last executing test programs: 4m5.273987349s ago: executing program 3 (id=3759): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 4m5.071377568s ago: executing program 3 (id=3761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x700}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4m4.993492251s ago: executing program 3 (id=3762): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)) 4m4.831410979s ago: executing program 3 (id=3764): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x400a8, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3105099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 4m4.730873323s ago: executing program 3 (id=3765): syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r0, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}}, 0x20008841) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8201, 0x4) 4m4.258781643s ago: executing program 3 (id=3770): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000604fcff", 0x58}], 0x1) 4m3.994808215s ago: executing program 32 (id=3770): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000604fcff", 0x58}], 0x1) 3m32.952633069s ago: executing program 0 (id=3915): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10002}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 3m32.823249355s ago: executing program 0 (id=3918): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x2) r2 = dup(r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x2) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000300)={0xff, 0x7, 0xff, 0xa, 0x1, "ab5aa80d00", 0x1ff, 0xffffffc0}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xa) 3m32.047343939s ago: executing program 0 (id=3922): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c80)={@ifindex, 0xffffffffffffffff, 0x2f, 0x29}, 0x20) 3m31.930127704s ago: executing program 0 (id=3923): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='nobarrier,nls=ascii,part=0x0000000000000000,nodecompose,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00'/15, @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x44, 0x729, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044804) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x64842, 0x100) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x10000) 3m31.677629525s ago: executing program 0 (id=3924): r0 = memfd_secret(0x80000) r1 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x5, 0xc, "c44ef9682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) sendfile(r0, r1, 0x0, 0x1f00) 3m30.087295854s ago: executing program 0 (id=3929): sigaltstack(&(0x7f0000000000)={&(0x7f0000000080)=""/4096, 0x0, 0x1000}, 0x0) sigaltstack(0x0, &(0x7f0000000040)={0x0}) 3m29.857453654s ago: executing program 33 (id=3929): sigaltstack(&(0x7f0000000000)={&(0x7f0000000080)=""/4096, 0x0, 0x1000}, 0x0) sigaltstack(0x0, &(0x7f0000000040)={0x0}) 3m21.050439198s ago: executing program 5 (id=3957): openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x101a43, 0x78) pivot_root(&(0x7f0000000080)='./file0/../file0\x00', 0x0) 3m20.867472066s ago: executing program 5 (id=3958): r0 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) fcntl$addseals(r0, 0x409, 0x20) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000006c0)={0x0, 0x0, 0x9, 0xc}) 3m20.769485821s ago: executing program 5 (id=3960): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x804818, &(0x7f0000000100)={[{@check_relaxed}, {@check_strict}, {@hide}, {}, {@unhide}, {@nojoliet}, {@check_relaxed}, {@nocompress}]}, 0x2, 0x553, &(0x7f0000000b00)="$eJzs3dtuE0kawPGvQ7JYXim7WlYIRQGKsCsFKZi2DUYWV73tslNgd1vdbZRcoYg4KMKBFWGlTW7Y3LAz0sxDMJfzEPNGaB5hRn1wjj4AOU70/1lQ5e5y1deO1Z8qcVcLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQy63ZdtGSpvE6S2o4txb4rb2n2auPbJB7B4oR44pY8T/J5eRGuunG3/d2X4//m5PZ9Nms5OIiJ9t/vv7XJ9cmJ/qvHxHwV/npG3va3Np+vdLrdd+dVCAX0M2rw/c1tGdC37SchlYm9FW1UrEfLNZDVTdNHS6HkW4pN9BO5Adq3r2nitVqWenCst/xGjWnqfsbH98v2XZFPS20tROEvvfgaSF0F02zabxG0ibeHbd5HH8Qn5lIRdppKbW23uuWxx1A3Kj4JY1K4xqV7FKpWCyVipVH1UePbXvyyAb7EDnS4uQ+tPhjOsGzN3A8E1n+l6YY8aQjS6IGPlypSSC+tIbsz/Tz/z8f6JHj7s///Sx/Y2/3jCT5/1b67Naw/D8klrN7bMqWbMtrWZGe9KQr7849orN9NESLJ0ZC8cVIS5xki8q2KKlKRSpiywtZlPpU/EOsi5GmaAllWUKJRCefKFcC0eJIJL4EomReXLknSopSlaqURYmWgiyLLx3xpCE1cZJe1mQ9ed/LoqxhMe42Kg49jHz/c9eV0oijJf/j+E7y9A0cy2/9/A8AAAAAAC4tK/ntezz/n5KbSa1umto+77AAAAAAAMAJSv7yPxsXybezborF/B8AAAAAgMvGSq6xs0QkL7fT2ppYyeVS/BIAAAAAAIBLIvn7/624SNZAuS3W7nIpzP8BAAAAALgkvhu7xn7Yvmr98qsEwZS10176h7WRrM3rbFxJX3flcI9RfcaazjpJikpaTE66etbKpY12F8H8nBVr4+Kw9gJwdgP439cEcG1SfpA7aZs7q2m5mu35SzpKvm6auuD6zSdFcZzpiUgvRf95s/5fSQ7/e681beVkvdctvHzbW01i2Yl72dnIFlA8so7iiFjeJ+stJNdcDDziqeRCjGzcvCVr672u3V66mvXsbEyklYmDI36YHjHmR5lLW81lK97m+3vSMXPxmMXCsKPPoige88g/yt20zd35u2kxIIrSuChK+6MY/F4cP4ryuCjKx4wCAM7L2pgsZMmRvPsNZ7lvy+7yldn9o8ynbeZnkhPr5MyAM7o97oxuHzO7/XzkHkjDcmw87o+Hsuqn+AWfho4bNktW/BZeeb/xb7m+ubV9f31j5VX3VfdNqVSu2A9t+1FJppLDyApyDwBggP332LEG5v+xd+GxHmaz6p3Ds+os4/1t9ysFBXkpb6Unq7KQXG2QfONgYK/5fV9DWBgza80naTK9w8vCiFndn5KrHPr9lka2PRhD+Sx+FAAAnJm5MXn4S/L/wph598FcPnp2nN93tzYAAHA6dPDZykf/t4LAtF8Uq9WiEy1qFfjuMxWYWkMr40U6cBcdr6FVO/Aj3/WbceW5qelQhZ122w8iVfcD1fZDs5QsH6iyW7+HuuV4kXHDdlM7oVau70WOG6maCV3V7vyracJFHSQvDtvaNXXjOpHxPRX6ncDVBaVCrfc1NDXtRaZu4qqn2oFpOUFOPfebnZZWNR26gWlHftphfyzj1f2glXRbOO83GwCAC2Jza/v1Sq/XfXeKlYED5878UAEAQGZMlgYAAAAAAAAAAAAAAAAAAAAAABfAWVz/R+WSV/pLQV+UeKicQGXsqePDqZ+cAJyq3wMAAP//5sZO5Q==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/54, 0x36) getdents64(r0, 0xfffffffffffffffe, 0x29) 3m20.522972671s ago: executing program 5 (id=3962): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6ea, &(0x7f0000000b80)="$eJzs3c9vHGf9B/D3rNeON98qX6dNaCSKsBKpIEUkTqwUwiUGIZRDhapy6NlKnMbqJqkSF6UFQQoITkgc+gcUJN84ICTuQeHCpdx69bESUi8RQlEltGhmZ9e79jr2Jv6RwOsVjed55sfzfOYzz8x411ltgP9Zl0+neT9FLp9+/W5ZX1udb6+tzh+qV7eTlOVG0uzOUtxMigfJQrm+GJgyMN/ko+WLb376cO2zbq1ZT9X2E/39pncU8og+7tVTZuv2ZkfuObmj9rttVeHlhSRX6vmwqZ22NbRhmbRT9RwOXGeTe+PsvuX1Djz7qqfTj7+czFTPzU1mksP1k7n6naC+OzT2Ncg9MNZdDgAAAJ5Tn9w66AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+VOk+v7/op4a9TyzKXrf/z/VW1aXn0ELO97y/p7GAQAAAAAAAAD746uP8ih3c6RX7xTV3/xPVpVj+aKT/F/ey50s5XbO5G4Ws5KV3M65JDMDDU3dXVxZuX2uv2dp9J7nR+55fr+OGAAAAAAAAAD+K/08rfW//wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLOgSCa6s2o6lvyrnGcmjWbW1+Ve8vckUwcd7xiKDfV/d7oOKBwAAAB4MtNPsM//P8qj3M2R3uvjTlG+5s+Xqvp03svNrGQ5K2lnKVfr19Dlq/7G2up8e211/kY5lfXhOL7z+VhhTNUtTFS1UT2fqLZo5VqWqyVncqUK5moa3b5PJSd68QzENeDDz9fDvHRph5E167SWnf12xLsIu+f+UK3xmC1b68El/YzM1bGVex7tZqCo3qhJNmZi27PTHKrNVK1O9ns6l0b/nZ9j2+c8xaXaNr32HK7n5fH8ak9zPq5+JhqpMnG+N/rKa+bxmUi+9uc/vHW9ffOd69funH52DmkbE1ss3zgm5gcy8fJznYnmmNvPVZk43q9fzvfzw5zObN7I7SznR1nMSpbSe6NxsR7P5c+Zx2dqYaj2xnaRTNXnpXvOdhLTbL5XlRZzstr3SJZT5FauZimvVf/O51y+mQu5kIsDZ/j4lnFXx1Zd9Y2NV33vTP9lZPCnvl4Xyrvbr9fvcguPO+KtRudu6d77y7weHchrd9Q/7G91dOA6mBvI0ou97EyObHy8e+OGt9rLPn6xzXNif83UmSgvoN5TohfdS91MNKtn0eZx/rtOuV/aNzud64vvbtH+vQ31V+t5OaxWv7Ld1j2jT8XuKk/Vi5mu7yTDo6Nc91L/LjOwrrM+lrvrhp+45X7Hq3VF0btSf5Bb1QDYfKVO1b/DbWip38XLI3uZr/Y7MbBu6Pet3Eo7V/chfwA8ib+91S/O5PBU6x+tT1oft37Zut56ffq7h7516JWpTP518tvNuYlXG68Uf8rH+Wn1+h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhKd97/4J3Fdnvp9uhCY+tVQ4VWNi7ZquVDo9sp6i/02UFfz0VhOsnQkup7jnali+YY7bQ2htEtTCSpl3R+lux7fnrfaTV6m9+UheamETWqsDC05I+bG/xwzAiLnV0Xe1hoZH87LcfCqFUHeFMC9sXZlRvvnr3z/gffWL6x+PbS20s3Jy9cuDh38cJr82evLbeX5ro/DzpKYC+sP/QPOhIAAAAAAAAAAABgp0Z9MODkCyM/NDLuZzz8z0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgV1w+neb9FDk3d2aurK+tzrfLqVde37KZpNFIip8kxYNkId0pMwPNFfn9g3RG9PPR8sU3P3249tl6W83u9kmjnm/t8WuT3KunzCaZqOdPYai9K0/dXvHP3jGUCfui0+ksPF18sDv+EwAA//8BQfjb") open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) 3m19.994427065s ago: executing program 5 (id=3963): bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f00000007c0)={[{@resgid}, {@sysvgroups}, {@usrjquota}, {@sysvgroups}, {@nobh}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c65) 3m17.903170556s ago: executing program 5 (id=3974): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x40, r1, 0x5, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x6a9}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}]}, 0x40}}, 0x0) 3m17.608446099s ago: executing program 34 (id=3974): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x40, r1, 0x5, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x6a9}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}]}, 0x40}}, 0x0) 2m23.593238785s ago: executing program 6 (id=4326): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000600), 0x4) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, 0x0, 0x0) 2m18.943273708s ago: executing program 6 (id=4338): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000080)) 2m18.752514707s ago: executing program 6 (id=4339): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_to_hsr\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x4b, 0x3c, "04000787b600eca6aa0825471829a00700e5cde91eaf6df1497941f89ca551d1e71f0051669dbe000008005f19bf3852a3b32306f179db469789aefd"}}) 2m18.623331702s ago: executing program 6 (id=4341): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) 2m17.018749452s ago: executing program 6 (id=4348): rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x1, &(0x7f00000003c0)={0x18, 0x1851, 0x6}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) read$watch_queue(r2, &(0x7f0000000300)=""/176, 0xb0) 2m14.31564562s ago: executing program 6 (id=4360): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4ad00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x1040040, &(0x7f00000001c0)={[{@grpquota}, {@nodioread_nolock}, {@nolazytime}, {@stripe={'stripe', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@noacl}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x31, 0x51, 0x65, 0x31, 0x33, 0x0, 0x64], 0x2d, [0x63, 0x66, 0x32, 0x6e], 0x2d, [0x39, 0x56, 0x31, 0x33], 0x2d, [0x31, 0x64, 0x37, 0x39], 0x2d, [0x35, 0x64, 0x38, 0x31, 0x65, 0x33, 0x30, 0x63]}}}, {@flag='async'}]}, 0x1, 0x599, &(0x7f00000008c0)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x5b}], 0x1, 0x65, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m14.010688643s ago: executing program 35 (id=4360): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4ad00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x1040040, &(0x7f00000001c0)={[{@grpquota}, {@nodioread_nolock}, {@nolazytime}, {@stripe={'stripe', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@noacl}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x31, 0x51, 0x65, 0x31, 0x33, 0x0, 0x64], 0x2d, [0x63, 0x66, 0x32, 0x6e], 0x2d, [0x39, 0x56, 0x31, 0x33], 0x2d, [0x31, 0x64, 0x37, 0x39], 0x2d, [0x35, 0x64, 0x38, 0x31, 0x65, 0x33, 0x30, 0x63]}}}, {@flag='async'}]}, 0x1, 0x599, &(0x7f00000008c0)="$eJzs3U9sG1UaAPBvxnHTP9lNV9qVdlc9VLtIRarqJP0DhVN7RVSq1AMSF4gcN6rixFWcQBNFIr1XiB4QoF7KDQ4cQRw4IC4cuXIBcUaqaARS0wMYOR6HNHWKE+IYMr+fNPZ7M2N/73n8PXtGM5oAcut48yGN+E9EXE4ihjcsG4hs4fHWeqsrS+WHK0vlJBqNKz8kkUTEg5Wlcnv9JHs+EhHLEfHviPiiGHEyXX/LA+1CfWFxarxarcxm9ZG56esj9YXFU9emxycrk5WZM88+d+782XNjp8c2NvdhY2OtuL2+3vr29pu3vnrh7u0PPzq2XH57PIkLMZQt29iP3dT6TIpxYdP8s70I1kdJvxvAjhSyPG+m0r9iOApZ1nfS2Dg4DO5J84AeagxGNICcSuQ/5FT7f0Bz/7c97eX/j3sXWzsgzbirK0vlN6Idf6B1bCIOru2bHP4xeWTPpLm/eXQvG8q+tHwzIkYHBh7//ifZ92/nRnejgfTU5xdbG+rx7Z+ujz/RYfwZah87/YPa499qNv6tdohf2GL8u9xljJ9f/u69LePfHIz/doyfrMdPOsRPI+LVLuPfeenT81sta7wfcSI6x29Lnnx8eOTqtWpltPXYMcZnJ449v3X/Iw5vEb91zPbg2s/Mxv4fyNqUdtn/T778+H/LT4j/9P+fvP07ff6HIuKtLuP/48EHL2617N7N5H7zX8B2t38SxbjbZfxnLhz/Jis6aggAAAAAAAAAALsoXTuXLUlL6+U0LZVa1/D+Mw6n1Vp97uTV2vzMROuct6NRTNtnWg236kmzPpadj9uun95UP1PIAhYOrdVL5Vp1os99BwAAAAAAAAAAAAAAAAAAgD+LI5uu//+psHb9/+bbVQP71da3/Ab2O/kP+fVo/id9awew9/z+Q2415D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA9cfnSpebUeLiyVG7WJwYW5qdqr52aqNSnStPz5VK5Nnu9NFmrTVYrpXJt+vfeL6nVro/GzPyNkblKfW6kvrD4ynRtfqZ9T9FKsec9AgAAAAAAAAAAAAAAAAAAgL+eobUpSUsRxVY9TUuliL9FxNEkkqvXqpXRiPh7RHxdKA4262P9bjQAAAAAAAAAAAAAAAAAAADsM/WFxanxarUy27vCQBaqu1dFb9szsJ2VI2J5d5vRfMdtv6qYfYC93Uw5KRS6/B7mvtDHQQkAAAAAAAAAAAAAAAAAAHJqw4X3Xfqltw0CAAAAAAAAAAAAAAAAAACAXEq/TyKiOZ0Yfmpo89IDyWph7TkiXr9z5Z0b43Nzs2PN+ffX58+9m80/3Y/2A91q52kaEc08BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5TX1icGq9WK7M7LAx2sU6/+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwE78GAAD//6lQzuY=") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x5b}], 0x1, 0x65, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m11.50673107s ago: executing program 1 (id=4808): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x0) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0xa}, 0xa) 1m10.577576331s ago: executing program 1 (id=4812): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000006840)=[{{0x0, 0xffffffffffffff51, &(0x7f00000066c0)=[{&(0x7f0000005380)=""/219, 0xdb}, {0x0}, {0x0}, {0x0}, {&(0x7f0000006580)=""/134, 0x86}, {&(0x7f0000006640)=""/126, 0x7e}], 0x6}, 0x9a9}], 0x1, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) close(0x4) 1m10.319308312s ago: executing program 1 (id=4817): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000000200)) 1m9.435798991s ago: executing program 1 (id=4821): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) 1m8.366784817s ago: executing program 1 (id=4828): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x10, 0x0, 0x404}, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x2e) 1m7.830408801s ago: executing program 1 (id=4835): chdir(&(0x7f0000000540)='./cgroup\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/165, 0xa5) lseek(r0, 0xc, 0x2) getdents64(r0, &(0x7f0000000300)=""/175, 0xaf) 1m7.593097001s ago: executing program 36 (id=4835): chdir(&(0x7f0000000540)='./cgroup\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/165, 0xa5) lseek(r0, 0xc, 0x2) getdents64(r0, &(0x7f0000000300)=""/175, 0xaf) 2.842527806s ago: executing program 8 (id=5407): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300021000000000000000000000000200080008000000fd0000000000000005000600000000000a000000000000000000000000000000000000000000000100000000000000000200010000000000000000fdff80000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) 2.663513654s ago: executing program 8 (id=5408): syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x7d, 0xc9, 0xfd, 0xf, "d1250a7af86b8f13"}}}, 0x10) 2.663429444s ago: executing program 4 (id=5409): ioperm(0x0, 0x8, 0x20) bpf$BPF_BTF_LOAD(0x1e, 0x0, 0x0) 2.613306406s ago: executing program 8 (id=5410): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0x13, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@ringbuf_query={{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 2.541193519s ago: executing program 4 (id=5411): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x10000, 0x1, 0xeb}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x4) accept$inet6(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.494651331s ago: executing program 8 (id=5422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740000300000800084000"], 0xd4}}, 0x0) 2.345066068s ago: executing program 8 (id=5414): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x7, 0x3a, '\x86[*', 0x3a, 'debug_want_extra_isize', 0x3a, './bus'}, 0x3e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0\x00', {0x2, 0x4e20, @rand_addr=0x64010101}}) 2.07168537s ago: executing program 9 (id=5417): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x3, 0x174, &(0x7f0000000240)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000926300036400000000000000000003000000000500000003000000020000000900000000000002030000000d0000000000000b050000"], &(0x7f0000001f80)=""/226, 0x57, 0xe2, 0x2}, 0x28) r0 = open(&(0x7f0000000000)='./file1\x00', 0x4000, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 1.984320183s ago: executing program 8 (id=5418): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x100, 0x70bd2c, 0x25dfdc05, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0x10, 0xffff}, {0xfff2, 0xd}}}, 0x24}}, 0x4080) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1.727343025s ago: executing program 9 (id=5419): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x21880, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0x25) 1.583769571s ago: executing program 9 (id=5423): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) syz_emit_ethernet(0x2a5, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6e3c5325026f2f00fc010000000000000000000000000001fe8000000000000000000000000000bb"], 0x0) 1.511494704s ago: executing program 4 (id=5424): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$key(0xf, 0x3, 0x2) fstat(r0, &(0x7f0000001440)) 1.493388165s ago: executing program 2 (id=5425): prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f000005b000/0x4000)=nil) brk(0x200000ffc000) 1.490974635s ago: executing program 7 (id=5426): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x1c, 0x42, 0xa01, 0x0, 0x0, {0xa}, [@generic="77e44513a5"]}, 0x1c}}, 0x0) 1.419538988s ago: executing program 4 (id=5427): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe8c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x1, 0x9, 0x0, 'queue1\x00', 0x2}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000dc0)={0x3, 0x3, 0x4}) 1.419388938s ago: executing program 2 (id=5428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffff7f}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000054) 1.411241648s ago: executing program 9 (id=5429): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x10000007}, [@call={0x85, 0x0, 0x0, 0x12}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.37464597s ago: executing program 7 (id=5430): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r1 = gettid() r2 = getpid() sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) rt_tgsigqueueinfo(r2, r1, 0xb, &(0x7f0000000000)={0x2a, 0x0, 0x3}) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) 1.283044804s ago: executing program 9 (id=5431): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x3f2e}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 1.282861004s ago: executing program 2 (id=5432): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) close(r0) io_setup(0x7, &(0x7f0000000280)=0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x4c5, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x20000044}]) 1.282423254s ago: executing program 7 (id=5433): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) waitid(0x0, 0x0, 0x0, 0x8, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 1.119359311s ago: executing program 7 (id=5434): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x20000000000b5c) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3c, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x9b, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b68c1772f1c9b9320d88426bc8f139429054c85b62f2a1dfc705453bea4cabf1f5eee5a"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50) 1.119215901s ago: executing program 9 (id=5435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r2, 0x101, 0x1) getdents64(r2, 0xfffffffffffffffe, 0x29) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100f58965f1"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r5, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 1.097890702s ago: executing program 2 (id=5436): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000006a000105fefdffffffdbdf25000000000001000008000a0001000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 1.039902305s ago: executing program 4 (id=5437): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000000001d44000000000000730a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x99a, 0x0, 0x0, 0x0, 0x1000000b}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) socketpair(0x1, 0x3, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x8202) openat$tun(0xffffffffffffff9c, 0x0, 0x400001, 0x0) 798.712695ms ago: executing program 2 (id=5438): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001b00010a000000000000000007000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c9}, 0x24040800) 497.085488ms ago: executing program 2 (id=5439): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nodelalloc}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$EVIOCGABS3F(r1, 0x8018457f, 0x0) 329.391756ms ago: executing program 4 (id=5440): syz_mount_image$erofs(&(0x7f0000000440), &(0x7f0000000180)='./file0\x00', 0x10410, &(0x7f0000000480)=ANY=[], 0x1, 0x1ed, &(0x7f0000000cc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 271.466168ms ago: executing program 7 (id=5441): sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x200480, 0x0, 0x28, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000fc0)='children\x00') syz_clone(0x2020000, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f00000003c0)=""/263, 0x8f17, 0x4) 0s ago: executing program 7 (id=5442): iopl(0x3) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000300)=@base={0xf, 0x4, 0xfffffffe, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.4194: mark_inode_dirty error [ 637.741658][T15521] ext4 filesystem being mounted at /275/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 638.141075][T15536] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.4204: inode has both inline data and extents flags [ 638.188641][ T7] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 638.300072][T15536] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.4204: couldn't read orphan inode 15 (err -117) [ 638.702193][T15536] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 639.189798][T15554] set_capacity_and_notify: 4 callbacks suppressed [ 639.192238][T15554] loop4: detected capacity change from 0 to 512 [ 639.205517][ T7] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 639.226910][T15556] loop2: detected capacity change from 0 to 256 [ 639.235444][T15553] loop6: detected capacity change from 0 to 1024 [ 639.242259][ T7] smsc95xx: probe of 8-1:0.67 failed with error -71 [ 639.297883][ T7] usb 8-1: USB disconnect, device number 3 [ 639.336145][T15553] EXT4-fs (loop6): inline encryption not supported [ 639.343168][T15556] /dev/loop2: Can't open blockdev [ 639.411256][T15553] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 639.414620][T15554] EXT4-fs (loop4): 1 truncate cleaned up [ 639.424187][T15553] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 639.424187][T15553] [ 639.482116][T15554] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 639.576396][T15554] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4207: bg 0: block 465: padding at end of block bitmap is not set [ 639.716156][T15554] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 639.834754][T15554] EXT4-fs (loop4): This should not happen!! Data will be lost [ 639.834754][T15554] [ 639.916166][T15577] loop1: detected capacity change from 0 to 256 [ 639.923335][T15554] EXT4-fs (loop4): Total free blocks count 0 [ 639.929713][T15554] EXT4-fs (loop4): Free/Dirty block details [ 640.015588][T15577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 640.249391][T15554] EXT4-fs (loop4): free_blocks=0 [ 640.526219][T15577] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.612772][T15554] EXT4-fs (loop4): dirty_blocks=65 [ 640.925287][T15554] EXT4-fs (loop4): Block reservation details [ 640.931466][T15554] EXT4-fs (loop4): i_reserved_data_blocks=65 [ 640.961431][ T4548] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 63 with error 28 [ 641.020441][ T4548] EXT4-fs (loop4): This should not happen!! Data will be lost [ 641.020441][ T4548] [ 641.056028][T15601] loop6: detected capacity change from 0 to 128 [ 641.139050][T15601] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 641.224197][T15601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 641.246066][T15608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4221'. [ 641.278710][T15608] netlink: 'syz.1.4221': attribute type 8 has an invalid length. [ 641.861423][T15632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4233'. [ 642.885836][T15660] loop6: detected capacity change from 0 to 256 [ 644.319069][T15660] exfat: Unknown parameter 'sys_tz' [ 644.399434][T15667] print_req_error: 39 callbacks suppressed [ 644.399454][T15667] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 644.465992][T15667] EXT4-fs (loop9): unable to read superblock [ 644.587298][T15674] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4245'. [ 644.777005][T15682] loop7: detected capacity change from 0 to 8 [ 644.869616][T15682] SQUASHFS error: lzo decompression failed, data probably corrupt [ 644.877933][T15687] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 644.897987][T15682] SQUASHFS error: Failed to read block 0x91: -5 [ 644.918617][T15682] SQUASHFS error: Unable to read metadata cache entry [8f] [ 644.955766][T15682] SQUASHFS error: Unable to read inode 0x11f [ 645.086202][T15694] loop6: detected capacity change from 0 to 512 [ 645.131603][T15695] loop1: detected capacity change from 0 to 2048 [ 645.160023][ T26] audit: type=1326 audit(1777914906.508:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15699 comm="syz.7.4254" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f784163bdd9 code=0x0 [ 645.250008][T15694] EXT4-fs (loop6): 1 truncate cleaned up [ 645.294892][T15694] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 645.339426][T15695] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,dioread_lock,,errors=continue. Quota mode: none. [ 645.397759][T15695] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.521446][T15715] loop4: detected capacity change from 0 to 512 [ 645.692500][ T26] audit: type=1326 audit(1777914906.994:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz.6.4256" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b77d28dd9 code=0x7ffc0000 [ 645.727816][T15715] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 645.731256][ T26] audit: type=1326 audit(1777914906.994:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz.6.4256" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0b77d28dd9 code=0x7ffc0000 [ 645.818209][ T26] audit: type=1326 audit(1777914907.116:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz.6.4256" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0b77d28dd9 code=0x7ffc0000 [ 645.852211][T15715] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.982213][ T26] audit: type=1326 audit(1777914907.088:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz.6.4256" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b77d28dd9 code=0x7ffc0000 [ 646.051967][ T26] audit: type=1326 audit(1777914907.134:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz.6.4256" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b77d28dd9 code=0x7ffc0000 [ 646.192968][ T26] audit: type=1326 audit(1777914907.200:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz.6.4256" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0b77d28dd9 code=0x7ffc0000 [ 646.322901][T15750] xt_hashlimit: max too large, truncated to 1048576 [ 646.475494][T15757] loop6: detected capacity change from 0 to 512 [ 646.593998][T15757] EXT4-fs (loop6): Ignoring removed bh option [ 646.754048][T15766] loop7: detected capacity change from 0 to 512 [ 646.965542][T15766] EXT4-fs (loop7): 1 truncate cleaned up [ 646.971520][T15766] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 647.598277][ T26] audit: type=1326 audit(1777914908.790:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15772 comm="syz.1.4275" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9df74dd9 code=0x7ffc0000 [ 647.637155][T15703] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 647.657801][T15757] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 647.723124][ T26] audit: type=1326 audit(1777914908.837:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15772 comm="syz.1.4275" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9df74dd9 code=0x7ffc0000 [ 647.749609][T15757] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 647.760678][ T26] audit: type=1326 audit(1777914908.837:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15772 comm="syz.1.4275" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9df74dd9 code=0x7ffc0000 [ 648.967463][T15780] loop4: detected capacity change from 0 to 1024 [ 649.192431][T15780] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 649.192431][T15780] [ 649.299221][T15793] loop6: detected capacity change from 0 to 16 [ 649.416458][T15793] erofs: (device loop6): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 651.106868][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 651.113676][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 651.703235][T15844] loop0: Can't mount, would change RO state [ 652.598392][ T4176] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 652.630934][T15851] loop6: detected capacity change from 0 to 512 [ 652.735411][T15851] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.4302: inode has both inline data and extents flags [ 652.781528][T15851] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.4302: couldn't read orphan inode 15 (err -117) [ 652.786022][T15857] loop2: detected capacity change from 0 to 512 [ 652.864489][T15851] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 653.037942][ T4176] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.049317][T15869] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #2: comm syz.6.4302: No space for directory leaf checksum. Please run e2fsck -D. [ 653.080873][ T4176] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.123152][ T4176] usb 2-1: config 0 interface 0 has no altsetting 0 [ 653.142646][T15869] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #2: comm syz.6.4302: Directory block failed checksum [ 653.155246][ T4176] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 654.486820][ T4176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.510979][ T4176] usb 2-1: config 0 descriptor?? [ 654.579782][ T4176] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 654.887332][ T4176] usbhid 2-1:0.0: can't add hid device: -71 [ 654.893609][ T4176] usbhid: probe of 2-1:0.0 failed with error -71 [ 654.944830][ T4176] usb 2-1: USB disconnect, device number 14 [ 655.172539][T15893] loop6: detected capacity change from 0 to 1024 [ 655.272709][T15893] hfsplus: failed to load catalog file [ 659.247432][T15937] loop2: detected capacity change from 0 to 256 [ 659.318616][T15942] loop7: detected capacity change from 0 to 512 [ 659.549510][T15942] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 659.633904][T15942] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 659.838086][T15954] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 659.919389][T15954] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 22 with max blocks 394 with error 28 [ 660.062777][T15954] EXT4-fs (loop7): This should not happen!! Data will be lost [ 660.062777][T15954] [ 660.084547][T15959] loop2: detected capacity change from 0 to 512 [ 660.256429][T15954] EXT4-fs (loop7): Total free blocks count 0 [ 660.307316][T15954] EXT4-fs (loop7): Free/Dirty block details [ 660.313324][T15954] EXT4-fs (loop7): free_blocks=65280 [ 661.654474][T15954] EXT4-fs (loop7): dirty_blocks=1018 [ 661.698763][T15954] EXT4-fs (loop7): Block reservation details [ 661.704864][T15954] EXT4-fs (loop7): i_reserved_data_blocks=1023 [ 663.470322][T13046] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 21 with error 28 [ 663.519740][T13046] EXT4-fs (loop7): This should not happen!! Data will be lost [ 663.519740][T13046] [ 663.867414][T15989] netlink: 108 bytes leftover after parsing attributes in process `syz.7.4333'. [ 664.418663][T16011] loop6: detected capacity change from 0 to 512 [ 664.428655][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4330'. [ 664.472932][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4330'. [ 664.693211][T16011] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 665.394929][T16011] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 666.365917][T14534] __quota_error: 5 callbacks suppressed [ 666.366029][T14534] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 666.551965][T14534] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 666.604532][T14534] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz-executor: Failed to acquire dquot type 0 [ 666.787151][T16050] loop7: detected capacity change from 0 to 512 [ 666.803754][T16048] loop2: detected capacity change from 0 to 164 [ 666.858080][T16050] EXT4-fs (loop7): Ignoring removed oldalloc option [ 666.892370][T16050] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 667.226292][T16050] EXT4-fs (loop7): 1 truncate cleaned up [ 667.232308][T16050] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x000000000000007c,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 669.131082][ T4302] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.429144][ T4302] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.642427][ T4302] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.767434][ T4302] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.917212][T16124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4358'. [ 671.640156][T16131] loop7: detected capacity change from 0 to 764 [ 671.661004][ T4264] Bluetooth: hci4: command 0x0409 tx timeout [ 671.828791][T16131] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 671.887674][T16131] Symlink component flag not implemented [ 671.911706][T16131] Symlink component flag not implemented [ 671.933497][T16131] Symlink component flag not implemented (128) [ 671.955018][T16131] Symlink component flag not implemented (122) [ 671.968853][T16099] chnl_net:caif_netlink_parms(): no params data found [ 672.409961][T16099] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.505523][T16099] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.514341][T16099] device bridge_slave_0 entered promiscuous mode [ 672.581013][T16099] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.622833][T16099] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.631206][T16099] device bridge_slave_1 entered promiscuous mode [ 673.379931][T16099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.855809][T16179] loop7: detected capacity change from 0 to 512 [ 673.873772][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 673.894058][T16099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.943983][T16179] EXT4-fs (loop7): Ignoring removed bh option [ 673.988956][T16099] team0: Port device team_slave_0 added [ 674.061264][T16099] team0: Port device team_slave_1 added [ 674.109607][T16179] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 674.130449][T16179] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 674.165570][T16099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.260806][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.368376][T16099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.452764][T16195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4375'. [ 674.483074][T16195] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4375'. [ 674.533755][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4375'. [ 674.580099][T16099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.587649][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.727536][T16099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.033682][T16099] device hsr_slave_0 entered promiscuous mode [ 675.239208][T16099] device hsr_slave_1 entered promiscuous mode [ 676.100032][T16244] netlink: 'syz.4.4401': attribute type 3 has an invalid length. [ 676.130958][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 676.168424][ T4302] device hsr_slave_0 left promiscuous mode [ 676.184179][ T4302] device hsr_slave_1 left promiscuous mode [ 676.235033][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.247259][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.301091][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.338959][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.373777][ T4302] device bridge_slave_1 left promiscuous mode [ 676.396750][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.421127][ T4302] device bridge_slave_0 left promiscuous mode [ 676.440455][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.484924][ T4302] device veth1_macvtap left promiscuous mode [ 676.502170][ T4302] device veth0_macvtap left promiscuous mode [ 676.517039][ T4302] device veth1_vlan left promiscuous mode [ 676.537833][ T4302] device veth0_vlan left promiscuous mode [ 677.825913][ T4302] team0 (unregistering): Port device team_slave_1 removed [ 677.843929][ T4302] team0 (unregistering): Port device team_slave_0 removed [ 677.860018][ T4302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.876422][ T4302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.956895][ T4302] bond0 (unregistering): Released all slaves [ 678.010754][T16256] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4405'. [ 678.033877][T16256] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.043659][T16256] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.052580][T16256] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.061551][T16256] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.072479][T16256] device vxlan0 entered promiscuous mode [ 678.300412][T16099] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 678.321121][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 678.323491][T16099] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 678.366287][ T21] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 678.389193][T16099] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 678.405190][T16099] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 678.585429][T16099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.611132][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 678.633124][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 678.891542][T16099] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.919889][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.931364][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 678.939765][ T21] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 678.952313][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 679.043258][T16302] loop7: detected capacity change from 0 to 1024 [ 679.078608][ T4548] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.085896][ T4548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.240822][T16302] hfsplus: found bad thread record in catalog [ 679.247469][T16302] hfsplus: b-tree write err: -5, ino 19 [ 679.654105][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 679.707731][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 679.717262][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.727364][ T21] usb 3-1: config 0 descriptor?? [ 679.792744][T16306] netlink: 182 bytes leftover after parsing attributes in process `syz.1.4415'. [ 679.796715][ T4548] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.810572][ T4548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.889085][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 679.905041][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 679.950634][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 680.095058][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 680.296886][T16319] usb 3-1: USB disconnect, device number 23 [ 680.606992][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 680.807469][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 680.836265][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 680.897174][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 680.956677][T14581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 680.986748][T14581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 681.039350][T14581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 681.083979][T16325] loop4: detected capacity change from 0 to 2048 [ 681.084436][T11459] udevd[11459]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.091743][T14581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 681.220905][T16339] kvm: emulating exchange as write [ 681.232789][T15464] loop4: p2 < > p3 < p5 > p4 [ 681.237740][T15464] loop4: partition table partially beyond EOD, truncated [ 681.254692][T16099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 681.280254][T15464] loop4: p2 start 4278190080 is beyond EOD, truncated [ 681.338981][T15464] loop4: p4 size 8192 extends beyond EOD, truncated [ 681.355353][T15464] loop4: p5 size 8192 extends beyond EOD, truncated [ 681.443671][T16325] loop4: p2 < > p3 < p5 > p4 [ 681.459028][T16325] loop4: partition table partially beyond EOD, truncated [ 681.510790][T16325] loop4: p2 start 4278190080 is beyond EOD, truncated [ 681.781201][T16325] loop4: p4 size 8192 extends beyond EOD, truncated [ 682.412967][T16325] loop4: p5 size 8192 extends beyond EOD, truncated [ 682.500219][T16356] loop2: detected capacity change from 0 to 2048 [ 682.555552][ T3559] loop4: p2 < > p3 < p5 > p4 [ 682.560575][ T3559] loop4: partition table partially beyond EOD, truncated [ 682.597985][ T3559] loop4: p2 start 4278190080 is beyond EOD, truncated [ 682.648957][ T3559] loop4: p4 size 8192 extends beyond EOD, truncated [ 682.673071][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 682.692642][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 682.788611][T16099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.159192][ T3559] loop4: p5 size 8192 extends beyond EOD, truncated [ 684.271979][T16409] loop1: detected capacity change from 0 to 128 [ 684.373044][T16409] FAT-fs (loop1): invalid media value (0x00) [ 684.379320][T16409] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 684.443403][T16409] FAT-fs (loop1): Can't find a valid FAT filesystem [ 684.616626][T16409] loop1: detected capacity change from 0 to 512 [ 684.673878][T13046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 684.695344][T13046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 684.727175][T16409] EXT4-fs (loop1): 1 truncate cleaned up [ 684.735629][T16409] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 684.763403][ T26] audit: type=1800 audit(1777914943.549:425): pid=16409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4444" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 684.834593][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 684.865393][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 684.923644][T16099] device veth0_vlan entered promiscuous mode [ 684.949219][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 684.980330][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 685.035838][T11459] udevd[11459]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 685.050176][T16099] device veth1_vlan entered promiscuous mode [ 685.057114][T15464] udevd[15464]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 685.059825][T15466] udevd[15466]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 685.157861][T16448] netlink: 'syz.7.4456': attribute type 12 has an invalid length. [ 685.190949][T16448] netlink: 'syz.7.4456': attribute type 29 has an invalid length. [ 685.239631][T16448] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4456'. [ 685.438554][T16448] netlink: 'syz.7.4456': attribute type 1 has an invalid length. [ 685.740295][T16448] netlink: 'syz.7.4456': attribute type 2 has an invalid length. [ 685.812435][T16448] netlink: 11 bytes leftover after parsing attributes in process `syz.7.4456'. [ 685.909497][T14581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 685.944648][T14581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 686.021850][T14581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 686.111923][T14581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 686.190601][T16099] device veth0_macvtap entered promiscuous mode [ 686.223214][T14581] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 686.276209][T16099] device veth1_macvtap entered promiscuous mode [ 686.317847][T16472] loop7: detected capacity change from 0 to 1024 [ 686.348350][T11459] udevd[11459]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 686.363097][T15466] udevd[15466]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 686.395016][T15464] udevd[15464]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 686.453878][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.497116][T16475] 9pnet: Insufficient options for proto=fd [ 686.534987][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.594822][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.646711][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.657121][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.668275][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.678655][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.689973][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.700609][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.745072][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.755400][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.800996][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.834187][T16099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.855025][T16472] EXT4-fs (loop7): bad geometry: bigalloc file system with non-zero first_data_block [ 686.855025][T16472] [ 686.875336][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 686.918776][T15466] udevd[15466]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 686.931428][T15464] udevd[15464]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 686.942915][T11459] udevd[11459]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 686.958779][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 687.015187][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.081310][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.113582][T16490] loop4: detected capacity change from 0 to 128 [ 687.164924][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.213003][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.229992][T16490] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 687.258434][T16490] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 687.282334][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.293192][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.304016][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.315212][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.355002][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.513158][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.588172][T16099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.619807][T16099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.784069][T16099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.154912][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 688.208601][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 689.571113][T16099] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.602311][T16099] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.663625][T16099] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.673173][T16099] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.864193][T16520] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4476'. [ 689.955059][T16524] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4478'. [ 690.029160][ T4211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.065251][ T4211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.153000][T14581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 690.182782][T14581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.215341][T14581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.242327][T14581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 690.331279][T16536] loop7: detected capacity change from 0 to 512 [ 690.449930][T16536] EXT4-fs (loop7): Ignoring removed nobh option [ 690.528919][T16542] loop8: detected capacity change from 0 to 256 [ 690.554131][T16536] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 690.603763][T16536] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 691.070116][T16568] device lo entered promiscuous mode [ 691.109689][T16568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 691.294005][T16579] loop1: detected capacity change from 0 to 256 [ 691.380247][T16579] exfat: Unknown parameter 'keep_last_dots' [ 692.106943][T16630] netlink: 'syz.1.4511': attribute type 3 has an invalid length. [ 692.189099][T16636] loop4: detected capacity change from 0 to 512 [ 692.239601][T16641] loop1: detected capacity change from 0 to 1024 [ 692.289474][T16636] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 692.339672][T16636] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.4512: invalid indirect mapped block 83886080 (level 1) [ 692.375914][T16641] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 692.411365][T16636] EXT4-fs (loop4): Remounting filesystem read-only [ 692.441221][T16636] EXT4-fs (loop4): 1 orphan inode deleted [ 692.475946][T16636] EXT4-fs (loop4): 1 truncate cleaned up [ 692.482299][T16636] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000000000,block_validity,quota,. Quota mode: writeback. [ 692.614411][ T4511] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 692.892726][ T4511] usb 9-1: Using ep0 maxpacket: 32 [ 694.412789][ T4511] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.485897][ T4511] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 694.520464][ T4511] usb 9-1: New USB device found, idVendor=0403, idProduct=6040, bcdDevice= 4.00 [ 694.556666][ T4511] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.575314][T16682] loop1: detected capacity change from 0 to 512 [ 694.586566][ T4511] usb 9-1: config 0 descriptor?? [ 694.638666][ T4511] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 694.721431][T16682] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 694.758178][ T26] audit: type=1800 audit(1777914952.894:426): pid=16682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4528" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 694.936256][ T21] usb 9-1: USB disconnect, device number 2 [ 695.768848][T16718] loop8: detected capacity change from 0 to 512 [ 695.852150][T16718] EXT4-fs (loop8): Ignoring removed oldalloc option [ 695.876048][T16718] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 695.990512][T16718] EXT4-fs (loop8): 1 truncate cleaned up [ 696.029638][T16718] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,data=journal,noload,oldalloc,,errors=continue. Quota mode: none. [ 696.490567][T16746] loop1: detected capacity change from 0 to 1024 [ 698.342624][ T4233] Bluetooth: hci1: command 0x2016 tx timeout [ 698.667386][ T26] audit: type=1326 audit(1777914956.561:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16770 comm="syz.2.4553" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 698.750902][ T26] audit: type=1326 audit(1777914956.561:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16770 comm="syz.2.4553" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 698.781839][T16775] loop7: detected capacity change from 0 to 1024 [ 698.848300][ T26] audit: type=1326 audit(1777914956.608:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16770 comm="syz.2.4553" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 698.921309][T16775] EXT4-fs (loop7): Ignoring removed orlov option [ 698.941771][T16775] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 698.974592][ T26] audit: type=1326 audit(1777914956.608:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16770 comm="syz.2.4553" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 699.022539][T16777] loop4: detected capacity change from 0 to 8192 [ 699.037681][T16775] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 699.044023][ T26] audit: type=1326 audit(1777914956.608:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16770 comm="syz.2.4553" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 699.087435][ T26] audit: type=1326 audit(1777914956.608:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16770 comm="syz.2.4553" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 699.113259][ T26] audit: type=1326 audit(1777914956.608:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16770 comm="syz.2.4553" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 699.156932][ T26] audit: type=1326 audit(1777914956.608:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16770 comm="syz.2.4553" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 699.182996][ T26] audit: type=1326 audit(1777914956.813:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16779 comm="syz.2.4556" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 699.225463][T16777] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 699.725676][T16794] loop8: detected capacity change from 0 to 4096 [ 699.996604][T16812] xt_CT: No such helper "pptp" [ 700.437510][T16833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4569'. [ 700.468944][T16833] netlink: 'syz.4.4569': attribute type 1 has an invalid length. [ 700.522936][T16794] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 700.525890][T16833] netlink: 'syz.4.4569': attribute type 2 has an invalid length. [ 700.556002][T16794] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 700.574093][T16836] loop7: detected capacity change from 0 to 1024 [ 700.590185][T16319] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 700.601103][T16794] System zones: 0-5 [ 700.621490][T16833] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4569'. [ 700.642339][T16836] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 700.674519][T16794] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,journal_ioprio=0x0000000000000002,nouid32,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 700.717908][T16836] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 700.778121][T16836] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 700.787495][T16794] EXT4-fs (loop8): Online defrag not supported with bigalloc [ 700.851022][T16836] System zones: 0-1, 3-36 [ 700.910610][T16836] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 700.985329][T16319] usb 2-1: config 0 has an invalid interface number: 182 but max is 1 [ 701.005690][T16319] usb 2-1: config 0 has no interface number 1 [ 701.053508][T16319] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 701.098110][T16319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.146673][T16319] usb 2-1: config 0 descriptor?? [ 701.445470][ T4234] usb 2-1: USB disconnect, device number 15 [ 702.855331][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 702.855347][ T26] audit: type=1326 audit(1777914960.471:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16904 comm="syz.1.4591" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9df74dd9 code=0x7ffc0000 [ 702.971950][ T26] audit: type=1326 audit(1777914960.508:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16904 comm="syz.1.4591" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb9df74dd9 code=0x7ffc0000 [ 703.162903][T16917] loop4: detected capacity change from 0 to 512 [ 703.215125][T16922] 9pnet: p9_errstr2errno: server reported unknown error @0xffffffffffffffff [ 703.410135][T16917] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 703.455373][T16932] loop1: detected capacity change from 0 to 512 [ 703.508002][T16917] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.4595: Unimplemented hash flags: 0x0001 [ 703.585271][T16917] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.4595: Corrupt directory, running e2fsck is recommended [ 703.730909][T16932] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 703.938853][T16949] loop4: detected capacity change from 0 to 1024 [ 704.029532][T16954] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 704.084188][T16949] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 704.242653][T16954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 704.304941][T16966] loop8: detected capacity change from 0 to 128 [ 704.378450][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 704.452495][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 704.491971][T16969] loop4: detected capacity change from 0 to 1024 [ 704.494752][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 704.539727][T16969] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 704.539727][T16969] [ 704.626452][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 704.641968][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 704.698633][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 704.700798][T16978] loop7: detected capacity change from 0 to 2048 [ 704.805876][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 704.815737][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 704.825656][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 704.846582][T16983] loop4: detected capacity change from 0 to 256 [ 704.855025][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 704.879598][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 704.904218][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 704.918137][T16983] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 704.921620][T16978] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 704.945382][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 704.996544][T16978] UDF-fs: error (device loop7): udf_read_inode: (ino 1345) failed !bh [ 705.007430][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.047867][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.087578][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.118429][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.118473][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.118643][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.118681][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.118705][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.118729][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.118751][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.118776][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.118799][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.118822][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.118849][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.121191][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.121224][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.121248][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.121271][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.121295][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.121319][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.121343][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.121366][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.147848][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.147888][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.147914][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.147938][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.147962][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.147985][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.148008][T16966] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 705.148190][ T26] audit: type=1800 audit(1777914962.622:439): pid=16966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4610" name="file1" dev="loop8" ino=1048706 res=0 errno=0 [ 705.454273][T16997] loop8: detected capacity change from 0 to 1024 [ 705.812605][ T26] audit: type=1326 audit(1777914963.240:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.8.4620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992a10edd9 code=0x7ffc0000 [ 705.827224][ T26] audit: type=1326 audit(1777914963.249:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.8.4620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f992a10edd9 code=0x7ffc0000 [ 705.838869][ T26] audit: type=1326 audit(1777914963.268:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.8.4620" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992a10edd9 code=0x7ffc0000 [ 705.905920][T17017] loop1: detected capacity change from 0 to 256 [ 707.273503][T17056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4636'. [ 707.302219][T17046] loop8: detected capacity change from 0 to 8192 [ 707.439960][T17046] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 707.458730][T17046] UDF-fs: Scanning with blocksize 512 failed [ 707.496255][T17046] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 707.515154][T17046] UDF-fs: Scanning with blocksize 1024 failed [ 707.574185][T17046] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 707.589960][T17059] loop4: detected capacity change from 0 to 2048 [ 707.640418][T17046] UDF-fs: Scanning with blocksize 2048 failed [ 707.714506][T17046] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 707.900942][T17074] 9pnet: Insufficient options for proto=fd [ 708.008867][T17059] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 710.082097][T17116] loop8: detected capacity change from 0 to 1024 [ 710.175332][T17116] EXT4-fs (loop8): Ignoring removed nobh option [ 710.213879][T17122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 710.213994][T17116] EXT4-fs (loop8): inline encryption not supported [ 710.243117][T17122] device batadv_slave_0 entered promiscuous mode [ 710.250552][T17116] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 710.283872][T17122] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 710.287287][T17116] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 710.287287][T17116] [ 712.539245][T17145] loop8: detected capacity change from 0 to 764 [ 712.822093][T17145] rock: directory entry would overflow storage [ 712.851068][T17145] rock: sig=0x4654, size=5, remaining=4 [ 712.896927][T17147] loop1: detected capacity change from 0 to 512 [ 712.905908][T17145] isofs: Unable to find the ".." directory for NFS. [ 712.962122][T17147] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 713.053016][T17154] netlink: 'syz.2.4669': attribute type 1 has an invalid length. [ 713.082163][T17147] EXT4-fs (loop1): 1 truncate cleaned up [ 713.108368][T17147] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 713.132159][ T26] audit: type=1800 audit(1777914970.087:443): pid=17147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4667" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 713.230279][ T26] audit: type=1800 audit(1777914970.087:444): pid=17147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4667" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 713.238641][T17160] loop4: detected capacity change from 0 to 512 [ 713.343563][T17160] EXT4-fs (loop4): Ignoring removed bh option [ 713.414523][T17160] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 713.496128][T17160] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 713.935447][T17183] loop1: detected capacity change from 0 to 256 [ 714.022213][T17183] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 714.070922][T16319] Bluetooth: hci2: command 0x0406 tx timeout [ 714.140311][T17187] loop8: detected capacity change from 0 to 128 [ 715.317374][T17212] loop7: detected capacity change from 0 to 128 [ 715.408170][T17212] EXT4-fs (loop7): Test dummy encryption mode enabled [ 715.459773][T17212] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 715.483537][T17212] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 715.642055][ T4232] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 715.810610][T17239] loop4: detected capacity change from 0 to 512 [ 716.753662][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.761956][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.796459][ T4232] usb 2-1: Using ep0 maxpacket: 16 [ 716.797940][T17239] EXT4-fs (loop4): bad s_want_extra_isize: 192 [ 716.967958][ T4232] usb 2-1: unable to get BOS descriptor or descriptor too short [ 717.064177][ T4232] usb 2-1: config 7 has an invalid interface number: 165 but max is 0 [ 717.076143][ T4232] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 717.090262][ T4232] usb 2-1: config 7 has no interface number 0 [ 717.098808][ T4232] usb 2-1: config 7 interface 165 altsetting 16 bulk endpoint 0xD has invalid maxpacket 265 [ 717.117222][ T4232] usb 2-1: config 7 interface 165 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 717.132400][ T4232] usb 2-1: config 7 interface 165 has no altsetting 0 [ 717.384642][ T4232] usb 2-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=1f.39 [ 717.408473][T17248] loop8: detected capacity change from 0 to 256 [ 717.415980][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.511285][ T4232] usb 2-1: Product: syz [ 717.535356][ T4232] usb 2-1: Manufacturer: syz [ 717.540217][ T4232] usb 2-1: SerialNumber: syz [ 717.577166][T17210] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 717.898259][ T4232] rtl8150 2-1:7.165: couldn't find required endpoints [ 717.905603][ T4232] rtl8150: probe of 2-1:7.165 failed with error -5 [ 717.968061][ T4232] usb 2-1: USB disconnect, device number 16 [ 717.972225][T17279] loop8: detected capacity change from 0 to 512 [ 718.138490][T17279] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 718.208354][T17279] EXT4-fs (loop8): 1 truncate cleaned up [ 718.236766][T17279] EXT4-fs (loop8): mounted filesystem without journal. Opts: discard,max_batch_time=0x00000000000007ff,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 720.079252][T17313] loop7: detected capacity change from 0 to 512 [ 720.298847][T17326] loop1: detected capacity change from 0 to 8 [ 720.418418][T17326] SQUASHFS error: zlib decompression failed, data probably corrupt [ 720.437485][T17326] SQUASHFS error: Failed to read block 0x9b: -5 [ 720.474179][T17326] SQUASHFS error: Unable to read metadata cache entry [99] [ 720.481574][T17326] SQUASHFS error: Unable to read inode 0x127 [ 722.072085][T17363] loop4: detected capacity change from 0 to 2048 [ 722.143697][T17363] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 722.210268][T17363] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 722.721684][T17388] loop8: detected capacity change from 0 to 1024 [ 722.742648][ T23] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 722.794209][T17388] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 722.868275][T17388] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 723.015305][T17406] loop4: detected capacity change from 0 to 256 [ 723.069701][T17406] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3967cd3a, utbl_chksum : 0xe619d30d) [ 723.120563][ T26] audit: type=1800 audit(1777914979.431:445): pid=17406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4743" name="file1" dev="loop4" ino=1048707 res=0 errno=0 [ 723.136163][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 723.328620][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 723.366887][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.402028][ T23] usb 2-1: Product: syz [ 723.424649][ T23] usb 2-1: Manufacturer: syz [ 723.444824][ T23] usb 2-1: SerialNumber: syz [ 723.452472][T17426] binder: 17425:17426 ioctl c0306201 2000000003c0 returned -22 [ 723.876974][T17446] loop7: detected capacity change from 0 to 512 [ 723.980262][T17446] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 724.039957][T17446] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.620724][T17446] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 724.857700][T17446] EXT4-fs (loop7): Remounting filesystem read-only [ 724.899629][ T26] audit: type=1326 audit(1777914981.087:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17462 comm="syz.4.4760" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aecd69dd9 code=0x7ffc0000 [ 724.945871][ T23] cdc_ncm 2-1:1.0: bind() failure [ 724.955799][ T23] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 724.992357][T17467] loop4: detected capacity change from 0 to 512 [ 725.005213][ T23] cdc_ncm 2-1:1.1: bind() failure [ 725.067666][ T26] audit: type=1326 audit(1777914981.087:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17462 comm="syz.4.4760" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f9aecd69dd9 code=0x7ffc0000 [ 725.208818][T17476] loop8: detected capacity change from 0 to 764 [ 725.214407][ T1107] usb 2-1: USB disconnect, device number 17 [ 725.221829][T17467] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,inode_readahead_blks=0x0000000000080000,quota,,errors=continue. Quota mode: writeback. [ 725.226821][ T26] audit: type=1326 audit(1777914981.087:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17462 comm="syz.4.4760" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aecd69dd9 code=0x7ffc0000 [ 725.278565][T17467] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 725.313144][T17482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4767'. [ 725.346707][T17476] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 725.490137][T17476] Symlink component flag not implemented [ 725.594833][T17476] Symlink component flag not implemented [ 725.594958][T17476] Symlink component flag not implemented (128) [ 725.594973][T17476] Symlink component flag not implemented (122) [ 727.630532][T17535] loop1: detected capacity change from 0 to 2048 [ 728.339663][T17551] loop8: detected capacity change from 0 to 2048 [ 729.888110][T17551] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 730.141152][T17571] loop8: detected capacity change from 0 to 128 [ 730.236794][T17571] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 730.364681][T17571] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 731.061647][T17594] loop1: detected capacity change from 0 to 128 [ 731.221201][T17594] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 731.326300][T17594] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 731.806320][ T4235] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 732.105489][ T4235] usb 9-1: Using ep0 maxpacket: 8 [ 732.233777][ T4235] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 732.242265][ T4235] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.255290][ T4235] usb 9-1: config 0 has no interface number 0 [ 732.262005][ T4235] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 116, changing to 10 [ 732.275409][ T4235] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24947, setting to 1024 [ 732.315081][ T4235] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 732.380633][ T4235] usb 9-1: config 0 interface 52 has no altsetting 0 [ 733.155522][T17636] loop7: detected capacity change from 0 to 1024 [ 733.329827][T17636] EXT4-fs (loop7): Test dummy encryption mode enabled [ 733.384119][T17636] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 733.453502][ T4235] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 733.462719][ T4235] usb 9-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 733.471778][ T4235] usb 9-1: Product: syz [ 733.476441][ T4235] usb 9-1: SerialNumber: syz [ 733.483067][ T4235] usb 9-1: config 0 descriptor?? [ 733.572250][T17650] loop1: detected capacity change from 0 to 512 [ 733.765401][ T4235] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.52/input/input20 [ 733.778632][T17655] loop4: detected capacity change from 0 to 2048 [ 733.829319][T17650] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 733.898720][T17650] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 733.939489][T17655] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 734.028074][T17655] UDF-fs: Scanning with blocksize 512 failed [ 734.062144][T17655] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 734.093959][T17655] UDF-fs: Scanning with blocksize 1024 failed [ 734.095356][ T21] usb 9-1: USB disconnect, device number 3 [ 734.106465][ C1] synaptics_usb 9-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 734.151243][T17655] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 734.254940][T17655] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 734.279406][T17655] UDF-fs: Scanning with blocksize 2048 failed [ 734.322444][T17655] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 734.361184][T17655] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 734.422161][T17655] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 734.462828][T17655] UDF-fs: Scanning with blocksize 4096 failed [ 734.476760][T17655] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 734.509611][ T4197] Bluetooth: hci4: link tx timeout [ 734.517210][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 734.528892][ T4197] Bluetooth: hci4: link tx timeout [ 734.534139][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 734.585046][T11541] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 734.735813][T11541] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 734.768854][T11541] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz-executor: Failed to acquire dquot type 0 [ 735.072797][T17680] loop7: detected capacity change from 0 to 512 [ 735.230259][T17683] loop8: detected capacity change from 0 to 4096 [ 735.244349][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.355194][T17680] EXT4-fs (loop7): mounted filesystem without journal. Opts: lazytime,errors=continue,discard,,errors=continue. Quota mode: none. [ 735.369906][T17683] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 735.458794][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.615154][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.689856][T17697] loop7: detected capacity change from 0 to 512 [ 735.903868][T17697] EXT4-fs (loop7): 1 truncate cleaned up [ 735.935113][T17697] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 736.745575][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 736.754160][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.799314][T17697] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.4837: bg 0: block 465: padding at end of block bitmap is not set [ 736.877238][T17697] EXT4-fs (loop7): Remounting filesystem read-only [ 737.128194][T17699] chnl_net:caif_netlink_parms(): no params data found [ 737.262834][T17713] loop8: detected capacity change from 0 to 1024 [ 737.391583][T17713] hfsplus: found bad thread record in catalog [ 737.398280][T17713] hfsplus: b-tree write err: -5, ino 19 [ 737.932832][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 738.221100][T17699] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.228334][T17699] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.245631][T17730] loop8: detected capacity change from 0 to 512 [ 738.307221][T17699] device bridge_slave_0 entered promiscuous mode [ 738.328136][T17699] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.349081][T17730] EXT4-fs (loop8): Test dummy encryption mode enabled [ 738.356044][T17730] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 738.372156][T17699] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.391967][T17699] device bridge_slave_1 entered promiscuous mode [ 738.452643][T17730] EXT4-fs error (device loop8): ext4_orphan_get:1432: comm syz.8.4844: bad orphan inode 131083 [ 738.484958][T17730] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 738.519520][T17699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.535890][T17699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.599109][T17699] team0: Port device team_slave_0 added [ 738.638621][T17730] EXT4-fs error (device loop8): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.8.4844: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 738.682570][T17749] loop4: detected capacity change from 0 to 128 [ 738.708877][T17730] EXT4-fs error (device loop8) in ext4_delete_entry:2800: Corrupt filesystem [ 738.723797][T17699] team0: Port device team_slave_1 added [ 738.757229][T17730] EXT4-fs warning (device loop8): ext4_rename_delete:3792: inode #2: comm syz.8.4844: Deleting old file: nlink 5, error=-117 [ 738.807509][T17699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.837197][T17699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.935609][T17699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.018506][T17699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.040651][T17699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.157936][T17699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.180390][T17774] loop7: detected capacity change from 0 to 764 [ 739.315741][T17699] device hsr_slave_0 entered promiscuous mode [ 739.439466][ T4232] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 739.551368][T17781] Symlink component flag not implemented [ 739.568435][T17781] Symlink component flag not implemented (15) [ 739.835345][ T4232] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 739.856263][ T4232] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 739.888281][ T4232] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 739.890179][T17699] device hsr_slave_1 entered promiscuous mode [ 740.028124][T17699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 740.035751][T17699] Cannot create hsr debugfs directory [ 740.070991][ T4232] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 740.096224][ T4232] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.155687][ T4176] Bluetooth: hci3: command 0x041b tx timeout [ 740.238325][ T4232] usb 9-1: Product: syz [ 740.243522][ T4232] usb 9-1: Manufacturer: syz [ 740.248173][ T4232] usb 9-1: SerialNumber: syz [ 740.278793][T17790] loop4: detected capacity change from 0 to 1024 [ 740.296305][ T4232] cdc_ncm 9-1:1.0: skipping garbage [ 741.129480][ T4232] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 741.136520][ T4232] cdc_ncm 9-1:1.0: bind() failure [ 741.145400][ T4232] usb 9-1: USB disconnect, device number 4 [ 741.553260][T17699] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 741.737074][ T154] device hsr_slave_0 left promiscuous mode [ 741.871165][ T154] device hsr_slave_1 left promiscuous mode [ 742.025058][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.187917][T17829] loop7: detected capacity change from 0 to 512 [ 742.233871][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.464678][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.510598][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.539946][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 742.551696][ T154] device bridge_slave_1 left promiscuous mode [ 742.560239][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.579030][T17829] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 742.624597][ T154] device veth1_macvtap left promiscuous mode [ 742.632667][ T154] device veth0_macvtap left promiscuous mode [ 742.635225][T17836] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 742.640622][ T154] device veth1_vlan left promiscuous mode [ 742.678053][ T154] device veth0_vlan left promiscuous mode [ 742.769821][T17844] syz.2.4881 sent an empty control message without MSG_MORE. [ 742.815269][T17829] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 742.836034][T17829] EXT4-fs (loop7): 1 truncate cleaned up [ 742.842256][T17829] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 742.872230][T17829] EXT4-fs (loop7): shut down requested (0) [ 743.438735][ T154] team0 (unregistering): Port device team_slave_1 removed [ 743.445442][T17868] loop7: detected capacity change from 0 to 512 [ 743.454465][ T154] team0 (unregistering): Port device team_slave_0 removed [ 743.478670][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.496177][T17868] EXT4-fs (loop7): Ignoring removed oldalloc option [ 743.517417][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.540934][T17868] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 743.615266][ T154] bond0 (unregistering): Released all slaves [ 743.672044][T17699] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 743.696973][T17699] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 743.757629][T17699] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 744.167353][T17699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.251408][T14581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 744.261380][T14581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 744.280025][T17699] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.343976][T17898] loop4: detected capacity change from 0 to 256 [ 744.350859][T13046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 744.351452][T13046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 744.414173][T13046] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.424078][T13046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.464629][T17898] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 744.485866][T17904] netlink: 276 bytes leftover after parsing attributes in process `syz.2.4899'. [ 744.540440][T17909] netlink: 276 bytes leftover after parsing attributes in process `syz.2.4899'. [ 744.551736][T17906] netlink: 'syz.7.4900': attribute type 12 has an invalid length. [ 744.690982][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 744.698888][T13046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 744.707111][T13046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 744.764502][T13046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 744.807965][T13046] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.815720][T13046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.955251][T13046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 745.242550][T13046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 745.491289][T13046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 745.564906][T17930] loop4: detected capacity change from 0 to 512 [ 745.588592][T13046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 745.685772][T13046] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 745.718843][T17930] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.4909: inode has both inline data and extents flags [ 745.818198][T13046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 745.873473][T17930] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.4909: couldn't read orphan inode 15 (err -117) [ 745.904679][T13046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 745.983849][T13046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 746.003547][T17930] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 746.057551][T13046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 746.245701][T17918] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.253004][T17918] bridge0: port 1(bridge_slave_0) entered listening state [ 746.305274][T17949] loop8: detected capacity change from 0 to 256 [ 746.316099][T17918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 746.389202][T17918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 746.414693][T17949] FAT-fs (loop8): Directory bread(block 1285) failed [ 746.426870][T17699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 746.461455][T17949] FAT-fs (loop8): Directory bread(block 1286) failed [ 746.471712][T17954] loop4: detected capacity change from 0 to 1024 [ 746.484614][T17949] FAT-fs (loop8): Directory bread(block 1287) failed [ 746.491862][T17949] FAT-fs (loop8): Directory bread(block 1288) failed [ 746.499890][T17699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 746.528899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 746.550856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 746.581694][T17949] FAT-fs (loop8): Directory bread(block 1285) failed [ 746.602082][T17954] hfsplus: catalog name length corrupted [ 746.634386][T17949] FAT-fs (loop8): Directory bread(block 1286) failed [ 746.674564][T17949] FAT-fs (loop8): Directory bread(block 1287) failed [ 746.735885][T17949] FAT-fs (loop8): Directory bread(block 1288) failed [ 746.746547][T17965] loop7: detected capacity change from 0 to 128 [ 746.800539][T17949] FAT-fs (loop8): FAT read failed (blocknr 1281) [ 746.896708][T17965] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 746.904191][T17969] loop4: detected capacity change from 0 to 1024 [ 746.953630][T17965] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 747.061920][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 747.070261][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 747.093310][T17699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.128023][T17969] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 747.194012][T17969] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 747.214730][T17981] loop8: detected capacity change from 0 to 2048 [ 747.310805][T17969] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 3: comm syz.4.4922: lblock 3 mapped to illegal pblock 3 (length 3) [ 747.355076][T17986] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 747.457401][T17969] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 747.480506][T17981] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 747.586747][T17981] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 747.662707][T17969] EXT4-fs (loop4): This should not happen!! Data will be lost [ 747.662707][T17969] [ 747.674030][T17981] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 747.771735][T17981] EXT4-fs (loop8): This should not happen!! Data will be lost [ 747.771735][T17981] [ 747.789405][T17981] EXT4-fs (loop8): Total free blocks count 0 [ 747.842886][T17991] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: block 3: comm syz.4.4922: lblock 3 mapped to illegal pblock 3 (length 1) [ 747.871975][T17981] EXT4-fs (loop8): Free/Dirty block details [ 747.904179][T17981] EXT4-fs (loop8): free_blocks=2415919504 [ 747.926213][T17981] EXT4-fs (loop8): dirty_blocks=48 [ 747.958965][T17981] EXT4-fs (loop8): Block reservation details [ 747.973660][T17981] EXT4-fs (loop8): i_reserved_data_blocks=3 [ 748.017726][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 748.035203][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 748.043728][T13046] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 748.120014][T13046] EXT4-fs (loop8): This should not happen!! Data will be lost [ 748.120014][T13046] [ 748.130875][T18016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4932'. [ 748.156098][ T144] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 748.177786][T17699] device veth0_vlan entered promiscuous mode [ 748.200790][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 748.232276][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 748.268275][ T144] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 748.284393][T17699] device veth1_vlan entered promiscuous mode [ 748.318285][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 748.337285][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 748.366725][ T144] EXT4-fs (loop4): This should not happen!! Data will be lost [ 748.366725][ T144] [ 748.377985][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 748.466267][T14581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 748.480882][T14581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 748.503264][T14581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 748.580924][T17699] device veth0_macvtap entered promiscuous mode [ 748.630618][T17699] device veth1_macvtap entered promiscuous mode [ 748.731919][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.764570][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.788477][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.821685][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.845683][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.878345][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.915772][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.927309][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.938524][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 748.959494][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.972491][T17699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.983417][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 749.014377][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 749.030164][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 749.058015][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 749.078142][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.090477][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.106194][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.119691][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.134751][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.158226][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.199615][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.221019][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.242397][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.263753][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.284819][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.306509][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.329217][T17699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.337837][T13046] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 749.353259][T13046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 749.389355][T17699] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.413877][T17699] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.423159][T17699] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.454675][T17699] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.489089][T18055] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4940'. [ 749.534865][T18055] device veth2 entered promiscuous mode [ 749.739210][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.766292][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.786916][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 749.825844][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.845063][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.863185][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 750.068615][T18067] loop8: detected capacity change from 0 to 8192 [ 750.150171][T18067] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 750.188386][T18067] UDF-fs: Scanning with blocksize 512 failed [ 750.231987][T18067] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 750.260174][T18067] UDF-fs: Scanning with blocksize 1024 failed [ 750.303514][T18067] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 750.330308][T18067] UDF-fs: Scanning with blocksize 2048 failed [ 750.393302][T18067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 750.499686][ T26] audit: type=1326 audit(1777915005.036:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.2.4951" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 750.622627][ T26] audit: type=1326 audit(1777915005.036:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.2.4951" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 750.737151][ T26] audit: type=1326 audit(1777915005.036:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.2.4951" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 750.838658][ T26] audit: type=1326 audit(1777915005.055:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.2.4951" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 750.995701][ T26] audit: type=1326 audit(1777915005.055:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.2.4951" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 751.017345][T18117] loop9: detected capacity change from 0 to 128 [ 751.103006][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 751.112561][ T26] audit: type=1326 audit(1777915005.055:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.2.4951" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 751.122284][T18117] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 751.190095][T18117] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 751.202054][ T26] audit: type=1326 audit(1777915005.055:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.2.4951" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 751.316448][ T26] audit: type=1326 audit(1777915005.055:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.2.4951" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 751.412845][ T26] audit: type=1326 audit(1777915005.055:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.2.4951" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 751.453634][T18117] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 751.502750][T18141] loop8: detected capacity change from 0 to 512 [ 751.508069][T18135] fscrypt: loop9: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 751.517323][ T26] audit: type=1326 audit(1777915005.055:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.2.4951" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 751.657479][T18141] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 751.672789][T18141] System zones: 1-12 [ 751.685917][T18141] EXT4-fs (loop8): orphan cleanup on readonly fs [ 751.693583][T18141] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.4966: invalid indirect mapped block 8 (level 2) [ 751.720743][T18141] EXT4-fs (loop8): 1 truncate cleaned up [ 751.729774][T18141] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 751.825296][T18156] loop9: detected capacity change from 0 to 2048 [ 751.944744][T18156] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 753.154842][T18197] loop7: detected capacity change from 0 to 16 [ 753.188899][T18197] erofs: (device loop7): mounted with root inode @ nid 36. [ 753.234596][T18197] erofs: (device loop7): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 753.336180][ T23] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 753.903802][ T23] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.956200][ T23] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 754.040281][ T23] usb 10-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 754.119850][ T23] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.239870][ T23] usb 10-1: config 0 descriptor?? [ 754.833041][ T23] usb 10-1: Direct firmware load for ar3k/AthrBT_0xaa291a84.dfu failed with error -2 [ 754.855046][ T23] usb 10-1: Falling back to sysfs fallback for: ar3k/AthrBT_0xaa291a84.dfu [ 755.453728][T18249] loop4: detected capacity change from 0 to 2048 [ 755.642949][T18249] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 755.767812][T18249] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 755.882289][T18249] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 756.678800][T18249] EXT4-fs (loop4): This should not happen!! Data will be lost [ 756.678800][T18249] [ 756.764342][T18249] EXT4-fs (loop4): Total free blocks count 0 [ 756.790397][T18249] EXT4-fs (loop4): Free/Dirty block details [ 756.796384][T18249] EXT4-fs (loop4): free_blocks=2415919104 [ 756.798658][T18273] loop9: detected capacity change from 0 to 164 [ 756.854203][T18249] EXT4-fs (loop4): dirty_blocks=64 [ 756.859552][T18249] EXT4-fs (loop4): Block reservation details [ 756.892958][T18276] loop7: detected capacity change from 0 to 128 [ 756.915303][T18249] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 756.926794][T18273] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 756.965548][T18273] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 756.987273][T14581] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 757.018551][T14581] EXT4-fs (loop4): This should not happen!! Data will be lost [ 757.018551][T14581] [ 757.186916][T18276] EXT4-fs (loop7): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 757.277442][T18276] ext4 filesystem being mounted at /201/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 757.374166][T18276] fscrypt: AES-128-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 757.403484][T18286] loop8: detected capacity change from 0 to 512 [ 757.431988][T18276] fscrypt: AES-128-CBC-ESSIV using implementation "essiv(cbc-aes-aesni,sha256-avx2)" [ 757.473695][T18290] loop4: detected capacity change from 0 to 1024 [ 757.752773][T18286] EXT4-fs (loop8): 1 truncate cleaned up [ 757.762967][T18286] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 757.783311][T18286] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.5009: bg 0: block 465: padding at end of block bitmap is not set [ 757.804488][T18286] EXT4-fs (loop8): Remounting filesystem read-only [ 758.945603][T18344] loop7: detected capacity change from 0 to 1024 [ 759.122197][ T26] kauditd_printk_skb: 50 callbacks suppressed [ 759.122214][ T26] audit: type=1800 audit(1777915013.109:509): pid=18344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5024" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 760.999008][T18415] loop9: detected capacity change from 0 to 512 [ 761.095206][T18415] EXT4-fs (loop9): Ignoring removed oldalloc option [ 761.228068][T18415] EXT4-fs warning (device loop9): dx_probe:893: inode #2: comm syz.9.5046: dx entry: limit 1024 != root limit 124 [ 761.316594][T18415] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.5046: Corrupt directory, running e2fsck is recommended [ 761.383887][T18429] sock: sock_set_timeout: `syz.7.5049' (pid 18429) tries to set negative timeout [ 761.424426][T18415] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 761.456350][T18415] EXT4-fs error (device loop9): ext4_iget_extra_inode:4573: inode #15: comm syz.9.5046: corrupted in-inode xattr [ 761.506631][T18415] EXT4-fs error (device loop9): ext4_orphan_get:1411: comm syz.9.5046: couldn't read orphan inode 15 (err -117) [ 761.519830][T18431] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5050'. [ 761.546485][T18415] EXT4-fs (loop9): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.auto_da_alloc,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback. [ 761.606922][T18431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 762.232352][T18455] loop8: detected capacity change from 0 to 16 [ 762.358722][T18455] erofs: (device loop8): mounted with root inode @ nid 36. [ 762.403122][T18455] attempt to access beyond end of device [ 762.403122][T18455] loop8: rw=524288, want=1049296, limit=16 [ 762.445716][T18455] attempt to access beyond end of device [ 762.445716][T18455] loop8: rw=524288, want=1049304, limit=16 [ 762.499488][T18455] attempt to access beyond end of device [ 762.499488][T18455] loop8: rw=524288, want=40, limit=16 [ 762.544023][T18455] attempt to access beyond end of device [ 762.544023][T18455] loop8: rw=524288, want=48, limit=16 [ 762.568044][T18455] attempt to access beyond end of device [ 762.568044][T18455] loop8: rw=524288, want=408, limit=16 [ 762.574857][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 763.524136][T18509] loop8: detected capacity change from 0 to 164 [ 763.598696][T18509] ISOFS: Bad logical zone size 25856 [ 765.553112][ T26] audit: type=1326 audit(1777915019.114:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18548 comm="syz.4.5091" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aecd69dd9 code=0x7ffc0000 [ 765.584853][T18542] loop9: detected capacity change from 0 to 4096 [ 765.656544][T18542] EXT4-fs (loop9): Test dummy encryption mode enabled [ 765.663529][ T26] audit: type=1326 audit(1777915019.152:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18548 comm="syz.4.5091" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f9aecd69dd9 code=0x7ffc0000 [ 765.737488][T18542] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_nolock,,errors=continue. Quota mode: writeback. [ 765.762968][ T26] audit: type=1326 audit(1777915019.152:512): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=18548 comm="syz.4.5091" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aecd69dd9 code=0x7ffc0000 [ 765.941712][ T26] audit: type=1326 audit(1777915019.470:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18561 comm="syz.2.5095" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad61ddcdd9 code=0x7ffc0000 [ 767.049858][T18612] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 767.238418][T18620] loop8: detected capacity change from 0 to 512 [ 767.349612][T18620] EXT4-fs (loop8): Unrecognized mount option "seclabel" or missing value [ 769.117079][T18687] loop9: detected capacity change from 0 to 128 [ 769.198883][T18687] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 769.218157][T18687] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 769.378014][T18691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5135'. [ 769.403713][T18691] netlink: 'syz.2.5135': attribute type 1 has an invalid length. [ 769.823631][T18705] tmpfs: Too few inodes for current use [ 769.886636][T18707] loop8: detected capacity change from 0 to 16 [ 769.950418][T18707] erofs: (device loop8): mounted with root inode @ nid 36. [ 770.402519][T18720] loop9: detected capacity change from 0 to 512 [ 770.486477][T18720] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 770.526943][T18720] EXT4-fs (loop9): SIPHASH is not a valid default hash value [ 770.645073][T11394] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 770.912276][T11394] usb 9-1: Using ep0 maxpacket: 32 [ 771.040893][T11394] usb 9-1: config 0 has an invalid interface number: 151 but max is 0 [ 771.049886][T11394] usb 9-1: config 0 has no interface number 0 [ 771.083341][T11394] usb 9-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 771.144383][T11394] usb 9-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 771.340133][T11394] usb 9-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 771.393045][T11394] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.413611][T11394] usb 9-1: Product: syz [ 771.428420][T11394] usb 9-1: Manufacturer: syz [ 771.443726][T11394] usb 9-1: SerialNumber: syz [ 771.477414][T11394] usb 9-1: config 0 descriptor?? [ 771.627750][T18738] loop4: detected capacity change from 0 to 8 [ 771.651966][ T26] audit: type=1326 audit(1777915024.830:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18739 comm="syz.9.5155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17c7e7dd9 code=0x7ffc0000 [ 771.702971][ T26] audit: type=1326 audit(1777915024.858:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18739 comm="syz.9.5155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17c7e7dd9 code=0x7ffc0000 [ 771.708403][T18742] netlink: 'syz.7.5156': attribute type 2 has an invalid length. [ 771.746890][ T26] audit: type=1326 audit(1777915024.858:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18739 comm="syz.9.5155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17c7e7dd9 code=0x7ffc0000 [ 771.772800][T18742] netlink: 'syz.7.5156': attribute type 1 has an invalid length. [ 771.798720][T18738] SQUASHFS error: lzo decompression failed, data probably corrupt [ 771.818187][T18738] SQUASHFS error: Failed to read block 0x91: -5 [ 771.827690][T18742] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5156'. [ 771.859305][T18738] SQUASHFS error: Unable to read metadata cache entry [8f] [ 771.871498][ T26] audit: type=1326 audit(1777915024.858:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18739 comm="syz.9.5155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17c7e7dd9 code=0x7ffc0000 [ 771.873672][T11394] usb 9-1: USB disconnect, device number 5 [ 771.933679][T18738] SQUASHFS error: Unable to read inode 0x11f [ 772.045487][ T26] audit: type=1326 audit(1777915024.858:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18739 comm="syz.9.5155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa17c7e7dd9 code=0x7ffc0000 [ 772.184535][ T26] audit: type=1326 audit(1777915024.858:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18739 comm="syz.9.5155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17c7e7dd9 code=0x7ffc0000 [ 772.260972][T15466] udevd[15466]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 773.537633][ T26] audit: type=1326 audit(1777915024.858:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18739 comm="syz.9.5155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17c7e7dd9 code=0x7ffc0000 [ 773.784101][ T26] audit: type=1326 audit(1777915024.914:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18739 comm="syz.9.5155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17c7e7dd9 code=0x7ffc0000 [ 773.810270][T18753] loop4: detected capacity change from 0 to 8192 [ 773.926328][ T26] audit: type=1326 audit(1777915024.914:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18739 comm="syz.9.5155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17c7e7dd9 code=0x7ffc0000 [ 774.079012][ T26] audit: type=1326 audit(1777915024.914:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18739 comm="syz.9.5155" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fa17c7e7dd9 code=0x7ffc0000 [ 774.361830][T18782] device syzkaller0 entered promiscuous mode [ 774.413174][T18785] tap0: tun_chr_ioctl cmd 1074025681 [ 774.522883][T18785] tap0: tun_chr_ioctl cmd 2147767520 [ 774.865223][T18802] loop8: detected capacity change from 0 to 1024 [ 774.975195][T18802] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 775.424743][T18826] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 775.482052][T18826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 778.734539][ T4235] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 779.003444][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.010914][ C1] bridge0: topology change detected, propagating [ 779.018272][T13046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 779.133462][ T4235] usb 9-1: Using ep0 maxpacket: 32 [ 779.368810][ T4235] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 779.422058][ T4235] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 779.463463][ T4235] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 779.700394][ T4235] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 779.714582][T18906] loop9: detected capacity change from 0 to 512 [ 779.722888][ T4235] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.753514][ T4235] usb 9-1: Product: syz [ 779.768035][T18908] loop4: detected capacity change from 0 to 256 [ 779.788688][ T4235] usb 9-1: Manufacturer: syz [ 779.817091][ T4235] usb 9-1: SerialNumber: syz [ 779.857872][T18906] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 779.917125][T18912] blktrace: Concurrent blktraces are not allowed on loop4 [ 779.937383][T18906] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #16: comm syz.9.5197: invalid indirect mapped block 4294967295 (level 0) [ 779.946966][T18908] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 779.977191][T18906] EXT4-fs (loop9): Remounting filesystem read-only [ 779.998633][T18906] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #16: comm syz.9.5197: invalid indirect mapped block 4294967295 (level 1) [ 780.123363][T18906] EXT4-fs (loop9): Remounting filesystem read-only [ 780.133273][T18906] EXT4-fs (loop9): 1 orphan inode deleted [ 780.150055][ T4235] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 780.181167][T18906] EXT4-fs (loop9): 1 truncate cleaned up [ 780.187136][T18906] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,block_validity,block_validity,block_validity,quota,noload,. Quota mode: writeback. [ 780.187435][ T4235] cdc_ncm 9-1:1.0: bind() failure [ 780.266635][ T4235] usb 9-1: USB disconnect, device number 6 [ 780.329155][T18906] EXT4-fs error (device loop9): ext4_search_dir:1549: inode #2: block 13: comm syz.9.5197: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=33040, size=1024 fake=0 [ 780.401948][T18921] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5221'. [ 780.469984][T18906] EXT4-fs (loop9): Remounting filesystem read-only [ 781.005669][T18950] netlink: 'syz.2.5231': attribute type 12 has an invalid length. [ 781.024980][T18950] netlink: 'syz.2.5231': attribute type 29 has an invalid length. [ 781.064360][T18950] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5231'. [ 781.183673][T18962] loop7: detected capacity change from 0 to 512 [ 781.272872][T18968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5238'. [ 781.376408][T18962] EXT4-fs (loop7): Ignoring removed nobh option [ 781.437249][T18962] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 781.493239][T18962] ext4 filesystem being mounted at /241/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 781.672383][T18989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5245'. [ 781.724066][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 781.730448][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 782.975585][T19024] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 783.023984][T19026] loop4: detected capacity change from 0 to 2048 [ 783.031487][T19024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 783.034685][T19030] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 783.225397][T19026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 783.301549][T19040] netlink: 'syz.7.5260': attribute type 4 has an invalid length. [ 783.390623][T19042] netlink: 'syz.7.5260': attribute type 4 has an invalid length. [ 783.527939][T19046] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5262'. [ 783.547250][T19047] kernel profiling enabled (shift: 9) [ 783.558941][T19046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.680113][T19046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.492488][T19101] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5275'. [ 784.925786][T19126] loop7: detected capacity change from 0 to 512 [ 785.249141][T19126] EXT4-fs (loop7): Ignoring removed orlov option [ 785.260515][T19126] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 785.369659][T19126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 785.616931][T19126] EXT4-fs error (device loop7): ext4_iget_extra_inode:4573: inode #15: comm syz.7.5286: corrupted in-inode xattr [ 785.636058][T19126] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.5286: couldn't read orphan inode 15 (err -117) [ 785.650923][T19126] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 785.834343][T19142] loop4: detected capacity change from 0 to 512 [ 785.938400][T19142] EXT4-fs (loop4): old and new quota format mixing [ 786.248589][T19158] loop7: detected capacity change from 0 to 512 [ 786.477534][T19168] loop4: detected capacity change from 0 to 2048 [ 786.516687][T19158] EXT4-fs (loop7): 1 orphan inode deleted [ 786.532335][T19158] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 786.575596][T19158] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.604175][T19168] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 786.695822][T19168] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 786.756136][T19178] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5300'. [ 786.771828][T19168] UDF-fs: unknown compression code (0) [ 787.125622][T19190] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5305'. [ 787.299784][T19197] loop8: detected capacity change from 0 to 512 [ 787.329403][T19196] loop7: detected capacity change from 0 to 128 [ 787.598500][T19197] EXT4-fs (loop8): Ignoring removed oldalloc option [ 788.144329][T19197] EXT4-fs (loop8): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 788.815739][T19211] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5308'. [ 788.851188][T19211] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5308'. [ 789.059810][T19219] loop9: detected capacity change from 0 to 512 [ 789.230430][T19219] EXT4-fs error (device loop9): ext4_orphan_get:1406: inode #15: comm syz.9.5312: inode has both inline data and extents flags [ 789.248354][T19219] EXT4-fs error (device loop9): ext4_orphan_get:1411: comm syz.9.5312: couldn't read orphan inode 15 (err -117) [ 789.259962][T19232] loop7: detected capacity change from 0 to 256 [ 789.353888][T19219] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 791.068906][T19230] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.077305][T19230] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.335532][T19230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.399651][T19230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.794124][T19230] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.803133][T19230] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.813218][T19230] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.824985][T19230] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.479807][T19312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.504146][T19312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.547446][T19312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.558893][T19312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.560159][T19320] input: syz1 as /devices/virtual/input/input21 [ 793.577771][T19312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.589111][T19312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.611803][T19312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.633787][T19312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.651101][T19312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.666845][T19312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.686650][T19312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.698196][T19312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.709220][T19312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.722883][T19312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.751183][T19312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.778235][T19312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.789408][T19312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.814047][T19312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.833176][T19312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.852274][T19312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.284138][T19356] loop4: detected capacity change from 0 to 512 [ 794.284468][T19358] loop9: detected capacity change from 0 to 512 [ 794.349243][T19364] loop8: detected capacity change from 0 to 16 [ 794.363674][T19356] EXT4-fs (loop4): orphan cleanup on readonly fs [ 794.378696][T19356] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.5355: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 794.398900][T19356] EXT4-fs error (device loop4): ext4_quota_enable:6447: comm syz.4.5355: Bad quota inode: 4, type: 1 [ 794.413857][T19356] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 794.428679][T19363] loop7: detected capacity change from 0 to 2048 [ 794.429329][T19356] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 794.455694][T19358] EXT4-fs (loop9): bad s_min_extra_isize: 65535 [ 794.457734][T19364] erofs: (device loop8): mounted with root inode @ nid 36. [ 794.473737][T19356] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 794.507626][T19356] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 794.574756][T19356] EXT4-fs warning (device loop4): ext4_multi_mount_protect:340: MMP startup interrupted, failing mount [ 794.574756][T19356] [ 794.575305][T19363] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 794.746546][T19363] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 795.196893][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 795.196909][ T26] audit: type=1326 audit(1777915046.849:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19390 comm="syz.8.5373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992a10edd9 code=0x7ffc0000 [ 795.209196][T19391] loop4: detected capacity change from 0 to 1024 [ 795.256815][ T26] audit: type=1326 audit(1777915046.886:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19390 comm="syz.8.5373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f992a10edd9 code=0x7ffc0000 [ 795.332729][T19391] hfsplus: xattr searching failed [ 795.332866][T19394] loop8: detected capacity change from 0 to 512 [ 795.363802][ T26] audit: type=1326 audit(1777915046.886:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19390 comm="syz.8.5373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992a10edd9 code=0x7ffc0000 [ 795.404728][ T26] audit: type=1326 audit(1777915046.886:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19390 comm="syz.8.5373" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992a10edd9 code=0x7ffc0000 [ 795.449040][T19394] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 795.479127][T19394] EXT4-fs (loop8): orphan cleanup on readonly fs [ 795.601523][T19394] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.5374: bg 0: block 16: invalid block bitmap [ 795.649329][T19394] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 795.665937][T19394] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.5374: attempt to clear invalid blocks 1669132790 len 1 [ 795.688423][T19394] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.5374: invalid indirect mapped block 4294967295 (level 1) [ 795.758497][T19394] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.5374: invalid indirect mapped block 4294967295 (level 2) [ 795.784082][T19394] EXT4-fs (loop8): 1 truncate cleaned up [ 795.796671][T19394] EXT4-fs (loop8): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: none. [ 796.430879][T11394] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 796.567552][T19416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.658098][T19421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.697985][T19415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.714573][T19425] loop9: detected capacity change from 0 to 512 [ 796.779060][T19425] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 796.803670][T19425] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 796.826538][T11394] usb 9-1: config 0 has an invalid interface number: 214 but max is 0 [ 796.846220][T11394] usb 9-1: config 0 has no interface number 0 [ 796.853290][T11394] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 796.907967][T19425] EXT4-fs error (device loop9): __ext4_get_inode_loc:4334: comm syz.9.5387: Invalid inode table block 1991734912 in block_group 0 [ 796.958104][T19425] EXT4-fs (loop9): Remounting filesystem read-only [ 796.986926][T11394] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 797.001383][T11394] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 797.010233][T11394] usb 9-1: Manufacturer: syz [ 797.015315][T11394] usb 9-1: SerialNumber: syz [ 797.032671][T11394] usb 9-1: config 0 descriptor?? [ 797.512030][T19441] loop4: detected capacity change from 0 to 512 [ 797.581936][T19441] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 797.609595][T19441] EXT4-fs (loop4): 1 truncate cleaned up [ 797.615560][T19441] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000000012,inode_readahead_blks=0x0000000000000020,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 797.783305][T11394] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.214/input/input22 [ 797.906285][ T26] audit: type=1326 audit(1777915049.384:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19443 comm="syz.4.5395" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9aecd69dd9 code=0x0 [ 797.999508][T11394] usb 9-1: USB disconnect, device number 7 [ 798.007095][T19447] netlink: 'syz.2.5394': attribute type 4 has an invalid length. [ 798.019962][T19447] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5394'. [ 798.695733][T19459] 9pnet: Insufficient options for proto=fd [ 799.462355][T19468] input: syz0 as /devices/virtual/input/input23 [ 799.634839][T19471] binder: 19464:19471 ioctl c0306201 0 returned -14 [ 800.507114][T19492] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5422'. [ 800.967114][T19507] loop9: detected capacity change from 0 to 16 [ 801.095581][T19507] erofs: (device loop9): mounted with root inode @ nid 36. [ 801.136372][ T26] audit: type=1800 audit(1777915052.405:533): pid=19507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5417" name="file1" dev="loop9" ino=86 res=0 errno=0 [ 801.316416][T11394] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 801.700022][ T26] audit: type=1326 audit(1777915052.929:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19535 comm="syz.7.5433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784163bdd9 code=0x7ffc0000 [ 801.712094][T11394] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 801.783822][T11394] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 801.793966][ T26] audit: type=1326 audit(1777915052.938:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19535 comm="syz.7.5433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f784163bdd9 code=0x7ffc0000 [ 801.836985][T11394] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 801.887053][T11394] usb 9-1: config 220 has no interface number 2 [ 801.917802][ T26] audit: type=1326 audit(1777915052.938:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19535 comm="syz.7.5433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784163bdd9 code=0x7ffc0000 [ 801.948787][T11394] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 802.019927][T19545] binder: 19539:19545 ioctl c0306201 0 returned -14 [ 802.027104][T11394] usb 9-1: config 220 interface 0 has no altsetting 0 [ 802.062495][T11394] usb 9-1: config 220 interface 76 has no altsetting 0 [ 802.073033][ T26] audit: type=1326 audit(1777915052.938:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19535 comm="syz.7.5433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784163bdd9 code=0x7ffc0000 [ 802.120313][T11394] usb 9-1: config 220 interface 1 has no altsetting 0 [ 802.210664][ T26] audit: type=1326 audit(1777915052.938:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19535 comm="syz.7.5433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f784163bdd9 code=0x7ffc0000 [ 802.259979][ T26] audit: type=1326 audit(1777915052.938:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19535 comm="syz.7.5433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784163bdd9 code=0x7ffc0000 [ 802.332687][T11394] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 802.372691][T11394] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.409301][T11394] usb 9-1: Product: syz [ 802.424266][T11394] usb 9-1: Manufacturer: syz [ 802.440200][T11394] usb 9-1: SerialNumber: syz [ 802.473315][ T26] audit: type=1326 audit(1777915052.938:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19535 comm="syz.7.5433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f784163bdd9 code=0x7ffc0000 [ 802.627330][ T26] audit: type=1326 audit(1777915052.938:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19535 comm="syz.7.5433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784163bdd9 code=0x7ffc0000 [ 802.747874][T19562] loop4: detected capacity change from 0 to 16 [ 802.882591][T19562] erofs: (device loop4): mounted with root inode @ nid 36. [ 802.898899][T11394] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 802.927285][T11394] usb 9-1: No valid video chain found. [ 802.992162][T11394] usb 9-1: selecting invalid altsetting 0 [ 803.007760][T19562] erofs: (device loop4): z_erofs_readpage: failed to read, err [-95] [ 803.017388][T19562] BUG: sleeping function called from invalid context at fs/dcache.c:877 [ 803.025793][T19562] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 19562, name: syz.4.5440 [ 803.035062][T19562] 1 lock held by syz.4.5440/19562: [ 803.040284][T19562] #0: ffff88805ef71140 (&type->i_mutex_dir_key#10/1){+.+.}-{3:3}, at: filename_create+0x208/0x470 [ 803.051152][T19562] Preemption disabled at: [ 803.051167][T19562] [] z_erofs_reload_indexes+0x347/0x590 [ 803.062795][T19562] CPU: 0 PID: 19562 Comm: syz.4.5440 Not tainted syzkaller #0 [ 803.070462][T19562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 803.080548][T19562] Call Trace: [ 803.083957][T19562] [ 803.086917][T19562] dump_stack_lvl+0x188/0x250 [ 803.091745][T19562] ? show_regs_print_info+0x20/0x20 [ 803.096979][T19562] ? load_image+0x400/0x400 [ 803.101532][T19562] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 803.107138][T19562] ___might_sleep+0x493/0x610 [ 803.111998][T19562] ? z_erofs_reload_indexes+0x347/0x590 [ 803.117588][T19562] ? __might_sleep+0xf0/0xf0 [ 803.122211][T19562] ? __rwlock_init+0x140/0x140 [ 803.127029][T19562] ? erofs_lookup+0x1af/0x330 [ 803.131928][T19562] dput+0x26/0x1a0 [ 803.135858][T19562] lookup_one_qstr_excl+0x1d6/0x240 [ 803.141189][T19562] filename_create+0x23a/0x470 [ 803.146096][T19562] ? kern_path_create+0x190/0x190 [ 803.151276][T19562] ? __virt_addr_valid+0x3c6/0x470 [ 803.156519][T19562] do_mkdirat+0xa5/0x5b0 [ 803.160887][T19562] ? vfs_mkdir+0x570/0x570 [ 803.165486][T19562] ? getname_flags+0x1fe/0x500 [ 803.170295][T19562] __x64_sys_mkdirat+0x85/0x90 [ 803.175108][T19562] do_syscall_64+0x4c/0xa0 [ 803.179570][T19562] ? clear_bhb_loop+0x30/0x80 [ 803.184280][T19562] ? clear_bhb_loop+0x30/0x80 [ 803.189180][T19562] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 803.195201][T19562] RIP: 0033:0x7f9aecd69dd9 [ 803.199745][T19562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.219715][T19562] RSP: 002b:00007f9aeafc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 803.228175][T19562] RAX: ffffffffffffffda RBX: 00007f9aecfe2fa0 RCX: 00007f9aecd69dd9 [ 803.236185][T19562] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 803.244467][T19562] RBP: 00007f9aecdffd69 R08: 0000000000000000 R09: 0000000000000000 [ 803.252576][T19562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.260626][T19562] R13: 00007f9aecfe3038 R14: 00007f9aecfe2fa0 R15: 00007ffef59b4718 [ 803.268742][T19562] [ 803.272069][T19562] BUG: scheduling while atomic: syz.4.5440/19562/0x00000002 [ 803.279624][T19562] no locks held by syz.4.5440/19562. [ 803.285332][T19562] Modules linked in: [ 803.289435][T19562] Preemption disabled at: [ 803.289448][T19562] [] z_erofs_reload_indexes+0x347/0x590 [ 803.301095][T19562] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 803.310010][T19562] CPU: 0 PID: 19562 Comm: syz.4.5440 Tainted: G W syzkaller #0 [ 803.318986][T19562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 803.329427][T19562] Call Trace: [ 803.332733][T19562] [ 803.335824][T19562] dump_stack_lvl+0x188/0x250 [ 803.340553][T19562] ? show_regs_print_info+0x20/0x20 [ 803.345931][T19562] ? load_image+0x400/0x400 [ 803.350475][T19562] panic+0x2e5/0x810 [ 803.354499][T19562] ? bpf_jit_dump+0xd0/0xd0 [ 803.359042][T19562] ? z_erofs_reload_indexes+0x347/0x590 [ 803.364723][T19562] ? z_erofs_reload_indexes+0x347/0x590 [ 803.370719][T19562] check_panic_on_warn+0x80/0xa0 [ 803.375871][T19562] ? z_erofs_reload_indexes+0x347/0x590 [ 803.381629][T19562] __schedule_bug+0x193/0x1f0 [ 803.386347][T19562] ? raw_spin_rq_unlock_irq+0x90/0x90 [ 803.392199][T19562] __schedule+0x1324/0x43c0 [ 803.396827][T19562] ? kasan_quarantine_put+0x39/0x220 [ 803.402152][T19562] ? kasan_quarantine_put+0xd4/0x220 [ 803.407493][T19562] ? slab_free_freelist_hook+0xea/0x170 [ 803.413182][T19562] ? rcu_is_watching+0x11/0xa0 [ 803.417980][T19562] ? release_firmware_map_entry+0x190/0x190 [ 803.423991][T19562] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 803.430019][T19562] ? lock_chain_count+0x20/0x20 [ 803.434911][T19562] ? do_mkdirat+0x51e/0x5b0 [ 803.439554][T19562] schedule+0x11b/0x1e0 [ 803.443748][T19562] exit_to_user_mode_loop+0x47/0x130 [ 803.449069][T19562] exit_to_user_mode_prepare+0xee/0x180 [ 803.454651][T19562] syscall_exit_to_user_mode+0x16/0x40 [ 803.460159][T19562] do_syscall_64+0x58/0xa0 [ 803.464740][T19562] ? clear_bhb_loop+0x30/0x80 [ 803.469546][T19562] ? clear_bhb_loop+0x30/0x80 [ 803.474440][T19562] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 803.480461][T19562] RIP: 0033:0x7f9aecd69dd9 [ 803.484936][T19562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.505092][T19562] RSP: 002b:00007f9aeafc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 803.513567][T19562] RAX: ffffffffffffffa1 RBX: 00007f9aecfe2fa0 RCX: 00007f9aecd69dd9 [ 803.522250][T19562] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 803.530534][T19562] RBP: 00007f9aecdffd69 R08: 0000000000000000 R09: 0000000000000000 [ 803.538983][T19562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.547173][T19562] R13: 00007f9aecfe3038 R14: 00007f9aecfe2fa0 R15: 00007ffef59b4718 [ 803.555461][T19562] [ 803.558948][T19562] Kernel Offset: disabled [ 803.563612][T19562] Rebooting in 86400 seconds..