last executing test programs: 4m26.506760057s ago: executing program 2 (id=3): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 4m19.975807137s ago: executing program 3 (id=4): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) umount2(&(0x7f00000000c0)='./tracefs/instances/foo\x00', 0xa7cda93bb303aeda) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x61) umount2(&(0x7f0000000100)='./tracefs\x00', 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40844}, 0x0) 4m16.597587462s ago: executing program 2 (id=12): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_usb_connect(0x0, 0x59, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109024700010000080009046900000e0100000824020102027c661d"], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x476, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000001280)=0x0) eventfd2(0x80000000, 0xc0801) bpf$MAP_CREATE(0x600000000000000, 0x0, 0x50) io_pgetevents(r1, 0x5, 0x1, &(0x7f0000000580)=[{}], 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffbd, 0x0, 0x41000, 0x17, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000040)={0x17c04, 0xffffffffffffffff, 0x6, 0x100000002, 0x0, 0xfff}) 4m12.401535847s ago: executing program 2 (id=20): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)='G)', 0x2}], 0x1}}], 0x3, 0x4040881) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000200)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000002100)=0x40) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000180)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1", 0x42, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) 4m10.353741818s ago: executing program 2 (id=23): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 4m4.639163797s ago: executing program 32 (id=4): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) umount2(&(0x7f00000000c0)='./tracefs/instances/foo\x00', 0xa7cda93bb303aeda) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x61) umount2(&(0x7f0000000100)='./tracefs\x00', 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40844}, 0x0) 3m55.05294851s ago: executing program 33 (id=23): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 3m14.946163311s ago: executing program 6 (id=45): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000300)=0x3, 0x4) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r4, r4, 0x0, 0xe3aa6ea) 3m11.166116654s ago: executing program 6 (id=113): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x33) read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2020) 3m10.844691875s ago: executing program 6 (id=116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 3m9.63931816s ago: executing program 6 (id=117): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x40) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) sendto$packet(r0, 0x0, 0x0, 0x400c854, 0x0, 0x0) io_setup(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2m54.475031463s ago: executing program 34 (id=117): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x40) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) sendto$packet(r0, 0x0, 0x0, 0x400c854, 0x0, 0x0) io_setup(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 1m32.610918197s ago: executing program 5 (id=330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r1, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x20000000}, 0x0) 1m32.030036205s ago: executing program 5 (id=334): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 1m28.905007024s ago: executing program 5 (id=337): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000100)='map_files\x00') fchdir(r3) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 1m27.180783194s ago: executing program 5 (id=341): r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x5c, 0xd, 0x9}, {0x6, 0x0, 0x4, 0x7ffffe39}]}) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000a80)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, "95f326cdcb4700348fb30fb073259ba1d894c8782936a22241940351f63a5d49f6b05a95d6c75bec"}}}}, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, r3, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x2}]) 1m25.675321466s ago: executing program 5 (id=343): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) 1m24.428416261s ago: executing program 5 (id=346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) ioctl$int_in(r3, 0x5452, &(0x7f0000000540)=0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) dup(0xffffffffffffffff) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xffffffffffffffa1) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@dax_always}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@nombcache}, {@user_xattr}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0x400fff}}]}, 0xfa, 0x489, &(0x7f0000001f80)="$eJzs3MtvVNUfAPDvvZ2W96/9IT5AEBSNxEdLy0MWbjSasNDERBcYV7UtpFKooTURQrS6wKUhcW/8L4wr3RgfC03c6t6QEMMG1M2Y+yqlzLQzMHSA+XySO5xz7+Ge8733nplz7+lMAD1rT/aSRGyOiN8jYrDILinQt1ju2pXzE39fOT+RRL3+5l9JXu7qlfMTVdHq/20qMvUqv65BvRfeiRifmZk6U+ZH5k+9PzJ39tzz06fGT0ydmDo9duTIwQO7Bg6PHepInFlcV3d8NLtz+9G3L74+ceziuz8maRRxx7I4WpWssn1PcXQbeqrdyu5yW5akk9rSLbt/uZ5udCXQTVnvzk5Xf97/B6MvNixuG4xXP+1q44A7ql6v11d4V16oA/exJLrdAqA7qg/67P63WtZo6HFXuPxScQOUxX2tXIottUiLxO7+Zfe3mztY/56IOLbwz5fZErf4HAIAoB3fZuOf5xqN/9J4qEgMZC//K+dQhiLi/xGxNSIeiIhtEfFgRF724Yh4pM36l8+Q3Dz+SS/dcnAtyMZ/L5ZzWzeO/9KqyFBfmduSx9+fHJ+emdpfHpN90b/u+HQyNbpCHd+98tvnDTfUbhz/ZUtWfzUW/Llox6Xasgd0k+Pz4x0IPXf5k4gdtUbxJ1FN4yQRsT0idtxiHdPP1JpuWyn+VTXfbcvqX0U8XZz/hVgWfyVpOj85+sLhsUMj62Nmav9IdVXc7KdfL7zRrP7bir8DsvO/seH1vxj/ULI+Yu7suZP5fO1cW7vPJ48v/PFZ03uaMv6sezWJ/4br/+iW8vofSN7KVwyUGz4cn58/MxoxkLx28/qx63ur8lX5LP59exv3/61x/Ug8GhE7I2JXRDyW3RSWbX88Ip6IiL0rHIQfXn7yvVXib3D+12auNIt/crXzH0vPf/uJvpPff7N6/Osjotn5P5in9pVrVn7/689fW23g7R4/AAAAuBcUfwOfpMOL6TQdHi7+hn9bbExnZufmnz0++8HpyWLeeyj60+pJ1+CS56Gj5bPhKj+2LH+gXjw3/qJvQ54fnpidmex28NDjNjXp/5k/86e3Q11uIXBHdWAeDbhH6f/Qu/R/6E2J/g89Tf+H3tWo/3/ctPTw13e0McCa8vkPvauF/r9Q/NN8VADcm3z+Q+/S/6EnNf1ufHpbX/lvObGhQ/v5t/w9w7Vos0SWiPSuaMb9n6i1/GMWbSTqg0X/z9asa1im2+9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfFfAAAA//9IieO0") mlockall(0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 1m8.213240505s ago: executing program 35 (id=346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) ioctl$int_in(r3, 0x5452, &(0x7f0000000540)=0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) dup(0xffffffffffffffff) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xffffffffffffffa1) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@dax_always}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@nombcache}, {@user_xattr}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0x400fff}}]}, 0xfa, 0x489, &(0x7f0000001f80)="$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") mlockall(0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) 41.711172337s ago: executing program 7 (id=429): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xfffffff6, 0xc0, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x5}, 0x8, 0x8000, 0xfffffffc, 0x0, 0x1000010, 0x20004, 0x0}) 41.387705258s ago: executing program 7 (id=432): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0xfffffffd}, 0x1c) write$UHID_INPUT(r1, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) llistxattr(0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0x5bf}, {}]}) write$FUSE_INIT(r0, &(0x7f0000002580)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x8, 0x50800, 0x2, 0xcea1, 0xa6, 0x0, 0x0, 0x0, 0x4, 0x4}}, 0x74) 37.615081759s ago: executing program 7 (id=434): fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3b, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000280)={0xe, 0x7ffd}, 0x0) getpid() socket$inet6(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$netlink(0x10, 0x3, 0xa) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') readv(r7, 0x0, 0x0) write(r3, &(0x7f0000000040)="27003e321252b7e7eaf4d5905b711eacf630000707030e0000120f0a00110f0100f5fe009d2fb1", 0x27) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/failslab/interval\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 30.71328177s ago: executing program 7 (id=443): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x126) 29.963343366s ago: executing program 7 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCSMRU(r3, 0x40047452, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x62) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x42101, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 25.131545711s ago: executing program 7 (id=451): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x566, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x1e, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) 24.366952359s ago: executing program 36 (id=451): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x566, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x10, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x1e, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) 16.158881429s ago: executing program 0 (id=464): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 15.039063435s ago: executing program 0 (id=467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f00000005c0), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fsync(r3) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000480)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000100), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.195348183s ago: executing program 0 (id=469): openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r4 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_modify_offsets$generic(r5, r6, 0x2c, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000440)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x3, 0x127, 0x0, 0x0, 0x1000, 0x1d6, 0xffffffffffffffff, 0x0, 0xa}}}, 0x0) r8 = eventfd2(0x1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000200)=r8, 0x1) 10.040726387s ago: executing program 1 (id=471): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6(0xa, 0x802, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x888) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x2020) pread64(r6, &(0x7f0000000040)=""/103, 0x67, 0x800) 8.155720733s ago: executing program 1 (id=472): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2a, 0x364, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 7.964993915s ago: executing program 4 (id=473): ftruncate(0xffffffffffffffff, 0x4a8e) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10c) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0x2020) 7.626708629s ago: executing program 4 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCSMRU(r3, 0x40047452, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x62) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 4.316922359s ago: executing program 4 (id=475): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 3.845360552s ago: executing program 1 (id=476): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r2, 0x0, &(0x7f00000002c0)={0x0, 0x160a, 0x0, 0x2, 0x8f, 0x0, r2}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6601, 0x40, 0x2, 0x198, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x34bf, 0x8000, 0x0, 0x2ee, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x171c, 0x80, 0x1, 0x8e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1520, 0x20000, 0x0, 0x150, 0x0, r2}}], 0x4, &(0x7f0000001980)={0x2e, 0x42, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, 0x0, '\x00', {0x3, 0xbf0, 0x0, &(0x7f0000000980)=@buf_4k="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"}}, &(0x7f0000001a00)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) 3.694212506s ago: executing program 0 (id=477): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002080)={0x73622a85, 0x100b, 0x2}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, &(0x7f00000001c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 3.694031966s ago: executing program 4 (id=478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f00000005c0)="306663353a313232373a3f7092c0", 0xe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fsync(r3) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000480)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000100), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.431868134s ago: executing program 4 (id=479): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x2048cc, &(0x7f0000000c40)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5f97722752a98440a5725268a242c0263564f968d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de293ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df73df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRESOCT=0x0], 0x1, 0x35b, &(0x7f00000008c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) 2.26972527s ago: executing program 1 (id=480): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000001c0)={[{@minixdf}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0xe3}}, {@grpjquota, 0x2e}, {@nouser_xattr}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4ab, &(0x7f0000000740)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@nodioread_nolock}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 2.219687041s ago: executing program 0 (id=481): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0\x00', 0x2440, 0x186) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x842, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1, @ANYRES64=r1, @ANYRES16=r0]) getsockopt$nfc_llcp(r3, 0x118, 0x0, &(0x7f00000000c0)=""/25, 0x19) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r4, 0x0, 0x3, &(0x7f0000000b80), 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=0xffffffffffffffff, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r6, r5, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) 1.192939787s ago: executing program 4 (id=482): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) write(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @loopback}}}}}}, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r1 = syz_clone(0x2180100, 0x0, 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f00000003c0)=@rc={0x1f, @fixed}, &(0x7f0000000440)=0x80, 0x80000) write$cgroup_pid(r0, &(0x7f0000005700)=r1, 0x12) 811.343931ms ago: executing program 1 (id=483): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(0x0, 0x1ff) symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 67.649065ms ago: executing program 0 (id=484): openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r4 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000440)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x3, 0x127, 0x0, 0x0, 0x1000, 0x1d6, 0xffffffffffffffff, 0x0, 0xa}}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000200), 0x1) 0s ago: executing program 1 (id=485): listen(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x81, 0x122) write(r0, &(0x7f0000000100)='2097152', 0x7) kernel console output (not intermixed with test programs): r: link becomes ready [ 136.193059][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.236774][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.614401][ T4324] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 136.823543][ T4324] usb 1-1: USB disconnect, device number 3 [ 136.849279][ T4589] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.907756][ T4589] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.942582][ T4589] device bridge_slave_0 entered promiscuous mode [ 136.953142][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 136.992811][ T4589] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.035657][ T4589] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.051023][ T4589] device bridge_slave_1 entered promiscuous mode [ 137.111234][ T4589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.157434][ T4589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.299295][ T4589] team0: Port device team_slave_0 added [ 137.426935][ T4589] team0: Port device team_slave_1 added [ 137.516048][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.523627][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.584213][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 138.670220][ T30] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.813101][ T4589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.833252][ T4589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.911450][ T4589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.956017][ T4589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.983389][ T4589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.052447][ T4589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.165314][ T4589] device hsr_slave_0 entered promiscuous mode [ 139.193158][ T4589] device hsr_slave_1 entered promiscuous mode [ 139.213607][ T4589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.242531][ T4589] Cannot create hsr debugfs directory [ 139.418036][ T4522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.575229][ T4723] binder: 4722:4723 ioctl 4018620d 0 returned -22 [ 139.629236][ T30] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.867009][ T30] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.196809][ T4736] loop4: detected capacity change from 0 to 1024 [ 140.208061][ T4736] EXT4-fs: Ignoring removed oldalloc option [ 140.214126][ T4736] EXT4-fs: Ignoring removed oldalloc option [ 140.282516][ T4736] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.470163][ T30] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.591395][ T4736] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 141.150353][ T4743] binder: 4742:4743 ioctl c0306201 200000000240 returned -14 [ 141.485190][ T4589] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 141.569072][ T4589] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 142.048596][ T4589] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 142.095746][ T4589] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 142.151211][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 142.176668][ T27] audit: type=1326 audit(1790524590.850:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.0.79" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb159e159 code=0x7ffc0000 [ 142.325170][ T27] audit: type=1326 audit(1790524590.850:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.0.79" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb159e159 code=0x7ffc0000 [ 142.415669][ T27] audit: type=1326 audit(1790524590.870:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.0.79" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb159e159 code=0x7ffc0000 [ 142.463239][ T4729] loop1: detected capacity change from 0 to 40427 [ 142.479893][ T4729] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 142.495551][ T27] audit: type=1326 audit(1790524590.870:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.0.79" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb159e159 code=0x7ffc0000 [ 142.526496][ T4729] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 142.556330][ T4729] F2FS-fs (loop1): invalid crc value [ 142.581493][ T4759] loop4: detected capacity change from 0 to 512 [ 142.600107][ T4729] F2FS-fs (loop1): Found nat_bits in checkpoint [ 142.652704][ T4759] EXT4-fs (loop4): Test dummy encryption mode enabled [ 142.662109][ T27] audit: type=1326 audit(1790524590.870:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.0.79" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f8bb159e159 code=0x7ffc0000 [ 142.762398][ T27] audit: type=1326 audit(1790524590.870:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.0.79" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb159e159 code=0x7ffc0000 [ 142.774601][ T4759] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.81: inode has both inline data and extents flags [ 142.928241][ T4765] loop0: detected capacity change from 0 to 512 [ 143.017651][ T4759] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.81: couldn't read orphan inode 15 (err -117) [ 143.122113][ T4765] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.80: inode has both inline data and extents flags [ 143.137780][ T4765] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.80: couldn't read orphan inode 15 (err -117) [ 143.161370][ T4765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 143.975606][ T4759] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.074855][ T27] audit: type=1326 audit(1790524590.870:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.0.79" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bb159e159 code=0x7ffc0000 [ 144.218008][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.265734][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.314845][ T27] audit: type=1326 audit(1790524590.870:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.0.79" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8bb159e159 code=0x7ffc0000 [ 144.461538][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.485737][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.555967][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.564120][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.571551][ T27] audit: type=1326 audit(1790524590.870:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4752 comm="syz.0.79" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8bb159e159 code=0x7ffc0000 [ 144.695789][ T4773] loop1: detected capacity change from 0 to 512 [ 144.743996][ T4773] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 144.794074][ T4522] device veth0_vlan entered promiscuous mode [ 144.877784][ T4589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.980238][ T4589] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.175257][ T4773] EXT4-fs (loop1): 1 orphan inode deleted [ 145.181285][ T4773] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 145.182109][ T4412] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 145.226499][ T4773] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.253579][ T4412] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:11: Failed to release dquot type 1 [ 145.296624][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 145.339970][ T4773] EXT4-fs error (device loop1): ext4_lookup:1864: inode #2: comm syz.1.82: deleted inode referenced: 16 [ 145.377808][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.389561][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.435828][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.475624][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.484586][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.491837][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.502215][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.512296][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.521421][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.528656][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.539059][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.551327][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 145.558527][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.568360][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.579788][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.614192][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.632825][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.663215][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.685495][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.709008][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.719391][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.756652][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 145.771273][ T4779] loop1: detected capacity change from 0 to 128 [ 145.832235][ T4779] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 145.849106][ T4781] binder: 4780:4781 ioctl 4018620d 0 returned -22 [ 145.863024][ T4522] device veth1_vlan entered promiscuous mode [ 145.901462][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.917638][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.924109][ T4779] Zero length message leads to an empty skb [ 146.049189][ T4785] loop0: detected capacity change from 0 to 512 [ 146.113668][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.139177][ T4785] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.86: inode has both inline data and extents flags [ 146.164835][ T4785] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.86: couldn't read orphan inode 15 (err -117) [ 146.182485][ T4785] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 146.336186][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.357767][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.406546][ T4522] device veth0_macvtap entered promiscuous mode [ 146.678216][ T4522] device veth1_macvtap entered promiscuous mode [ 146.846261][ T4801] loop4: detected capacity change from 0 to 1024 [ 146.857843][ T4801] EXT4-fs: Ignoring removed oldalloc option [ 146.863864][ T4801] EXT4-fs: Ignoring removed oldalloc option [ 146.926954][ T4801] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.124703][ T4801] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 147.446631][ T4522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.545183][ T4522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.640584][ T4522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.713680][ T4522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.786213][ T4522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.853052][ T4522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.914084][ T4522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.981270][ T4522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.059676][ T4522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.149700][ T4522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.213046][ T4522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.264208][ T4522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.314902][ T4522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.356621][ T4522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.408831][ T4522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.459217][ T4522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.521486][ T4522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.576501][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 148.592820][ T4522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.906530][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 149.005508][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.014368][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.095573][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.104517][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.158313][ T4522] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.175272][ T4522] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.202268][ T4522] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.232288][ T4522] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.302480][ T4807] loop1: detected capacity change from 0 to 40427 [ 149.327267][ T4807] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 149.346451][ T4807] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 149.402805][ T4807] F2FS-fs (loop1): invalid crc value [ 149.481259][ T4807] F2FS-fs (loop1): Found nat_bits in checkpoint [ 149.578373][ T4589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.623701][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.638083][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.665944][ T4807] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 149.673065][ T4807] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 149.989852][ T30] device hsr_slave_0 left promiscuous mode [ 150.008237][ T30] device hsr_slave_1 left promiscuous mode [ 150.021610][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.031576][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.049374][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.062850][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.074843][ T30] device bridge_slave_1 left promiscuous mode [ 150.081152][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.098234][ T30] device bridge_slave_0 left promiscuous mode [ 150.111864][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.160026][ T30] device veth1_macvtap left promiscuous mode [ 150.166349][ T30] device veth0_macvtap left promiscuous mode [ 150.172527][ T30] device veth1_vlan left promiscuous mode [ 150.179058][ T30] device veth0_vlan left promiscuous mode [ 150.673323][ T30] team0 (unregistering): Port device team_slave_1 removed [ 150.716396][ T30] team0 (unregistering): Port device team_slave_0 removed [ 150.751849][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.794234][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.071585][ T30] bond0 (unregistering): Released all slaves [ 151.155026][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.164317][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.189852][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.263895][ T4471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.277778][ T4471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.293332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.589114][ T4833] loop4: detected capacity change from 0 to 256 [ 151.687821][ T4831] loop1: detected capacity change from 0 to 1024 [ 152.395839][ T4831] EXT4-fs: Ignoring removed oldalloc option [ 152.442685][ T4831] ext4: Bad value for 'auto_da_alloc' [ 153.446845][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.553754][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.678337][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.715949][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.767495][ T4589] device veth0_vlan entered promiscuous mode [ 153.776097][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.818099][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.903895][ T4589] device veth1_vlan entered promiscuous mode [ 153.934291][ T4851] loop4: detected capacity change from 0 to 512 [ 154.016744][ T4851] EXT4-fs (loop4): Test dummy encryption mode enabled [ 154.208232][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 154.235703][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 154.249843][ T4851] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.92: inode has both inline data and extents flags [ 154.375318][ T4859] loop5: detected capacity change from 0 to 512 [ 154.622099][ T4851] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.92: couldn't read orphan inode 15 (err -117) [ 154.769518][ T4859] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.91: inode has both inline data and extents flags [ 154.793155][ T4859] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.91: couldn't read orphan inode 15 (err -117) [ 154.810107][ T4859] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 155.432809][ T4851] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 155.454896][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.675250][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.439123][ T4589] device veth0_macvtap entered promiscuous mode [ 156.453013][ T4589] device veth1_macvtap entered promiscuous mode [ 156.660200][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.682254][ T4522] EXT4-fs (loop5): unmounting filesystem. [ 156.754693][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.806958][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.834808][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.863872][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.894626][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.965043][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.000998][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.013364][ T4589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.031318][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.066050][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.100049][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.149084][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.170536][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.194702][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.235365][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.272559][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.300697][ T4589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.320851][ T4871] binder: 4870:4871 ioctl 4018620d 0 returned -22 [ 157.331104][ T4589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.370263][ T4589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.385261][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 157.424500][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.457696][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.509975][ T4589] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.548816][ T4589] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.586393][ T4589] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.633435][ T4589] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.013631][ T4413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.044720][ T4413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.093829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.112739][ T4884] loop1: detected capacity change from 0 to 256 [ 158.146165][ T4884] exfat: Deprecated parameter 'utf8' [ 158.151514][ T4884] exfat: Deprecated parameter 'utf8' [ 158.235175][ T4884] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 158.307875][ T4413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.341251][ T4413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.457555][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.385223][ C0] net_ratelimit: 69 callbacks suppressed [ 159.561023][ T4899] ip_tables: iptables: counters copy to user failed while replacing table [ 160.751531][ T4910] loop1: detected capacity change from 0 to 512 [ 160.821366][ T4910] EXT4-fs (loop1): Test dummy encryption mode enabled [ 160.957325][ T4910] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.108: inode has both inline data and extents flags [ 161.083744][ T4910] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.108: couldn't read orphan inode 15 (err -117) [ 161.188252][ T4910] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 161.239276][ T4914] binder: BINDER_SET_CONTEXT_MGR already set [ 161.284906][ T4914] binder: 4913:4914 ioctl 4018620d 200000000480 returned -16 [ 161.800408][ T4919] loop5: detected capacity change from 0 to 512 [ 161.907603][ T4919] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.110: inode has both inline data and extents flags [ 162.032086][ T4919] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.110: couldn't read orphan inode 15 (err -117) [ 162.125717][ T4919] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 162.325611][ T4900] loop6: detected capacity change from 0 to 40427 [ 162.380877][ T4900] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 162.414744][ T4900] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 162.467786][ T4900] F2FS-fs (loop6): invalid crc value [ 162.510094][ T4900] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 162.524875][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 162.714890][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 162.727010][ T7] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 162.765203][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.803567][ T7] usb 5-1: Product: syz [ 162.829234][ T7] usb 5-1: Manufacturer: syz [ 162.833931][ T7] usb 5-1: SerialNumber: syz [ 162.899885][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 163.311797][ T4522] EXT4-fs (loop5): unmounting filesystem. [ 163.575504][ T4938] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 164.454757][ C1] net_ratelimit: 83 callbacks suppressed [ 165.254101][ T7] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 165.299918][ T7] usb 5-1: USB disconnect, device number 2 [ 166.521956][ T4970] binder: BINDER_SET_CONTEXT_MGR already set [ 166.562513][ T4970] binder: 4969:4970 ioctl 4018620d 200000000480 returned -16 [ 167.374192][ T4979] loop4: detected capacity change from 0 to 1024 [ 167.442334][ T4979] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.563789][ T4979] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 167.614919][ T4979] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 167.861850][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 168.719721][ T4997] loop4: detected capacity change from 0 to 16 [ 168.783823][ T4997] erofs: (device loop4): mounted with root inode @ nid 36. [ 169.241431][ T5002] loop4: detected capacity change from 0 to 512 [ 169.313497][ T5002] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.128: inode has both inline data and extents flags [ 169.382211][ T5006] loop0: detected capacity change from 0 to 16 [ 169.388760][ T5002] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.128: couldn't read orphan inode 15 (err -117) [ 169.406721][ T5006] erofs: (device loop0): mounted with root inode @ nid 36. [ 169.462744][ T5002] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 169.628038][ T4981] loop1: detected capacity change from 0 to 40427 [ 169.675700][ T4981] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 169.704893][ T4981] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 169.738847][ T4981] F2FS-fs (loop1): invalid crc value [ 169.814743][ C1] net_ratelimit: 54 callbacks suppressed [ 169.841196][ T4981] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 170.167227][ T4981] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 170.185191][ T4981] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 170.289421][ T5016] loop0: detected capacity change from 0 to 512 [ 170.460511][ T5016] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.524439][ T5016] EXT4-fs (loop0): 1 truncate cleaned up [ 170.539500][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 170.539514][ T27] audit: type=1800 audit(1790524619.210:19): pid=5019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.124" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 170.567487][ T5019] syz.1.124: attempt to access beyond end of device [ 170.567487][ T5019] loop1: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 170.603260][ T5016] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 170.835023][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 170.961849][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 171.217436][ T5027] binder: BINDER_SET_CONTEXT_MGR already set [ 171.223670][ T5027] binder: 5026:5027 ioctl 4018620d 200000000480 returned -16 [ 171.522561][ T5038] loop0: detected capacity change from 0 to 1024 [ 171.551232][ T5038] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.713254][ T5038] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 171.722888][ T129] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 171.756022][ T5038] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 172.086683][ T129] usb 6-1: Using ep0 maxpacket: 16 [ 172.128967][ T129] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 172.424769][ T129] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.494864][ T129] usb 6-1: config 0 has no interface number 0 [ 172.546000][ T129] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 172.637170][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.708208][ T129] usb 6-1: Product: syz [ 172.712483][ T129] usb 6-1: Manufacturer: syz [ 172.769001][ T129] usb 6-1: SerialNumber: syz [ 172.807306][ T129] usb 6-1: config 0 descriptor?? [ 172.848550][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 173.049907][ T5031] loop5: detected capacity change from 0 to 512 [ 173.313541][ T5031] EXT4-fs (loop5): 1 truncate cleaned up [ 173.324723][ T5031] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 173.784003][ T5031] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.134: invalid indirect mapped block 234881024 (level 0) [ 173.867769][ T4326] usb 6-1: USB disconnect, device number 2 [ 174.009864][ T4275] syz-executor: attempt to access beyond end of device [ 174.009864][ T4275] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.890635][ C1] net_ratelimit: 59 callbacks suppressed [ 175.167043][ T4522] EXT4-fs (loop5): unmounting filesystem. [ 175.418031][ T5061] loop0: detected capacity change from 0 to 1024 [ 175.429473][ T5061] EXT4-fs: Ignoring removed oldalloc option [ 175.435501][ T5061] EXT4-fs: Ignoring removed oldalloc option [ 175.454714][ T5061] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 175.777103][ T5061] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 177.223092][ T5072] loop1: detected capacity change from 0 to 16 [ 177.245490][ T5072] erofs: (device loop1): mounted with root inode @ nid 36. [ 177.570807][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 177.690408][ T5076] Invalid argument reading file caps for ./file0 [ 180.415109][ C0] net_ratelimit: 42 callbacks suppressed [ 181.494922][ T5112] loop5: detected capacity change from 0 to 1024 [ 181.502695][ T5112] EXT4-fs: Ignoring removed oldalloc option [ 181.508710][ T5112] EXT4-fs: Ignoring removed oldalloc option [ 181.760919][ T5112] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 182.074123][ T5112] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 183.743135][ T4522] EXT4-fs (loop5): unmounting filesystem. [ 184.068515][ T5135] loop5: detected capacity change from 0 to 16 [ 184.079461][ T5135] erofs: (device loop5): mounted with root inode @ nid 36. [ 184.108134][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.118367][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.127767][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.148880][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.161742][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 184.169976][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.721407][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 184.934782][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 184.941712][ T26] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.993188][ T26] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.207471][ T26] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 185.216665][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.224831][ T26] usb 5-1: Product: syz [ 185.230514][ T26] usb 5-1: Manufacturer: syz [ 185.235185][ T26] usb 5-1: SerialNumber: syz [ 185.584691][ C1] net_ratelimit: 65 callbacks suppressed [ 185.707481][ T26] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 186.030688][ T26] snd-usb-audio: probe of 5-1:1.1 failed with error -71 [ 186.109029][ T26] snd-usb-audio: probe of 5-1:1.2 failed with error -71 [ 186.240549][ T26] usb 5-1: USB disconnect, device number 3 [ 186.299474][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 187.701769][ T5134] chnl_net:caif_netlink_parms(): no params data found [ 188.384789][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 189.142041][ T4412] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.281661][ T5174] loop4: detected capacity change from 0 to 1024 [ 189.293638][ T5174] EXT4-fs: Ignoring removed oldalloc option [ 189.299714][ T5174] EXT4-fs: Ignoring removed oldalloc option [ 189.383656][ T5174] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.570899][ T5174] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 190.454729][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 190.760347][ T4412] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.174694][ C1] net_ratelimit: 41 callbacks suppressed [ 191.213315][ T4412] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.313898][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 191.561909][ T4412] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.704474][ T5196] loop4: detected capacity change from 0 to 16 [ 191.714415][ T5196] erofs: (device loop4): mounted with root inode @ nid 36. [ 192.091775][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.106033][ T5134] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.136351][ T5134] device bridge_slave_0 entered promiscuous mode [ 192.225518][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.237082][ T5134] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.266111][ T5134] device bridge_slave_1 entered promiscuous mode [ 192.544749][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 192.668467][ T5134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.823960][ T5134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.191166][ T5134] team0: Port device team_slave_0 added [ 194.229681][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.236087][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.415709][ T5134] team0: Port device team_slave_1 added [ 195.110967][ T5230] loop5: detected capacity change from 0 to 512 [ 195.140707][ T5134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.156836][ T5134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.284916][ T5134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.338268][ T5230] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 195.353456][ T5230] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.403545][ T5134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.411052][ T5230] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 195.427657][ T5134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.522461][ T5134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.643624][ T4522] EXT4-fs (loop5): unmounting filesystem. [ 196.125112][ T5249] loop5: detected capacity change from 0 to 16 [ 196.135662][ T5249] erofs: (device loop5): mounted with root inode @ nid 36. [ 196.695380][ C1] net_ratelimit: 54 callbacks suppressed [ 196.942654][ T5134] device hsr_slave_0 entered promiscuous mode [ 197.026803][ T5134] device hsr_slave_1 entered promiscuous mode [ 197.043489][ T5134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.084024][ T5134] Cannot create hsr debugfs directory [ 197.181186][ T5261] loop5: detected capacity change from 0 to 512 [ 198.164685][ T5271] loop4: detected capacity change from 0 to 1024 [ 198.176882][ T5271] EXT4-fs: Ignoring removed oldalloc option [ 198.182926][ T5271] EXT4-fs: Ignoring removed oldalloc option [ 198.211244][ T5271] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 198.949797][ T5271] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 199.398814][ T4412] device hsr_slave_0 left promiscuous mode [ 199.454870][ T4412] device hsr_slave_1 left promiscuous mode [ 199.483440][ T4412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.521365][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.592116][ T4412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.610276][ T5256] loop0: detected capacity change from 0 to 40427 [ 199.646158][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.655239][ T4363] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 199.709710][ T4412] device bridge_slave_1 left promiscuous mode [ 199.729202][ T5256] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 199.771361][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.789332][ T5256] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 199.827833][ T4412] device bridge_slave_0 left promiscuous mode [ 199.848987][ T5256] F2FS-fs (loop0): invalid crc value [ 199.864339][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.876521][ T4363] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.887881][ T5256] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 199.913900][ T4363] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.000518][ T4363] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.051819][ T4363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 200.091898][ T4363] usb 2-1: SerialNumber: syz [ 200.202507][ T4363] cdc_ether 2-1:1.0: skipping garbage [ 200.220905][ T4363] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 200.308177][ T4412] device veth1_macvtap left promiscuous mode [ 200.326953][ T4412] device veth0_macvtap left promiscuous mode [ 200.351462][ T4363] usb 2-1: USB disconnect, device number 2 [ 200.402954][ T4412] device veth1_vlan left promiscuous mode [ 200.438038][ T4412] device veth0_vlan left promiscuous mode [ 200.469322][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 201.414744][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 201.420863][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 201.425584][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 201.568011][ T5296] loop0: detected capacity change from 0 to 16 [ 201.576346][ T5296] erofs: (device loop0): mounted with root inode @ nid 36. [ 201.887235][ C1] net_ratelimit: 65 callbacks suppressed [ 201.927007][ T5298] loop4: detected capacity change from 0 to 512 [ 202.029461][ T5298] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 202.091181][ T5298] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.157838][ T5298] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 202.460962][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 202.994363][ T5312] loop4: detected capacity change from 0 to 1024 [ 203.005840][ T5312] EXT4-fs: Ignoring removed oldalloc option [ 203.011843][ T5312] EXT4-fs: Ignoring removed oldalloc option [ 203.064165][ T5312] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 203.266932][ T5312] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 204.241862][ T4412] team0 (unregistering): Port device team_slave_1 removed [ 204.450801][ T5308] loop0: detected capacity change from 0 to 40427 [ 204.537990][ T4412] team0 (unregistering): Port device team_slave_0 removed [ 204.615860][ T5308] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 204.642680][ T5308] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 204.692966][ T5308] F2FS-fs (loop0): invalid crc value [ 204.762831][ T5308] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 204.896260][ T4412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.947838][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 205.068488][ T4412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.174063][ T5308] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 205.189084][ T5308] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 205.483280][ T27] audit: type=1800 audit(1790524654.150:20): pid=5323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.200" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 205.506305][ T5323] syz.0.200: attempt to access beyond end of device [ 205.506305][ T5323] loop0: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 205.740091][ T4276] syz-executor: attempt to access beyond end of device [ 205.740091][ T4276] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 206.032178][ T5331] loop1: detected capacity change from 0 to 256 [ 206.114886][ T5331] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1e94b07c, utbl_chksum : 0xe619d30d) [ 206.604063][ T4412] bond0 (unregistering): Released all slaves [ 206.670765][ T5339] loop0: detected capacity change from 0 to 16 [ 206.719765][ T5339] erofs: (device loop0): mounted with root inode @ nid 36. [ 207.018372][ C0] net_ratelimit: 42 callbacks suppressed [ 207.630745][ T5349] loop1: detected capacity change from 0 to 1024 [ 207.642472][ T5349] EXT4-fs: Ignoring removed oldalloc option [ 207.648517][ T5349] EXT4-fs: Ignoring removed oldalloc option [ 207.725759][ T5349] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 208.056924][ T5349] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 208.855109][ T4363] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 209.084878][ T4363] usb 1-1: Using ep0 maxpacket: 16 [ 209.109680][ T4363] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 209.147851][ T4363] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.205207][ T4363] usb 1-1: config 0 has no interface number 0 [ 209.253281][ T4363] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 209.325388][ T4363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.371149][ T4363] usb 1-1: Product: syz [ 209.410400][ T4363] usb 1-1: Manufacturer: syz [ 209.457838][ T4363] usb 1-1: SerialNumber: syz [ 209.502501][ T4363] usb 1-1: config 0 descriptor?? [ 209.697430][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 209.753459][ T5356] loop0: detected capacity change from 0 to 512 [ 209.816798][ T5356] EXT4-fs (loop0): 1 truncate cleaned up [ 209.822521][ T5356] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 209.955492][ T5356] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.212: invalid indirect mapped block 234881024 (level 0) [ 210.011857][ T4363] usb 1-1: USB disconnect, device number 4 [ 210.241816][ T5134] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 210.332201][ T5134] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 210.450075][ T5134] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 210.523397][ T5134] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 210.708949][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 210.763377][ T5358] loop4: detected capacity change from 0 to 40427 [ 210.848103][ T5358] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 210.854519][ T5358] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 210.965257][ T5358] F2FS-fs (loop4): invalid crc value [ 211.111137][ T5358] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 211.264922][ T4363] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 211.461320][ T5134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.504832][ T4363] usb 2-1: Using ep0 maxpacket: 16 [ 211.511881][ T4363] usb 2-1: unable to get BOS descriptor or descriptor too short [ 211.554459][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.565379][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.597485][ T5134] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.619152][ T4363] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 211.656012][ T4363] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 211.745360][ T5358] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 211.755572][ T4363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.784008][ T5358] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 211.792413][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.804402][ T4363] usb 2-1: Product: syz [ 211.808795][ T4363] usb 2-1: Manufacturer: syz [ 211.815976][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.834762][ T4363] usb 2-1: SerialNumber: syz [ 211.859800][ T4412] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.867048][ T4412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.938815][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.973845][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.103656][ T4412] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.110866][ T4412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.134691][ C0] net_ratelimit: 62 callbacks suppressed [ 212.151260][ T4363] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 212.164228][ T4363] snd-usb-audio: probe of 2-1:1.1 failed with error -71 [ 212.179595][ T4363] snd-usb-audio: probe of 2-1:1.2 failed with error -71 [ 212.205587][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.215295][ T27] audit: type=1800 audit(1790524660.890:21): pid=5392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.214" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 212.238566][ T5392] syz.4.214: attempt to access beyond end of device [ 212.238566][ T5392] loop4: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 212.255921][ T4363] usb 2-1: USB disconnect, device number 3 [ 212.305387][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.321395][ T5391] loop5: detected capacity change from 0 to 16 [ 212.346024][ T5391] erofs: (device loop5): mounted with root inode @ nid 36. [ 212.438140][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.519910][ T4292] syz-executor: attempt to access beyond end of device [ 212.519910][ T4292] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 212.572503][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.634076][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.686716][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.848355][ T5134] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 212.899580][ T5134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.918827][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.946834][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.983356][ T5399] loop0: detected capacity change from 0 to 1024 [ 212.991290][ T5399] EXT4-fs: Ignoring removed oldalloc option [ 212.997428][ T5399] EXT4-fs: Ignoring removed oldalloc option [ 213.004575][ T5399] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 213.100682][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.182588][ T5399] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 213.193311][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.205750][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.214584][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.223435][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.358236][ T5407] loop4: detected capacity change from 0 to 2048 [ 213.457365][ T5407] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 213.490402][ T5407] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.631177][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 213.774758][ T4560] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 213.862359][ T5134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.873031][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.887148][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.954734][ T14] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 213.997198][ T4560] usb 2-1: Using ep0 maxpacket: 16 [ 214.007959][ T4560] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 214.047348][ T4560] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.098875][ T4560] usb 2-1: config 0 has no interface number 0 [ 214.164905][ T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.204734][ T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.276603][ T14] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 214.319977][ T4560] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 214.329157][ T4560] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.337354][ T4560] usb 2-1: Product: syz [ 214.341558][ T4560] usb 2-1: Manufacturer: syz [ 214.346264][ T4560] usb 2-1: SerialNumber: syz [ 214.353144][ T4560] usb 2-1: config 0 descriptor?? [ 214.366773][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 214.389102][ T5424] loop0: detected capacity change from 0 to 1024 [ 214.396203][ T14] usb 5-1: SerialNumber: syz [ 214.401764][ T5424] EXT4-fs: Ignoring removed oldalloc option [ 214.407813][ T5424] EXT4-fs: Ignoring removed oldalloc option [ 214.414429][ T5424] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.452927][ T5424] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 214.578649][ T5409] loop1: detected capacity change from 0 to 512 [ 214.671368][ T5409] EXT4-fs (loop1): 1 truncate cleaned up [ 214.733233][ T14] usb 5-1: 0:2 : does not exist [ 214.742537][ T5409] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 214.814451][ T14] usb 5-1: USB disconnect, device number 4 [ 214.841896][ T5409] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.225: invalid indirect mapped block 234881024 (level 0) [ 214.877318][ T4560] usb 2-1: USB disconnect, device number 4 [ 215.084169][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 215.188724][ T4437] udevd[4437]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.412380][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 215.579990][ T5449] loop4: detected capacity change from 0 to 256 [ 215.641024][ T5449] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1e94b07c, utbl_chksum : 0xe619d30d) [ 215.645120][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 215.950675][ T5459] loop1: detected capacity change from 0 to 16 [ 215.953380][ T5459] erofs: (device loop1): mounted with root inode @ nid 36. [ 215.971441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.972397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.084905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.085946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.087154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.087931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.094535][ T5134] device veth0_vlan entered promiscuous mode [ 216.163084][ T5134] device veth1_vlan entered promiscuous mode [ 216.226496][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 216.227458][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 216.228329][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.229130][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.234581][ T5134] device veth0_macvtap entered promiscuous mode [ 216.248307][ T5134] device veth1_macvtap entered promiscuous mode [ 216.287455][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.287520][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.287532][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.287548][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.287560][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.287575][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.287590][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.287605][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.289308][ T5134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.289490][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 216.290315][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.291152][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.292072][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.316016][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.316034][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.316045][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.316068][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.316081][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.316097][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.316111][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.316126][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.317644][ T5134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.317803][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.318683][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.329517][ T5134] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.329551][ T5134] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.329581][ T5134] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.329612][ T5134] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.539606][ T4411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.539623][ T4411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.540487][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.707465][ T4424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.707483][ T4424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.716403][ T4998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.187561][ C1] net_ratelimit: 79 callbacks suppressed [ 217.209471][ T5470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'. [ 217.404863][ T5456] loop0: detected capacity change from 0 to 40427 [ 217.411935][ T5456] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 217.411960][ T5456] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 217.414097][ T5456] F2FS-fs (loop0): invalid crc value [ 217.449587][ T5456] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 217.505171][ T4326] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 218.009269][ T5456] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 218.024904][ T5456] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 218.297172][ T4326] usb 5-1: not running at top speed; connect to a high speed hub [ 218.318866][ T4326] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.409273][ T27] audit: type=1800 audit(1790524667.080:22): pid=5491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.232" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 218.431228][ T5491] syz.0.232: attempt to access beyond end of device [ 218.431228][ T5491] loop0: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 218.471937][ T4326] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 218.580608][ T4326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.721332][ T4326] gspca_main: spca501-2.14.0 probing 0000:0000 [ 218.761334][ T5490] loop5: detected capacity change from 0 to 1024 [ 218.769097][ T5490] EXT4-fs: Ignoring removed oldalloc option [ 218.775375][ T5490] EXT4-fs: Ignoring removed oldalloc option [ 218.785840][ T5490] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 218.807266][ T4276] syz-executor: attempt to access beyond end of device [ 218.807266][ T4276] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 218.895698][ T5490] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 219.027136][ T4522] EXT4-fs (loop5): unmounting filesystem. [ 219.305146][ T4326] gspca_spca501: reg write: error -110 [ 219.310921][ T4326] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 219.332479][ T4326] spca501: probe of 5-1:1.0 failed with error -22 [ 219.349789][ T5502] loop5: detected capacity change from 0 to 2048 [ 219.366551][ T4326] usb 5-1: Found UVC 1.00 device (0000:0000) [ 219.391188][ T4326] usb 5-1: No streaming interface found for terminal 2. [ 219.453864][ T5502] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 219.486904][ T5502] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.557759][ T14] usb 5-1: USB disconnect, device number 5 [ 219.770968][ T5509] loop4: detected capacity change from 0 to 256 [ 219.833853][ T5509] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 219.885788][ T4284] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 219.902451][ T5509] exFAT-fs (loop4): failed to load alloc-bitmap [ 219.929634][ T5509] exFAT-fs (loop4): failed to recognize exfat type [ 220.091959][ T4284] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.122758][ T4284] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.144838][ T4326] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 220.167583][ T4284] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 220.195029][ T4284] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 220.223527][ T4284] usb 6-1: SerialNumber: syz [ 220.223692][ T5496] loop1: detected capacity change from 0 to 40427 [ 220.285898][ T5496] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 220.305788][ T5496] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 220.330268][ T5496] F2FS-fs (loop1): invalid crc value [ 220.335539][ T4326] usb 1-1: Using ep0 maxpacket: 16 [ 220.343175][ T4326] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 220.395185][ T4326] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.421799][ T5496] F2FS-fs (loop1): Found nat_bits in checkpoint [ 220.455434][ T4326] usb 1-1: config 0 has no interface number 0 [ 220.479386][ T4284] usb 6-1: 0:2 : does not exist [ 220.492464][ T4326] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 220.542433][ T4326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.583339][ T4284] usb 6-1: USB disconnect, device number 3 [ 220.589314][ T4326] usb 1-1: Product: syz [ 220.624119][ T4326] usb 1-1: Manufacturer: syz [ 220.636513][ T4326] usb 1-1: SerialNumber: syz [ 220.686001][ T4326] usb 1-1: config 0 descriptor?? [ 220.728572][ T5496] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 220.750443][ T5496] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 220.887344][ T4434] udevd[4434]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.921171][ T5511] loop0: detected capacity change from 0 to 512 [ 221.040953][ T5511] EXT4-fs (loop0): 1 truncate cleaned up [ 221.050009][ T5511] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 221.163945][ T5511] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.241: invalid indirect mapped block 234881024 (level 0) [ 221.225700][ T4522] EXT4-fs (loop5): unmounting filesystem. [ 221.248599][ T4326] usb 1-1: USB disconnect, device number 5 [ 221.568716][ T5533] loop5: detected capacity change from 0 to 16 [ 221.616545][ T5533] erofs: (device loop5): mounted with root inode @ nid 36. [ 222.124553][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 222.294712][ C1] net_ratelimit: 61 callbacks suppressed [ 222.614731][ T5551] loop0: detected capacity change from 0 to 1024 [ 222.622335][ T5551] EXT4-fs: Ignoring removed oldalloc option [ 222.628604][ T5551] EXT4-fs: Ignoring removed oldalloc option [ 222.635249][ T5551] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 222.714446][ T5554] loop7: detected capacity change from 0 to 2048 [ 222.722907][ T5551] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 222.847485][ T5554] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 222.951752][ T5552] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 223.015260][ T5552] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 223.115954][ T5552] EXT4-fs (loop7): This should not happen!! Data will be lost [ 223.115954][ T5552] [ 223.188645][ T5552] EXT4-fs (loop7): Total free blocks count 0 [ 223.209547][ T5552] EXT4-fs (loop7): Free/Dirty block details [ 223.224809][ T5552] EXT4-fs (loop7): free_blocks=4096 [ 223.254240][ T5552] EXT4-fs (loop7): dirty_blocks=64 [ 223.265532][ T5562] loop5: detected capacity change from 0 to 128 [ 223.282144][ T5552] EXT4-fs (loop7): Block reservation details [ 223.305143][ T5552] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 223.356424][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 223.499240][ T4424] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 223.963393][ T5572] loop0: detected capacity change from 0 to 1024 [ 223.975315][ T5572] EXT4-fs: Ignoring removed oldalloc option [ 223.981353][ T5572] EXT4-fs: Ignoring removed oldalloc option [ 224.040561][ T5572] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 224.337886][ T5572] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 224.859377][ T5578] xt_hashlimit: size too large, truncated to 1048576 [ 225.619060][ T57] kworker/u4:4: attempt to access beyond end of device [ 225.619060][ T57] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 225.897869][ T5587] loop7: detected capacity change from 0 to 16 [ 226.006957][ T5587] erofs: (device loop7): mounted with root inode @ nid 36. [ 226.167953][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 227.204713][ T4329] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 227.424718][ T4329] usb 5-1: Using ep0 maxpacket: 16 [ 227.446693][ T4329] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 227.464784][ T4329] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.490847][ T4329] usb 5-1: config 0 has no interface number 0 [ 227.516150][ T4329] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 227.544707][ T4329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.573486][ T4329] usb 5-1: Product: syz [ 227.583662][ T4329] usb 5-1: Manufacturer: syz [ 227.604008][ T4329] usb 5-1: SerialNumber: syz [ 227.625828][ T4329] usb 5-1: config 0 descriptor?? [ 227.849923][ T5610] loop5: detected capacity change from 0 to 256 [ 227.925205][ T5599] loop4: detected capacity change from 0 to 512 [ 228.074454][ T27] audit: type=1800 audit(1790524676.740:23): pid=5610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.263" name="file1" dev="loop5" ino=1048624 res=0 errno=0 [ 228.135091][ C0] net_ratelimit: 63 callbacks suppressed [ 228.187060][ T5599] EXT4-fs (loop4): 1 truncate cleaned up [ 228.262195][ T5599] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 228.285786][ T5599] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.262: invalid indirect mapped block 234881024 (level 0) [ 228.384447][ T4284] usb 5-1: USB disconnect, device number 6 [ 228.738090][ T5624] loop7: detected capacity change from 0 to 1024 [ 228.745794][ T5624] EXT4-fs: Ignoring removed oldalloc option [ 228.752493][ T5624] EXT4-fs: Ignoring removed oldalloc option [ 228.866707][ T5624] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 228.918631][ T5624] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 229.430397][ T5134] EXT4-fs (loop7): unmounting filesystem. [ 229.539376][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 230.036147][ T5643] loop7: detected capacity change from 0 to 1024 [ 230.047644][ T5643] EXT4-fs: Ignoring removed oldalloc option [ 230.053666][ T5643] EXT4-fs: Ignoring removed oldalloc option [ 230.364888][ T5643] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 230.682576][ T5643] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 232.359734][ T5134] EXT4-fs (loop7): unmounting filesystem. [ 233.888737][ T5673] loop5: detected capacity change from 0 to 16 [ 233.913194][ T5673] erofs: (device loop5): mounted with root inode @ nid 36. [ 234.134680][ C0] net_ratelimit: 65 callbacks suppressed [ 234.443080][ T5649] loop4: detected capacity change from 0 to 40427 [ 234.516921][ T5661] loop7: detected capacity change from 0 to 40427 [ 234.581672][ T5661] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 234.744928][ T5661] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 234.812785][ T5661] F2FS-fs (loop7): invalid crc value [ 234.909122][ T5661] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 235.250497][ T5661] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 235.263423][ T5661] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 235.628851][ T5660] syz.7.272: attempt to access beyond end of device [ 235.628851][ T5660] loop7: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 235.704926][ T27] audit: type=1800 audit(1790524684.300:24): pid=5660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.272" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 236.087537][ T5134] syz-executor: attempt to access beyond end of device [ 236.087537][ T5134] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 236.544454][ T5680] loop0: detected capacity change from 0 to 40427 [ 236.636040][ T5680] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 236.643833][ T5680] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 236.698739][ T5703] loop1: detected capacity change from 0 to 1024 [ 236.706475][ T5703] EXT4-fs: Ignoring removed oldalloc option [ 236.712436][ T5703] EXT4-fs: Ignoring removed oldalloc option [ 236.719831][ T5703] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 236.737430][ T5680] F2FS-fs (loop0): invalid crc value [ 236.792959][ T5680] F2FS-fs (loop0): Found nat_bits in checkpoint [ 236.804811][ T5703] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 236.892943][ T5680] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 236.904736][ T5680] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 237.267018][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 237.471362][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 237.700188][ T5721] loop1: detected capacity change from 0 to 128 [ 238.243792][ T5715] loop5: detected capacity change from 0 to 40427 [ 238.309663][ T5715] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 238.351392][ T5715] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 238.410594][ T5715] F2FS-fs (loop5): invalid crc value [ 238.452006][ T5715] F2FS-fs (loop5): Found nat_bits in checkpoint [ 238.683429][ T5732] loop4: detected capacity change from 0 to 512 [ 238.770990][ T5715] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 238.801368][ T5715] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 238.832343][ T4420] kworker/u4:13: attempt to access beyond end of device [ 238.832343][ T4420] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 238.857299][ T5732] EXT4-fs (loop4): Test dummy encryption mode enabled [ 238.872457][ T5732] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.285: inode has both inline data and extents flags [ 238.888162][ T5732] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.285: couldn't read orphan inode 15 (err -117) [ 238.901330][ T5732] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 239.114208][ T5715] syz.5.282: attempt to access beyond end of device [ 239.114208][ T5715] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 239.174697][ C0] net_ratelimit: 78 callbacks suppressed [ 239.372180][ T5743] syz.5.282: attempt to access beyond end of device [ 239.372180][ T5743] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 239.606098][ T5747] syz.5.282: attempt to access beyond end of device [ 239.606098][ T5747] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 241.185059][ T5755] loop7: detected capacity change from 0 to 40427 [ 241.200186][ T5755] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 241.225203][ T5066] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 241.247165][ T5755] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 241.275364][ T5066] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 241.294529][ T5755] F2FS-fs (loop7): invalid crc value [ 241.338114][ T5755] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 241.602910][ T5777] loop0: detected capacity change from 0 to 16 [ 241.642490][ T5755] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 241.684762][ T5755] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 241.744374][ T5777] erofs: (device loop0): mounted with root inode @ nid 36. [ 242.115031][ T5782] syz.7.290: attempt to access beyond end of device [ 242.115031][ T5782] loop7: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 242.140061][ T27] audit: type=1800 audit(1790524690.760:25): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.290" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 242.679362][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 242.698238][ T5134] syz-executor: attempt to access beyond end of device [ 242.698238][ T5134] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 243.338027][ T5793] loop4: detected capacity change from 0 to 1024 [ 243.345796][ T5793] EXT4-fs: Ignoring removed oldalloc option [ 243.352096][ T5793] EXT4-fs: Ignoring removed oldalloc option [ 243.375997][ T5793] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 243.399966][ T5793] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 244.891741][ C0] net_ratelimit: 33 callbacks suppressed [ 244.916564][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 245.126643][ T5810] loop4: detected capacity change from 0 to 128 [ 245.727390][ T5815] loop1: detected capacity change from 0 to 1024 [ 245.735078][ T5815] EXT4-fs: Ignoring removed oldalloc option [ 245.741032][ T5815] EXT4-fs: Ignoring removed oldalloc option [ 245.850574][ T5815] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 245.959949][ T5815] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 246.991354][ T4420] kworker/u4:13: attempt to access beyond end of device [ 246.991354][ T4420] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 247.019838][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 247.566350][ T5832] loop1: detected capacity change from 0 to 1024 [ 247.578073][ T5832] EXT4-fs: Ignoring removed oldalloc option [ 247.584072][ T5832] EXT4-fs: Ignoring removed oldalloc option [ 247.680756][ T5832] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 247.951746][ T5832] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 249.148937][ T5846] loop5: detected capacity change from 0 to 512 [ 249.293634][ T5846] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 249.421431][ T5846] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 249.725944][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 250.052830][ T4522] EXT4-fs (loop5): unmounting filesystem. [ 250.058725][ C0] net_ratelimit: 54 callbacks suppressed [ 251.588492][ T5876] loop7: detected capacity change from 0 to 16 [ 251.843355][ T5882] loop0: detected capacity change from 0 to 1024 [ 251.844465][ T5882] EXT4-fs: Ignoring removed oldalloc option [ 251.844483][ T5882] EXT4-fs: Ignoring removed oldalloc option [ 251.854979][ T5876] erofs: (device loop7): mounted with root inode @ nid 36. [ 253.133400][ T5880] loop4: detected capacity change from 0 to 16 [ 253.145588][ T5880] erofs: (device loop4): mounted with root inode @ nid 36. [ 253.215698][ T5885] random: crng reseeded on system resumption [ 253.464170][ T5882] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 254.223804][ T5880] overlayfs: failed to get metacopy (-117) [ 254.396163][ T5882] EXT4-fs: error -4 creating inode table initialization thread [ 254.396688][ T5882] EXT4-fs (loop0): mount failed [ 255.122220][ C0] net_ratelimit: 26 callbacks suppressed [ 255.675234][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.682136][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.945383][ T5907] loop5: detected capacity change from 0 to 1024 [ 255.957103][ T5907] EXT4-fs: Ignoring removed oldalloc option [ 255.963108][ T5907] EXT4-fs: Ignoring removed oldalloc option [ 256.027277][ T5907] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 256.425235][ T5907] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 258.364826][ T4522] EXT4-fs (loop5): unmounting filesystem. [ 259.496412][ T4326] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 259.694756][ T4326] usb 1-1: Using ep0 maxpacket: 16 [ 259.702435][ T4326] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 259.761705][ T4326] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.834547][ T4326] usb 1-1: config 0 has no interface number 0 [ 259.921749][ T4326] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 259.985808][ T5915] loop4: detected capacity change from 0 to 40427 [ 260.002770][ T4326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.083716][ T4326] usb 1-1: Product: syz [ 260.091131][ T5915] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 260.125160][ C1] net_ratelimit: 75 callbacks suppressed [ 260.144844][ T4326] usb 1-1: Manufacturer: syz [ 260.155234][ T5915] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 260.162869][ T4326] usb 1-1: SerialNumber: syz [ 260.226645][ T4326] usb 1-1: config 0 descriptor?? [ 260.245986][ T5915] F2FS-fs (loop4): invalid crc value [ 260.251428][ T5915] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 260.546744][ T5932] loop0: detected capacity change from 0 to 512 [ 260.676096][ T5932] EXT4-fs (loop0): 1 truncate cleaned up [ 260.684818][ T5932] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 260.861469][ T5932] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.333: invalid indirect mapped block 234881024 (level 0) [ 261.103275][ T4284] usb 1-1: USB disconnect, device number 6 [ 261.412021][ T5931] loop1: detected capacity change from 0 to 40427 [ 261.487072][ T5958] loop5: detected capacity change from 0 to 1024 [ 261.494720][ T5958] EXT4-fs: Ignoring removed oldalloc option [ 261.500682][ T5958] EXT4-fs: Ignoring removed oldalloc option [ 261.507535][ T5958] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 261.530817][ T5931] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 261.547358][ T5931] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 261.557066][ T5931] F2FS-fs (loop1): invalid crc value [ 261.574259][ T5958] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 261.671234][ T5931] F2FS-fs (loop1): Found nat_bits in checkpoint [ 261.721436][ T4522] EXT4-fs (loop5): unmounting filesystem. [ 261.882781][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 261.921338][ T5931] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 261.949864][ T5931] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 262.921710][ T5984] random: crng reseeded on system resumption [ 265.112081][ T5981] Config c/1 of g1 needs at least one function. [ 265.156073][ T5981] udc dummy_udc.0: failed to start g1: -22 [ 265.161995][ T5981] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 265.171995][ T5981] UDC core: g1: couldn't find an available UDC or it's busy [ 265.179776][ C1] net_ratelimit: 50 callbacks suppressed [ 265.511517][ T5987] loop1: detected capacity change from 0 to 2048 [ 265.659672][ T5987] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 265.879005][ T6005] loop0: detected capacity change from 0 to 16 [ 265.932516][ T6005] erofs: (device loop0): mounted with root inode @ nid 36. [ 265.966435][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 268.115513][ T129] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 268.324728][ T129] usb 8-1: Using ep0 maxpacket: 16 [ 268.332018][ T129] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 268.361036][ T129] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.402137][ T129] usb 8-1: config 0 has no interface number 0 [ 268.417453][ T129] usb 8-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 268.447265][ T129] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.468460][ T129] usb 8-1: Product: syz [ 268.484701][ T129] usb 8-1: Manufacturer: syz [ 268.504973][ T129] usb 8-1: SerialNumber: syz [ 268.538317][ T129] usb 8-1: config 0 descriptor?? [ 268.816041][ T6019] loop7: detected capacity change from 0 to 512 [ 268.907232][ T6019] EXT4-fs (loop7): 1 truncate cleaned up [ 268.960652][ T6019] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 269.081737][ T6019] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.342: invalid indirect mapped block 234881024 (level 0) [ 269.187750][ T4324] usb 8-1: USB disconnect, device number 2 [ 269.906523][ T5134] EXT4-fs (loop7): unmounting filesystem. [ 270.214679][ C0] net_ratelimit: 41 callbacks suppressed [ 271.331897][ T6054] loop0: detected capacity change from 0 to 16 [ 271.343793][ T6054] erofs: (device loop0): mounted with root inode @ nid 36. [ 272.000034][ T6070] loop5: detected capacity change from 0 to 1024 [ 272.007750][ T6070] EXT4-fs: Ignoring removed oldalloc option [ 272.013698][ T6070] EXT4-fs: Ignoring removed oldalloc option [ 272.035452][ T6074] loop1: detected capacity change from 0 to 512 [ 272.093694][ T6070] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 272.151953][ T6074] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 272.271108][ T6070] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 272.797772][ T6083] random: crng reseeded on system resumption [ 274.149241][ T6074] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 275.128856][ T6074] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.348: bg 0: block 248: padding at end of block bitmap is not set [ 275.167864][ T6074] Quota error (device loop1): write_blk: dquota write failed [ 275.414682][ C1] net_ratelimit: 34 callbacks suppressed [ 275.557219][ T6074] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 275.720902][ T6074] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.348: Failed to acquire dquot type 1 [ 275.868156][ T6074] EXT4-fs (loop1): 1 truncate cleaned up [ 275.874056][ T6074] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 276.218612][ T6092] Config c/1 of g1 needs at least one function. [ 276.226122][ T6092] udc dummy_udc.0: failed to start g1: -22 [ 276.232046][ T6092] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 276.244475][ T6092] UDC core: g1: couldn't find an available UDC or it's busy [ 277.045834][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 277.491934][ T6100] loop0: detected capacity change from 0 to 16 [ 277.533673][ T6100] erofs: (device loop0): mounted with root inode @ nid 36. [ 277.627165][ T6100] overlayfs: failed to get metacopy (-117) [ 279.265332][ T4328] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 279.413626][ T6107] loop4: detected capacity change from 0 to 131072 [ 279.424923][ T6107] F2FS-fs (loop4): invalid crc value [ 279.452310][ T6107] F2FS-fs (loop4): Found nat_bits in checkpoint [ 279.500979][ T6107] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 279.504977][ T4328] usb 8-1: Using ep0 maxpacket: 16 [ 279.532921][ T27] audit: type=1800 audit(1790524728.200:26): pid=6107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.354" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 279.593146][ T4328] usb 8-1: unable to get BOS descriptor or descriptor too short [ 279.658601][ T4328] usb 8-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 279.697298][ T4328] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.724802][ T4328] usb 8-1: Product: syz [ 279.739330][ T4328] usb 8-1: Manufacturer: syz [ 279.764794][ T4328] usb 8-1: SerialNumber: syz [ 279.931276][ T6119] overlayfs: failed to get metacopy (-117) [ 279.937824][ T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 279.948235][ T6119] netlink: 'syz.0.353': attribute type 34 has an invalid length. [ 280.145449][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 280.156197][ T26] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 280.206994][ T26] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.278357][ T4328] usb 8-1: USB disconnect, device number 3 [ 280.288322][ T26] usb 2-1: config 0 has no interface number 0 [ 280.320245][ T26] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 280.393874][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.435411][ T26] usb 2-1: Product: syz [ 280.439694][ T26] usb 2-1: Manufacturer: syz [ 280.474695][ T26] usb 2-1: SerialNumber: syz [ 280.543929][ T26] usb 2-1: config 0 descriptor?? [ 280.803344][ T6116] loop1: detected capacity change from 0 to 512 [ 280.893040][ T6116] EXT4-fs (loop1): 1 truncate cleaned up [ 280.915213][ T6116] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 280.994650][ T6116] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.357: invalid indirect mapped block 234881024 (level 0) [ 281.119875][ T4328] usb 2-1: USB disconnect, device number 5 [ 281.174656][ C1] net_ratelimit: 51 callbacks suppressed [ 281.540112][ T6140] loop4: detected capacity change from 0 to 512 [ 281.615531][ T6140] EXT4-fs (loop4): 1 truncate cleaned up [ 281.634762][ T6140] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 281.785361][ T27] audit: type=1800 audit(1790524730.460:27): pid=6143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.362" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 281.815282][ T6140] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.362: invalid indirect mapped block 234881024 (level 0) [ 281.867075][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 282.069001][ T6126] loop7: detected capacity change from 0 to 40427 [ 282.078524][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 282.100822][ T6145] loop1: detected capacity change from 0 to 2048 [ 282.133883][ T6126] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 282.154833][ T6126] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 282.233552][ T6126] F2FS-fs (loop7): invalid crc value [ 282.245744][ T6145] loop1: p1 < > p4 [ 282.245744][ T6145] p4: [ 282.286968][ T6145] loop1: p4 size 722688 extends beyond EOD, truncated [ 282.301236][ T6126] F2FS-fs (loop7): Found nat_bits in checkpoint [ 282.319804][ T27] audit: type=1326 audit(1790524730.990:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.4.364" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69c99e159 code=0x7ffc0000 [ 282.424744][ T27] audit: type=1326 audit(1790524731.030:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.4.364" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69c99e159 code=0x7ffc0000 [ 282.580962][ T27] audit: type=1326 audit(1790524731.030:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.4.364" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa69c99e159 code=0x7ffc0000 [ 282.648171][ T6126] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 282.723715][ T6126] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 284.406453][ T4288] udevd[4288]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 284.443193][ T4437] udevd[4437]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 284.954758][ T27] audit: type=1326 audit(1790524733.590:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.4.364" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69c99e159 code=0x7ffc0000 [ 285.084490][ T27] audit: type=1326 audit(1790524733.590:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6150 comm="syz.4.364" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69c99e159 code=0x7ffc0000 [ 286.375033][ C0] net_ratelimit: 70 callbacks suppressed [ 286.844789][ T4326] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 287.008469][ T6199] loop1: detected capacity change from 0 to 512 [ 287.034842][ T4326] usb 1-1: Using ep0 maxpacket: 16 [ 287.062329][ T4326] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 287.090922][ T6199] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 287.101109][ T4326] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.124505][ T6199] EXT4-fs (loop1): orphan cleanup on readonly fs [ 287.131234][ T4326] usb 1-1: config 0 has no interface number 0 [ 287.158536][ T4326] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 287.170294][ T6199] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 287.214675][ T4326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.233572][ T6199] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 287.263927][ T4326] usb 1-1: Product: syz [ 287.284160][ T4326] usb 1-1: Manufacturer: syz [ 287.304409][ T4326] usb 1-1: SerialNumber: syz [ 287.309462][ T6199] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.376: Failed to acquire dquot type 1 [ 287.336613][ T4326] usb 1-1: config 0 descriptor?? [ 287.392858][ T6199] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.376: bg 0: block 40: padding at end of block bitmap is not set [ 287.485002][ T6199] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 287.538442][ T6199] EXT4-fs (loop1): 1 truncate cleaned up [ 287.560679][ T6199] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 287.579279][ T6188] loop0: detected capacity change from 0 to 512 [ 287.798397][ T4289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.809625][ T4289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.819488][ T4289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.828946][ T4289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.839210][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 287.847185][ T4289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.005034][ T6188] EXT4-fs (loop0): 1 truncate cleaned up [ 288.010751][ T6188] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 288.065963][ T6188] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.373: invalid indirect mapped block 234881024 (level 0) [ 288.149728][ T6055] EXT4-fs (loop5): unmounting filesystem. [ 288.187295][ T4326] usb 1-1: USB disconnect, device number 7 [ 288.987514][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 289.895004][ T4289] Bluetooth: hci5: command 0x0409 tx timeout [ 289.961622][ T6242] loop4: detected capacity change from 0 to 512 [ 290.080160][ T4396] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.104147][ T6242] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 290.174850][ T6242] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.215622][ T6208] chnl_net:caif_netlink_parms(): no params data found [ 290.335828][ T4396] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.560892][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 290.629984][ T4396] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.920654][ T4396] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.153183][ T6257] loop0: detected capacity change from 0 to 512 [ 291.177633][ T6254] loop4: detected capacity change from 0 to 2048 [ 291.188764][ T6254] ext4: Unknown parameter 'dont_appraise' [ 291.465757][ T6257] EXT4-fs (loop0): 1 orphan inode deleted [ 291.471579][ T6257] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 291.486195][ T57] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 291.549425][ T57] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 1 [ 291.619328][ T6208] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.654647][ C0] net_ratelimit: 63 callbacks suppressed [ 291.670267][ T6257] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.682549][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.732055][ T6208] device bridge_slave_0 entered promiscuous mode [ 291.801467][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.851960][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.878671][ T6208] device bridge_slave_1 entered promiscuous mode [ 291.894510][ T6267] loop4: detected capacity change from 0 to 256 [ 291.974811][ T4289] Bluetooth: hci5: command 0x041b tx timeout [ 292.250362][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 292.518599][ T6208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.666285][ T6274] random: crng reseeded on system resumption [ 293.968401][ T6208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.105137][ T4289] Bluetooth: hci5: command 0x040f tx timeout [ 294.710904][ T6208] team0: Port device team_slave_0 added [ 294.903737][ T6208] team0: Port device team_slave_1 added [ 295.362233][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.428656][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.650689][ T6293] loop0: detected capacity change from 0 to 512 [ 295.669048][ T6208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.696105][ T6293] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 295.841782][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.860273][ T6296] loop4: detected capacity change from 0 to 512 [ 295.860822][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.984831][ T6208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.137633][ T4281] Bluetooth: hci5: command 0x0419 tx timeout [ 296.353711][ T6208] device hsr_slave_0 entered promiscuous mode [ 296.393267][ T6208] device hsr_slave_1 entered promiscuous mode [ 296.417065][ T6208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.445245][ T6208] Cannot create hsr debugfs directory [ 296.717667][ T4329] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 296.868761][ C1] net_ratelimit: 52 callbacks suppressed [ 296.945321][ T4329] usb 5-1: Using ep0 maxpacket: 16 [ 296.955654][ T4329] usb 5-1: unable to get BOS descriptor or descriptor too short [ 296.994097][ T4329] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 297.054970][ T4329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.063035][ T4329] usb 5-1: Product: syz [ 297.124717][ T4329] usb 5-1: Manufacturer: syz [ 297.132014][ T4329] usb 5-1: SerialNumber: syz [ 297.166759][ T4396] device hsr_slave_0 left promiscuous mode [ 297.187912][ T4396] device hsr_slave_1 left promiscuous mode [ 297.235926][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.243418][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.282628][ T4396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.304734][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.330351][ T4396] device bridge_slave_1 left promiscuous mode [ 297.359286][ T4396] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.441604][ T4396] device bridge_slave_0 left promiscuous mode [ 297.455017][ T4396] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.551341][ T4329] usb 5-1: USB disconnect, device number 7 [ 297.842257][ T6324] loop7: detected capacity change from 0 to 1024 [ 297.877958][ T4396] device veth1_macvtap left promiscuous mode [ 297.884169][ T6324] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 297.884186][ T4396] device veth0_macvtap left promiscuous mode [ 297.924313][ T4396] device veth1_vlan left promiscuous mode [ 297.948569][ T4396] device veth0_vlan left promiscuous mode [ 297.975663][ T6324] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 298.011567][ T4434] udevd[4434]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.106762][ T6329] binder: 6328:6329 ioctl c0306201 0 returned -14 [ 298.116023][ T6329] binder_alloc: 6328: binder_alloc_buf size 12520 failed, no address space [ 298.182074][ T6329] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 298.472268][ T5134] EXT4-fs (loop7): unmounting filesystem. [ 298.494760][ T4329] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 298.808293][ T6340] Config c/1 of g1 needs at least one function. [ 298.814831][ T6340] udc dummy_udc.0: failed to start g1: -22 [ 298.820733][ T6340] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 298.831645][ T6340] UDC core: g1: couldn't find an available UDC or it's busy [ 298.847337][ T4329] usb 5-1: Using ep0 maxpacket: 16 [ 298.925929][ T4329] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 299.066934][ T4329] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.214426][ T4329] usb 5-1: config 0 has no interface number 0 [ 299.387021][ T4329] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 299.586030][ T4329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.623633][ T4329] usb 5-1: Product: syz [ 299.628208][ T4329] usb 5-1: Manufacturer: syz [ 299.632853][ T4329] usb 5-1: SerialNumber: syz [ 299.681043][ T4329] usb 5-1: config 0 descriptor?? [ 299.712723][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 299.841217][ T6344] input: syz1 as /devices/virtual/input/input5 [ 299.860077][ T6342] loop0: detected capacity change from 0 to 512 [ 299.941742][ T6332] loop4: detected capacity change from 0 to 512 [ 300.192915][ T6332] EXT4-fs (loop4): 1 truncate cleaned up [ 300.246372][ T6332] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 300.291344][ T6342] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.409: Unrecognised inode hash code 255 [ 300.423166][ T4333] usb 5-1: USB disconnect, device number 8 [ 300.458948][ T6342] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.409: Corrupt directory, running e2fsck is recommended [ 300.484013][ T6342] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 300.502516][ T6342] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.409: corrupted in-inode xattr [ 300.582944][ T6342] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.409: couldn't read orphan inode 15 (err -117) [ 300.700313][ T6342] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 300.798231][ T6342] EXT4-fs error (device loop0): __ext4_remount:6650: comm syz.0.409: Abort forced by user [ 300.891008][ T6342] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 301.039248][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 301.145701][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 301.459527][ T6363] binder: 6362:6363 ioctl c0306201 0 returned -14 [ 301.517174][ T6363] binder_alloc: 6362: binder_alloc_buf size 12520 failed, no address space [ 301.590604][ T6363] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 301.894723][ C1] net_ratelimit: 53 callbacks suppressed [ 303.720362][ T6372] Config c/1 of g1 needs at least one function. [ 303.727277][ T6372] udc dummy_udc.0: failed to start g1: -22 [ 303.733178][ T6372] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 303.744477][ T6372] UDC core: g1: couldn't find an available UDC or it's busy [ 305.316920][ T6384] loop4: detected capacity change from 0 to 512 [ 305.751140][ T6388] random: crng reseeded on system resumption [ 307.249209][ T4396] team0 (unregistering): Port device team_slave_1 removed [ 307.372978][ C1] net_ratelimit: 36 callbacks suppressed [ 307.482304][ T4396] team0 (unregistering): Port device team_slave_0 removed [ 307.836750][ T4396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.166167][ T4396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.584694][ T4328] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 308.804687][ T4328] usb 1-1: Using ep0 maxpacket: 16 [ 308.812075][ T4328] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 308.841880][ T4328] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.873974][ T4328] usb 1-1: config 0 has no interface number 0 [ 308.906697][ T4328] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 308.934700][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 308.943473][ T4328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.971972][ T4328] usb 1-1: Product: syz [ 308.976525][ T4328] usb 1-1: Manufacturer: syz [ 308.981178][ T4328] usb 1-1: SerialNumber: syz [ 308.997483][ T4328] usb 1-1: config 0 descriptor?? [ 309.242501][ T6390] loop0: detected capacity change from 0 to 512 [ 309.357302][ T6390] EXT4-fs (loop0): 1 truncate cleaned up [ 309.363117][ T6390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 309.439636][ T6390] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.423: invalid indirect mapped block 234881024 (level 0) [ 309.529068][ T6392] loop1: detected capacity change from 0 to 40427 [ 309.542801][ T4284] usb 1-1: USB disconnect, device number 8 [ 309.612890][ T6392] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 309.648767][ T6392] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 309.694375][ T6392] F2FS-fs (loop1): invalid crc value [ 309.758466][ T6392] F2FS-fs (loop1): Found nat_bits in checkpoint [ 309.888466][ T4396] bond0 (unregistering): Released all slaves [ 309.924632][ T6392] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 309.931733][ T6392] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 310.208653][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 311.231399][ T6402] binder: 6401:6402 ioctl c0306201 0 returned -14 [ 311.275181][ T6402] binder_alloc: 6401: binder_alloc_buf size 12520 failed, no address space [ 311.284430][ T6402] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 312.263392][ T6208] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 312.374297][ T6208] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 312.465659][ T6208] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 312.537151][ T6208] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 312.930509][ T6422] FAULT_INJECTION: forcing a failure. [ 312.930509][ T6422] name failslab, interval 1, probability 0, space 0, times 1 [ 313.031636][ T6208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.050374][ T6422] CPU: 0 PID: 6422 Comm: syz.0.430 Not tainted syzkaller #0 [ 313.057748][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 313.067875][ T6422] Call Trace: [ 313.071196][ T6422] [ 313.074169][ T6422] dump_stack_lvl+0x188/0x24e [ 313.078927][ T6422] ? show_regs_print_info+0x12/0x12 [ 313.084187][ T6422] ? load_image+0x410/0x410 [ 313.088748][ T6422] ? __lock_acquire+0x7c40/0x7c40 [ 313.093846][ T6422] should_fail_ex+0x390/0x4c0 [ 313.098607][ T6422] should_failslab+0x5/0x20 [ 313.103190][ T6422] slab_pre_alloc_hook+0x59/0x300 [ 313.105631][ C1] net_ratelimit: 48 callbacks suppressed [ 313.108275][ T6422] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 313.119620][ T6422] __kmem_cache_alloc_node+0x4f/0x270 [ 313.125182][ T6422] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 313.130875][ T6422] __kmalloc_node+0xa2/0x240 [ 313.135528][ T6422] memcg_alloc_slab_cgroups+0x81/0x120 [ 313.141055][ T6422] slab_post_alloc_hook+0xba/0x490 [ 313.146238][ T6422] kmem_cache_alloc_lru+0x182/0x2e0 [ 313.151494][ T6422] ? __d_alloc+0x2e/0x6e0 [ 313.155882][ T6422] __d_alloc+0x2e/0x6e0 [ 313.160103][ T6422] ? d_alloc_pseudo+0xe/0x70 [ 313.164744][ T6422] d_alloc_pseudo+0x19/0x70 [ 313.169304][ T6422] alloc_file_pseudo+0xe0/0x200 [ 313.174203][ T6422] ? alloc_empty_file_noaccount+0x80/0x80 [ 313.179979][ T6422] ? up_write+0x1b6/0x410 [ 313.184366][ T6422] anon_inode_getfile+0xc1/0x1a0 [ 313.189367][ T6422] kvm_dev_ioctl+0xe57/0x17f0 [ 313.194110][ T6422] ? hardware_enable_nolock+0x220/0x220 [ 313.199729][ T6422] ? bpf_lsm_file_ioctl+0x5/0x10 [ 313.204747][ T6422] ? security_file_ioctl+0x7c/0xa0 [ 313.209894][ T6422] ? hardware_enable_nolock+0x220/0x220 [ 313.215473][ T6422] __se_sys_ioctl+0xfa/0x170 [ 313.215510][ T6422] do_syscall_64+0x4c/0xa0 [ 313.224547][ T6422] ? clear_bhb_loop+0x60/0xb0 [ 313.224576][ T6422] ? clear_bhb_loop+0x60/0xb0 [ 313.224599][ T6422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.239971][ T6422] RIP: 0033:0x7f8bb159e159 [ 313.244439][ T6422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.264100][ T6422] RSP: 002b:00007f8bb24f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.272574][ T6422] RAX: ffffffffffffffda RBX: 00007f8bb1825fa0 RCX: 00007f8bb159e159 [ 313.280594][ T6422] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 313.288612][ T6422] RBP: 00007f8bb163506b R08: 0000000000000000 R09: 0000000000000000 [ 313.296627][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.304643][ T6422] R13: 00007f8bb1826038 R14: 00007f8bb1825fa0 R15: 00007ffdb239c398 [ 313.312677][ T6422] [ 313.389690][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.609924][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.644097][ T6208] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.015105][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 315.045749][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.315545][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.322782][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.436680][ T6440] random: crng reseeded on system resumption [ 317.042081][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 317.115253][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.122065][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.324059][ T6208] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.390671][ T6208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.018348][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 318.069978][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.189779][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.196997][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.325648][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.371614][ C0] net_ratelimit: 42 callbacks suppressed [ 318.455934][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.496357][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.528889][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.544137][ T6451] loop1: detected capacity change from 0 to 128 [ 318.553595][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.578401][ T4292] FAT-fs (loop4): error, invalid access to FAT (entry 0x8e210000) [ 318.588103][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.609162][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.617491][ T4292] FAT-fs (loop4): Filesystem has been set read-only [ 318.714909][ T6451] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 318.731549][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.775407][ T6451] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 318.816753][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.849014][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.866470][ T6455] loop0: detected capacity change from 0 to 512 [ 318.910225][ T6455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 318.919010][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.947470][ T6455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 318.959498][ T2953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.975027][ T6457] binder_alloc: 6456: binder_alloc_buf size 12520 failed, no address space [ 318.989168][ T6455] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 319.005431][ T6457] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 319.103531][ T6455] EXT4-fs (loop0): 1 truncate cleaned up [ 319.145719][ T6455] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 319.164825][ T4328] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 319.537030][ T4328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.559889][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 319.576984][ T4328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.633766][ T4328] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 319.677171][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.705319][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.715840][ T4328] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 319.751513][ T6208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.754393][ T4328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.833320][ T4328] usb 2-1: config 0 descriptor?? [ 320.267823][ T4328] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 320.297022][ T4328] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 320.365615][ T4328] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 320.623537][ T4324] usb 2-1: USB disconnect, device number 6 [ 320.783554][ T6480] fido_id[6480]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 321.331953][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 321.809110][ T4363] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 322.013731][ T4363] usb 2-1: unable to get BOS descriptor or descriptor too short [ 322.035919][ T4363] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.064795][ T4363] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.100940][ T4363] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 322.120383][ T4363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.140652][ T4363] usb 2-1: Product: syz [ 322.145228][ T4363] usb 2-1: Manufacturer: syz [ 322.149885][ T4363] usb 2-1: SerialNumber: syz [ 322.427346][ T4363] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 322.472884][ T4363] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 322.628053][ T4363] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 322.677786][ T4288] udevd[4288]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.703226][ T4363] usb 2-1: USB disconnect, device number 7 [ 323.974687][ C1] net_ratelimit: 42 callbacks suppressed [ 327.351907][ T6506] loop4: detected capacity change from 0 to 40427 [ 327.416925][ T6506] F2FS-fs (loop4): invalid crc value [ 327.495623][ T6506] F2FS-fs (loop4): Found nat_bits in checkpoint [ 327.677352][ T6506] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 327.944163][ T4292] syz-executor: attempt to access beyond end of device [ 327.944163][ T4292] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 329.014637][ C1] net_ratelimit: 38 callbacks suppressed [ 329.259871][ T6526] loop1: detected capacity change from 0 to 256 [ 329.307588][ T6526] exfat: Deprecated parameter 'namecase' [ 329.313432][ T6526] exfat: Deprecated parameter 'namecase' [ 329.409208][ T5066] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.442251][ T6526] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 329.638983][ T5066] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.853389][ T5066] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.965967][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 330.025764][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.099311][ T5066] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.147702][ T6536] binder: BINDER_SET_CONTEXT_MGR already set [ 330.192593][ T6536] binder: 6534:6536 ioctl 4018620d 200000000480 returned -16 [ 330.379835][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.108678][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.237572][ T6208] device veth0_vlan entered promiscuous mode [ 333.250887][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.315972][ T4626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 334.084865][ T4363] net_ratelimit: 30 callbacks suppressed [ 336.020495][ T6208] device veth1_vlan entered promiscuous mode [ 336.523498][ T6208] device veth0_macvtap entered promiscuous mode [ 337.688417][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 337.798052][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 338.099766][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 338.186497][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.197940][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.206530][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.217841][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.245635][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.255080][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.800793][ T6208] device veth1_macvtap entered promiscuous mode [ 338.974427][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.026934][ T6582] binder_alloc: 6581: binder_alloc_buf size 12520 failed, no address space [ 339.067232][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.095577][ T6582] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 339.101426][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.132222][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.143337][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.154393][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.171560][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.184804][ C1] net_ratelimit: 40 callbacks suppressed [ 339.207667][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.299380][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.346817][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.366547][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.381835][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.430280][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.467879][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.549080][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.559053][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.569596][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.587660][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.089112][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 342.118116][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 343.112051][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 343.154309][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 343.184678][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 343.312164][ T6593] loop0: detected capacity change from 0 to 512 [ 343.321775][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 343.454246][ T6593] EXT4-fs (loop0): Test dummy encryption mode enabled [ 344.256398][ C0] net_ratelimit: 49 callbacks suppressed [ 344.328365][ T6593] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.469: inode has both inline data and extents flags [ 345.452793][ T6593] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.469: couldn't read orphan inode 15 (err -117) [ 345.841765][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 345.874795][ T6593] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 345.968971][ T6208] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.995786][ T6208] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.004638][ T6208] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.040222][ T6208] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.319354][ T6609] loop1: detected capacity change from 0 to 256 [ 346.481778][ T6609] FAT-fs (loop1): Directory bread(block 64) failed [ 346.532897][ T6609] FAT-fs (loop1): Directory bread(block 65) failed [ 346.573041][ T6609] FAT-fs (loop1): Directory bread(block 66) failed [ 346.613691][ T6609] FAT-fs (loop1): Directory bread(block 67) failed [ 346.659141][ T6609] FAT-fs (loop1): Directory bread(block 68) failed [ 346.674867][ T6593] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 346.684809][ T6609] FAT-fs (loop1): Directory bread(block 69) failed [ 346.701594][ T6609] FAT-fs (loop1): Directory bread(block 70) failed [ 346.794663][ T6609] FAT-fs (loop1): Directory bread(block 71) failed [ 346.801349][ T6609] FAT-fs (loop1): Directory bread(block 72) failed [ 346.965099][ T6609] FAT-fs (loop1): Directory bread(block 73) failed [ 348.125532][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 349.949151][ C0] net_ratelimit: 37 callbacks suppressed [ 350.593318][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 350.765158][ T6630] binder_alloc: 6629: binder_alloc_buf size 12520 failed, no address space [ 350.797389][ T6630] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 352.086542][ T6643] loop4: detected capacity change from 0 to 512 [ 352.125184][ T6643] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 352.138334][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 352.150152][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 352.160724][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 352.177042][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 352.186417][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 352.195873][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 352.203856][ T6643] EXT4-fs (loop4): 1 truncate cleaned up [ 352.203883][ T6643] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 352.260121][ T6647] loop1: detected capacity change from 0 to 512 [ 352.299139][ T6647] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.480: Unrecognised inode hash code 255 [ 352.378983][ T6647] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.480: Corrupt directory, running e2fsck is recommended [ 352.399094][ T6647] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 352.428844][ T6647] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.480: corrupted in-inode xattr [ 352.557585][ T6647] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.480: couldn't read orphan inode 15 (err -117) [ 352.706047][ T6647] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 353.031487][ T6647] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 353.506240][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 353.628413][ T6573] chnl_net:caif_netlink_parms(): no params data found [ 354.295898][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 354.319264][ T6666] loop0: detected capacity change from 0 to 512 [ 354.351144][ T6666] EXT4-fs (loop0): Test dummy encryption mode enabled [ 354.374224][ T6668] ------------[ cut here ]------------ [ 354.380564][ T6668] WARNING: CPU: 0 PID: 6668 at mm/page_alloc.c:5634 __alloc_pages+0x2fe/0x4f0 [ 354.389832][ T6668] Modules linked in: [ 354.393808][ T6668] CPU: 0 PID: 6668 Comm: syz.1.485 Not tainted syzkaller #0 [ 354.401274][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 354.411430][ T6668] RIP: 0010:__alloc_pages+0x2fe/0x4f0 [ 354.416963][ T6668] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 cf 30 44 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff [ 354.436897][ T6668] RSP: 0018:ffffc90003b0fa20 EFLAGS: 00010246 [ 354.443338][ T6668] RAX: ffffc90003b0fa00 RBX: 1ffff92000761f48 RCX: 0000000000000000 [ 354.451405][ T6668] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90003b0fa88 [ 354.459645][ T6668] RBP: ffffc90003b0fb20 R08: ffffc90003b0fa87 R09: ffffc90003b0fa60 [ 354.467735][ T6668] R10: dffffc0000000000 R11: fffff52000761f51 R12: 000000000000000b [ 354.475819][ T6668] R13: 0000000000000000 R14: 0000000000040dc0 R15: dffffc0000000000 [ 354.483853][ T6668] FS: 00007f6fb7f266c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 354.492868][ T6668] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.499535][ T6668] CR2: 000000110c2a599b CR3: 000000002b0e9000 CR4: 00000000003506f0 [ 354.507847][ T6668] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 354.507868][ T6668] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 354.507884][ T6668] Call Trace: [ 354.516126][ T6668] [ 354.527629][ T6668] ? zone_statistics+0x170/0x170 [ 354.530765][ T6668] ? __mutex_lock+0x1ab/0xae0 [ 354.540625][ T6668] ? trace_raw_output_contention_end+0xd0/0xd0 [ 354.546946][ T6668] ? mutex_lock_nested+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 354.552215][ T6668] __kmalloc_large_node+0x8c/0x1f0 [ 354.557509][ T6668] ? max_vclocks_store+0x22e/0x3b0 [ 354.562770][ T6668] __kmalloc+0x113/0x240 [ 354.567174][ T6668] max_vclocks_store+0x22e/0x3b0 [ 354.572167][ T6668] ? read_lock_is_recursive+0x10/0x10 [ 354.577635][ T6668] ? max_vclocks_show+0x90/0x90 [ 354.582755][ T6668] ? sysfs_kf_write+0x183/0x2a0 [ 354.587812][ T6668] ? sysfs_kf_read+0x350/0x350 [ 354.592623][ T6668] kernfs_fop_write_iter+0x3a0/0x520 [ 354.598035][ T6668] vfs_write+0x482/0x9a0 [ 354.602458][ T6668] ? file_end_write+0x250/0x250 [ 354.607439][ T6668] ? __fget_files+0x3fc/0x460 [ 354.612207][ T6668] ? __fdget_pos+0x2ae/0x360 [ 354.616917][ T6668] ? ksys_write+0x70/0x260 [ 354.621406][ T6668] ksys_write+0x14d/0x260 [ 354.625851][ T6668] ? __ia32_sys_read+0x80/0x80 [ 354.630679][ T6668] ? lockdep_hardirqs_on+0x94/0x140 [ 354.636010][ T6668] do_syscall_64+0x4c/0xa0 [ 354.640482][ T6668] ? clear_bhb_loop+0x60/0xb0 [ 354.645380][ T6668] ? clear_bhb_loop+0x60/0xb0 [ 354.650120][ T6668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.656124][ T6668] RIP: 0033:0x7f6fb6f9e159 [ 354.660590][ T6668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.680310][ T6668] RSP: 002b:00007f6fb7f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 354.688828][ T6668] RAX: ffffffffffffffda RBX: 00007f6fb7225fa0 RCX: 00007f6fb6f9e159 [ 354.696935][ T6668] RDX: 0000000000000007 RSI: 0000200000000100 RDI: 0000000000000003 [ 354.705012][ T6668] RBP: 00007f6fb703506b R08: 0000000000000000 R09: 0000000000000000 [ 354.713042][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.721100][ T6668] R13: 00007f6fb7226038 R14: 00007f6fb7225fa0 R15: 00007ffccececd58 [ 354.729323][ T6668] [ 354.732411][ T6668] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 354.739723][ T6668] CPU: 0 PID: 6668 Comm: syz.1.485 Not tainted syzkaller #0 [ 354.747055][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 354.757141][ T6668] Call Trace: [ 354.760454][ T6668] [ 354.763409][ T6668] dump_stack_lvl+0x188/0x24e [ 354.768124][ T6668] ? memcpy+0x3c/0x60 [ 354.772316][ T6668] ? show_regs_print_info+0x12/0x12 [ 354.777576][ T6668] ? load_image+0x410/0x410 [ 354.782146][ T6668] panic+0x2d3/0x710 [ 354.785130][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888058c68e58 is addr:fe80::a8aa:aaff:feaa:aa16 for cmd:2 at entry:ffff88801cb63e80 [ 354.785263][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888058c68e58 is addr:fe80::16 for cmd:2 at entry:ffff88801cb63300 [ 354.785370][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888058c68e58 is addr:172.20.20.22 for cmd:2 at entry:ffff88801cb63f80 [ 354.827516][ T6668] ? bpf_jit_dump+0xd0/0xd0 [ 354.832192][ T6668] __warn+0x2f8/0x4f0 [ 354.836234][ T6668] ? __alloc_pages+0x2fe/0x4f0 [ 354.841047][ T6668] ? __alloc_pages+0x2fe/0x4f0 [ 354.845876][ T6668] report_bug+0x2ba/0x4f0 [ 354.850254][ T6668] ? __alloc_pages+0x2fe/0x4f0 [ 354.855053][ T6668] handle_bug+0x3a/0x70 [ 354.859267][ T6668] exc_invalid_op+0x16/0x40 [ 354.863813][ T6668] asm_exc_invalid_op+0x16/0x20 [ 354.868708][ T6668] RIP: 0010:__alloc_pages+0x2fe/0x4f0 [ 354.874120][ T6668] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 cf 30 44 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff [ 354.893749][ T6668] RSP: 0018:ffffc90003b0fa20 EFLAGS: 00010246 [ 354.899957][ T6668] RAX: ffffc90003b0fa00 RBX: 1ffff92000761f48 RCX: 0000000000000000 [ 354.907960][ T6668] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90003b0fa88 [ 354.915956][ T6668] RBP: ffffc90003b0fb20 R08: ffffc90003b0fa87 R09: ffffc90003b0fa60 [ 354.923974][ T6668] R10: dffffc0000000000 R11: fffff52000761f51 R12: 000000000000000b [ 354.931992][ T6668] R13: 0000000000000000 R14: 0000000000040dc0 R15: dffffc0000000000 [ 354.940037][ T6668] ? zone_statistics+0x170/0x170 [ 354.945029][ T6668] ? __mutex_lock+0x1ab/0xae0 [ 354.949773][ T6668] ? trace_raw_output_contention_end+0xd0/0xd0 [ 354.955960][ T6668] ? mutex_lock_nested+0x10/0x10 [ 354.960928][ T6668] __kmalloc_large_node+0x8c/0x1f0 [ 354.966075][ T6668] ? max_vclocks_store+0x22e/0x3b0 [ 354.971211][ T6668] __kmalloc+0x113/0x240 [ 354.975493][ T6668] max_vclocks_store+0x22e/0x3b0 [ 354.980453][ T6668] ? read_lock_is_recursive+0x10/0x10 [ 354.985863][ T6668] ? max_vclocks_show+0x90/0x90 [ 354.990760][ T6668] ? sysfs_kf_write+0x183/0x2a0 [ 354.995661][ T6668] ? sysfs_kf_read+0x350/0x350 [ 355.000465][ T6668] kernfs_fop_write_iter+0x3a0/0x520 [ 355.005803][ T6668] vfs_write+0x482/0x9a0 [ 355.010087][ T6668] ? file_end_write+0x250/0x250 [ 355.014983][ T6668] ? __fget_files+0x3fc/0x460 [ 355.019702][ T6668] ? __fdget_pos+0x2ae/0x360 [ 355.024328][ T6668] ? ksys_write+0x70/0x260 [ 355.028779][ T6668] ksys_write+0x14d/0x260 [ 355.033147][ T6668] ? __ia32_sys_read+0x80/0x80 [ 355.037947][ T6668] ? lockdep_hardirqs_on+0x94/0x140 [ 355.043176][ T6668] do_syscall_64+0x4c/0xa0 [ 355.047617][ T6668] ? clear_bhb_loop+0x60/0xb0 [ 355.052412][ T6668] ? clear_bhb_loop+0x60/0xb0 [ 355.057122][ T6668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.063055][ T6668] RIP: 0033:0x7f6fb6f9e159 [ 355.067504][ T6668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.087165][ T6668] RSP: 002b:00007f6fb7f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 355.095625][ T6668] RAX: ffffffffffffffda RBX: 00007f6fb7225fa0 RCX: 00007f6fb6f9e159 [ 355.103648][ T6668] RDX: 0000000000000007 RSI: 0000200000000100 RDI: 0000000000000003 [ 355.111654][ T6668] RBP: 00007f6fb703506b R08: 0000000000000000 R09: 0000000000000000 [ 355.119672][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.127711][ T6668] R13: 00007f6fb7226038 R14: 00007f6fb7225fa0 R15: 00007ffccececd58 [ 355.135738][ T6668] [ 355.139377][ T6668] Kernel Offset: disabled [ 355.143789][ T6668] Rebooting in 86400 seconds..