.753370][ T5774] EXT4-fs (loop1): I/O error while writing superblock [ 98.861555][ T5774] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: IO failure [ 98.870586][ T5774] syz-executor: attempt to access beyond end of device [ 98.870586][ T5774] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 99.155108][ T5774] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 99.359762][ T5774] EXT4-fs (loop1): I/O error while writing superblock [ 99.642392][ T5950] xt_hashlimit: size too large, truncated to 1048576 [ 99.660470][ T5774] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #2: comm syz-executor: mark_inode_dirty error [ 99.702942][ T5774] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 99.712437][ T5910] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 99.729624][ T28] audit: type=1800 audit(1782605502.673:2): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.19" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 99.786100][ T5774] EXT4-fs (loop1): I/O error while writing superblock [ 99.986112][ T13] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4619: inode #21: block 10: comm kworker/u4:1: unable to read itable block [ 100.019895][ T13] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 100.035365][ T13] EXT4-fs (loop1): I/O error while writing superblock [ 100.046986][ T13] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4619: inode #2: block 5: comm kworker/u4:1: unable to read itable block [ 100.086152][ T13] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 100.116385][ T13] EXT4-fs (loop1): I/O error while writing superblock [ 100.163751][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.234499][ T5774] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 100.256092][ T5774] EXT4-fs (loop1): I/O error while writing superblock [ 100.408858][ T5956] loop3: detected capacity change from 0 to 1024 [ 100.423263][ T5956] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 100.443632][ T5956] EXT4-fs: error: could not find journal device path [ 102.016299][ T3442] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.199369][ T5773] EXT4-fs: 7 callbacks suppressed [ 102.199387][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.312338][ T3442] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.515025][ T3442] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.783648][ T3442] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.862925][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.880900][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.888718][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.900447][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.913634][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 103.921106][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.127277][ T5959] loop2: detected capacity change from 0 to 40427 [ 104.165423][ T5959] F2FS-fs (loop2): LFS is not compatible with checkpoint=disable [ 105.080117][ T5987] netlink: 'syz.3.39': attribute type 10 has an invalid length. [ 105.110977][ T5987] netlink: 180 bytes leftover after parsing attributes in process `syz.3.39'. [ 105.131617][ T5987] batman_adv: batadv0: Adding interface: syz_tun [ 105.138040][ T5987] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.158898][ T5993] loop0: detected capacity change from 0 to 512 [ 105.188328][ T5993] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.231025][ T5987] batman_adv: batadv0: Interface activated: syz_tun [ 105.258140][ T5993] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.278461][ T5971] chnl_net:caif_netlink_parms(): no params data found [ 105.350497][ T5993] EXT4-fs (loop0): 1 truncate cleaned up [ 105.378561][ T3442] hsr_slave_0: left promiscuous mode [ 105.400404][ T5993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.423123][ T3442] hsr_slave_1: left promiscuous mode [ 105.429640][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.442991][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.484229][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.512862][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.552260][ T3442] bridge_slave_1: left allmulticast mode [ 105.566687][ T3442] bridge_slave_1: left promiscuous mode [ 105.583653][ T3442] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.623708][ T3442] bridge_slave_0: left allmulticast mode [ 105.632096][ T3442] bridge_slave_0: left promiscuous mode [ 105.637867][ T3442] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.737447][ T3442] veth1_macvtap: left promiscuous mode [ 105.752235][ T3442] veth0_macvtap: left promiscuous mode [ 105.768151][ T3442] veth1_vlan: left promiscuous mode [ 105.780479][ T3442] veth0_vlan: left promiscuous mode [ 105.802109][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.001115][ T5778] Bluetooth: hci0: command tx timeout [ 106.610651][ T6013] loop3: detected capacity change from 0 to 256 [ 106.732006][ T3442] team0 (unregistering): Port device team_slave_1 removed [ 106.811421][ T3442] team0 (unregistering): Port device team_slave_0 removed [ 106.933480][ T3442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.948932][ T3442] bond_slave_1 (unregistering): left promiscuous mode [ 107.093482][ T6019] loop3: detected capacity change from 0 to 512 [ 107.268747][ T3442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.318525][ T6019] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.42: invalid block [ 107.342257][ T6019] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.42: invalid indirect mapped block 10 (level 1) [ 107.364085][ T6019] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.42: invalid indirect mapped block 8 (level 1) [ 107.381467][ T6019] EXT4-fs (loop3): 1 truncate cleaned up [ 107.395274][ T6019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.110984][ T5778] Bluetooth: hci0: command tx timeout [ 108.148818][ T3442] bond_slave_0 (unregistering): left promiscuous mode [ 108.690963][ T5819] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.890922][ T5819] usb 1-1: Using ep0 maxpacket: 16 [ 108.899149][ T5819] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 108.917877][ T5819] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 108.927385][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.954555][ T5819] usb 1-1: config 0 descriptor?? [ 109.198301][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.295000][ T3442] bond0 (unregistering): Released all slaves [ 109.348265][ T6026] overlayfs: statfs failed on './file0' [ 109.411513][ T5819] nintendo 0003:057E:200E.0001: unknown main item tag 0x0 [ 109.412295][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 109.418888][ T5819] nintendo 0003:057E:200E.0001: unknown main item tag 0x0 [ 109.466997][ T5999] bond_slave_0: entered promiscuous mode [ 109.472804][ T5999] bond_slave_1: entered promiscuous mode [ 109.508224][ T5999] vlan2: entered promiscuous mode [ 109.513955][ T5999] bond0: entered promiscuous mode [ 109.685017][ T5819] nintendo 0003:057E:200E.0001: unknown main item tag 0x0 [ 109.692302][ T5819] nintendo 0003:057E:200E.0001: unknown main item tag 0x0 [ 109.699468][ T5819] nintendo 0003:057E:200E.0001: unknown main item tag 0x0 [ 109.707007][ T5819] nintendo 0003:057E:200E.0001: unknown main item tag 0x0 [ 109.716065][ T5819] nintendo 0003:057E:200E.0001: unknown main item tag 0x0 [ 109.723809][ T5819] nintendo 0003:057E:200E.0001: unknown main item tag 0x0 [ 109.787776][ T5819] nintendo 0003:057E:200E.0001: hidraw0: USB HID vf0.00 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 109.887903][ T6033] loop3: detected capacity change from 0 to 1024 [ 109.901221][ T6033] EXT4-fs: Ignoring removed orlov option [ 110.161901][ T5778] Bluetooth: hci0: command tx timeout [ 110.241588][ T6033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.658547][ T5819] nintendo 0003:057E:200E.0001: Failed charging grip handshake [ 110.736988][ T5819] nintendo 0003:057E:200E.0001: Failed to initialize controller; ret=-110 [ 110.902395][ T5819] nintendo 0003:057E:200E.0001: probe - fail = -110 [ 111.000315][ T5819] nintendo: probe of 0003:057E:200E.0001 failed with error -110 [ 111.009192][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.088098][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.140955][ T5819] usb 1-1: USB disconnect, device number 2 [ 111.168169][ T5971] bridge_slave_0: entered allmulticast mode [ 111.252012][ T5971] bridge_slave_0: entered promiscuous mode [ 111.295173][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.316049][ T6039] fido_id[6039]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 111.371387][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.402316][ T6041] loop2: detected capacity change from 0 to 4096 [ 111.421106][ T5971] bridge_slave_1: entered allmulticast mode [ 111.464836][ T5971] bridge_slave_1: entered promiscuous mode [ 111.613982][ T6041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.823820][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.923399][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.942581][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.268300][ T5778] Bluetooth: hci0: command tx timeout [ 112.347380][ T5971] team0: Port device team_slave_0 added [ 112.395719][ T5971] team0: Port device team_slave_1 added [ 112.598703][ T6056] cgroup: Invalid name [ 112.813158][ T6055] syz.2.48 (6055) used greatest stack depth: 20088 bytes left [ 112.822076][ T28] audit: type=1800 audit(1782605515.803:3): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.48" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 113.153090][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.191671][ T6044] loop0: detected capacity change from 0 to 40427 [ 113.219829][ T6044] F2FS-fs (loop0): invalid crc value [ 113.305471][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.358095][ T6044] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.365537][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.496059][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.552473][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.559490][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.631204][ T6044] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 113.659091][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.864306][ T5971] hsr_slave_0: entered promiscuous mode [ 113.882666][ T5971] hsr_slave_1: entered promiscuous mode [ 113.889014][ T5971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.900898][ T5971] Cannot create hsr debugfs directory [ 114.229173][ T6080] loop2: detected capacity change from 0 to 256 [ 114.349631][ T5789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 114.760265][ T6085] loop2: detected capacity change from 0 to 512 [ 114.955041][ T6085] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.55: invalid block [ 114.969585][ T6085] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.55: invalid indirect mapped block 10 (level 1) [ 114.987046][ T6085] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.55: invalid indirect mapped block 8 (level 1) [ 115.012391][ T6085] EXT4-fs (loop2): 1 truncate cleaned up [ 115.026393][ T6085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.552547][ T5971] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.607802][ T5971] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.669159][ T5971] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.985760][ T5971] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.318339][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.598176][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.718009][ T5971] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.820953][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.828178][ T5897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.995862][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.003261][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.225026][ T5819] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.282706][ T5819] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 118.866630][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.306411][ T6132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.61'. [ 119.358702][ T6132] veth3: entered allmulticast mode [ 119.716236][ T5971] veth0_vlan: entered promiscuous mode [ 119.745913][ T5971] veth1_vlan: entered promiscuous mode [ 119.853506][ T5971] veth0_macvtap: entered promiscuous mode [ 119.887464][ T5971] veth1_macvtap: entered promiscuous mode [ 119.964313][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.975483][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.994315][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.016234][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.047680][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.079561][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.098943][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.148231][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.242779][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.290928][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.325202][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.350834][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.374781][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.403171][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.436191][ T5971] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.480822][ T5971] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.489603][ T5971] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.520957][ T5971] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.739228][ T5897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.777071][ T5897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.845027][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.871652][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.244697][ T6170] loop4: detected capacity change from 0 to 256 [ 121.415418][ T6174] loop2: detected capacity change from 0 to 256 [ 121.524002][ T6174] exfat: Deprecated parameter 'namecase' [ 121.677230][ T6174] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 123.045039][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.72'. [ 123.068794][ T6196] veth3: entered allmulticast mode [ 123.381000][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 123.583382][ T27] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 123.606639][ T27] usb 5-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 123.633185][ T27] usb 5-1: config 220 interface 1 altsetting 5 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 123.669009][ T27] usb 5-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 123.710708][ T27] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 123.775696][ T27] usb 5-1: config 220 interface 0 has no altsetting 0 [ 123.841972][ T27] usb 5-1: config 220 interface 1 has no altsetting 0 [ 123.910964][ T27] usb 5-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 123.920101][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.969824][ T27] usb 5-1: Product: syz [ 123.974410][ T27] usb 5-1: Manufacturer: syz [ 123.979054][ T27] usb 5-1: SerialNumber: syz [ 124.160557][ T6219] loop0: detected capacity change from 0 to 512 [ 124.242635][ T27] usb 5-1: selecting invalid altsetting 0 [ 124.267820][ T6219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.282198][ T27] usb 5-1: selecting invalid altsetting 0 [ 124.287990][ T27] usbtest: probe of 5-1:220.1 failed with error -22 [ 124.309582][ T27] usb 5-1: USB disconnect, device number 2 [ 124.321784][ T6219] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.530243][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.783206][ T6246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'. [ 127.862195][ T6246] veth5: entered allmulticast mode [ 127.945196][ T6248] loop4: detected capacity change from 0 to 256 [ 128.059330][ T6248] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x0911abd4) [ 128.111983][ T6248] exFAT-fs (loop4): invalid boot region [ 128.117697][ T6248] exFAT-fs (loop4): failed to recognize exfat type [ 128.554554][ T6254] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.715103][ T6264] loop2: detected capacity change from 0 to 256 [ 128.832804][ T5789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.936950][ T6269] loop2: detected capacity change from 0 to 512 [ 128.951821][ T5789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.987232][ T5789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.010962][ T5789] Buffer I/O error on dev loop2, logical block 0, async page read [ 129.040120][ T6269] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.89: invalid block [ 129.089952][ T6269] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.89: invalid indirect mapped block 10 (level 1) [ 129.132916][ T6269] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.89: invalid indirect mapped block 8 (level 1) [ 129.227289][ T6269] EXT4-fs (loop2): 1 truncate cleaned up [ 129.252140][ T6269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.648003][ T6289] loop4: detected capacity change from 0 to 512 [ 129.666649][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.688609][ T6268] loop3: detected capacity change from 0 to 1024 [ 129.742597][ T6268] EXT4-fs: Ignoring removed orlov option [ 129.796419][ T6289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.822632][ T6268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.226171][ T5971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.657341][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.986905][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.000807][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.159049][ T6325] loop4: detected capacity change from 0 to 256 [ 134.254553][ T5789] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.352038][ T6331] loop4: detected capacity change from 0 to 512 [ 134.420729][ T6331] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.104: invalid block [ 134.443924][ T6331] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.104: invalid indirect mapped block 10 (level 1) [ 134.466568][ T6331] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.104: invalid indirect mapped block 8 (level 1) [ 134.535397][ T6331] EXT4-fs (loop4): 1 truncate cleaned up [ 134.602450][ T6331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.058496][ T5971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.230110][ T6347] loop4: detected capacity change from 0 to 256 [ 135.700632][ T6353] loop4: detected capacity change from 0 to 512 [ 135.942964][ T6353] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.107: invalid block [ 135.959308][ T6353] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.107: invalid indirect mapped block 10 (level 1) [ 135.978941][ T6353] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.107: invalid indirect mapped block 8 (level 1) [ 136.001276][ T6353] EXT4-fs (loop4): 1 truncate cleaned up [ 136.014951][ T6353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.474591][ T6352] loop3: detected capacity change from 0 to 4096 [ 136.526551][ T6352] EXT4-fs: inline encryption not supported [ 136.607068][ T6352] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.658348][ T6352] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 136.731221][ T6352] System zones: 0-5 [ 136.768651][ T6352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.519600][ T5971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.550713][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.532412][ T6376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.114'. [ 139.579464][ T6376] veth7: entered allmulticast mode [ 139.727628][ T6387] loop2: detected capacity change from 0 to 256 [ 139.737089][ T6388] loop3: detected capacity change from 0 to 256 [ 139.757939][ T6388] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 139.895125][ T5789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.908465][ T6388] process 'syz.3.115' launched '/dev/fd/4/éq‰Y’3aK' with NULL argv: empty string added [ 140.195799][ T6392] loop2: detected capacity change from 0 to 512 [ 140.218427][ T6392] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.116: invalid indirect mapped block 10 (level 1) [ 140.241030][ T6392] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.116: invalid indirect mapped block 8 (level 1) [ 140.258892][ T6396] loop0: detected capacity change from 0 to 256 [ 140.268255][ T6392] EXT4-fs (loop2): 1 truncate cleaned up [ 140.276201][ T6392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.686530][ T6396] loop0: detected capacity change from 0 to 512 [ 140.725996][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.738681][ T6396] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.118: invalid block [ 140.764477][ T6396] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.118: invalid indirect mapped block 10 (level 1) [ 140.779410][ T6396] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.118: invalid indirect mapped block 8 (level 1) [ 140.796743][ T6396] EXT4-fs (loop0): 1 truncate cleaned up [ 140.803940][ T6396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.958994][ T6407] loop2: detected capacity change from 0 to 512 [ 140.999597][ T6407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.121174][ T6407] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.179658][ T6391] loop4: detected capacity change from 0 to 40427 [ 141.179913][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.238315][ T6391] F2FS-fs (loop4): invalid crc value [ 141.278716][ T6391] F2FS-fs (loop4): Found nat_bits in checkpoint [ 141.358413][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.420921][ T6391] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 141.494067][ T6391] bio_check_eod: 22 callbacks suppressed [ 141.494085][ T6391] syz.4.117: attempt to access beyond end of device [ 141.494085][ T6391] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 141.521517][ T5847] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 141.530600][ T6421] loop2: detected capacity change from 0 to 512 [ 141.549815][ T6391] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 141.576089][ T6391] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 141.588154][ T6421] ext4: Unknown parameter 'smackfsdef' [ 141.733232][ T5847] usb 1-1: unable to get BOS descriptor or descriptor too short [ 141.767360][ T5847] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 141.818180][ T5847] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 141.849285][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.894997][ T6424] loop3: detected capacity change from 0 to 4096 [ 141.912837][ T5847] usb 1-1: Product: syz [ 141.933996][ T5847] usb 1-1: Manufacturer: syz [ 141.962127][ T5847] usb 1-1: SerialNumber: syz [ 141.993580][ T6424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.331891][ T5847] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 142.534209][ T5847] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 142.562680][ T5847] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 142.908226][ T6435] cgroup: Invalid name [ 143.594904][ T5847] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 143.635169][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.725405][ T5847] usb 1-1: USB disconnect, device number 3 [ 143.850953][ T5846] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 143.871461][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.051578][ T5846] usb 5-1: Using ep0 maxpacket: 16 [ 144.073046][ T5846] usb 5-1: unable to get BOS descriptor or descriptor too short [ 144.090672][ T5846] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.118033][ T5846] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32 [ 144.156853][ T5846] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 144.193823][ T5846] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 144.210936][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.230532][ T5846] usb 5-1: Product: syz [ 144.235035][ T5846] usb 5-1: Manufacturer: syz [ 144.239671][ T5846] usb 5-1: SerialNumber: syz [ 144.660666][ T6437] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 145.131750][ T6460] loop3: detected capacity change from 0 to 256 [ 145.154706][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 145.432776][ T5846] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 145.591686][ T6470] loop3: detected capacity change from 0 to 512 [ 145.785846][ T6470] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.132: invalid block [ 145.818337][ T6470] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.132: invalid indirect mapped block 10 (level 1) [ 145.837149][ T6470] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.132: invalid indirect mapped block 8 (level 1) [ 145.857812][ T6470] EXT4-fs (loop3): 1 truncate cleaned up [ 145.871486][ T6470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.190974][ T5846] usb 5-1: USB disconnect, device number 3 [ 146.582457][ T6475] udevd[6475]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.856232][ T6482] loop2: detected capacity change from 0 to 1024 [ 146.969118][ T6482] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.017738][ T6482] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.136568][ T6482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.518896][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.690656][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.935689][ T6464] loop0: detected capacity change from 0 to 40427 [ 147.955870][ T6464] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 147.973984][ T6464] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 147.993630][ T6464] F2FS-fs (loop0): invalid crc value [ 148.020852][ T6464] F2FS-fs (loop0): Found nat_bits in checkpoint [ 148.150948][ T6508] overlayfs: missing 'lowerdir' [ 148.956710][ T6512] loop3: detected capacity change from 0 to 512 [ 149.061374][ T6512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 149.076557][ T6512] ext4 filesystem being mounted at /33/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.332656][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 149.368311][ T6527] loop0: detected capacity change from 0 to 512 [ 149.519991][ T6531] loop2: detected capacity change from 0 to 256 [ 149.548295][ T6524] loop4: detected capacity change from 0 to 8192 [ 149.613495][ T6527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.667904][ T6524] syz.4.144: attempt to access beyond end of device [ 149.667904][ T6524] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 149.753426][ T6524] Buffer I/O error on dev loop4, logical block 57847, async page read [ 149.785999][ T6527] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.870078][ T6524] syz.4.144: attempt to access beyond end of device [ 149.870078][ T6524] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 149.981355][ T6524] Buffer I/O error on dev loop4, logical block 57847, async page read [ 150.071627][ T6541] loop2: detected capacity change from 0 to 512 [ 150.129147][ T28] audit: type=1800 audit(1782605553.113:4): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.144" name="file2" dev="loop4" ino=1048600 res=0 errno=0 [ 150.288289][ T6541] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.147: invalid indirect mapped block 10 (level 1) [ 150.320280][ T6541] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.147: invalid indirect mapped block 8 (level 1) [ 150.337522][ T6541] EXT4-fs (loop2): 1 truncate cleaned up [ 150.351151][ T6541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.652983][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.059775][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.260724][ T6560] loop0: detected capacity change from 0 to 128 [ 152.626206][ T6568] xt_TCPMSS: Only works on TCP SYN packets [ 153.466220][ T6577] loop3: detected capacity change from 0 to 512 [ 153.541585][ T6577] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 153.590898][ T6577] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 150994978)! [ 153.627764][ T6577] EXT4-fs (loop3): group descriptors corrupted! [ 153.861239][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 153.910971][ T5846] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 154.060937][ T23] usb 5-1: device descriptor read/64, error -71 [ 154.110905][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 154.120733][ T5846] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 154.129233][ T5846] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 154.190965][ T5846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 154.200033][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.254015][ T5846] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.290880][ T5846] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 154.331747][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.350996][ T5846] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 154.381542][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.422890][ T5846] usb 3-1: config 0 descriptor?? [ 154.531164][ T23] usb 5-1: device descriptor read/64, error -71 [ 154.651115][ T23] usb usb5-port1: attempt power cycle [ 154.658291][ T5846] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 154.865836][ C0] usblp0: nonzero read bulk status received: -71 [ 154.873760][ T5816] usb 3-1: USB disconnect, device number 3 [ 155.090942][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 155.099448][ T6582] usblp0: removed [ 155.151538][ T23] usb 5-1: device descriptor read/8, error -71 [ 155.243643][ T6592] loop3: detected capacity change from 0 to 40427 [ 155.267974][ T6592] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 155.298189][ T6592] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 155.328022][ T6592] F2FS-fs (loop3): invalid crc value [ 155.395556][ T6592] F2FS-fs (loop3): Found nat_bits in checkpoint [ 155.461750][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 155.529097][ T6592] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 155.549624][ T6592] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 155.693194][ T23] usb 5-1: device not accepting address 7, error -71 [ 155.708436][ T23] usb usb5-port1: unable to enumerate USB device [ 155.785864][ T6618] loop4: detected capacity change from 0 to 256 [ 156.006284][ T6475] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 158.782340][ T6629] loop4: detected capacity change from 0 to 512 [ 159.020386][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 159.072226][ T6634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.160'. [ 159.131085][ T6634] netlink: 40 bytes leftover after parsing attributes in process `syz.2.160'. [ 160.067933][ T6649] loop0: detected capacity change from 0 to 256 [ 160.138037][ T6649] FAT-fs (loop0): Directory bread(block 64) failed [ 160.182212][ T6649] FAT-fs (loop0): Directory bread(block 65) failed [ 160.195197][ T6649] FAT-fs (loop0): Directory bread(block 66) failed [ 160.210843][ T6649] FAT-fs (loop0): Directory bread(block 67) failed [ 160.227549][ T6649] FAT-fs (loop0): Directory bread(block 68) failed [ 160.284848][ T6649] FAT-fs (loop0): Directory bread(block 69) failed [ 160.311041][ T6649] FAT-fs (loop0): Directory bread(block 70) failed [ 160.327904][ T6649] FAT-fs (loop0): Directory bread(block 71) failed [ 160.348260][ T6649] FAT-fs (loop0): Directory bread(block 72) failed [ 160.357984][ T6649] FAT-fs (loop0): Directory bread(block 73) failed [ 161.235028][ T6664] loop3: detected capacity change from 0 to 256 [ 161.428483][ T6664] FAT-fs (loop3): Directory bread(block 64) failed [ 161.486624][ T6664] FAT-fs (loop3): Directory bread(block 65) failed [ 161.546655][ T6664] FAT-fs (loop3): Directory bread(block 66) failed [ 161.591700][ T6664] FAT-fs (loop3): Directory bread(block 67) failed [ 161.628941][ T6664] FAT-fs (loop3): Directory bread(block 68) failed [ 161.644832][ T6667] loop2: detected capacity change from 0 to 256 [ 161.670930][ T6664] FAT-fs (loop3): Directory bread(block 69) failed [ 161.718217][ T6664] FAT-fs (loop3): Directory bread(block 70) failed [ 161.739169][ T5789] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.800874][ T6664] FAT-fs (loop3): Directory bread(block 71) failed [ 162.012647][ T6664] FAT-fs (loop3): Directory bread(block 72) failed [ 162.019273][ T6664] FAT-fs (loop3): Directory bread(block 73) failed [ 162.559301][ T6671] loop2: detected capacity change from 0 to 512 [ 162.583705][ T6671] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.168: invalid block [ 162.641167][ T6682] loop0: detected capacity change from 0 to 256 [ 162.768245][ T6671] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.168: invalid indirect mapped block 10 (level 1) [ 162.822412][ T6671] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.168: invalid indirect mapped block 8 (level 1) [ 162.874196][ T6671] EXT4-fs (loop2): 1 truncate cleaned up [ 162.883033][ T6671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.504320][ T6691] loop0: detected capacity change from 0 to 512 [ 164.640427][ T6691] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.171: invalid block [ 164.654184][ T6691] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.171: invalid indirect mapped block 10 (level 1) [ 164.674796][ T6691] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.171: invalid indirect mapped block 8 (level 1) [ 164.699873][ T6691] EXT4-fs (loop0): 1 truncate cleaned up [ 164.713353][ T6691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.755296][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.467582][ T6705] xt_TCPMSS: Only works on TCP SYN packets [ 166.541963][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.299819][ T1092] Bluetooth: hci4: Frame reassembly failed (-84) [ 167.596647][ T6717] serio: Serial port ptm1 [ 168.835613][ T6732] loop4: detected capacity change from 0 to 2048 [ 168.854674][ T6739] loop3: detected capacity change from 0 to 256 [ 169.119330][ T6732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.151218][ T6743] loop3: detected capacity change from 0 to 512 [ 169.163079][ T6732] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.187420][ T6743] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.181: invalid block [ 169.206538][ T6743] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.181: invalid indirect mapped block 10 (level 1) [ 169.220190][ T6743] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.181: invalid indirect mapped block 8 (level 1) [ 169.235894][ T6743] EXT4-fs (loop3): 1 truncate cleaned up [ 169.246985][ T6743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.282279][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 169.288993][ T5778] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 169.336051][ T5971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.372638][ T5778] Bluetooth: hci0: command 0x0c20 tx timeout [ 169.382847][ T6708] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 169.822858][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.501825][ T6762] xt_TCPMSS: Only works on TCP SYN packets [ 171.537809][ T6773] loop3: detected capacity change from 0 to 1024 [ 171.560294][ T6773] EXT4-fs: Ignoring removed bh option [ 171.614766][ T6773] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 171.660944][ T23] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 171.772579][ T6773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.853072][ T23] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.871161][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 171.877901][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 171.887050][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.898982][ T23] usb 1-1: config 0 descriptor?? [ 172.126850][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.309656][ T6783] loop2: detected capacity change from 0 to 512 [ 172.327951][ T23] logitech-hidpp-device 0003:046D:C343.0003: unknown main item tag 0x2 [ 172.360953][ T23] logitech-hidpp-device 0003:046D:C343.0003: unexpected long global item [ 172.383023][ T23] logitech-hidpp-device 0003:046D:C343.0003: hidpp_probe:parse failed [ 172.414112][ T23] logitech-hidpp-device: probe of 0003:046D:C343.0003 failed with error -22 [ 172.447860][ T6783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.507019][ T6783] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.545101][ T23] usb 1-1: USB disconnect, device number 4 [ 172.746444][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.833088][ T6789] binder: 6788:6789 unknown command 1074291477 [ 172.857928][ T6789] binder: 6788:6789 ioctl c0306201 200000000640 returned -22 [ 173.041382][ T6793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.195'. [ 173.153725][ T6795] loop3: detected capacity change from 0 to 256 [ 173.547136][ T6800] loop3: detected capacity change from 0 to 512 [ 173.716029][ T6800] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.196: invalid indirect mapped block 10 (level 1) [ 173.761141][ T6800] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.196: invalid indirect mapped block 8 (level 1) [ 173.775261][ T6800] EXT4-fs (loop3): 1 truncate cleaned up [ 173.782447][ T6800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.880267][ T6793] veth5: entered allmulticast mode [ 174.996834][ T6806] loop0: detected capacity change from 0 to 4096 [ 175.135304][ T6806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.517373][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.814971][ T6809] cgroup: Invalid name [ 176.359020][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.849319][ T6824] loop2: detected capacity change from 0 to 128 [ 176.907228][ T6824] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 176.928871][ T6824] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.149735][ T5847] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 177.160149][ T5773] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.350928][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 177.369977][ T6831] loop4: detected capacity change from 0 to 4096 [ 177.387670][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.409574][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.437294][ T6831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.470404][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 177.508024][ T5847] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 177.526531][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.546251][ T5847] usb 4-1: config 0 descriptor?? [ 177.810122][ T6823] loop3: detected capacity change from 0 to 2048 [ 177.900367][ T6843] cgroup: Invalid name [ 178.188426][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.212'. [ 178.267134][ T6839] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 178.289379][ T6839] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 178.336524][ T6839] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 178.344440][ T6846] veth9: entered allmulticast mode [ 178.365089][ T6839] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 178.395304][ T6839] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 178.437048][ T6839] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 178.467207][ T6839] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 178.495540][ T5847] microsoft 0003:045E:07DA.0004: unknown main item tag 0x4 [ 178.516343][ T6839] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 178.522679][ T5847] microsoft 0003:045E:07DA.0004: unknown main item tag 0x2 [ 178.522713][ T5847] microsoft 0003:045E:07DA.0004: unknown main item tag 0x4 [ 178.522738][ T5847] microsoft 0003:045E:07DA.0004: unbalanced collection at end of report description [ 178.523455][ T5847] microsoft 0003:045E:07DA.0004: parse failed [ 178.523552][ T5847] microsoft: probe of 0003:045E:07DA.0004 failed with error -22 [ 178.566084][ T5971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.577492][ T6839] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 178.595410][ T6839] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 178.614239][ T6839] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 178.637509][ T6839] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 178.746410][ T27] usb 4-1: USB disconnect, device number 2 [ 179.661097][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 180.383898][ T6865] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 180.400825][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 180.458004][ T6867] loop3: detected capacity change from 0 to 4096 [ 180.476566][ T6867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.489225][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.660880][ T51] Bluetooth: hci0: command 0x0c20 tx timeout [ 182.199838][ T6877] cgroup: Invalid name [ 182.251266][ T5778] Bluetooth: hci2: command 0x0c1a tx timeout [ 182.480971][ T5778] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.561183][ T5778] Bluetooth: hci1: command 0x0c1a tx timeout [ 182.609105][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.730871][ T5778] Bluetooth: hci0: command 0x0c20 tx timeout [ 183.708986][ T6897] loop3: detected capacity change from 0 to 256 [ 183.736463][ T6897] FAT-fs (loop3): Directory bread(block 64) failed [ 183.753464][ T6897] FAT-fs (loop3): Directory bread(block 65) failed [ 183.760162][ T6897] FAT-fs (loop3): Directory bread(block 66) failed [ 183.769742][ T6897] FAT-fs (loop3): Directory bread(block 67) failed [ 183.807822][ T6897] FAT-fs (loop3): Directory bread(block 68) failed [ 183.838118][ T6897] FAT-fs (loop3): Directory bread(block 69) failed [ 183.859287][ T6897] FAT-fs (loop3): Directory bread(block 70) failed [ 183.875020][ T6897] FAT-fs (loop3): Directory bread(block 71) failed [ 183.885756][ T6897] FAT-fs (loop3): Directory bread(block 72) failed [ 183.896109][ T6897] FAT-fs (loop3): Directory bread(block 73) failed [ 184.321033][ T5778] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.560972][ T5778] Bluetooth: hci3: command 0x0c1a tx timeout [ 184.641042][ T5778] Bluetooth: hci1: command 0x0c1a tx timeout [ 184.801229][ T5778] Bluetooth: hci0: command 0x0c20 tx timeout [ 185.041479][ T6915] loop2: detected capacity change from 0 to 4096 [ 185.082727][ T6915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.187644][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.549803][ T6930] loop4: detected capacity change from 0 to 1024 [ 190.582093][ T6930] EXT4-fs: Ignoring removed bh option [ 190.607402][ T6930] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 190.729308][ T6930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.006581][ T5971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.332877][ T6943] xt_hashlimit: size too large, truncated to 1048576 [ 191.354904][ T6935] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 191.392296][ T6935] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 191.520866][ T5819] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 191.710828][ T5819] usb 5-1: Using ep0 maxpacket: 16 [ 191.722940][ T5819] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.744013][ T5819] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.772956][ T5819] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.782465][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.790501][ T5819] usb 5-1: Product: syz [ 191.810813][ T5819] usb 5-1: Manufacturer: syz [ 191.815576][ T5819] usb 5-1: SerialNumber: syz [ 192.051109][ T5819] usb 5-1: 0:2 : does not exist [ 192.065224][ T5819] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 192.128470][ T5819] usb 5-1: USB disconnect, device number 8 [ 192.171103][ T6947] loop2: detected capacity change from 0 to 512 [ 192.203113][ T6947] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 192.243758][ T6475] udevd[6475]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.313668][ T6947] EXT4-fs (loop2): 1 truncate cleaned up [ 192.338310][ T6947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.486703][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.769132][ T6951] loop2: detected capacity change from 0 to 4096 [ 193.019112][ T6958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.244'. [ 193.036621][ T6955] loop4: detected capacity change from 0 to 512 [ 193.066068][ T6955] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.245: invalid block [ 193.081298][ T6955] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.245: invalid indirect mapped block 10 (level 1) [ 193.101288][ T6958] veth11: entered allmulticast mode [ 193.106917][ T6955] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.245: invalid indirect mapped block 8 (level 1) [ 193.121510][ T6955] EXT4-fs (loop4): 1 truncate cleaned up [ 193.128404][ T6955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.268395][ T5971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.343110][ T6951] EXT4-fs (loop2): Test dummy encryption mode enabled [ 193.367601][ T6951] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8843c01c, mo2=0003] [ 193.430312][ T6951] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.243: bad orphan inode 16777216 [ 193.506802][ T6951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.860492][ T6951] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 194.283869][ T6975] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 194.471487][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.483006][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.277146][ T6988] loop4: detected capacity change from 0 to 256 [ 195.406930][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.466872][ T6988] FAT-fs (loop4): Filesystem has been set read-only [ 195.520293][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.570887][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.630316][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.651018][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.668891][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.679670][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.689052][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.697971][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.713933][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.722939][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.733152][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.774131][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.810974][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.839903][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.860918][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.879869][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.893291][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.902771][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.911606][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.922322][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.933008][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.941993][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.950693][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.959996][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 195.970462][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.110912][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.174832][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.216238][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.249778][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.275556][ T6997] loop2: detected capacity change from 0 to 256 [ 196.293125][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.318190][ T6997] exfat: Deprecated parameter 'namecase' [ 196.329924][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.370161][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.394576][ T6997] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 196.430832][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.485461][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.535055][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.580971][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.640399][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.681561][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.724368][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.784467][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.827055][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.856189][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.881429][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.902712][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.924221][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.945322][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 196.977501][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.003182][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.025464][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.047980][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.076050][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.100863][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.123775][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.134786][ T6991] loop0: detected capacity change from 0 to 40427 [ 197.152996][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.168647][ T6991] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 197.211720][ T6991] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 197.221868][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.249523][ T6991] F2FS-fs (loop0): invalid crc value [ 197.262001][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.286693][ T6991] F2FS-fs (loop0): Found nat_bits in checkpoint [ 197.300301][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.329138][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.358800][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.392092][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.416962][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.448651][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.467436][ T6991] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 197.477119][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.488126][ T6991] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 197.498668][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.535000][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.584543][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.623980][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.681754][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.728897][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.785645][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.831134][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.884996][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.961290][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 197.969903][ T6988] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 198.013357][ T7011] loop3: detected capacity change from 0 to 256 [ 198.037922][ T28] audit: type=1800 audit(1782605601.023:5): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.250" name=7EF3195201 dev="loop4" ino=1048601 res=0 errno=0 [ 198.065579][ T7013] netlink: 68 bytes leftover after parsing attributes in process `syz.2.258'. [ 198.080019][ T2929] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 198.097999][ T2929] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 198.189280][ T7011] FAT-fs (loop3): Directory bread(block 64) failed [ 198.198798][ T6988] syz.4.250 (6988) used greatest stack depth: 19568 bytes left [ 198.231008][ T7011] FAT-fs (loop3): Directory bread(block 65) failed [ 198.237664][ T7011] FAT-fs (loop3): Directory bread(block 66) failed [ 198.281275][ T7011] FAT-fs (loop3): Directory bread(block 67) failed [ 198.288964][ T7011] FAT-fs (loop3): Directory bread(block 68) failed [ 198.314059][ T7011] FAT-fs (loop3): Directory bread(block 69) failed [ 198.320711][ T7011] FAT-fs (loop3): Directory bread(block 70) failed [ 198.331553][ T7011] FAT-fs (loop3): Directory bread(block 71) failed [ 198.338267][ T7011] FAT-fs (loop3): Directory bread(block 72) failed [ 198.345531][ T7011] FAT-fs (loop3): Directory bread(block 73) failed [ 199.565118][ T5819] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 204.037004][ T7029] loop4: detected capacity change from 0 to 256 [ 204.060813][ T5816] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 204.077472][ T7029] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 204.379204][ T5819] usb 3-1: device descriptor read/all, error -71 [ 204.557123][ T7042] loop3: detected capacity change from 0 to 16 [ 204.676676][ T7045] xt_hashlimit: size too large, truncated to 1048576 [ 206.370193][ T7060] loop3: detected capacity change from 0 to 4096 [ 206.384334][ T7060] EXT4-fs (loop3): Test dummy encryption mode enabled [ 206.398702][ T7060] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8843c01c, mo2=0003] [ 206.424401][ T7060] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.271: bad orphan inode 16777216 [ 206.454664][ T7060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.712223][ T7064] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 209.002675][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.295192][ T7071] loop4: detected capacity change from 0 to 8192 [ 209.342128][ T7071] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.973124][ T7084] xt_TCPMSS: Only works on TCP SYN packets [ 212.097997][ T7093] loop2: detected capacity change from 0 to 256 [ 212.953535][ T7102] loop4: detected capacity change from 0 to 512 [ 213.161158][ T7102] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 213.280931][ T7102] EXT4-fs (loop4): 1 truncate cleaned up [ 213.287783][ T7102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.309955][ T7110] loop0: detected capacity change from 0 to 16 [ 213.380141][ T7110] loop0: detected capacity change from 0 to 512 [ 213.395809][ T7110] ext4: Unknown parameter 'fscontext' [ 213.610487][ T5971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.571127][ T5819] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 214.810913][ T5819] usb 4-1: Using ep0 maxpacket: 16 [ 214.826595][ T5819] usb 4-1: config index 0 descriptor too short (expected 243, got 18) [ 214.848253][ T5819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.861216][ T5819] usb 4-1: config 0 has no interfaces? [ 214.870102][ T5819] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 214.885742][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.898704][ T5819] usb 4-1: Product: syz [ 214.903639][ T5819] usb 4-1: Manufacturer: syz [ 214.908386][ T5819] usb 4-1: SerialNumber: syz [ 214.915937][ T5819] r8152-cfgselector 4-1: config 0 descriptor?? [ 215.013952][ T5846] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 215.135646][ T5819] r8152-cfgselector 4-1: Unknown version 0x0000 [ 215.222562][ T7133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'. [ 215.246729][ T7133] veth13: entered allmulticast mode [ 215.270848][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 215.279965][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.292780][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.303038][ T5846] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 215.312496][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.333171][ T5846] usb 3-1: config 0 descriptor?? [ 215.357384][ T5819] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 215.371911][ T5846] hub 3-1:0.0: USB hub found [ 215.557122][ T5846] hub 3-1:0.0: 1 port detected [ 215.970957][ T5846] usb 3-1: USB disconnect, device number 6 [ 217.942309][ T7151] loop4: detected capacity change from 0 to 256 [ 218.002143][ T7151] exfat: Bad value for 'uid' [ 218.090923][ T6475] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 218.113515][ T7151] loop4: detected capacity change from 0 to 16 [ 218.158950][ T7151] erofs: (device loop4): mounted with root inode @ nid 36. [ 219.261209][ T5819] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 219.465193][ T5819] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.491783][ T5819] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.521666][ T5819] usb 5-1: too many endpoints for config 1 interface 0 altsetting 255: 244, using maximum allowed: 30 [ 219.536873][ T5819] usb 5-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 244 [ 219.565949][ T5819] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 219.594285][ T5819] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.651558][ T5819] usb 5-1: config 1 interface 0 has no altsetting 1 [ 219.658470][ T5819] usb 5-1: config 1 interface 1 has no altsetting 0 [ 219.673330][ T5819] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=68.cb [ 219.688497][ T5819] usb 5-1: New USB device strings: Mfr=187, Product=193, SerialNumber=3 [ 219.707242][ T5819] usb 5-1: Product: syz [ 219.717397][ T5819] usb 5-1: Manufacturer: syz [ 219.730805][ T5819] usb 5-1: SerialNumber: syz [ 219.761837][ T5819] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 219.768676][ T5819] cdc_ncm 5-1:1.0: bind() failure [ 219.991039][ T5819] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 220.020414][ T5819] usb 5-1: USB disconnect, device number 9 [ 224.044474][ T7198] loop3: detected capacity change from 0 to 40427 [ 224.054486][ T7198] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 224.062363][ T7198] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 224.101017][ T7203] loop2: detected capacity change from 0 to 256 [ 224.110348][ T7203] exfat: Bad value for 'uid' [ 224.140333][ T7198] F2FS-fs (loop3): Found nat_bits in checkpoint [ 224.297709][ T7198] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 224.304980][ T7198] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 224.484657][ T7198] syz.3.304: attempt to access beyond end of device [ 224.484657][ T7198] loop3: rw=2049, sector=77824, nr_sectors = 592 limit=40427 [ 224.525731][ T7199] syz.3.304: attempt to access beyond end of device [ 224.525731][ T7199] loop3: rw=2049, sector=78416, nr_sectors = 3400 limit=40427 [ 224.647004][ T7198] syz.3.304: attempt to access beyond end of device [ 224.647004][ T7198] loop3: rw=524288, sector=77928, nr_sectors = 256 limit=40427 [ 224.876469][ T7213] loop4: detected capacity change from 0 to 16 [ 224.899331][ T7213] erofs: (device loop4): mounted with root inode @ nid 36. [ 224.984085][ T3442] kworker/u4:9: attempt to access beyond end of device [ 224.984085][ T3442] loop3: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 225.089233][ T7215] loop0: detected capacity change from 0 to 256 [ 226.385508][ T7228] loop2: detected capacity change from 0 to 256 [ 226.944287][ T7232] netlink: 'syz.0.313': attribute type 11 has an invalid length. [ 227.028272][ T7232] bridge1: entered promiscuous mode [ 227.033705][ T7232] bridge1: entered allmulticast mode [ 227.930572][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 228.231841][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 228.369847][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.440027][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.473346][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 228.564755][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 228.740309][ T8] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 228.785698][ T8] usb 5-1: Manufacturer: syz [ 228.815057][ T8] usb 5-1: config 0 descriptor?? [ 229.088996][ T7258] loop3: detected capacity change from 0 to 256 [ 229.558193][ T7262] loop3: detected capacity change from 0 to 512 [ 230.255252][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.256131][ T7262] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.322: invalid indirect mapped block 10 (level 1) [ 230.741783][ T8] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 230.750555][ T8] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 230.778197][ T7262] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.322: invalid indirect mapped block 8 (level 1) [ 230.809578][ T8] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 230.827496][ T8] usb 5-1: USB disconnect, device number 10 [ 230.907303][ T7262] EXT4-fs (loop3): 1 truncate cleaned up [ 230.944602][ T7262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.983183][ T7274] fido_id[7274]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 231.142036][ T7278] loop2: detected capacity change from 0 to 256 [ 231.181351][ T7278] FAT-fs (loop2): Unrecognized mount option "sh’¦fAû§ølower" or missing value [ 232.549399][ T5815] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 232.780938][ T5815] usb 1-1: Using ep0 maxpacket: 16 [ 232.802192][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.837744][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.871008][ T5815] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 232.914735][ T5815] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 232.927863][ T7297] loop2: detected capacity change from 0 to 40427 [ 232.936104][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.951346][ T7297] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 232.959129][ T7297] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 232.976227][ T5815] usb 1-1: config 0 descriptor?? [ 232.998759][ T7297] F2FS-fs (loop2): Found nat_bits in checkpoint [ 233.052011][ T7297] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 233.059107][ T7297] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 233.299719][ T7292] loop0: detected capacity change from 0 to 2048 [ 233.616631][ T5815] microsoft 0003:045E:07DA.0006: unknown main item tag 0x4 [ 233.638600][ T5815] microsoft 0003:045E:07DA.0006: unknown main item tag 0x2 [ 233.650905][ T5815] microsoft 0003:045E:07DA.0006: unknown main item tag 0x4 [ 233.669260][ T5815] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 233.698968][ T5815] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 233.720627][ T5815] microsoft 0003:045E:07DA.0006: no inputs found [ 233.740778][ T5815] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 233.813653][ T5815] usb 1-1: USB disconnect, device number 6 [ 233.889857][ T7307] fido_id[7307]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 235.511214][ T7306] tipc: Failed to remove unknown binding: 66,0,0/0:3220791146/3220791148 [ 235.563457][ T7306] tipc: Failed to remove unknown binding: 66,0,0/0:3220791146/3220791147 [ 235.744791][ T7306] tipc: Failed to remove unknown binding: 66,0,0/0:3220791146/3220791148 [ 235.832066][ T7306] tipc: Failed to remove unknown binding: 66,0,0/0:3220791146/3220791147 [ 236.914882][ T7325] loop2: detected capacity change from 0 to 256 [ 236.922323][ T7325] exfat: Bad value for 'uid' [ 236.983444][ T7328] loop0: detected capacity change from 0 to 256 [ 237.320801][ T7331] loop2: detected capacity change from 0 to 512 [ 237.328207][ T7331] ext2: Unknown parameter 'smackfsfloor' [ 238.470658][ T7328] loop0: detected capacity change from 0 to 512 [ 238.744102][ T7328] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.338: invalid block [ 238.800987][ T7328] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.338: invalid indirect mapped block 10 (level 1) [ 238.814752][ T7328] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.338: invalid indirect mapped block 8 (level 1) [ 238.828817][ T7328] EXT4-fs (loop0): 1 truncate cleaned up [ 238.836871][ T7328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.665517][ T7346] loop2: detected capacity change from 0 to 256 [ 239.727600][ T7346] exfat: Deprecated parameter 'namecase' [ 239.784917][ T7346] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 240.175638][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.322262][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.470499][ T7351] loop0: detected capacity change from 0 to 256 [ 245.008438][ T7362] loop0: detected capacity change from 0 to 512 [ 249.623856][ T7362] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 249.624249][ T7362] EXT4-fs: failed to create workqueue [ 249.639780][ T7362] EXT4-fs (loop0): mount failed [ 252.169436][ T7382] loop4: detected capacity change from 0 to 40427 [ 252.177465][ T7382] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 252.185283][ T7382] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 252.198104][ T7382] F2FS-fs (loop4): Found nat_bits in checkpoint [ 252.281402][ T7382] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 252.288518][ T7382] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 252.891954][ T7396] netlink: 'syz.3.349': attribute type 11 has an invalid length. [ 252.961733][ T7396] bridge1: entered promiscuous mode [ 252.967975][ T7396] bridge1: entered allmulticast mode [ 253.905408][ T7400] loop0: detected capacity change from 0 to 256 [ 254.020920][ T6475] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 255.881513][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.887886][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.309087][ T7405] loop0: detected capacity change from 0 to 512 [ 256.516493][ T7405] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.353: invalid block [ 256.655415][ T7411] netlink: 20 bytes leftover after parsing attributes in process `syz.4.350'. [ 256.733732][ T7405] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.353: invalid indirect mapped block 10 (level 1) [ 256.761875][ T7405] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.353: invalid indirect mapped block 8 (level 1) [ 256.918482][ T7405] EXT4-fs (loop0): 1 truncate cleaned up [ 256.925947][ T7411] veth3: entered allmulticast mode [ 257.024885][ T7405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.258979][ T7414] loop3: detected capacity change from 0 to 1024 [ 257.301979][ T7414] EXT4-fs: Ignoring removed i_version option [ 257.308067][ T7414] EXT4-fs: inline encryption not supported [ 257.338468][ T7414] EXT4-fs (loop3): Test dummy encryption mode enabled [ 257.371057][ T7414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.589629][ T28] audit: type=1804 audit(1782605660.573:6): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.355" name="/newroot/81/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 257.709115][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.720086][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.728374][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.788289][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.801459][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 257.810123][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.253676][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.359241][ T7416] chnl_net:caif_netlink_parms(): no params data found [ 258.574855][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.617237][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.656978][ T7416] bridge_slave_0: entered allmulticast mode [ 258.689531][ T7416] bridge_slave_0: entered promiscuous mode [ 258.731991][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.749431][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.767450][ T7416] bridge_slave_1: entered allmulticast mode [ 258.788496][ T7416] bridge_slave_1: entered promiscuous mode [ 258.901661][ T7416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.943275][ T7416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.052556][ T7416] team0: Port device team_slave_0 added [ 259.080938][ T7416] team0: Port device team_slave_1 added [ 259.544691][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.661028][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.874031][ T51] Bluetooth: hci4: command tx timeout [ 260.374153][ T7438] loop3: detected capacity change from 0 to 4096 [ 260.391684][ T7416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.465568][ T7438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.478405][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.531419][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.691675][ T7416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.588290][ T2929] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.653395][ T7446] cgroup: Invalid name [ 261.854626][ T28] audit: type=1800 audit(1782605664.843:7): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.360" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 261.940944][ T51] Bluetooth: hci4: command tx timeout [ 262.145068][ T7416] hsr_slave_0: entered promiscuous mode [ 262.209935][ T7416] hsr_slave_1: entered promiscuous mode [ 262.245011][ T7416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.265865][ T7416] Cannot create hsr debugfs directory [ 262.510788][ T2929] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.044572][ T2929] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.092964][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.275470][ T2929] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.000982][ T51] Bluetooth: hci4: command tx timeout [ 265.138336][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.943355][ T7416] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 265.988060][ T7416] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 266.081498][ T51] Bluetooth: hci4: command tx timeout [ 266.122460][ T7473] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.784762][ T7416] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 267.034145][ T7475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.366'. [ 268.131709][ T7475] veth3: entered allmulticast mode [ 268.246789][ T7416] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 269.059044][ T7416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.156679][ T7416] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.223221][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.230438][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.333762][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.340950][ T5897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.804964][ T7506] loop4: detected capacity change from 0 to 4096 [ 269.849017][ T2929] hsr_slave_0: left promiscuous mode [ 269.869045][ T7506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.895885][ T7514] loop3: detected capacity change from 0 to 256 [ 269.932417][ T2929] hsr_slave_1: left promiscuous mode [ 269.957352][ T5789] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 270.019336][ T2929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.084465][ T2929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.135268][ T2929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.178092][ T2929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.403282][ T7520] loop3: detected capacity change from 0 to 512 [ 270.669061][ T7524] cgroup: Invalid name [ 271.087988][ T28] audit: type=1800 audit(1782605673.863:8): pid=7523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.370" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 271.211781][ T7520] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.371: invalid block [ 271.224857][ T7520] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.371: invalid indirect mapped block 10 (level 1) [ 271.239415][ T7520] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.371: invalid indirect mapped block 8 (level 1) [ 271.261419][ T7520] EXT4-fs (loop3): 1 truncate cleaned up [ 271.274227][ T7520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.046611][ T2929] bridge_slave_1: left allmulticast mode [ 272.066007][ T2929] bridge_slave_1: left promiscuous mode [ 272.705402][ T2929] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.135212][ T2929] bridge_slave_0: left allmulticast mode [ 273.147080][ T2929] bridge_slave_0: left promiscuous mode [ 273.174800][ T2929] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.230652][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.361083][ T2929] veth1_macvtap: left promiscuous mode [ 273.366673][ T2929] veth0_macvtap: left promiscuous mode [ 273.389113][ T2929] veth1_vlan: left promiscuous mode [ 273.400994][ T2929] veth0_vlan: left promiscuous mode [ 273.976806][ T7546] loop3: detected capacity change from 0 to 4096 [ 274.011956][ T7546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.043757][ T28] audit: type=1804 audit(1782605677.033:9): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.374" name="/newroot/88/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 274.094216][ T28] audit: type=1804 audit(1782605677.053:10): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.374" name="/newroot/88/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 274.172230][ T28] audit: type=1804 audit(1782605677.053:11): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.374" name="/newroot/88/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 274.516185][ T2929] team0 (unregistering): Port device team_slave_1 removed [ 274.644767][ T2929] team0 (unregistering): Port device team_slave_0 removed [ 274.657777][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.735485][ T2929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.761661][ T2929] bond_slave_1 (unregistering): left promiscuous mode [ 274.829276][ T2929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.838378][ T2929] bond_slave_0 (unregistering): left promiscuous mode [ 275.136761][ T2929] bond0 (unregistering): Released all slaves [ 275.396835][ T7552] netlink: 'syz.3.375': attribute type 12 has an invalid length. [ 275.529107][ T5971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.699795][ T7416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.444538][ T7416] veth0_vlan: entered promiscuous mode [ 276.500094][ T7416] veth1_vlan: entered promiscuous mode [ 276.592433][ T7416] veth0_macvtap: entered promiscuous mode [ 276.611285][ T7416] veth1_macvtap: entered promiscuous mode [ 276.662645][ T7596] loop0: detected capacity change from 0 to 256 [ 276.713102][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.725040][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.735176][ T6475] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 276.746411][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.758081][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.777452][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.860798][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.877926][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.915000][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.934887][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.946321][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.960402][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.984992][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.998599][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.015181][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.035911][ T7416] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.045280][ T7416] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.054345][ T7416] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.064764][ T7416] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.191042][ T3442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.218871][ T3442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.268941][ T7600] loop0: detected capacity change from 0 to 512 [ 277.370987][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.406346][ T7600] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.381: invalid indirect mapped block 10 (level 1) [ 277.462061][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.469602][ T7600] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.381: invalid indirect mapped block 8 (level 1) [ 277.595902][ T7600] EXT4-fs (loop0): 1 truncate cleaned up [ 277.603339][ T7600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.820070][ T7617] loop3: detected capacity change from 0 to 4096 [ 277.889343][ T7617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.552216][ T7634] cgroup: Invalid name [ 279.029307][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.632052][ T28] audit: type=1326 audit(1782605682.613:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.5.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36659ce59 code=0x7ffc0000 [ 279.723659][ T28] audit: type=1326 audit(1782605682.643:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.5.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36659ce59 code=0x7ffc0000 [ 279.795859][ T28] audit: type=1326 audit(1782605682.653:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.5.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fd36659ce59 code=0x7ffc0000 [ 279.855112][ T28] audit: type=1326 audit(1782605682.653:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.5.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36659ce59 code=0x7ffc0000 [ 279.910808][ T28] audit: type=1326 audit(1782605682.653:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.5.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd36659ce59 code=0x7ffc0000 [ 279.992171][ T28] audit: type=1326 audit(1782605682.653:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.5.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36659ce59 code=0x7ffc0000 [ 280.028917][ T28] audit: type=1326 audit(1782605682.653:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.5.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36659ce59 code=0x7ffc0000 [ 280.037258][ T7666] loop5: detected capacity change from 0 to 512 [ 280.065868][ T28] audit: type=1326 audit(1782605682.653:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.5.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fd36659ce59 code=0x7ffc0000 [ 280.124158][ T28] audit: type=1326 audit(1782605682.833:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.5.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36659ce59 code=0x7ffc0000 [ 280.200510][ T28] audit: type=1326 audit(1782605682.833:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.5.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36659ce59 code=0x7ffc0000 [ 280.233777][ T7666] [ 280.236140][ T7666] ====================================================== [ 280.243168][ T7666] WARNING: possible circular locking dependency detected [ 280.250224][ T7666] syzkaller #0 Not tainted [ 280.254651][ T7666] ------------------------------------------------------ [ 280.261679][ T7666] syz.5.392/7666 is trying to acquire lock: [ 280.267597][ T7666] ffff88807c64ac58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 280.277651][ T7666] [ 280.277651][ T7666] but task is already holding lock: [ 280.285032][ T7666] ffff888058c13cc8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3d3/0x6d0 [ 280.294897][ T7666] [ 280.294897][ T7666] which lock already depends on the new lock. [ 280.294897][ T7666] [ 280.305309][ T7666] [ 280.305309][ T7666] the existing dependency chain (in reverse order) is: [ 280.314342][ T7666] [ 280.314342][ T7666] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 280.321932][ T7666] down_write+0x97/0x200 [ 280.326741][ T7666] ext4_destroy_inline_data+0x28/0xe0 [ 280.332663][ T7666] ext4_do_writepages+0x4f2/0x3990 [ 280.338350][ T7666] ext4_writepages+0x1dd/0x350 [ 280.343660][ T7666] do_writepages+0x351/0x590 [ 280.348800][ T7666] filemap_fdatawrite_wbc+0x122/0x180 [ 280.354721][ T7666] file_write_and_wait_range+0x197/0x280 [ 280.360894][ T7666] generic_buffers_fsync_noflush+0x6f/0x160 [ 280.367341][ T7666] ext4_sync_file+0x460/0xd50 [ 280.372577][ T7666] ext4_buffered_write_iter+0x2c0/0x350 [ 280.378680][ T7666] ext4_file_write_iter+0x1e7/0x1980 [ 280.384520][ T7666] aio_write+0x564/0x7d0 [ 280.389298][ T7666] io_submit_one+0x768/0x12d0 [ 280.394541][ T7666] __se_sys_io_submit+0x1a1/0x310 [ 280.400088][ T7666] do_syscall_64+0x55/0xb0 [ 280.405037][ T7666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.411475][ T7666] [ 280.411475][ T7666] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 280.419917][ T7666] __lock_acquire+0x37ef/0x7d80 [ 280.425298][ T7666] lock_acquire+0x19e/0x420 [ 280.430335][ T7666] percpu_down_read+0x44/0x1a0 [ 280.435637][ T7666] ext4_writepages+0x1a4/0x350 [ 280.440951][ T7666] do_writepages+0x351/0x590 [ 280.446134][ T7666] __writeback_single_inode+0x14e/0xee0 [ 280.452227][ T7666] writeback_single_inode+0x21f/0x760 [ 280.458141][ T7666] write_inode_now+0x183/0x210 [ 280.463436][ T7666] iput+0x58f/0x900 [ 280.467769][ T7666] ext4_xattr_block_set+0x2228/0x2fe0 [ 280.473697][ T7666] ext4_expand_extra_isize_ea+0x128f/0x1e70 [ 280.480159][ T7666] __ext4_expand_extra_isize+0x306/0x400 [ 280.486333][ T7666] __ext4_mark_inode_dirty+0x458/0x6d0 [ 280.492328][ T7666] ext4_evict_inode+0x7dd/0xe70 [ 280.497727][ T7666] evict+0x4b7/0x8a0 [ 280.502157][ T7666] ext4_orphan_cleanup+0xc33/0x1470 [ 280.507885][ T7666] ext4_fill_super+0x5fb5/0x6870 [ 280.513358][ T7666] get_tree_bdev+0x3e5/0x520 [ 280.518482][ T7666] vfs_get_tree+0x8c/0x280 [ 280.523429][ T7666] do_new_mount+0x24a/0xa40 [ 280.528483][ T7666] __se_sys_mount+0x2e7/0x3d0 [ 280.533695][ T7666] do_syscall_64+0x55/0xb0 [ 280.538645][ T7666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.545079][ T7666] [ 280.545079][ T7666] other info that might help us debug this: [ 280.545079][ T7666] [ 280.555307][ T7666] Possible unsafe locking scenario: [ 280.555307][ T7666] [ 280.562768][ T7666] CPU0 CPU1 [ 280.568153][ T7666] ---- ---- [ 280.573526][ T7666] lock(&ei->xattr_sem); [ 280.577859][ T7666] lock(&sbi->s_writepages_rwsem); [ 280.585585][ T7666] lock(&ei->xattr_sem); [ 280.592441][ T7666] rlock(&sbi->s_writepages_rwsem); [ 280.597757][ T7666] [ 280.597757][ T7666] *** DEADLOCK *** [ 280.597757][ T7666] [ 280.605905][ T7666] 3 locks held by syz.5.392/7666: [ 280.610937][ T7666] #0: ffff88807c64c0e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x345/0x520 [ 280.621069][ T7666] #1: ffff88807c64c608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b4/0xe70 [ 280.630489][ T7666] #2: ffff888058c13cc8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3d3/0x6d0 [ 280.640770][ T7666] [ 280.640770][ T7666] stack backtrace: [ 280.646698][ T7666] CPU: 0 PID: 7666 Comm: syz.5.392 Not tainted syzkaller #0 [ 280.653990][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 280.664073][ T7666] Call Trace: [ 280.667362][ T7666] [ 280.670299][ T7666] dump_stack_lvl+0x18c/0x250 [ 280.674987][ T7666] ? load_image+0x420/0x420 [ 280.679523][ T7666] ? show_regs_print_info+0x20/0x20 [ 280.684733][ T7666] ? print_circular_bug+0x12b/0x1a0 [ 280.689954][ T7666] check_noncircular+0x2fc/0x400 [ 280.694914][ T7666] ? look_up_lock_class+0x75/0x140 [ 280.700037][ T7666] ? print_deadlock_bug+0x5d0/0x5d0 [ 280.705246][ T7666] ? lockdep_lock+0xf5/0x230 [ 280.709847][ T7666] ? mark_lock+0x94/0x320 [ 280.714194][ T7666] ? _find_first_zero_bit+0xd6/0x100 [ 280.719487][ T7666] __lock_acquire+0x37ef/0x7d80 [ 280.724350][ T7666] ? deref_stack_reg+0x1ab/0x230 [ 280.729303][ T7666] ? mark_lock+0x94/0x320 [ 280.733654][ T7666] ? verify_lock_unused+0x140/0x140 [ 280.738866][ T7666] ? __lock_acquire+0x1336/0x7d80 [ 280.743895][ T7666] ? kernel_text_address+0xa0/0xd0 [ 280.749025][ T7666] ? arch_stack_walk+0x160/0x190 [ 280.753977][ T7666] lock_acquire+0x19e/0x420 [ 280.758486][ T7666] ? ext4_writepages+0x1a4/0x350 [ 280.763445][ T7666] ? __might_sleep+0xe0/0xe0 [ 280.768039][ T7666] ? read_lock_is_recursive+0x20/0x20 [ 280.773420][ T7666] ? mark_lock+0x94/0x320 [ 280.777764][ T7666] ? __lock_acquire+0x1336/0x7d80 [ 280.782800][ T7666] ? look_up_lock_class+0x75/0x140 [ 280.787925][ T7666] percpu_down_read+0x44/0x1a0 [ 280.792701][ T7666] ? ext4_writepages+0x1a4/0x350 [ 280.797647][ T7666] ext4_writepages+0x1a4/0x350 [ 280.802430][ T7666] ? ext4_read_folio+0x2f0/0x2f0 [ 280.807390][ T7666] ? __rwlock_init+0x150/0x150 [ 280.812168][ T7666] ? do_raw_spin_unlock+0x121/0x230 [ 280.817383][ T7666] ? ext4_read_folio+0x2f0/0x2f0 [ 280.822343][ T7666] do_writepages+0x351/0x590 [ 280.826964][ T7666] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 280.832694][ T7666] ? writeback_single_inode+0x214/0x760 [ 280.838251][ T7666] ? __lock_acquire+0x7d80/0x7d80 [ 280.843330][ T7666] ? do_raw_spin_lock+0x11f/0x2b0 [ 280.848380][ T7666] __writeback_single_inode+0x14e/0xee0 [ 280.853948][ T7666] writeback_single_inode+0x21f/0x760 [ 280.859336][ T7666] ? write_inode_now+0x210/0x210 [ 280.864290][ T7666] write_inode_now+0x183/0x210 [ 280.869067][ T7666] ? bdi_split_work_to_wbs+0x900/0x900 [ 280.874548][ T7666] ? do_raw_spin_unlock+0x121/0x230 [ 280.879757][ T7666] iput+0x58f/0x900 [ 280.883577][ T7666] ext4_xattr_block_set+0x2228/0x2fe0 [ 280.888993][ T7666] ? ext4_xattr_block_find+0x320/0x320 [ 280.894471][ T7666] ? xattr_find_entry+0x2a6/0x2f0 [ 280.899519][ T7666] ? ext4_xattr_block_find+0xce/0x320 [ 280.904906][ T7666] ext4_expand_extra_isize_ea+0x128f/0x1e70 [ 280.910928][ T7666] __ext4_expand_extra_isize+0x306/0x400 [ 280.916587][ T7666] __ext4_mark_inode_dirty+0x458/0x6d0 [ 280.922075][ T7666] ext4_evict_inode+0x7dd/0xe70 [ 280.926978][ T7666] ? evict+0x482/0x8a0 [ 280.931077][ T7666] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 280.936992][ T7666] ? do_raw_spin_unlock+0x121/0x230 [ 280.942206][ T7666] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 280.948114][ T7666] evict+0x4b7/0x8a0 [ 280.952022][ T7666] ? __lock_acquire+0x7d80/0x7d80 [ 280.957062][ T7666] ? proc_nr_inodes+0x230/0x230 [ 280.961925][ T7666] ? do_raw_spin_unlock+0x121/0x230 [ 280.967145][ T7666] ? _raw_spin_unlock+0x28/0x40 [ 280.972021][ T7666] ext4_orphan_cleanup+0xc33/0x1470 [ 280.977237][ T7666] ? ext4_orphan_del+0xc90/0xc90 [ 280.982190][ T7666] ? ext4_register_li_request+0x182/0x930 [ 280.987921][ T7666] ? errseq_check_and_advance+0x66/0x120 [ 280.993567][ T7666] ext4_fill_super+0x5fb5/0x6870 [ 280.998526][ T7666] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 281.004784][ T7666] ? __might_sleep+0xe0/0xe0 [ 281.009433][ T7666] ? read_lock_is_recursive+0x20/0x20 [ 281.014825][ T7666] ? snprintf+0xe9/0x140 [ 281.019093][ T7666] ? down_read_killable+0x340/0x340 [ 281.024307][ T7666] ? setup_bdev_super+0x56b/0x660 [ 281.029356][ T7666] get_tree_bdev+0x3e5/0x520 [ 281.033963][ T7666] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 281.040212][ T7666] ? setup_bdev_super+0x660/0x660 [ 281.045253][ T7666] ? apparmor_capable+0x137/0x1a0 [ 281.050287][ T7666] ? bpf_lsm_capable+0x9/0x10 [ 281.054975][ T7666] ? security_capable+0x89/0xb0 [ 281.059845][ T7666] vfs_get_tree+0x8c/0x280 [ 281.064280][ T7666] do_new_mount+0x24a/0xa40 [ 281.068788][ T7666] __se_sys_mount+0x2e7/0x3d0 [ 281.073472][ T7666] ? __x64_sys_mount+0xc0/0xc0 [ 281.078239][ T7666] ? lockdep_hardirqs_on+0x98/0x150 [ 281.083450][ T7666] ? __x64_sys_mount+0x20/0xc0 [ 281.088220][ T7666] do_syscall_64+0x55/0xb0 [ 281.092686][ T7666] ? clear_bhb_loop+0x40/0x90 [ 281.097365][ T7666] ? clear_bhb_loop+0x40/0x90 [ 281.102054][ T7666] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.107977][ T7666] RIP: 0033:0x7fd36659e0ca [ 281.112407][ T7666] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.132035][ T7666] RSP: 002b:00007fd36736de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 281.140466][ T7666] RAX: ffffffffffffffda RBX: 00007fd36736dee0 RCX: 00007fd36659e0ca [ 281.148548][ T7666] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fd36736dea0 [ 281.156526][ T7666] RBP: 0000200000000180 R08: 00007fd36736dee0 R09: 0000000000000000 [ 281.164508][ T7666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 281.172488][ T7666] R13: 00007fd36736dea0 R14: 000000000000047a R15: 0000200000001b80 [ 281.180513][ T7666] [ 281.239854][ T7674] loop3: detected capacity change from 0 to 256 [ 281.268759][ T7674] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 281.425006][ T7666] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.392: iget: bad extra_isize 58 (inode size 256) [ 281.465590][ T7666] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.392: error while reading EA inode 11 err=-117 [ 281.491423][ T7666] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.392: iget: bad extra_isize 58 (inode size 256) [ 281.521156][ T7666] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.392: error while reading EA inode 11 err=-117 [ 281.541089][ T7666] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.392: iget: bad extra_isize 58 (inode size 256) [ 281.571658][ T7666] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.392: error while reading EA inode 18 err=-117 [ 281.601107][ T7666] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.392: iget: bad extra_isize 58 (inode size 256) [ 281.631501][ T7666] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.392: error while reading EA inode 18 err=-117 [ 281.661113][ T7666] EXT4-fs (loop5): 1 orphan inode deleted [ 281.667979][ T7666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.969732][ T7416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.172956][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.