last executing test programs: 2m29.718522631s ago: executing program 1 (id=1382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m29.054597784s ago: executing program 1 (id=1385): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb68, &(0x7f0000000c40)="$eJzs3M9rHFUcAPDvm2y2aRtNiqLWi4EeGihufkmhxUOLeFMQrOCxwaRt7PYHTUTbiym9KhTUP6AHTx5S8NCDl549epEevEsxKJSeIzP7I9smm02bTQfSzwcm+9687L7vzDdvMm/YmQBeWmP5jyzicETcThEjzfVZRFSL0lDEcuP37s3cvZAvKdbWPv03RYqIlZm7F1qflZqvB5sfMBQRfyynmLm1sd/F6zcuztbr89ea9YmlS1cnFq/feHfh0uz5+fPzl6dOnDg+OT194vhk37b12PiRn1a+/vCfO/cmHv/8wbFfUpyK4WZb53b0y1iMtffJ0z7rd2clGYiISkfuc6lSYkAAAGwp6ziHOxwjMRDrJ28jUVsoNTgAAACgL76NiDUAAABgj0vm/wAAALDHtb4HsDJz90JrKfcbCbxIq6cjYrSR/9b93Y2WSiwXr0MxGBEHHqXovK03Nd62Y2MRcfX2rYV8iV26D5vulm9GxFubjf9U5H+0uIt/Y/6ziOjHnfljT9Xl/8XaSf5P9aF/+QcAAHgx7p9uTOQ3zv+y9vWf2GT+N7DJ3O159J7/ZQ/70A1drJ6OeL/j2Y73OvLfNDrQrL1SXA8YTOcW6vOTEfFqRIzH4L68PrVFHwsf//Zmt7bO63/5kvffuhbYjONhZd+T75mbXZrdyTazbvVmxNuVzfKf2uM/dbn++8k2+/j+yx9Wu7X1zj+7ae1OxNFNx//6Ez3T1s9nnSiOBxOto8JGnw//tdKtf/kvVz7+D2yd/+L4335e7+Kz93G2+t1r3dqe9/hfTWeKAKvNdd/MLi1dm4qopo82rp9+9pj3qtb+aO2vPP/jRzb//7/V8T//mzi7zT4f//roTLc2479cef7neoz/9MT4f/bCf3/+/ka3/rc3/t8rghlvrnH+19t2E1R2nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP2SRcRwpKzWLmdZrRZxMCJejwNZ/cri0rFzV766PJe3RYzGYHZuoT4/GREjjXrK61NFeb0+/VR9JiIORcSPI/uLeu2LK/W5sjceAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtoMRMRwpq0VEVpSzrFZrtP09UnZ0AAAAQN+Mlh0AAAAAsOvM/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYoUPv3H+QImL55P5iyVWbbYOlRgbstqzsAIDSDJQdAFCaStkBAKUxxwdSj/ahri3OIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeJkcP33+QImL55P5iyVWbbYOlRgbstqzsAIDSDJQdAFCaStkBAKUxxwdSj/ahri3OIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeJovXb1ycrdfnrykoKCi0C2UfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjL/g8AAP//QQPhyQ==") bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x11, 0xffffffffffffffff, 0x100000000) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fd, 0x0, 0x3, 0x3}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x400101a0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) 2m27.949305221s ago: executing program 1 (id=1388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) close(r3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 2m27.010099623s ago: executing program 1 (id=1389): r0 = inotify_init1(0x80800) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x40000a1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc008, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m26.691864434s ago: executing program 1 (id=1393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m22.170496667s ago: executing program 1 (id=1400): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=0xffffffffffffffff, 0x2b, 0x0, 0xce2c, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0x702000a1, 0x1, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f0000000280)='GPL\x00'}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x2, 0x1, 0x1000, &(0x7f0000001000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0x3eb}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m21.084329323s ago: executing program 32 (id=1400): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=0xffffffffffffffff, 0x2b, 0x0, 0xce2c, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0x702000a1, 0x1, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f0000000280)='GPL\x00'}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x1ff, 0x2, 0x1, 0x1000, &(0x7f0000001000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0x3eb}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m58.809610776s ago: executing program 3 (id=1438): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb68, &(0x7f0000000c40)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x11, 0xffffffffffffffff, 0x100000000) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fd, 0x0, 0x3, 0x3}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x400101a0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) 1m56.740173565s ago: executing program 3 (id=1442): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x6002, 0x4, 0x410, 0xe8, 0x218, 0x0, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xa, 0x1, 0x2, 0x0, 0x0, "13b911e5284250ec81c17349113a3cfb44cacec1b17c5169103aa911ccde13af46942ffe283747525f02c26cacacf4224636c02166494a749e5e3abbd96793dd"}}}, {{@arp={@multicast1, @private=0xa010101, 0xffffff00, 0xff, 0x1, 0x5, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, 0x54, 0x9, 0xf9cf, 0x2, 0x6ef4, 0x8, 'gre0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x0, 0x10}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @empty, @private=0xa010102, 0xf, 0x5fa0832aa5fc72f3}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000240), 0x8080, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1m53.868259173s ago: executing program 3 (id=1446): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80b04) r2 = syz_open_dev$usbfs(&(0x7f0000000780), 0x20000007d, 0xad9c2c5129aa65e9) dup3(r1, r2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdir(&(0x7f0000000340)='./bus\x00', 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000000c0)) syz_mount_image$exfat(0x0, &(0x7f0000000400)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6398435, 0x0, 0x4, 0x0, &(0x7f0000000300)) rename(&(0x7f0000000000)='./bus\x00', &(0x7f00000001c0)='./file0\x00') bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m48.453272566s ago: executing program 3 (id=1454): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001840)='./file2\x00', 0x10890, &(0x7f0000000240)=ANY=[], 0xf7, 0x150d, &(0x7f0000001880)="$eJzs3Am4T9X3MPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCkmS8ScYbMqebrnkeMifd/CRJEhKS7Pe5Da9/v+Hfb+j36H3v+jzPeezlnLXP2nc933uG57nfr7qPqNmkVrWGzAz/Dv3rAH/+JwkAEgBgMADkAoAAAMrnLp87Y382jUn/1knEf0mjmZe7AnE5Sf8zN+l/5ib9z9yk/5mb9D9zk/5nbtL/zE36L0SmllLgStky7ybv//8fp/6TZLn+Zwr4j3ZI//9/o/+lo6X/mZv0P3OT/mdu0v/MLLjcBYjLTD7/mZv0X4hM7Q9/p7zh3OV+py1bgSsBYv/kcUIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxH/fOX+JAYBfx5e7LiGEEEIIIYQQQvxx/DuXuwIhhBBCCCGEEEL89yEo0GAggCyQFRIgGyTCFZAdckBOyAUxuBJyw1WQB66GvJAP8kMBKAiFoDCEQGCBIYIiUBTicA0Ug2uhOJSAklAKHJSGMnAdlIXroRzcAOXhRqgAN0FFqPTTOTPcClXhNqgGt0N1qAE1oRbcAbXhTqgDd0FduBvqwT1QH+6FBnAfNIRG0BjuhybwADSFZtAcWkBLaAWtfyc/Odffy38WesFz0Bv6QBL0hX7wPPSHATAQBsFgeAGGwIswFF6CYTAcRsDLMBJegVHwKoyG12AMvA5jYRyMhwkwESZBMrwBk+FNmAJvPZADpsF0mAEzYRakwNswG+bAXHgH5sF8WADJ2RbBYlgC78JSeA9S4X1YBh9AGiyHFbASVsFqWANrYR2shw2wETbBZtgCW2EbfAjbYQfshF2wG/bAXvgI9sHHsB8+gXT89F/MP/vbfOiBgIAKFRo0mAWzYAImYCImYnbMjjkxJ8YwhrkxN+bBPJgX82J+zI9JWBALY2EkJGRkLIJFMI5xLIbFsDgWx5JYEh06LINlsCxej+WwHJbH8lgBK2BFrISV8Ga8GatgFayKVbEaVsPqWB1rYk28A+/AO7EO1sG6WBfrYT2sj/WxATbAhtgQG2NjbIJNsCk2xebYHFtiS2yNrbENtsG22BbbY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW7YDbtjd+yBz+Az+Cw+i8/hc9gHq6u+2A/7YX/sjwNxEA7CF3AIvogv4ks4DIfjCHwZX8ZXcBSewdH4Go7BMVhFjcPxOAFZTcJkTMasMBmn4BScitNwGs7AmTgLUzAFZ+McnIPv4Dycj/NxIS7ExbgEl+BSfA9TMRWX4VlMw+W4AlfiKlyNq3AtrsO1uAE34gbcjJtxK27FD/FD3IE7cBfuwj24Bz/Cj/Bj/BiHYTqm4wE8gAfxIB7CQ3gYD+MRPIJH8Sgew2N4HI/jCTyJp/AknsbTeAbP4jkAOI/n8QJewIt4MePDrzIYZVQWlUUlqASVqBJVdpVd5VQ5VUzFVG6VW+VReVRelVflV/lVQVVQFVaFFSlSrCJVRBVRcRVXxVQxVVwVVyVVSeWUU2VUGVVWlVXlVDlVXt2oKqibVEVVSbVzN6ubVRXV3lVVt6lqqpqqrmqomqqWqqVqq9qqjqqj6qq6qp6qp+qre1UD1RcHYiOV0Zkmajg2VSOwuWqhWqpW6hV8ULVRo7Ctaqfaq4fVazgaO6o2rpN6THVW49t1UU+oCfik6qYmYXf1tOqhnlE91bOql2rreqs+air2Vf3UDOyvBqiBapCajTVURsdqqpfUs1mHqxHqZbUYX1Gj1KtqtHpNjVGvq7FqnBqvJqiJapJKVm+oyepNNUW9paaqaWq6mqFmqlkqRb2tZqs5aq56R81T89UCtVAtUovVEvWuWqreU6nqfbVMfaDS1HK1Qq1Uq9RqtUatVevUerVBbVSb1Ga1RW1V29SHarvaoXaqXWq32qP2qo/UPvWx2q8+UenqU3VA/UUdVJ+pQ+pzdVh9oY6oL9VR9ZU6pr5Wx9U36oQ6qU6pb9Vp9Z06o86qc+p7dV79oC6oH9VF5RVo1EprbXSgs+isOkFn04n6Cp1d59A5dS4d01fq3PoqnUdfrfPqfDq/KaAL6kK6sA41aatZR7qILqrj+hpdTF+ri+sSuqQupZ0urcvo63RZfb0up2/Q5fWNuoK+SVfUlXRlD/oWXUXfqqvq23Q1fbuurmvomrqWvkPX1nfqOvouXVffrevpe3R9fa9uoO/TDXUj3Vjfr5voB3RT3Uw31y10S91Kt9YP6jb6Id1Wt9Pt9cO6g35Ed9SP6k76Md1ZP6676Cd0X3hSd9NP6e76ad1DP6N76h/1Re11b91HJ+m+up9+XvfXA/RAPUgP1i/oIfpFPVS/pIfp4XqEflmP1K/oUfpVPVq/psfo1/VYPU6P1xP0RD1JJ+s39GT9pp6i39JT9TQ9Xc/QM/UsPfCXmeb+E/lv/p38oT+dfavepj/U2/UOvVPv0rv1Hr1X79X79D69X+/X6TpdH9AH9EF9UB/Sh/RhfVgf0Uf0UX1UH9PH9HF9XJ/QJ/X3+lt9Wn+nz+iz+qz+Xp/X5/WFX34GYNAoo40xgclispoEk80kmitMdpPD5DS5TMxcaXKbq0wec7XJa/KZ/KaAKWgKmcImNGSsYROZIqaoiZtrTDFzrSluSpiSppRxprQpY677j/N/r77WprVpY9qYtqataW/amw6mg+loOppOppPpbDqbLqaL6Wq6mm6mm+luupsepofpaXqaXqaX6W16mySTZPqZ501/M8AMNIPMYPOCGWKGmKFmqBlmhpkRZoQZaUaaUWaUGW1GmzFmjBlrxprxZryZaCaaZJ/LTDaTzRQzxUw1U830wbnMTDPTpJgUM9vMNnPNXDPPzDMLzAKzyCwyS8wSs9QsNakm1Swzy0yaWW6Wm5VmpVltVpu1Zq1Zb9abjWaj2Ww2mzSzzWwz2812s9PsNLvNbrPX7DX7zD6z3+w36SbdHDAHzEFz0Bwyh8xhc9gcMUfMUXPUHDPHzHFz3JwwJ8wpc8qcNqfNGXPGnDPnzHlz3lwwF8xFczHjti9QgQpMYIIsQZYgIUgIEoPEIHuQPcgZ5AxiQSzIHeQO8gRXB3mDfEH+oEBQMCgUFA7CgAIbcBAFRYKiQTy4JigWXBsUD0oEJYNSgQtKB2WC64KywfVBueCGoHxwY1AhuCmoGFQKKgc3B7cEVYJbg6rBbUG14PagelAjqBnUCu4Iagd3BnWCu4K6wd1BveCeoH5wb9AguC9oGDQKGgf3B02CB4KmQbOgedAiaBm0Clr/ofN7fybfQ6532CdMCvuG/cLnw/7hgHBgOCgcHL4QDglfDIeGL4XDwuHhiPDlcGT4SjgqfDUcHb4WjglfD8eG48Lx4YRwYjgpTA7fCCeHb4ZTwrfCqeG0cHowI5wZzgpTwrfD2eGccG74TjgvnB8uCBeGi8LFIf58Swyp4fvhsvCDMC1cHq4IV4arwtXhmnBtuC5cH24IN4abws3lh/x8aLg93BHuDHeFu8M94d7wo3Bf+HG4P/wkTA8/DQ+EfwkPhp+Fh8LPw8PhF+GR8MvwaPhVeCz8OjwefhOeCE+Gp8Jvw9Phd+GZ8Gx4Lvw+PB/+EF4Ifwwvhj7j5j7j8k6GDGWhLJRACZRIiZSdslNOykkxilFuyk15KA/lpbyUn/JTQSpIhakwZWBiKkJFKE5xKkbFqDgVp5JUkhw5KkNlqCyVpXJUjspTeapAFagiVaTKVJluoVvoVrqVbqPb6Ha6nWpQDapFtag21aY6VIfqUl2qR/WoPtWnBtSAGlJDakyNqQk1oabUlJpTc2pJLak1taY21IbaUltqT+2pA3WgjtSROlEn6kydqQt1oa7UlbpRN+pO3akH9aCe1JN6US/qTb0piZKoH/Wj/tSfBtJAGkyDaQgNoaE0lIbRMBpBI2gkjaRRNIpG02s0hl6nsTSOxtMEmkiTKJmSaTJNpik0habSVJpO02kmzaQUSqHZNJvm0lyaR/NoAS2gRbSIltASWkpLKZVSaRktozRKoxW0glbRKlpDa2gdraMNtIE20SbaQltoG22j7bSddtJO2k27aS/tpX20j/bTfkqndDpAB+ggHaRDdIgO02E6QkfoKB2lY3SMjtNxOkEn6BSdotN0ms7QGTpH5+g8/UAX6Ee6SJ4SbDabaK+w2W0Om9Pmsn8d57cFbEFbyBa2oc1r8/0mJmttcVvClrSlrLOlbRl73d/EFW0lW9nebG+xVeyttqqtaLPB/4xr2zttHXuXrWvvtrXsHb+J69l7bH37gG1gm9mGtoVtbFvZJvYB29Q2s81tC9vStrId7CO2o33UdrKP2c728b+Jl9r37Dq73m6wG+0++7E9Z7+3R+1X9rz9wfa2fexg+4IdYl+0Q+1Ldpgd/tsYwI6xr9uxdpwdbyfYiXbS38TT7Qw7086yKfZtO9vO+Zt4iX3XzrOpdoFdaBfZxT/FGTWl2vftMvuBTbPL7Qq70q6yq+0au/b/1rrSbrZb7Fa7135kt9sddqfdZXfbPT/FGevYbz+x6fZTe8R+aQ/az+whe8wetl/8FGes75j92h6339gT9qQ9Zb+1p+139ow9+9P6M9b+rf3RXrTeAiMr1mw44CyclRM4GyfyFZydc3BOzsUxvpJz81Wch6/mvJyP83MBLsiFuDCHTGyZOeIiXJTjfA0X42u5OJfgklyKHZfmMnwdl+XruRzfwOX5Rq7AN3FFrsSV+Wa+havwrVyVb+NqfDtX5xpck2vxHVyb7+Q6fBfX5bu5Ht/D9flebsD3cUNuxI35fm7CD3BTbsbNuQW35Fbcmh/kNvwQt+V23J4f5g78CHfkR7kTP8ad+XHuwk9wV36Su/FT3J2f5h78DPfkZ7kXP8e9uQ8ncV/ux89zfx7AA3kQD+YXeAi/yEP5JR7Gw3kEv8wj+RUexa8aAOAx/DqP5XE8nifwRJ7EyfwGT+Y3eQq/xVN5Gk/nGTyTZ3EKv82zeQ7P5Xd4Hs/nBbyQF/FiXsLv8lJ+j1P5fV7GH3AaL+cVvJJX8Wpew2t5Ha/nDbyRN/Fm3sJbeRt/yNt5B+/kXbyb9/Be/oj38ce8nz/hdP6UD/Bf+CB/xof4cz7MX/AR/pKP8ld8jL/m4/wNn+CTfIq/5dP8HZ/hs3yOv+fz/ANf4B/5InuGCCMV6chEQZQlyholRNmixOiKKHuUI8oZ5Ypi0ZVR7uiqKE90dZQ3yhfljwpEBaNCUeEojCiyEUdRVCQqGsWja6Ji0bVR8ahEVDIqFbmodFQmui4qG10flYtuiMpHN0YVopuiilGlqHJ0c3RLVCW6Naoa3RZVi26Pqkc1oppRreiOqHZ0Z1QnuiuqG90dlYvuiepH90YNovuihlGjqHF0f9QkeiBqGjWLmkctopZRq6h19GDUJnooahu1i9pHD0cdokeijtGjUafosahz9Pil/SWCn6+mf7U/Keob6V/ekN2lF8UXx5fE340vjb8XT42/H18W/yCeFl8eXxFfGV8VXx1fE18bXxdfH98Q3xjfFN8c3xLfGve+VlZwmPEgDMYFLovL6hJcNpfornDZXQ6X0+VyMXely+2ucnnc1S6vy+fyuwKuoCvkCrvQkbOOXeSKuKIu7q5xxdy1rrgr4Uq6Us650q6Ma+Vau9aujXvItXXtXHv3sHvYPeIecY8m/FK46+KecF3dk66be8o95Z52Pdwzrqd71vVyz7nero9Lckmun+vn+rv+bqAb6Aa7wW6IG+KGuqFumBvmRrgRbqQb6Ua5UW60G+3GuDFurBvrxrvxbqKb6JJdspvsJrspboqb6qa66W66m+lmuhSX4ma72W6um+vmuXlugVvgFrlFbolb4pa6pS7VpbplbplLc2luhVvhVrlVbo1b49a5dW6D2+A2uU1ui9vitrltbrvb7na6nW632+32ur1un9vn9rv9Lt2luwPugDvoDrpD7nN32H3hjrgv3VH3lTvmvnbH3TfuhDvpTjmvT7vv3Bl31p1z37vz7gd3wf3oLjrvkmNvxCbH3oxNib0VmxqbFpsemxGbGZsVS4m9HZsdmxObG3snNi82P7YgtjC2KLY4tiT2bmxp7L1Yauz92LLYB7G02PLYitjK2KrY6pj3hbZHvogv6uP+Gl/MX+uL+xK+pC/lnS/ty/jrfFl/vS/nb/Dl/Y2+gr/JV/SVfGXfzDf3LXxL38q39g/6Nv4h39a38+39w76Df8R39I/6Tv4x39k/7rv4J3xX/6Tv5p/y3f3T83/psu/ln/MQ6+OTfF/fzz/v+/sBfqAf5Af7F/wQ/6If6l/yw/xwP8K/7Ef6V/wo/6of7V/zY/zrfqwf58f7CX6in+ST/Rt+sn/TT/Fv+al+mp/uZ/iZfpZP8W/72X6On+vf8fP8fL/AL/SL/GK/xL/rl/r3fKp/3y/zH/g0v9yv8Cv9Kr/ar/Fr/Tq/3m/wG/0mv9lv8Vv9Nv+h3+53+J1+l9/t9/i9/iO/z3/s9/tPfLr/1B/wf/EH/Wf+kP/cH/Zf+CP+S3/Uf+WP+a/9cf+NP+FP+lP+W3/af+fP+LP+nP/en/c/+Av+R39R/mZNCCGEEOKfon9nf9+/83/qly1DPwDIsaPA4b+ec1Pen8cD1L7OsQSAx/p0b/Tr1qhRUlLSL8emaQiKLgSA2KX8n75/4Jd4ObSHR6ATtIOyf7e+AaryT/d9/9v88RsBEgGy/ZqT8XiUCH89//X/YP5m7/Lvzb8QoHjRSzkZJ/o1vjR/uX8w/54OvzN/ts+SAdr+j5zscCm+NH8ZeAgeh06/OVIIIYQQQgghhPjZAHW+x+8932Y8nxc0l3KywqX4957Pf0fVP2INQgghhBBCCCGE+N89+UzPRx/s1Kld139tgADwr2ddrkHWP0cZf4JBRt/+BGXI4M8/uNy/mYQQQgghhBB/tEs3/Ze7EiGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQIvP6978hTP3TBwNkudzLFEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIS6r/xMAAP//5ytRCA==") truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x111, 0x0, 0x4c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close(r1) userfaultfd(0x0) rename(&(0x7f0000001980)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00') 1m46.758592623s ago: executing program 3 (id=1455): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff85000000040000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m42.974493001s ago: executing program 3 (id=1465): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff43, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m41.422335313s ago: executing program 33 (id=1465): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff43, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 18.959041449s ago: executing program 2 (id=1601): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRES32], 0x1, 0x26c, &(0x7f0000000340)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x8000) openat(0xffffffffffffff9c, 0x0, 0x40, 0x104) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x400a8, 0x0, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x482180, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[], 0xff, 0x1506, &(0x7f0000001ac0)="$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") syz_emit_ethernet(0x66, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x10d002, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x121000, 0x0) 18.134580237s ago: executing program 5 (id=1604): socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x13a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) epoll_create(0xd) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fe0000008500000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000ff030000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 17.424857071s ago: executing program 2 (id=1605): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x6002, 0x4, 0x410, 0xe8, 0x218, 0x0, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xa, 0x1, 0x2, 0x0, 0x0, "13b911e5284250ec81c17349113a3cfb44cacec1b17c5169103aa911ccde13af46942ffe283747525f02c26cacacf4224636c02166494a749e5e3abbd96793dd"}}}, {{@arp={@multicast1, @private=0xa010101, 0xffffff00, 0xff, 0x1, 0x5, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, 0x54, 0x9, 0xf9cf, 0x2, 0x6ef4, 0x8, 'gre0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x0, 0x10}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @empty, @private=0xa010102, 0xf, 0x5fa0832aa5fc72f3}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0], 0xf9, 0x1213, &(0x7f0000000600)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001e00030903000000fedbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x2000c090}, 0x50) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000001840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c0097b3bb36c11e38e391e6040b53fde5e29b4b57936bdbefbe6d84cc30eed8aabcd8b0e81f51841cb4cd04e1701592edc1be5913d1d45ad8d2b258e73292959d6d0fb36114826d731c686aec5317292e1da0d6652259a04d32ba7857753283c4503b71919267741c50adbdda7cde8832063cb570e7d0943c8f1cea5be7a7da9aaaa93650aa1c177c1e0f1f6b5dfcc65155b5196c3d356e895c1d5bb6b22a87be9a3401cb4c8122199751"]) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 11.141885063s ago: executing program 2 (id=1606): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x6002, 0x4, 0x410, 0xe8, 0x218, 0x0, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xa, 0x1, 0x2, 0x0, 0x0, "13b911e5284250ec81c17349113a3cfb44cacec1b17c5169103aa911ccde13af46942ffe283747525f02c26cacacf4224636c02166494a749e5e3abbd96793dd"}}}, {{@arp={@multicast1, @private=0xa010101, 0xffffff00, 0xff, 0x1, 0x5, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, 0x54, 0x9, 0xf9cf, 0x2, 0x6ef4, 0x8, 'gre0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x0, 0x10}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @empty, @private=0xa010102, 0xf, 0x5fa0832aa5fc72f3}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000001840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c0097b3bb36c11e38e391e6040b53fde5e29b4b57936bdbefbe6d84cc30eed8aabcd8b0e81f51841cb4cd04e1701592edc1be5913d1d45ad8d2b258e73292959d6d0fb36114826d731c686aec5317292e1da0d66522"]) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 11.059142916s ago: executing program 5 (id=1608): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x8000) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x8b0, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x884, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1c79, 0x3, 0x2, 0x7, 0xff, 0x8, 0x1, 0x1, 0x2d0, 0x2, 0x1, 0xb, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x6, 0x1, 0x5, 0xc4, 0xa117, 0x8, 0xab, 0xfffffffa, 0x1, 0x0, 0x4, 0x1fc0000, 0x4, 0x200, 0x80, 0x1, 0x1, 0x0, 0x4, 0x7, 0x2, 0x1, 0x610, 0x2, 0xb, 0xfb, 0x4, 0xa29, 0x7f, 0x82, 0x200, 0x44, 0x2, 0x1, 0x2, 0x101, 0x10005, 0xdd, 0x5, 0x8, 0x431d3ae0, 0xc03, 0x9, 0x5, 0x9349, 0x6, 0x100, 0x5, 0x1, 0x1, 0x8, 0x401, 0x3, 0x6, 0x5, 0x6, 0x19e, 0x2, 0x2, 0xf, 0xc00000, 0x4003ff, 0x7, 0x3326ea0a, 0x8007, 0x80000001, 0x25, 0x1, 0x8, 0x8001, 0x9, 0x6, 0x54773819, 0x8, 0x8001, 0x6, 0x7f, 0x373, 0x4, 0x4, 0x80, 0xc000000, 0x7ff, 0x6138, 0x49e, 0x3ff, 0x8, 0x0, 0x3, 0x0, 0x2, 0x10000, 0x3, 0x2, 0x9, 0x1, 0x7fffffff, 0x101, 0x3, 0xc42, 0x4, 0x7, 0x401, 0x5, 0x0, 0x4, 0x80000001, 0x8000, 0x5, 0x2fb, 0x5907, 0x8, 0x81, 0x7, 0x4, 0xffff7ffc, 0xffff0001, 0x2, 0xffff, 0x8, 0x2396, 0x8000, 0xfffffffc, 0x5, 0x1, 0xfff, 0x91e0000, 0x4, 0x3, 0xfae, 0x40, 0x900, 0x6, 0x0, 0x2, 0x6, 0x6, 0xdc, 0x9, 0x7ff, 0xfffffff7, 0x4, 0x2, 0x30, 0xff, 0x3, 0x80, 0x6, 0x7, 0x9, 0x4, 0x0, 0x5, 0x4342, 0xfa52, 0x4, 0x7fff, 0x7, 0x381, 0xfffffff2, 0xfffffff6, 0x100, 0x8, 0xf73, 0x80000001, 0x1, 0x5, 0xe, 0x0, 0x3, 0xfffffc01, 0x2, 0xe, 0x4, 0x4, 0xf5f, 0x2, 0x0, 0x6, 0x1, 0x9, 0x80, 0x2, 0x0, 0x0, 0xfb, 0x3, 0x8, 0x0, 0x80000001, 0x5, 0x0, 0xb, 0x3159, 0x6, 0xfffffff7, 0xe4f7, 0x6, 0xffffffff, 0xfffffffc, 0x8, 0x9, 0x1c15, 0xa098, 0x0, 0x0, 0x6, 0xb, 0x6, 0x2, 0x80000001, 0x9, 0xfffffed0, 0x2, 0x7, 0x56, 0x2, 0x4, 0x7, 0x2009, 0xb, 0x6, 0x4, 0x1, 0x3, 0x7, 0x9, 0x7, 0xe, 0x0, 0x1, 0x9, 0x1, 0x0, 0x40, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x22bf0bf0, 0xffffffff, 0xffff0d7b, 0x6, 0x3, 0xc79, 0x74100000, 0x800, 0x7, 0xfffffffd, 0x76e8, 0x4, 0x0, 0x9, 0xb046, 0x7, 0x101, 0x8, 0x0, 0x6, 0x3ff, 0xfffffffe, 0x0, 0x7f, 0x3, 0x7c68080b, 0x4, 0x9, 0x3, 0x80000001, 0x0, 0xa, 0x7, 0x2, 0x4, 0x62f1, 0x2, 0x995, 0x1, 0xf, 0xb, 0x7f, 0x9, 0x7, 0x4, 0x6, 0xc39, 0x6, 0x7, 0x2, 0x5, 0x4b0f, 0x3ff, 0x3, 0x93, 0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x9, 0xffffffff, 0x4, 0x9, 0xa2c, 0xda0b, 0x7, 0x40, 0x9, 0xefa8, 0x1, 0xe6, 0x0, 0xe, 0x2, 0x4, 0x6, 0xfffffff9, 0x40000004, 0x8, 0x4, 0x0, 0xea, 0xbed1, 0x10001, 0x8, 0x7fff, 0x3, 0x4, 0x0, 0x9, 0x5dac, 0xdb, 0x1, 0x8, 0x9, 0x2, 0x2000, 0xfc000000, 0xfffffff9, 0x3, 0x4, 0x0, 0x0, 0x4, 0xfffffffc, 0xfffffff9, 0x5, 0x3, 0xe2000, 0x6, 0x8001, 0xa, 0x6, 0x5, 0x0, 0xef83, 0x8, 0x4, 0x3ff, 0x0, 0x5, 0x10000, 0xf6, 0x7, 0x3, 0x3ff, 0x5, 0xaf7e, 0x5, 0x7ff, 0xeab9, 0x3, 0x8, 0x525, 0x9, 0x0, 0x3, 0x401, 0x9, 0x6, 0x8, 0x1, 0x8, 0x7, 0xfffffffb, 0x7, 0x80000001, 0xfffffffd, 0x4, 0x8fb3, 0x7fffffff, 0xfffffff9, 0x800, 0x2, 0x7fff, 0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x82, 0xff, 0x6, 0x3, 0x46, 0x1, 0x958, 0x3, 0x80000001, 0x7, 0x9, 0x5, 0xfffffffa, 0x0, 0x5, 0x4d4, 0x9, 0x5, 0x75968511, 0x0, 0x46cc, 0x8, 0x6, 0x40, 0x9, 0x8, 0x4, 0x7054, 0x3, 0x3, 0x1, 0x70, 0x9, 0x9, 0x9, 0x400, 0x3dc1, 0x0, 0xe6a2, 0x8, 0x6, 0x8, 0x6, 0x80000001, 0xff, 0x2, 0x6, 0x80000000, 0x0, 0xd42700, 0x8001, 0x8, 0x8000, 0x9, 0x4, 0x6302, 0x1eeacb39, 0xe, 0x2, 0x5, 0xd9a, 0x9, 0x0, 0x8, 0x3, 0x2, 0x0, 0x100, 0x3ff, 0x5, 0x3ff, 0x40, 0x7ffffffe, 0xff, 0x5, 0x6, 0x1000, 0x37, 0x81, 0x7fffffff, 0x9, 0x5ca, 0x5, 0x5d6a, 0x2, 0x3, 0x6, 0x81, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x7f, 0x4, 0x9, {0x3, 0x1, 0x4, 0x17f, 0x0, 0x1ff}, {0x6, 0x0, 0xff, 0x7, 0x5, 0xffffffff}, 0x9, 0xe90, 0x6db5cd0}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) syz_open_pts(r0, 0x800) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r7, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r7, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8080c61) 8.28244285s ago: executing program 2 (id=1610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40041}, 0x2000c090) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, 0x0, 0xffe7) 7.892715563s ago: executing program 5 (id=1611): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) 7.554474574s ago: executing program 5 (id=1613): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101001, 0x200) write$tun(r3, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x10004000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) 5.039752489s ago: executing program 0 (id=1615): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0xf) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x10) 4.806428737s ago: executing program 0 (id=1616): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xc], 0x3}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() r2 = socket$unix(0x1, 0x1, 0x0) close(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x564b330a3bd58800}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0xfffffffffffffee0, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.885750928s ago: executing program 4 (id=1617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10002, 0x0, 0xa000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x36, 0x0, 0x0) 3.683156775s ago: executing program 0 (id=1618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x6ab0, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r4, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") syz_mount_image$exfat(0x0, &(0x7f0000001080)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) open(&(0x7f0000000340)='./bus\x00', 0x4000, 0x20) preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000000a00)=""/4081, 0xff1}], 0x1, 0x0, 0x84, 0xa) 3.439933213s ago: executing program 4 (id=1619): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 3.374827396s ago: executing program 4 (id=1620): r0 = io_uring_setup(0x72b5, &(0x7f0000000180)={0x0, 0x8f28, 0x0, 0x2, 0x137}) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) 3.2460251s ago: executing program 4 (id=1621): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r0, 0x0, 0x0, 0x20008004, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) 3.101877145s ago: executing program 4 (id=1622): mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x80000006) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read$FUSE(r3, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @loopback, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) 1.810475568s ago: executing program 0 (id=1623): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000640)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@utf8no}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_mixed}, {@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@uni_xlate}, {@utf8no}, {@numtail}]}, 0x27, 0x358, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r0, &(0x7f0000003cc0)=""/4128, 0x1020) 1.395979652s ago: executing program 0 (id=1624): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, 0x8, 0x2) 340.350168ms ago: executing program 5 (id=1625): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r1, &(0x7f0000000040)={0x11, 0x4, r2, 0x1, 0x3, 0x6, @remote}, 0x14) syz_emit_ethernet(0x15, &(0x7f0000000340)={@remote, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@llc_tr={0x11, {@llc={0xaa, 0xfc, '\''}}}}}, 0x0) syz_open_procfs(0x0, 0x0) 251.230061ms ago: executing program 0 (id=1626): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000a400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 234.623252ms ago: executing program 2 (id=1627): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008004, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 119.937235ms ago: executing program 2 (id=1628): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, 0x0, &(0x7f0000001600)=""/58, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 2.38565ms ago: executing program 5 (id=1629): setregid(0xee00, 0xee00) syz_open_procfs(0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c6a71666d743d76667376302c70726a6a71756f74613d66326673002c6d6f64653d61646170746976652c686561702c6e6f7265636f766572792c667379ee635f6d6f64653d706f7369782c757365725f78617474722c64697361626c655f726f6c6c5f666f72776172642c000000"], 0x1, 0x105c9, &(0x7f0000020bc0)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 0s ago: executing program 4 (id=1630): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x141042, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") kernel console output (not intermixed with test programs): ill use data=ordered instead of data journaling mode [ 549.685354][T10000] EXT4-fs (loop1): 1 truncate cleaned up [ 549.692509][T10000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.759577][ T9989] loop0: detected capacity change from 0 to 32768 [ 549.900426][ T9989] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.978 (9989) [ 550.013194][ T9989] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 550.158320][ T9989] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 550.396260][ T9989] BTRFS info (device loop0): setting nodatasum [ 550.564566][ T9989] BTRFS info (device loop0): force zlib compression, level 3 [ 550.609631][ T9989] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 550.652886][ T9989] BTRFS info (device loop0): use lzo compression, level 0 [ 550.690799][ T9989] BTRFS info (device loop0): turning on flush-on-commit [ 550.724599][ T9989] BTRFS info (device loop0): enabling auto defrag [ 550.774645][ T9989] BTRFS info (device loop0): max_inline at 4096 [ 550.803234][ T9989] BTRFS info (device loop0): using free space tree [ 550.821311][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.863405][ T9989] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 550.864164][ T9989] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 550.907295][ T9989] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 550.965370][ T9989] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 550.995125][ T9989] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 551.045596][ T9989] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 551.091822][T10024] loop1: detected capacity change from 0 to 512 [ 551.115123][ T9989] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 551.115744][ T9989] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 551.154391][T10024] EXT4-fs warning (device loop1): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 551.185355][ T9989] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 551.185941][ T9989] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 551.234366][T10024] EXT4-fs warning (device loop1): ext4_multi_mount_protect:318: MMP failure info: last update time: 1756377954, last update node: nogikhp920.muc.corp.google.com, last update device: loop12 [ 551.245058][ T9989] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 551.315849][ T9989] BTRFS error (device loop0): open_ctree failed: -12 [ 551.526488][ T5764] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (5764) [ 551.544440][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 551.756006][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.789411][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 552.195826][T10037] loop1: detected capacity change from 0 to 256 [ 552.255402][T10037] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 552.266445][T10037] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 552.318897][T10037] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 555.767373][ T9] usb 3-1: string descriptor 0 read error: -71 [ 555.785189][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 555.804402][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 555.817997][ T9] usb 3-1: can't set config #1, error -71 [ 555.826945][ T9] usb 3-1: USB disconnect, device number 6 [ 556.227279][T10050] loop0: detected capacity change from 0 to 256 [ 556.238037][T10050] exfat: Deprecated parameter 'utf8' [ 556.243630][T10050] exfat: Deprecated parameter 'namecase' [ 556.380750][T10050] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbcde3a0f, utbl_chksum : 0xe619d30d) [ 556.729644][ T5764] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 557.069192][T10054] loop3: detected capacity change from 0 to 4096 [ 557.102406][T10054] EXT4-fs: inline encryption not supported [ 557.116751][T10056] loop1: detected capacity change from 0 to 512 [ 557.126267][T10054] EXT4-fs: inline encryption not supported [ 557.135499][T10054] ext4: Unknown parameter 'smackfstransmute' [ 557.145896][T10056] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 557.180769][T10056] EXT4-fs (loop1): 1 truncate cleaned up [ 557.205284][T10056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.535104][T10061] netlink: 'syz.3.990': attribute type 2 has an invalid length. [ 557.630033][T10061] loop3: detected capacity change from 0 to 512 [ 558.215713][T10063] x_tables: duplicate underflow at hook 3 [ 559.071418][T10071] loop3: detected capacity change from 0 to 2048 [ 559.147501][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.996'. [ 559.410577][T10071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.118578][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.252154][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.428133][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 560.438404][T10084] loop3: detected capacity change from 0 to 8192 [ 560.463479][T10084] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 560.625585][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.646308][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 560.664581][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 560.676949][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 560.694577][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 560.713206][ T9] usb 1-1: SerialNumber: syz [ 560.864572][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 560.873497][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.884756][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.894986][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 560.901771][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 560.921853][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.953491][ T9] usb 1-1: 0:2 : does not exist [ 560.961064][ T8] usb 2-1: config 0 descriptor?? [ 560.974800][ T9] usb 1-1: unit 49 not found! [ 561.024925][ T9] usb 1-1: USB disconnect, device number 8 [ 561.095508][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.998'. [ 561.114796][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 561.152168][T10095] 9pnet_fd: Insufficient options for proto=fd [ 561.413786][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 561.434542][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 561.453580][ T8] usb 2-1: USB disconnect, device number 7 [ 562.837351][T10116] x_tables: duplicate underflow at hook 3 [ 563.584486][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 563.617744][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.625807][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.082251][T10123] loop0: detected capacity change from 0 to 512 [ 564.184969][T10123] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 564.264878][T10123] EXT4-fs (loop0): 1 truncate cleaned up [ 564.285718][T10123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.393031][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.448686][T10127] loop1: detected capacity change from 0 to 32768 [ 565.504936][T10127] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 565.530176][T10127] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 565.540453][T10127] BTRFS info (device loop1): setting nodatasum [ 565.564270][T10127] BTRFS info (device loop1): force zlib compression, level 3 [ 565.574524][T10127] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 565.583781][T10127] BTRFS info (device loop1): use lzo compression, level 0 [ 565.605846][T10127] BTRFS info (device loop1): turning on flush-on-commit [ 565.649072][T10127] BTRFS info (device loop1): enabling auto defrag [ 565.664533][T10127] BTRFS info (device loop1): max_inline at 4096 [ 565.670840][T10127] BTRFS info (device loop1): using free space tree [ 566.253549][T10127] BTRFS info (device loop1): enabling ssd optimizations [ 566.774399][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 566.927739][ T5769] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 566.981847][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.999907][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 567.012623][ T8] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 567.110340][T10167] x_tables: duplicate underflow at hook 3 [ 567.867935][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 567.876644][ T8] usb 1-1: SerialNumber: syz [ 568.038191][ T5763] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (5763) [ 568.123252][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'. [ 569.033493][ T8] usb 1-1: 0:2 : does not exist [ 569.038644][ T8] usb 1-1: unit 48 not found! [ 569.056466][ T8] usb 1-1: USB disconnect, device number 9 [ 569.220890][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.480285][T10188] loop0: detected capacity change from 0 to 4096 [ 569.495523][T10188] EXT4-fs: inline encryption not supported [ 569.552189][T10188] EXT4-fs (loop0): Test dummy encryption mode enabled [ 569.684676][T10188] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 569.703246][T10188] System zones: 0-5 [ 569.725887][T10188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.930848][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.252071][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 573.190715][T10217] loop0: detected capacity change from 0 to 4096 [ 573.237643][T10217] EXT4-fs: inline encryption not supported [ 573.256139][T10217] EXT4-fs: inline encryption not supported [ 573.262095][T10217] ext4: Unknown parameter 'smackfstransmute' [ 573.632451][T10221] netlink: 'syz.0.1028': attribute type 2 has an invalid length. [ 573.708296][T10221] loop0: detected capacity change from 0 to 512 [ 574.916745][T10219] loop1: detected capacity change from 0 to 32768 [ 575.005230][T10219] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 575.038136][T10219] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 575.065816][T10219] BTRFS info (device loop1): setting nodatasum [ 575.082337][T10219] BTRFS info (device loop1): force zlib compression, level 3 [ 575.112808][T10219] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 575.134063][T10238] loop0: detected capacity change from 0 to 4096 [ 575.171322][T10219] BTRFS info (device loop1): use lzo compression, level 0 [ 575.196747][T10238] EXT4-fs: inline encryption not supported [ 575.223098][T10219] BTRFS info (device loop1): turning on flush-on-commit [ 575.271772][T10238] EXT4-fs (loop0): Test dummy encryption mode enabled [ 575.290835][T10219] BTRFS info (device loop1): enabling auto defrag [ 575.303187][T10219] BTRFS info (device loop1): max_inline at 4096 [ 575.319249][T10238] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 575.329869][T10219] BTRFS info (device loop1): using free space tree [ 575.350918][T10238] System zones: 0-5 [ 575.454984][T10244] loop3: detected capacity change from 0 to 256 [ 575.465899][T10244] exfat: Deprecated parameter 'utf8' [ 575.471492][T10244] exfat: Deprecated parameter 'namecase' [ 575.544254][T10244] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbcde3a0f, utbl_chksum : 0xe619d30d) [ 575.791113][T10238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.051512][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1034'. [ 578.071573][T10266] 9pnet_fd: Insufficient options for proto=fd [ 579.377657][T10219] BTRFS error (device loop1): open_ctree failed: -4 [ 579.707032][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.121017][T10283] loop0: detected capacity change from 0 to 4096 [ 580.176608][T10283] EXT4-fs: inline encryption not supported [ 580.213775][T10283] EXT4-fs: inline encryption not supported [ 580.234519][T10283] ext4: Unknown parameter 'smackfstransmute' [ 580.498054][T10291] loop1: detected capacity change from 0 to 8192 [ 580.580873][T10291] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 580.607676][T10295] netlink: 'syz.0.1039': attribute type 2 has an invalid length. [ 581.390043][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'. [ 581.421196][T10301] 9pnet_fd: Insufficient options for proto=fd [ 582.202584][T10305] loop0: detected capacity change from 0 to 4096 [ 582.245735][T10305] EXT4-fs: inline encryption not supported [ 582.326930][T10305] EXT4-fs (loop0): Test dummy encryption mode enabled [ 582.388327][T10305] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 582.427684][T10305] System zones: 0-5 [ 582.447664][T10305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.467339][T10306] loop3: detected capacity change from 0 to 8192 [ 582.531814][T10306] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 584.740510][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1048'. [ 584.852406][T10318] 9pnet_fd: Insufficient options for proto=fd [ 585.776584][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.650990][T10336] netlink: 'syz.2.1055': attribute type 2 has an invalid length. [ 587.532230][T10345] loop1: detected capacity change from 0 to 512 [ 587.706799][T10345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.770948][T10345] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 587.863282][T10345] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.1057: corrupted inode contents [ 587.893805][T10345] EXT4-fs (loop1): Remounting filesystem read-only [ 588.042453][T10352] loop3: detected capacity change from 0 to 8192 [ 588.102605][T10352] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 588.143004][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.156869][ T42] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 588.334835][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1058'. [ 588.358833][T10357] 9pnet_fd: Insufficient options for proto=fd [ 589.010974][T10347] loop0: detected capacity change from 0 to 40427 [ 589.056411][T10347] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 589.101248][T10347] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 589.142397][T10347] F2FS-fs (loop0): invalid crc value [ 589.831669][T10347] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 589.894737][T10347] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 589.913856][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1064'. [ 589.926220][T10374] 9pnet_fd: Insufficient options for proto=fd [ 590.068513][T10370] loop1: detected capacity change from 0 to 4096 [ 590.109456][T10370] EXT4-fs: inline encryption not supported [ 590.166759][T10370] EXT4-fs (loop1): Test dummy encryption mode enabled [ 590.222634][T10370] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 590.231670][ T27] audit: type=1800 audit(1775204461.605:60): pid=10347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1059" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 590.262635][T10370] System zones: 0-5 [ 590.315406][T10370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.440081][ T5772] syz-executor: attempt to access beyond end of device [ 590.440081][ T5772] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 590.484545][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 590.522715][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 591.661113][T10387] loop3: detected capacity change from 0 to 4096 [ 591.675317][T10387] EXT4-fs: inline encryption not supported [ 591.683401][T10387] EXT4-fs (loop3): Test dummy encryption mode enabled [ 591.704137][T10387] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 591.709974][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.722117][T10387] System zones: 0-5 [ 591.746567][T10387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.891312][T10392] loop0: detected capacity change from 0 to 4096 [ 592.970654][T10392] EXT4-fs: inline encryption not supported [ 593.016599][T10392] EXT4-fs: inline encryption not supported [ 593.045671][T10392] ext4: Unknown parameter 'smackfstransmute' [ 593.203720][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.441793][T10408] netlink: 'syz.0.1066': attribute type 2 has an invalid length. [ 593.514700][T10408] loop0: detected capacity change from 0 to 512 [ 595.035267][T10407] loop1: detected capacity change from 0 to 8192 [ 595.056331][T10407] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 595.312001][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'. [ 595.323785][T10416] 9pnet_fd: Insufficient options for proto=fd [ 595.533439][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 595.557757][T10420] 9pnet_fd: Insufficient options for proto=fd [ 595.610530][T10418] syzkaller0: entered promiscuous mode [ 595.665510][T10418] syzkaller0: entered allmulticast mode [ 595.858326][T10424] loop0: detected capacity change from 0 to 512 [ 595.940568][T10424] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 596.021547][T10424] EXT4-fs (loop0): 1 truncate cleaned up [ 596.056262][T10424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.808003][T10433] random: crng reseeded on system resumption [ 597.860935][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.912653][ T1137] Bluetooth: hci4: Frame reassembly failed (-84) [ 599.535468][T10451] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1084'. [ 599.659345][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'. [ 599.690143][T10453] 9pnet_fd: Insufficient options for proto=fd [ 600.384583][ T9985] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 600.990349][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1083'. [ 602.633767][T10467] loop0: detected capacity change from 0 to 512 [ 602.685068][T10467] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 602.743231][T10467] EXT4-fs (loop0): 1 truncate cleaned up [ 602.756990][T10467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.691918][T10482] loop1: detected capacity change from 0 to 256 [ 603.792138][T10482] exfat: Deprecated parameter 'utf8' [ 603.874863][T10482] exfat: Deprecated parameter 'namecase' [ 603.913077][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.994494][T10482] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbcde3a0f, utbl_chksum : 0xe619d30d) [ 604.188191][T10484] syzkaller0: entered promiscuous mode [ 604.214145][T10484] syzkaller0: entered allmulticast mode [ 604.481775][T10487] loop0: detected capacity change from 0 to 256 [ 604.573220][T10487] FAT-fs (loop0): Directory bread(block 64) failed [ 604.601740][T10487] FAT-fs (loop0): Directory bread(block 65) failed [ 604.620142][T10487] FAT-fs (loop0): Directory bread(block 66) failed [ 604.640367][T10487] FAT-fs (loop0): Directory bread(block 67) failed [ 604.659049][T10487] FAT-fs (loop0): Directory bread(block 68) failed [ 604.679223][T10487] FAT-fs (loop0): Directory bread(block 69) failed [ 604.699249][T10487] FAT-fs (loop0): Directory bread(block 70) failed [ 604.719406][T10487] FAT-fs (loop0): Directory bread(block 71) failed [ 604.736388][T10487] FAT-fs (loop0): Directory bread(block 72) failed [ 604.743158][T10487] FAT-fs (loop0): Directory bread(block 73) failed [ 604.927605][T10487] syz.0.1094: attempt to access beyond end of device [ 604.927605][T10487] loop0: rw=2051, sector=1224, nr_sectors = 608 limit=256 [ 606.489503][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1096'. [ 606.503619][T10495] 9pnet_fd: Insufficient options for proto=fd [ 607.691696][T10497] loop0: detected capacity change from 0 to 512 [ 608.926643][T10503] loop0: detected capacity change from 0 to 8192 [ 608.954197][T10503] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 608.965577][T10511] loop3: detected capacity change from 0 to 512 [ 608.975402][T10511] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 609.211801][T10511] EXT4-fs (loop3): 1 truncate cleaned up [ 609.219446][T10511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.551405][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'. [ 609.625358][T10520] 9pnet_fd: Insufficient options for proto=fd [ 611.840168][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.220729][T10546] loop0: detected capacity change from 0 to 8192 [ 613.241783][ T28] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 613.292623][T10546] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 614.269450][ T28] usb 4-1: unable to get BOS descriptor or descriptor too short [ 614.286666][ T28] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.315465][ T28] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 614.377841][ T28] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 614.427839][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.488504][ T28] usb 4-1: Product: syz [ 614.492749][ T28] usb 4-1: Manufacturer: syz [ 614.534564][ T28] usb 4-1: SerialNumber: syz [ 614.552170][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 614.577555][ T28] usb 4-1: selecting invalid altsetting 1 [ 614.616547][T10555] 9pnet_fd: Insufficient options for proto=fd [ 614.625288][ T28] usb 4-1: unit 6 not found! [ 614.802590][T10563] 9pnet_fd: Insufficient options for proto=fd [ 614.990332][ T28] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 615.047950][ T28] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 615.081400][ T28] usb 4-1: USB disconnect, device number 7 [ 615.142764][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 615.725955][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'. [ 615.738050][T10570] 9pnet_fd: Insufficient options for proto=fd [ 616.464702][ T23] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 616.706063][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 616.715043][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 616.754856][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.789503][ T23] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 616.833235][ T23] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 616.844308][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.852334][ T23] usb 4-1: Product: syz [ 616.891961][ T23] usb 4-1: Manufacturer: syz [ 616.907455][ T23] usb 4-1: SerialNumber: syz [ 617.284126][ T23] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 617.326288][ T23] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 617.539035][ T23] usb 4-1: USB disconnect, device number 8 [ 617.736078][ T5910] udevd[5910]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 620.466382][T10599] x_tables: duplicate underflow at hook 3 [ 621.258244][T10604] netlink: 'syz.2.1123': attribute type 12 has an invalid length. [ 622.077843][T10606] loop3: detected capacity change from 0 to 256 [ 622.246077][T10606] FAT-fs (loop3): Directory bread(block 64) failed [ 622.277647][T10606] FAT-fs (loop3): Directory bread(block 65) failed [ 622.287800][T10606] FAT-fs (loop3): Directory bread(block 66) failed [ 622.314601][T10606] FAT-fs (loop3): Directory bread(block 67) failed [ 622.331638][T10606] FAT-fs (loop3): Directory bread(block 68) failed [ 622.351818][T10606] FAT-fs (loop3): Directory bread(block 69) failed [ 622.360348][T10606] FAT-fs (loop3): Directory bread(block 70) failed [ 622.367469][T10606] FAT-fs (loop3): Directory bread(block 71) failed [ 622.374141][T10606] FAT-fs (loop3): Directory bread(block 72) failed [ 622.381467][T10606] FAT-fs (loop3): Directory bread(block 73) failed [ 622.705640][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 623.034953][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.578416][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.589296][ T23] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 623.598603][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 623.607687][ T23] usb 3-1: SerialNumber: syz [ 623.840591][ T23] usb 3-1: 0:2 : does not exist [ 623.864474][ T23] usb 3-1: unit 5 not found! [ 623.891852][ T23] usb 3-1: USB disconnect, device number 7 [ 624.065668][T10616] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1126'. [ 624.393809][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.669981][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.677039][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.174701][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 625.355915][T10638] tipc: Enabled bearer , priority 0 [ 625.410452][T10640] syzkaller0: entered promiscuous mode [ 625.416915][T10640] syzkaller0: entered allmulticast mode [ 625.532338][T10641] x_tables: duplicate underflow at hook 3 [ 626.136976][T10636] tipc: Resetting bearer [ 626.215195][T10631] tipc: Resetting bearer [ 626.291197][T10646] loop3: detected capacity change from 0 to 512 [ 626.315629][T10631] tipc: Disabling bearer [ 626.318808][T10646] ext3: Unknown parameter 'noacl' [ 626.807168][T10653] 9pnet_fd: Insufficient options for proto=fd [ 627.007746][T10656] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1136'. [ 627.679232][T10660] loop1: detected capacity change from 0 to 128 [ 627.740646][T10660] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 627.823541][T10660] ext4 filesystem being mounted at /270/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 629.692445][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 630.954783][ T8898] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 631.104506][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 632.754476][ T8898] usb 1-1: Using ep0 maxpacket: 32 [ 632.923319][T10686] x_tables: duplicate underflow at hook 3 [ 633.426704][T10689] loop3: detected capacity change from 0 to 1024 [ 633.434166][T10689] EXT4-fs: inline encryption not supported [ 633.479015][ T8898] usb 1-1: device descriptor read/all, error -71 [ 633.501266][T10692] loop0: detected capacity change from 0 to 256 [ 633.558941][T10689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 633.566594][T10692] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 633.612746][T10689] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.959997][ T42] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 6) [ 634.053677][ T42] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 634.077488][ T42] EXT4-fs (loop3): This should not happen!! Data will be lost [ 634.077488][ T42] [ 634.259851][T10708] 9pnet_fd: Insufficient options for proto=fd [ 634.472317][ T42] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 634.806213][ T42] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 634.914408][ T42] EXT4-fs (loop3): This should not happen!! Data will be lost [ 634.914408][ T42] [ 635.007539][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 636.362461][T10714] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1151'. [ 637.384493][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 637.464332][T10730] x_tables: duplicate underflow at hook 3 [ 637.705274][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 637.774735][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.034864][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.075065][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 638.091948][ T23] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 638.130558][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.162082][ T23] usb 2-1: config 0 descriptor?? [ 638.614391][T10719] loop0: detected capacity change from 0 to 40427 [ 638.653091][T10719] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 638.672575][T10719] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 638.705376][T10719] F2FS-fs (loop0): invalid crc value [ 638.835083][ T9] usb 2-1: USB disconnect, device number 9 [ 638.835862][T10728] loop3: detected capacity change from 0 to 40427 [ 638.866905][T10728] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 638.877913][T10728] F2FS-fs (loop3): invalid crc value [ 639.001117][T10719] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 639.036158][T10728] F2FS-fs (loop3): Found nat_bits in checkpoint [ 639.048170][T10719] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 640.089145][T10728] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 640.290702][T10745] loop1: detected capacity change from 0 to 512 [ 640.316401][T10745] EXT4-fs warning (device loop1): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 640.335287][T10745] EXT4-fs warning (device loop1): ext4_multi_mount_protect:318: MMP failure info: last update time: 1756377954, last update node: nogikhp920.muc.corp.google.com, last update device: loop12 [ 640.478502][T10749] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1162'. [ 641.581478][T10752] tipc: Enabled bearer , priority 0 [ 641.593414][T10752] syzkaller0: entered promiscuous mode [ 641.600320][T10752] syzkaller0: entered allmulticast mode [ 641.698439][T10754] loop1: detected capacity change from 0 to 256 [ 641.780990][T10754] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 641.791886][T10754] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 641.848540][T10754] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 643.005232][T10752] tipc: Resetting bearer [ 643.039760][T10751] tipc: Resetting bearer [ 643.135220][T10751] tipc: Disabling bearer [ 644.114528][ T8898] tipc: Node number set to 664458151 [ 644.285226][T10763] 9pnet_fd: Insufficient options for proto=fd [ 646.229064][T10774] x_tables: duplicate underflow at hook 3 [ 646.605185][T10777] loop3: detected capacity change from 0 to 512 [ 646.735617][T10784] fuse: Bad value for 'fd' [ 646.742863][T10784] capability: warning: `syz.0.1169' uses deprecated v2 capabilities in a way that may be insecure [ 646.745601][T10777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 646.766529][T10777] ext4 filesystem being mounted at /285/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.964471][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 646.985970][T10777] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 647.021288][T10777] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 647.042243][T10777] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.1167: Failed to acquire dquot type 0 [ 647.064464][T10777] overlayfs: failed to set uuid (/file0, err=-117); falling back to uuid=null. [ 647.081141][T10777] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 647.097036][T10787] loop0: detected capacity change from 0 to 16 [ 647.108033][T10787] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0xc130e81b, 0x7bbbea8c expected [ 647.142557][T10777] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 647.162347][T10777] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.1167: Failed to acquire dquot type 0 [ 647.184112][T10777] overlayfs: failed to verify origin (/, ino=2, err=-117) [ 647.192014][T10777] overlayfs: failed to verify upper root origin [ 647.224497][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 647.239323][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.278549][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.319148][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 647.344631][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 647.368972][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 647.380073][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.415629][ T9] usb 3-1: config 0 descriptor?? [ 647.444181][ T5763] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 647.462103][T10786] loop0: detected capacity change from 0 to 512 [ 647.500605][T10786] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 647.541027][T10786] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 647.559446][T10786] EXT4-fs (loop0): Remounting filesystem read-only [ 647.567688][T10786] Quota error (device loop0): write_blk: dquota write failed [ 647.575919][T10786] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 647.585834][T10786] Quota error (device loop0): write_blk: dquota write failed [ 647.593506][T10786] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 647.603629][T10786] EXT4-fs (loop0): 1 truncate cleaned up [ 647.611241][T10786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.646606][T10786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.034471][ T27] audit: type=1326 audit(1775204519.415:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10790 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0739c819 code=0x7ffc0000 [ 648.044916][T10791] loop3: detected capacity change from 0 to 8192 [ 648.085270][ T27] audit: type=1326 audit(1775204519.425:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10790 comm="syz.3.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7eff0739c819 code=0x7ffc0000 [ 648.135036][T10791] loop3: p1 < > p3 p4 < > [ 648.175866][ T28] usb 3-1: USB disconnect, device number 8 [ 648.188482][T10791] loop3: p3 size 218103808 extends beyond EOD, truncated [ 648.293650][T10801] loop0: detected capacity change from 0 to 256 [ 648.335265][T10801] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 648.874729][T10803] loop0: detected capacity change from 0 to 4096 [ 648.889331][T10803] EXT4-fs: inline encryption not supported [ 648.924681][T10803] EXT4-fs: Conflicting test_dummy_encryption options [ 649.144879][T10813] x_tables: duplicate underflow at hook 3 [ 650.043321][ T5910] udevd[5910]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 650.048858][ T5762] udevd[5762]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 650.071655][ T5764] udevd[5764]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 650.286963][T10826] 9pnet_fd: Insufficient options for proto=fd [ 651.434497][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 651.635379][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 651.643225][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.684493][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.713469][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 651.744427][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.759657][ T23] usb 1-1: config 0 descriptor?? [ 651.777257][ T23] hub 1-1:0.0: USB hub found [ 652.024528][ T23] hub 1-1:0.0: 16 ports detected [ 652.034597][ T23] hub 1-1:0.0: insufficient power available to use all downstream ports [ 652.216515][ T23] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 652.223533][ T23] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 652.283093][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 652.316712][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 652.384840][ T23] usb 1-1: USB disconnect, device number 12 [ 652.596655][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1185'. [ 652.618405][T10848] 9pnet_fd: Insufficient options for proto=fd [ 653.174438][ T28] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 654.570321][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1187'. [ 654.794887][ T28] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.835826][ T28] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 654.866144][ T28] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 654.894535][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 654.935873][ T28] usb 4-1: SerialNumber: syz [ 655.174376][ T28] usb 4-1: 0:2 : does not exist [ 655.179440][ T28] usb 4-1: unit 5 not found! [ 655.226951][ T28] usb 4-1: USB disconnect, device number 9 [ 655.281908][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 658.135145][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1197'. [ 658.411945][T10885] mmap: syz.0.1196 (10885) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 658.427178][ T28] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 658.570845][T10882] syz.0.1196 (10882) used greatest stack depth: 17896 bytes left [ 658.728153][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.763900][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.794363][ T28] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 658.811860][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.109595][T10889] loop3: detected capacity change from 0 to 256 [ 659.116874][T10889] exfat: Deprecated parameter 'utf8' [ 659.122257][T10889] exfat: Deprecated parameter 'namecase' [ 659.148386][ T28] usb 3-1: config 0 descriptor?? [ 659.166571][T10889] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbcde3a0f, utbl_chksum : 0xe619d30d) [ 659.375080][T10895] 9pnet_fd: Insufficient options for proto=fd [ 661.255890][ T28] usbhid 3-1:0.0: can't add hid device: -71 [ 661.262043][ T28] usbhid: probe of 3-1:0.0 failed with error -71 [ 661.283012][ T28] usb 3-1: USB disconnect, device number 9 [ 661.965193][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1207'. [ 662.065897][ T28] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 662.330966][ T28] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 662.394703][ T9615] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 662.435824][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.577427][ T28] usb 4-1: config 0 descriptor?? [ 662.654660][ T9615] usb 1-1: Using ep0 maxpacket: 32 [ 662.804521][ T9615] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 662.839243][ T9615] usb 1-1: config 0 has no interface number 0 [ 662.879015][ T9615] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 662.908988][ T9615] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 662.918729][ T9615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.155613][ T28] usb 4-1: Cannot set MAC address [ 663.161158][ T28] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 663.176054][T10925] loop1: detected capacity change from 0 to 256 [ 663.183389][T10925] exfat: Deprecated parameter 'utf8' [ 663.188874][T10925] exfat: Deprecated parameter 'namecase' [ 663.195725][ T9615] usb 1-1: Product: syz [ 663.200337][ T9615] usb 1-1: Manufacturer: syz [ 663.210541][ T9615] usb 1-1: SerialNumber: syz [ 663.216216][ T28] usb 4-1: USB disconnect, device number 10 [ 663.230809][ T9615] usb 1-1: config 0 descriptor?? [ 663.240672][T10921] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 663.251991][T10925] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbcde3a0f, utbl_chksum : 0xe619d30d) [ 663.483519][T10921] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 663.520834][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1209'. [ 663.532659][T10924] 9pnet_fd: Insufficient options for proto=fd [ 663.746082][T10933] loop3: detected capacity change from 0 to 4096 [ 663.760520][T10933] EXT4-fs: inline encryption not supported [ 663.784234][T10933] EXT4-fs (loop3): Test dummy encryption mode enabled [ 663.808047][T10933] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 663.826792][T10933] System zones: 0-5 [ 663.949216][T10933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.956368][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.529231][ T9615] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 665.554100][ T9615] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 665.566537][ T9615] asix: probe of 1-1:0.188 failed with error -71 [ 665.577492][ T9615] usb 1-1: USB disconnect, device number 13 [ 665.911966][T10961] loop3: detected capacity change from 0 to 256 [ 665.967180][T10961] FAT-fs (loop3): Directory bread(block 64) failed [ 665.976681][T10961] FAT-fs (loop3): Directory bread(block 65) failed [ 665.983492][T10961] FAT-fs (loop3): Directory bread(block 66) failed [ 665.993247][T10961] FAT-fs (loop3): Directory bread(block 67) failed [ 666.004068][T10961] FAT-fs (loop3): Directory bread(block 68) failed [ 666.012461][T10961] FAT-fs (loop3): Directory bread(block 69) failed [ 666.023609][T10961] FAT-fs (loop3): Directory bread(block 70) failed [ 666.032537][T10961] FAT-fs (loop3): Directory bread(block 71) failed [ 666.043293][T10961] FAT-fs (loop3): Directory bread(block 72) failed [ 666.051717][T10961] FAT-fs (loop3): Directory bread(block 73) failed [ 667.279583][T10968] loop3: detected capacity change from 0 to 8192 [ 667.292410][T10968] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 667.729042][T10968] 9pnet_fd: Insufficient options for proto=fd [ 668.533637][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1218'. [ 668.543200][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1219'. [ 669.096905][T10982] loop3: detected capacity change from 0 to 256 [ 669.104202][T10982] exfat: Deprecated parameter 'utf8' [ 669.109673][T10982] exfat: Deprecated parameter 'namecase' [ 669.150596][T10982] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbcde3a0f, utbl_chksum : 0xe619d30d) [ 669.282257][T10992] loop0: detected capacity change from 0 to 1024 [ 669.306034][T10992] EXT4-fs: Ignoring removed nomblk_io_submit option [ 669.358442][T10992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.638457][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.127322][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'. [ 670.225537][T11005] 9pnet_fd: Insufficient options for proto=fd [ 670.317672][T11009] 9pnet_fd: Insufficient options for proto=fd [ 672.757875][T11016] loop1: detected capacity change from 0 to 8192 [ 672.794668][T11016] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 673.097765][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'. [ 673.109958][T11020] 9pnet_fd: Insufficient options for proto=fd [ 673.734974][T11029] loop1: detected capacity change from 0 to 4096 [ 673.745565][T11029] EXT4-fs: inline encryption not supported [ 673.807661][T11029] EXT4-fs (loop1): Test dummy encryption mode enabled [ 673.927617][T11029] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 673.957386][T11029] System zones: 0-5 [ 673.986104][T11029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.105863][T11032] loop3: detected capacity change from 0 to 256 [ 674.113071][T11032] exfat: Deprecated parameter 'utf8' [ 674.118486][T11032] exfat: Deprecated parameter 'namecase' [ 674.567101][T11032] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbcde3a0f, utbl_chksum : 0xe619d30d) [ 674.704723][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.324359][ T5807] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 677.360602][T11058] loop3: detected capacity change from 0 to 4096 [ 677.434964][T11058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.495183][ T5807] usb 2-1: device descriptor read/64, error -71 [ 677.794522][ T5807] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 678.530229][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.674411][ T5807] usb 2-1: device descriptor read/64, error -71 [ 678.794736][ T5807] usb usb2-port1: attempt power cycle [ 679.202114][T11087] loop3: detected capacity change from 0 to 256 [ 679.209475][T11087] exfat: Deprecated parameter 'utf8' [ 679.215094][T11087] exfat: Deprecated parameter 'namecase' [ 679.222013][ T5807] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 679.253502][T11087] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbcde3a0f, utbl_chksum : 0xe619d30d) [ 679.327955][T11083] loop0: detected capacity change from 0 to 8192 [ 679.341428][ T5807] usb 2-1: device descriptor read/8, error -71 [ 679.369419][T11083] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 679.695781][ T5807] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 679.744438][ T28] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 679.748777][ T5807] usb 2-1: device descriptor read/8, error -71 [ 679.877281][ T5807] usb usb2-port1: unable to enumerate USB device [ 679.911086][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1256'. [ 679.926259][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 679.941530][ T28] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 679.960396][T11091] 9pnet_fd: Insufficient options for proto=fd [ 679.970591][ T28] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 679.981415][ T28] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 251, changing to 11 [ 679.993021][ T28] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 680.010518][ T28] usb 3-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 680.025330][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.033737][ T28] usb 3-1: Product: syz [ 680.038745][ T28] usb 3-1: Manufacturer: syz [ 680.043485][ T28] usb 3-1: SerialNumber: syz [ 680.070763][T11086] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 680.230454][T11094] loop1: detected capacity change from 0 to 4096 [ 680.260932][T11094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.310845][ T28] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 680.317524][ T28] gspca_stv06xx: st6422 sensor detected [ 680.594462][ T28] STV06xx: probe of 3-1:1.0 failed with error -71 [ 680.603692][ T28] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 680.623983][ T28] usb 3-1: MIDIStreaming interface descriptor not found [ 681.376655][ T28] snd-usb-audio: probe of 3-1:1.0 failed with error -12 [ 681.381301][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.434869][ T28] usb 3-1: USB disconnect, device number 10 [ 681.512972][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 682.454646][ T28] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 682.530956][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1266'. [ 682.551897][T11124] 9pnet_fd: Insufficient options for proto=fd [ 682.654681][ T28] usb 2-1: device descriptor read/64, error -71 [ 683.079993][ T28] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 683.284646][ T28] usb 2-1: device descriptor read/64, error -71 [ 683.333410][T11128] syzkaller0: entered promiscuous mode [ 683.346694][T11128] syzkaller0: entered allmulticast mode [ 683.428735][ T28] usb usb2-port1: attempt power cycle [ 683.864463][ T28] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 683.930081][ T28] usb 2-1: device descriptor read/8, error -71 [ 684.215000][ T28] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 684.283334][ T28] usb 2-1: device descriptor read/8, error -71 [ 684.404804][ T28] usb usb2-port1: unable to enumerate USB device [ 685.383398][T11149] syzkaller0: entered promiscuous mode [ 685.399852][T11149] syzkaller0: entered allmulticast mode [ 686.126106][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.134761][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.024173][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1283'. [ 687.042758][T11173] 9pnet_fd: Insufficient options for proto=fd [ 687.145705][ T9615] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 687.504450][ T9615] usb 4-1: device descriptor read/64, error -71 [ 687.674507][T11176] syzkaller0: entered promiscuous mode [ 687.705501][T11176] syzkaller0: entered allmulticast mode [ 687.834561][ T9615] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 688.234445][ T9615] usb 4-1: device descriptor read/64, error -71 [ 688.394493][ T9615] usb usb4-port1: attempt power cycle [ 689.209536][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1288'. [ 689.264502][ T9615] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 689.394571][ T9615] usb 4-1: device descriptor read/8, error -71 [ 689.475266][T11190] 9pnet_fd: Insufficient options for proto=fd [ 689.694492][ T9615] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 689.768388][ T9615] usb 4-1: device descriptor read/8, error -71 [ 689.904663][ T9615] usb usb4-port1: unable to enumerate USB device [ 690.054625][ T5807] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 690.264436][ T5807] usb 1-1: Using ep0 maxpacket: 16 [ 690.280037][ T5807] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.301745][ T5807] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.332105][ T5807] usb 1-1: config 0 interface 0 has no altsetting 0 [ 690.353399][ T5807] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 690.394386][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.408343][T11211] loop1: detected capacity change from 0 to 256 [ 690.415710][T11211] exfat: Deprecated parameter 'utf8' [ 690.421113][T11211] exfat: Deprecated parameter 'namecase' [ 690.435009][ T5807] usb 1-1: config 0 descriptor?? [ 690.473969][T11211] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbcde3a0f, utbl_chksum : 0xe619d30d) [ 690.857092][T11215] x_tables: duplicate underflow at hook 3 [ 691.439916][ T5807] usb 1-1: USB disconnect, device number 14 [ 692.458832][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1299'. [ 692.478598][T11227] 9pnet_fd: Insufficient options for proto=fd [ 694.314185][T11237] loop0: detected capacity change from 0 to 4096 [ 694.337532][T11237] EXT4-fs: inline encryption not supported [ 694.383216][T11237] EXT4-fs (loop0): Test dummy encryption mode enabled [ 694.446883][T11237] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 694.465021][T11237] System zones: 0-5 [ 694.494726][T11237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.717446][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.296859][T11254] x_tables: duplicate underflow at hook 3 [ 695.885248][T11252] loop1: detected capacity change from 0 to 4096 [ 695.913897][T11252] EXT4-fs: inline encryption not supported [ 695.976263][T11252] EXT4-fs (loop1): Test dummy encryption mode enabled [ 696.014081][T11252] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 696.055382][T11252] System zones: 0-5 [ 696.090856][T11252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.779513][ T5807] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 696.882393][T11250] loop0: detected capacity change from 0 to 40427 [ 696.934626][T11250] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 696.947923][T11250] F2FS-fs (loop0): invalid crc value [ 696.967683][T11250] F2FS-fs (loop0): Found nat_bits in checkpoint [ 696.974621][ T5807] usb 4-1: Using ep0 maxpacket: 16 [ 697.011926][ T5807] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.074002][ T5807] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.110099][T11250] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 697.124386][ T5807] usb 4-1: config 0 interface 0 has no altsetting 0 [ 697.134482][ T5807] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 697.143586][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.206456][ T5807] usb 4-1: config 0 descriptor?? [ 697.465985][ T5772] syz-executor: attempt to access beyond end of device [ 697.465985][ T5772] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 697.494456][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 697.849252][ T5807] usb 4-1: USB disconnect, device number 15 [ 698.122385][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'. [ 698.142295][T11270] 9pnet_fd: Insufficient options for proto=fd [ 699.273104][T11275] loop3: detected capacity change from 0 to 256 [ 699.280391][T11275] exfat: Deprecated parameter 'utf8' [ 699.285849][T11275] exfat: Deprecated parameter 'namecase' [ 699.377621][T11275] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbcde3a0f, utbl_chksum : 0xe619d30d) [ 699.452219][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.266477][ T5763] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 700.764445][ T8898] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 700.964375][ T8898] usb 3-1: Using ep0 maxpacket: 16 [ 700.974496][ T8898] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 700.989561][ T8898] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 701.007643][ T8898] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 701.017763][ T8898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.026004][ T8898] usb 3-1: Product: syz [ 701.030365][ T8898] usb 3-1: Manufacturer: syz [ 701.035353][ T8898] usb 3-1: SerialNumber: syz [ 701.287150][ T8898] usb 3-1: 0:2 : does not exist [ 701.332441][ T8898] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 701.389880][ T8898] usb 3-1: USB disconnect, device number 11 [ 701.480005][T11300] x_tables: duplicate underflow at hook 3 [ 702.249675][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 702.348062][T11299] loop0: detected capacity change from 0 to 8192 [ 702.378860][T11299] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 702.679651][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1320'. [ 702.696942][T11312] 9pnet_fd: Insufficient options for proto=fd [ 703.445333][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 703.880161][T11326] 9pnet_fd: Insufficient options for proto=fd [ 704.379375][T11334] loop0: detected capacity change from 0 to 4096 [ 704.518332][T11334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.532785][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.089352][T11347] x_tables: duplicate underflow at hook 3 [ 707.110432][T11354] loop3: detected capacity change from 0 to 8192 [ 707.161093][T11354] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 707.458646][T11359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1335'. [ 707.471132][T11359] 9pnet_fd: Insufficient options for proto=fd [ 708.677271][T11369] loop3: detected capacity change from 0 to 4096 [ 708.718792][ T5807] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 708.772593][T11369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.924318][ T5807] usb 3-1: Using ep0 maxpacket: 16 [ 708.946523][ T5807] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.994520][ T5807] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.061947][ T5807] usb 3-1: config 0 interface 0 has no altsetting 0 [ 709.083434][ T5807] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 709.124107][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.584631][T11376] loop0: detected capacity change from 0 to 4096 [ 709.612608][T11376] EXT4-fs: inline encryption not supported [ 709.663648][T11376] EXT4-fs (loop0): Test dummy encryption mode enabled [ 709.807338][T11376] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 709.815092][ T5807] usb 3-1: config 0 descriptor?? [ 709.831989][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.851758][T11376] System zones: 0-5 [ 709.891624][T11376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.229464][T11382] loop3: detected capacity change from 0 to 512 [ 710.237886][ T5807] hid (null): global environment stack underflow [ 710.258448][T11382] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 710.270865][T11382] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 710.281972][T11382] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1342: Corrupt directory, running e2fsck is recommended [ 710.660981][T11382] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 710.893029][T11382] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.1342: corrupted in-inode xattr: invalid ea_ino [ 710.959861][T11382] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.1342: couldn't read orphan inode 15 (err -117) [ 711.004097][T11382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 711.079129][T11382] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 711.130083][ T5807] usb 3-1: USB disconnect, device number 12 [ 711.136415][T11382] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 711.147881][T11382] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1342: Corrupt directory, running e2fsck is recommended [ 711.163753][T11386] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 711.211654][T11386] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 711.217093][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.222816][T11387] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 711.254339][T11386] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1342: Corrupt directory, running e2fsck is recommended [ 711.286885][T11382] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 711.296625][T11387] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 711.327415][T11387] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1342: Corrupt directory, running e2fsck is recommended [ 711.414646][T11382] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.1342: path /339/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 711.450839][T11382] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 2: comm syz.3.1342: path /339/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=4, size=1024 fake=0 [ 711.479033][T11382] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 8: comm syz.3.1342: path /339/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 711.691212][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.854306][T11397] x_tables: duplicate underflow at hook 3 [ 712.536997][T11401] loop1: detected capacity change from 0 to 512 [ 712.733692][T11401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.805317][T11401] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 712.964909][T11409] loop3: detected capacity change from 0 to 256 [ 712.972220][T11409] exfat: Deprecated parameter 'utf8' [ 712.978728][T11409] exfat: Deprecated parameter 'namecase' [ 713.012499][T11409] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbcde3a0f, utbl_chksum : 0xe619d30d) [ 713.098725][T11412] loop0: detected capacity change from 0 to 4096 [ 713.127390][T11412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 713.976596][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.189819][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.317323][ T9615] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 714.851363][ T9615] usb 3-1: Using ep0 maxpacket: 16 [ 714.863086][ T9615] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.874301][ T9615] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.884057][ T9615] usb 3-1: config 0 interface 0 has no altsetting 0 [ 714.895581][ T9615] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 714.912051][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1355'. [ 714.930402][T11431] 9pnet_fd: Insufficient options for proto=fd [ 714.994737][T11436] x_tables: duplicate underflow at hook 3 [ 715.035340][ T9615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.200497][ T9615] usb 3-1: config 0 descriptor?? [ 716.226254][ T9615] hid (null): global environment stack underflow [ 716.296422][T11447] loop0: detected capacity change from 0 to 4096 [ 716.342217][T11447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.449290][ T5807] usb 3-1: USB disconnect, device number 13 [ 717.456815][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.653058][T11440] loop1: detected capacity change from 0 to 40427 [ 717.680128][T11440] F2FS-fs (loop1): Unrecognized mount option "disable_roll_forrrier" or missing value [ 719.656647][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'. [ 720.362156][T11479] loop0: detected capacity change from 0 to 256 [ 720.370707][T11479] exfat: Deprecated parameter 'utf8' [ 720.376208][T11479] exfat: Deprecated parameter 'namecase' [ 720.425155][T11479] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbcde3a0f, utbl_chksum : 0xe619d30d) [ 721.672002][T11493] loop3: detected capacity change from 0 to 4096 [ 721.720420][T11493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.824771][ T8898] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 722.014466][ T8898] usb 3-1: Using ep0 maxpacket: 16 [ 722.752557][ T8898] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.754501][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.764886][ T8898] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.782368][ T8898] usb 3-1: config 0 interface 0 has no altsetting 0 [ 722.789118][ T8898] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 722.800008][ T8898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.810685][ T8898] usb 3-1: config 0 descriptor?? [ 723.251257][ T8898] hid (null): global environment stack underflow [ 723.878187][ T28] usb 3-1: USB disconnect, device number 14 [ 724.222287][T11518] loop1: detected capacity change from 0 to 512 [ 724.260816][T11518] EXT4-fs warning (device loop1): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 724.286502][T11518] EXT4-fs warning (device loop1): ext4_multi_mount_protect:318: MMP failure info: last update time: 1756377954, last update node: nogikhp920.muc.corp.google.com, last update device: loop12 [ 724.336231][T11511] loop3: detected capacity change from 0 to 40427 [ 724.352866][T11511] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 724.359671][T11511] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 724.560091][T11511] F2FS-fs (loop3): invalid crc value [ 725.224432][T11526] loop1: detected capacity change from 0 to 256 [ 725.426293][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1380'. [ 726.464378][T11526] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 726.475188][T11526] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 727.681431][T11526] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 728.283918][ T5763] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 728.841520][T11543] loop1: detected capacity change from 0 to 4096 [ 728.902939][T11543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.552804][T11556] loop0: detected capacity change from 0 to 256 [ 729.560329][T11556] exfat: Deprecated parameter 'utf8' [ 729.565840][T11556] exfat: Deprecated parameter 'namecase' [ 729.710003][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.748972][T11556] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbcde3a0f, utbl_chksum : 0xe619d30d) [ 730.739099][T11566] loop1: detected capacity change from 0 to 512 [ 730.779786][T11566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.803124][T11571] loop3: detected capacity change from 0 to 512 [ 730.811605][T11566] ext4 filesystem being mounted at /332/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 730.844359][T11571] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 730.914165][T11571] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: MMP failure info: last update time: 1756377954, last update node: nogikhp920.muc.corp.google.com, last update device: loop12 [ 730.982278][ T5769] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 730.999817][T11102] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 731.024920][ T5769] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 731.047814][ T5769] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 731.071224][ T5769] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 731.095999][ T5769] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 731.137433][ T5769] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 731.177604][ T5769] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 731.224004][ T5769] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 731.253779][ T5769] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 731.274635][ T5769] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 731.405036][T11575] loop3: detected capacity change from 0 to 256 [ 731.454784][T11575] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 731.465696][T11575] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 731.639197][T11575] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 732.715584][ T6943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.471745][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1394'. [ 733.508781][T11581] 9pnet_fd: Insufficient options for proto=fd [ 734.090179][ T28] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 734.301846][ T28] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.333319][ T28] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 734.355442][ T28] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 734.370418][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 734.388792][ T28] usb 1-1: SerialNumber: syz [ 734.605093][T11585] loop3: detected capacity change from 0 to 40427 [ 734.637031][ T28] usb 1-1: 0:2 : does not exist [ 734.655227][T11585] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 734.663022][T11585] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 734.674604][ T28] usb 1-1: unit 5 not found! [ 734.728198][ T28] usb 1-1: USB disconnect, device number 15 [ 734.800687][T11102] udevd[11102]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 734.841516][T11585] F2FS-fs (loop3): Found nat_bits in checkpoint [ 735.005148][T11585] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 735.012632][T11585] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 737.250539][T11608] loop3: detected capacity change from 0 to 256 [ 737.262049][T11608] exfat: Deprecated parameter 'utf8' [ 737.267783][T11608] exfat: Deprecated parameter 'namecase' [ 737.980038][T11610] x_tables: duplicate underflow at hook 3 [ 738.289136][T11608] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbcde3a0f, utbl_chksum : 0xe619d30d) [ 738.461302][ T59] tipc: Left network mode [ 738.740371][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 738.768121][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 738.778204][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 738.803003][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 738.814356][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 738.822165][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 738.972723][T11614] loop0: detected capacity change from 0 to 8192 [ 739.003115][T11614] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 739.171418][T11623] syzkaller0: entered promiscuous mode [ 739.192522][T11623] syzkaller0: entered allmulticast mode [ 739.614947][T11632] 9pnet_fd: Insufficient options for proto=fd [ 740.200780][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'. [ 740.905744][ T9985] Bluetooth: hci0: command tx timeout [ 741.327499][T11616] chnl_net:caif_netlink_parms(): no params data found [ 742.032627][ T59] hsr_slave_0: left promiscuous mode [ 742.049985][ T59] hsr_slave_1: left promiscuous mode [ 742.145599][T11660] x_tables: duplicate underflow at hook 3 [ 742.463634][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.682332][ T59] bridge_slave_1: left allmulticast mode [ 742.699750][ T59] bridge_slave_1: left promiscuous mode [ 742.726887][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.773182][ T59] bridge_slave_0: left allmulticast mode [ 742.799269][ T59] bridge_slave_0: left promiscuous mode [ 742.831434][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.978315][T11663] loop0: detected capacity change from 0 to 512 [ 742.984427][ T9985] Bluetooth: hci0: command tx timeout [ 743.064535][T11663] EXT4-fs warning (device loop0): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 743.124751][T11663] EXT4-fs warning (device loop0): ext4_multi_mount_protect:318: MMP failure info: last update time: 1756377954, last update node: nogikhp920.muc.corp.google.com, last update device: loop12 [ 743.906990][T11669] loop0: detected capacity change from 0 to 256 [ 744.109382][T11669] exfat: Unknown parameter 'º Ý™A˜Õ' [ 745.740844][ T9985] Bluetooth: hci0: command tx timeout [ 746.786747][T11687] loop0: detected capacity change from 0 to 8192 [ 746.842521][T11687] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 747.120404][ T59] team0 (unregistering): Port device team_slave_1 removed [ 747.436737][T11697] 9pnet_fd: Insufficient options for proto=fd [ 747.655324][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.661712][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.784331][ T9985] Bluetooth: hci0: command tx timeout [ 748.303554][ T59] team0 (unregistering): Port device team_slave_0 removed [ 748.403944][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.504094][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.070392][ T59] bond0 (unregistering): Released all slaves [ 749.228917][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1417'. [ 749.239080][T11696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1421'. [ 749.408383][T11616] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.481852][T11616] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.544564][T11616] bridge_slave_0: entered allmulticast mode [ 749.570104][T11616] bridge_slave_0: entered promiscuous mode [ 749.606001][T11616] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.613213][T11616] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.640179][T11616] bridge_slave_1: entered allmulticast mode [ 749.655613][T11616] bridge_slave_1: entered promiscuous mode [ 749.708801][T11704] loop0: detected capacity change from 0 to 256 [ 749.982851][T11708] x_tables: duplicate underflow at hook 3 [ 750.129567][T11704] FAT-fs (loop0): Directory bread(block 64) failed [ 750.168945][ T28] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 750.226214][T11616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.271390][T11704] FAT-fs (loop0): Directory bread(block 65) failed [ 750.394036][T11704] FAT-fs (loop0): Directory bread(block 66) failed [ 750.518431][T11616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.550153][T11704] FAT-fs (loop0): Directory bread(block 67) failed [ 750.614572][T11704] FAT-fs (loop0): Directory bread(block 68) failed [ 750.654679][ T28] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 750.671943][T11704] FAT-fs (loop0): Directory bread(block 69) failed [ 750.696483][T11704] FAT-fs (loop0): Directory bread(block 70) failed [ 750.703078][T11704] FAT-fs (loop0): Directory bread(block 71) failed [ 750.710272][T11704] FAT-fs (loop0): Directory bread(block 72) failed [ 750.717430][T11704] FAT-fs (loop0): Directory bread(block 73) failed [ 750.751354][ T28] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 750.789155][ T28] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 750.837618][T11713] loop3: detected capacity change from 0 to 512 [ 750.865818][T11713] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 750.889051][T11713] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: MMP failure info: last update time: 1756377954, last update node: nogikhp920.muc.corp.google.com, last update device: loop12 [ 750.961617][T11616] team0: Port device team_slave_0 added [ 751.000961][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 751.009780][ T28] usb 3-1: SerialNumber: syz [ 751.020160][T11616] team0: Port device team_slave_1 added [ 751.461074][ T28] usb 3-1: 0:2 : does not exist [ 751.511679][ T28] usb 3-1: unit 5 not found! [ 751.522262][T11616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.570318][T11616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.693942][ T28] usb 3-1: USB disconnect, device number 15 [ 751.720024][T11616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.749642][T11616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.759067][T11616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.802532][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 751.838678][T11616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.012511][T11616] hsr_slave_0: entered promiscuous mode [ 752.065303][T11616] hsr_slave_1: entered promiscuous mode [ 752.079802][T11727] loop0: detected capacity change from 0 to 4096 [ 752.154850][T11727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.250961][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.396951][T11616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 753.623086][T11616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 754.143768][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1431'. [ 754.514341][T11765] loop3: detected capacity change from 0 to 512 [ 754.561972][T11765] EXT4-fs: Ignoring removed mblk_io_submit option [ 754.638309][T11765] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 754.726699][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 754.736503][T11616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 754.785268][T11765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.811359][T11616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 754.843580][T11765] ext4 filesystem being mounted at /360/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 756.282287][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.617839][T11616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.639769][T11616] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.708527][T11779] loop3: detected capacity change from 0 to 256 [ 756.777037][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.784367][ T5964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.874106][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.881487][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.180837][T11779] FAT-fs (loop3): Directory bread(block 64) failed [ 757.299342][T11779] FAT-fs (loop3): Directory bread(block 65) failed [ 757.534609][T11779] FAT-fs (loop3): Directory bread(block 66) failed [ 757.616298][T11779] FAT-fs (loop3): Directory bread(block 67) failed [ 757.623006][T11779] FAT-fs (loop3): Directory bread(block 68) failed [ 757.741772][T11779] FAT-fs (loop3): Directory bread(block 69) failed [ 757.811483][T11616] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 757.856373][T11779] FAT-fs (loop3): Directory bread(block 70) failed [ 757.863063][T11779] FAT-fs (loop3): Directory bread(block 71) failed [ 758.015247][T11616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 758.034858][T11779] FAT-fs (loop3): Directory bread(block 72) failed [ 758.094374][T11779] FAT-fs (loop3): Directory bread(block 73) failed [ 758.894434][ T9614] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 759.165986][ T9614] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.199074][ T9614] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 759.237309][T11616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.264382][ T9614] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 759.294309][ T9614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 759.322814][ T9614] usb 1-1: SerialNumber: syz [ 759.458130][T11815] loop3: detected capacity change from 0 to 4096 [ 759.561466][ T9614] usb 1-1: 0:2 : does not exist [ 759.572149][ T9614] usb 1-1: unit 5 not found! [ 759.586855][T11815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.609842][ T9614] usb 1-1: USB disconnect, device number 16 [ 759.727623][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 760.937513][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.731799][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 762.445952][T11616] veth0_vlan: entered promiscuous mode [ 762.542696][T11616] veth1_vlan: entered promiscuous mode [ 762.746228][T11616] veth0_macvtap: entered promiscuous mode [ 762.783705][T11616] veth1_macvtap: entered promiscuous mode [ 762.921842][T11616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.033199][T11616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.089243][T11616] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.145487][T11616] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.175198][T11854] loop0: detected capacity change from 0 to 256 [ 763.201978][T11616] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.260852][T11616] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.414364][T11854] FAT-fs (loop0): Directory bread(block 64) failed [ 763.488334][T11854] FAT-fs (loop0): Directory bread(block 65) failed [ 763.537707][T11854] FAT-fs (loop0): Directory bread(block 66) failed [ 763.574475][T11854] FAT-fs (loop0): Directory bread(block 67) failed [ 763.581150][T11854] FAT-fs (loop0): Directory bread(block 68) failed [ 763.645860][T11854] FAT-fs (loop0): Directory bread(block 69) failed [ 763.679609][T11854] FAT-fs (loop0): Directory bread(block 70) failed [ 763.710288][T11854] FAT-fs (loop0): Directory bread(block 71) failed [ 763.754028][T11854] FAT-fs (loop0): Directory bread(block 72) failed [ 763.846912][T11854] FAT-fs (loop0): Directory bread(block 73) failed [ 763.975437][T11861] loop3: detected capacity change from 0 to 512 [ 763.991179][T11861] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 764.002159][T11861] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: MMP failure info: last update time: 1756377954, last update node: nogikhp920.muc.corp.google.com, last update device: loop12 [ 764.032696][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.083597][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.151418][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.167570][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.267967][ T5763] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 766.554103][T11876] loop3: detected capacity change from 0 to 256 [ 766.603837][T11876] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 766.614664][T11876] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 766.654573][T11876] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 767.089710][T11871] input: syz1 as /devices/virtual/input/input20 [ 769.041157][T11888] loop0: detected capacity change from 0 to 1024 [ 769.107135][T11888] EXT4-fs: Ignoring removed i_version option [ 769.113247][T11888] EXT4-fs: inline encryption not supported [ 769.214916][T11888] EXT4-fs (loop0): Test dummy encryption mode enabled [ 769.450473][T11896] loop3: detected capacity change from 0 to 256 [ 769.477516][T11888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.488144][T11896] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 769.859926][T11888] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.657844][ T9615] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 772.863827][ T9615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.874989][ T9615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.885467][ T9615] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 772.894850][ T9615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.913712][ T9615] usb 1-1: config 0 descriptor?? [ 773.355434][ T9615] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 773.376424][ T9615] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 773.558281][ T9615] cp2112 0003:10C4:EA90.000A: Part Number: 0x47 Device Version: 0xD0 [ 773.988773][ T9615] cp2112 0003:10C4:EA90.000A: error setting SMBus config [ 774.043859][ T9615] cp2112: probe of 0003:10C4:EA90.000A failed with error -71 [ 774.063186][ T9615] usb 1-1: USB disconnect, device number 17 [ 774.238436][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1453'. [ 774.247949][T11899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.321664][T11899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.848447][T11937] loop4: detected capacity change from 0 to 4096 [ 774.878195][T11937] EXT4-fs: inline encryption not supported [ 774.951067][T11937] EXT4-fs (loop4): Test dummy encryption mode enabled [ 774.979082][T11937] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 774.987569][T11937] System zones: 0-5 [ 775.117177][T11937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.509725][T11949] 9pnet_fd: Insufficient options for proto=fd [ 775.895967][T11948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1463'. [ 777.107668][T11798] tipc: Left network mode [ 777.290391][T11939] loop0: detected capacity change from 0 to 40427 [ 777.440868][T11939] F2FS-fs (loop0): invalid crc value [ 777.475537][T11939] F2FS-fs (loop0): Found nat_bits in checkpoint [ 777.708284][T11939] F2FS-fs (loop0): Start checkpoint disabled! [ 777.755266][T11939] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 777.863027][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 777.873971][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 777.882303][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 777.891536][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 777.900591][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 777.914543][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 778.877811][T11616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.180308][T11992] loop4: detected capacity change from 0 to 512 [ 779.252404][T11992] EXT4-fs warning (device loop4): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 779.280354][T11992] EXT4-fs warning (device loop4): ext4_multi_mount_protect:318: MMP failure info: last update time: 1756377954, last update node: nogikhp920.muc.corp.google.com, last update device: loop12 [ 780.001358][ T9985] Bluetooth: hci2: command tx timeout [ 782.032360][ T9985] Bluetooth: hci2: command tx timeout [ 783.705354][ T5807] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 783.894426][ T5807] usb 5-1: Using ep0 maxpacket: 16 [ 783.902875][ T5807] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.919959][ T5807] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.929998][ T5807] usb 5-1: config 0 interface 0 has no altsetting 0 [ 783.936719][ T5807] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 783.946021][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.962602][ T5807] usb 5-1: config 0 descriptor?? [ 784.108902][ T9985] Bluetooth: hci2: command tx timeout [ 784.409560][ T5807] hid (null): global environment stack underflow [ 784.418597][ T5807] hid (null): report_id 0 is invalid [ 784.621832][ T5807] usb 5-1: USB disconnect, device number 2 [ 785.126051][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1472'. [ 785.465843][ T1137] Bluetooth: hci4: Frame reassembly failed (-84) [ 785.476376][T12022] Bluetooth: hci4: Frame reassembly failed (-84) [ 785.509881][T12022] Bluetooth: hci4: Frame reassembly failed (-84) [ 785.522251][T11969] chnl_net:caif_netlink_parms(): no params data found [ 785.558484][T12022] Bluetooth: hci4: Frame reassembly failed (-84) [ 785.605522][T12022] Bluetooth: hci4: Frame reassembly failed (-84) [ 785.638207][T11798] hsr_slave_0: left promiscuous mode [ 785.650911][T11798] hsr_slave_1: left promiscuous mode [ 785.670491][T11798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.688118][T11798] bridge_slave_1: left allmulticast mode [ 785.693836][T11798] bridge_slave_1: left promiscuous mode [ 785.706718][T12027] loop4: detected capacity change from 0 to 4096 [ 785.720876][T11798] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.729599][T12027] EXT4-fs: inline encryption not supported [ 785.737989][T11798] bridge_slave_0: left allmulticast mode [ 785.743687][T11798] bridge_slave_0: left promiscuous mode [ 785.752136][T11798] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.763113][T12027] EXT4-fs (loop4): Test dummy encryption mode enabled [ 785.791155][T12027] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 785.819673][T12027] System zones: 0-5 [ 785.835792][T12027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.187447][ T51] Bluetooth: hci2: command tx timeout [ 786.807038][T11798] team0 (unregistering): Port device team_slave_1 removed [ 786.878948][T11798] team0 (unregistering): Port device team_slave_0 removed [ 786.960082][T11798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.052077][T11798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.354462][T11616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.476178][ T9985] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 790.285602][T12071] loop4: detected capacity change from 0 to 256 [ 790.305399][T12071] FAT-fs (loop4): bogus number of FAT sectors [ 790.311680][T12071] FAT-fs (loop4): Can't find a valid FAT filesystem [ 790.463315][ T9615] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 790.687864][ T9615] usb 3-1: Using ep0 maxpacket: 16 [ 790.726193][ T9615] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.761237][ T9615] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.818099][ T9615] usb 3-1: config 0 interface 0 has no altsetting 0 [ 790.841930][ T9615] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 790.883902][ T9615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.928893][ T9615] usb 3-1: config 0 descriptor?? [ 791.159996][T11798] bond0 (unregistering): Released all slaves [ 791.348705][ T9615] hid (null): global environment stack underflow [ 791.369338][ T9615] hid (null): report_id 0 is invalid [ 791.479900][T12079] loop4: detected capacity change from 0 to 4096 [ 791.488086][T12079] EXT4-fs: inline encryption not supported [ 791.536291][T12079] EXT4-fs (loop4): Test dummy encryption mode enabled [ 791.542939][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1484'. [ 791.643287][ T9] usb 3-1: USB disconnect, device number 16 [ 791.722455][T12079] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 791.777943][T12079] System zones: 0-5 [ 791.813839][T12079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.843018][T12087] Bluetooth: hci4: Frame reassembly failed (-84) [ 791.906312][T11677] Bluetooth: hci4: Frame reassembly failed (-84) [ 791.912737][T12087] Bluetooth: hci4: Frame reassembly failed (-84) [ 791.977182][T12090] Bluetooth: hci4: Frame reassembly failed (-84) [ 791.977527][T11969] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.985288][T12090] Bluetooth: hci4: Frame reassembly failed (-84) [ 792.022008][T11969] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.050167][T11969] bridge_slave_0: entered allmulticast mode [ 792.071123][T11969] bridge_slave_0: entered promiscuous mode [ 792.094810][T11969] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.112687][T11969] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.133033][T11969] bridge_slave_1: entered allmulticast mode [ 792.160420][T11969] bridge_slave_1: entered promiscuous mode [ 792.259659][T11969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.296832][T11969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.422678][T11969] team0: Port device team_slave_0 added [ 792.441304][T11969] team0: Port device team_slave_1 added [ 792.503403][T11969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.520286][T11969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.551537][T11969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.579049][T11969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.586441][T11969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.626609][T11969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.864422][T11969] hsr_slave_0: entered promiscuous mode [ 792.880725][T11969] hsr_slave_1: entered promiscuous mode [ 792.892632][T11969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 792.910505][T11969] Cannot create hsr debugfs directory [ 793.934625][ T9985] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 794.627363][T11969] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 794.700395][T11969] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 794.768059][T11969] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 794.831575][T11969] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 795.306919][T11969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.388733][T11969] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.436307][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.443549][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.506500][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.513766][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.706206][T11616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.133714][T12136] loop4: detected capacity change from 0 to 2048 [ 796.151979][T12136] EXT4-fs: quotafile must be on filesystem root [ 796.418902][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1498'. [ 797.498246][T11969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.787294][T11969] veth0_vlan: entered promiscuous mode [ 798.829820][T11969] veth1_vlan: entered promiscuous mode [ 798.922291][T11969] veth0_macvtap: entered promiscuous mode [ 799.073543][T11969] veth1_macvtap: entered promiscuous mode [ 799.189480][T11969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.826661][T11969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.887931][T11969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.946714][T11969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.003692][T11969] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.048603][T12152] loop4: detected capacity change from 0 to 40427 [ 800.084302][T11969] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.130587][T11969] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.164357][T11969] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.307526][T12152] F2FS-fs (loop4): Found nat_bits in checkpoint [ 800.785185][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.793087][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.027969][T11798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.089212][T11798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.089509][T12195] loop4: detected capacity change from 0 to 40427 [ 803.121788][T12195] F2FS-fs (loop4): invalid crc value [ 803.144885][T12195] F2FS-fs (loop4): Found nat_bits in checkpoint [ 803.287062][T12195] F2FS-fs (loop4): Start checkpoint disabled! [ 803.336873][T12195] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 803.907822][T12220] loop5: detected capacity change from 0 to 512 [ 804.146488][T12220] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.1507: corrupted in-inode xattr: e_value size too large [ 804.168428][T12220] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.1507: couldn't read orphan inode 15 (err -117) [ 804.191928][T12220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.604012][T12222] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 805.293467][T11798] kworker/u4:3: attempt to access beyond end of device [ 805.293467][T11798] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 805.334310][T11798] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 805.341322][T11798] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 805.601714][T11969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.744605][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1508'. [ 808.939193][T12265] loop5: detected capacity change from 0 to 256 [ 808.992448][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.004726][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.173876][T12265] FAT-fs (loop5): Directory bread(block 64) failed [ 809.233434][T12265] FAT-fs (loop5): Directory bread(block 65) failed [ 809.261431][T12265] FAT-fs (loop5): Directory bread(block 66) failed [ 809.314421][T12265] FAT-fs (loop5): Directory bread(block 67) failed [ 809.372011][T12265] FAT-fs (loop5): Directory bread(block 68) failed [ 809.412504][T12265] FAT-fs (loop5): Directory bread(block 69) failed [ 809.453491][T12265] FAT-fs (loop5): Directory bread(block 70) failed [ 809.498095][T12265] FAT-fs (loop5): Directory bread(block 71) failed [ 809.526953][T12265] FAT-fs (loop5): Directory bread(block 72) failed [ 809.574154][T12265] FAT-fs (loop5): Directory bread(block 73) failed [ 811.217307][T12274] loop4: detected capacity change from 0 to 512 [ 811.428566][T12274] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 811.464457][T12274] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 811.959241][T12274] EXT4-fs (loop4): 1 truncate cleaned up [ 812.148273][T12274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.218976][T11616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.434148][T12306] loop0: detected capacity change from 0 to 512 [ 813.500435][T12306] EXT4-fs warning (device loop0): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 813.552957][T12306] EXT4-fs warning (device loop0): ext4_multi_mount_protect:318: MMP failure info: last update time: 1756377954, last update node: nogikhp920.muc.corp.google.com, last update device: loop12 [ 814.101022][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'. [ 814.125380][T12321] 9pnet_fd: Insufficient options for proto=fd [ 817.665745][T12359] loop5: detected capacity change from 0 to 16 [ 817.692971][T12359] erofs: (device loop5): mounted with root inode @ nid 36. [ 817.785319][ T51] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 817.807340][T12359] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 817.848117][ T27] kauditd_printk_skb: 793 callbacks suppressed [ 817.848133][ T27] audit: type=1800 audit(1775204945.240:856): pid=12359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1535" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 817.935208][T12359] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 818.027207][T12359] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 818.123524][T12359] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 818.189680][T12359] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 819.204999][T12372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1537'. [ 819.216779][T12372] 9pnet_fd: Insufficient options for proto=fd [ 822.278188][T12399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1543'. [ 822.786359][T12413] loop0: detected capacity change from 0 to 256 [ 822.811554][T12410] loop5: detected capacity change from 0 to 4096 [ 822.855761][T12410] EXT4-fs: inline encryption not supported [ 822.881189][T12413] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e4c, chksum : 0x8a43d0b8, utbl_chksum : 0xe619d30d) [ 822.927411][T12410] EXT4-fs (loop5): Test dummy encryption mode enabled [ 822.981756][T12410] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 823.074518][T12410] System zones: 0-5 [ 823.085958][T12410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.135693][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1548'. [ 825.029204][T11969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.698620][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1551'. [ 825.708821][T12443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.807174][T12444] 9pnet_fd: Insufficient options for proto=fd [ 826.563993][T12443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.671046][T12456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 827.679076][T12456] IPv6: NLM_F_CREATE should be set when creating new route [ 828.235565][T12464] loop5: detected capacity change from 0 to 1024 [ 828.345866][T12464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 828.738797][T12458] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.748722][T12458] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.677132][ T27] audit: type=1800 audit(1775204957.070:857): pid=12464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1556" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 829.719644][ T27] audit: type=1800 audit(1775204957.070:858): pid=12471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1556" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 829.722734][T12481] loop0: detected capacity change from 0 to 512 [ 829.767463][T11969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.787615][T12481] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 829.837833][T12481] EXT4-fs (loop0): 1 truncate cleaned up [ 829.855942][T12481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.319675][T12458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 831.911854][T12458] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.921444][T12458] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.931715][T12458] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.941731][T12458] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.263317][T12479] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 832.272889][T12479] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 832.282619][T12479] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 832.389619][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.581714][T12500] loop4: detected capacity change from 0 to 512 [ 832.653477][T12500] EXT4-fs: Ignoring removed nobh option [ 832.755251][T12500] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz.4.1565: corrupted in-inode xattr: overlapping e_value [ 832.862174][T12500] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.1565: couldn't read orphan inode 15 (err -117) [ 832.930069][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1563'. [ 832.977941][T12511] 9pnet_fd: Insufficient options for proto=fd [ 833.674151][T12500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 835.190357][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'. [ 836.350039][T12526] loop5: detected capacity change from 0 to 256 [ 836.423228][T11616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.458460][T12530] loop0: detected capacity change from 0 to 512 [ 836.504682][T12530] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 836.582238][T12526] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 836.637896][T12530] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1569: invalid indirect mapped block 4294967295 (level 1) [ 836.997955][T12530] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1569: invalid indirect mapped block 4294967295 (level 1) [ 837.378832][T12530] EXT4-fs (loop0): 2 truncates cleaned up [ 837.430311][T12530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.443312][T12540] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1571'. [ 837.757296][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.813824][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1577'. [ 841.157916][T12574] 9pnet_fd: Insufficient options for proto=fd [ 844.487085][T12571] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.494902][T12571] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.047311][T12571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.646943][T12571] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.656520][T12571] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.666084][T12571] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.675059][T12571] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.805965][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 846.107131][T12588] loop5: detected capacity change from 0 to 512 [ 846.115787][T12590] loop4: detected capacity change from 0 to 512 [ 846.159174][T12588] EXT4-fs: Invalid want_extra_isize 75 [ 846.174471][T12590] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 846.229547][T12590] EXT4-fs (loop4): 1 truncate cleaned up [ 846.286029][T12590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 846.464412][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 846.665280][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 846.688081][ T9] usb 6-1: config 1 has an invalid descriptor of length 217, skipping remainder of the config [ 846.700697][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 847.502008][T11616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.507089][ T9] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 847.527110][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.571891][ T9] usb 6-1: Product: syz [ 847.576765][ T9] usb 6-1: Manufacturer: syz [ 847.604327][ T9] usb 6-1: SerialNumber: syz [ 847.853314][ T9] usb 6-1: 0:1 : does not exist [ 847.868783][ T9] usb 6-1: unit 1 not found! [ 848.794609][ T9] usb 6-1: USB disconnect, device number 2 [ 848.863189][T12616] loop5: detected capacity change from 0 to 256 [ 848.889472][T11102] udevd[11102]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 849.009962][T12616] FAT-fs (loop5): Directory bread(block 64) failed [ 849.044038][T12616] FAT-fs (loop5): Directory bread(block 65) failed [ 849.066796][T12616] FAT-fs (loop5): Directory bread(block 66) failed [ 849.073408][T12616] FAT-fs (loop5): Directory bread(block 67) failed [ 849.106728][T12616] FAT-fs (loop5): Directory bread(block 68) failed [ 849.133784][T12616] FAT-fs (loop5): Directory bread(block 69) failed [ 849.154267][T12616] FAT-fs (loop5): Directory bread(block 70) failed [ 849.160889][T12616] FAT-fs (loop5): Directory bread(block 71) failed [ 849.204725][T12616] FAT-fs (loop5): Directory bread(block 72) failed [ 849.232029][T12616] FAT-fs (loop5): Directory bread(block 73) failed [ 849.494647][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 849.726258][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 849.758843][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 849.780790][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 849.794369][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 849.802623][ T9] usb 3-1: SerialNumber: syz [ 850.080657][ T9] usb 3-1: 0:2 : does not exist [ 851.063822][ T9] usb 3-1: unit 5 not found! [ 851.175402][ T9] usb 3-1: USB disconnect, device number 17 [ 851.416377][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 851.655671][T12646] netlink: 'syz.4.1589': attribute type 13 has an invalid length. [ 853.459219][T12663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1590'. [ 853.487191][T12663] 9pnet_fd: Insufficient options for proto=fd [ 854.591670][T12671] loop5: detected capacity change from 0 to 512 [ 854.648314][T12671] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 854.731426][T12671] EXT4-fs (loop5): 1 truncate cleaned up [ 854.796252][T12671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 856.117049][T11969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.330529][T12692] loop5: detected capacity change from 0 to 512 [ 856.365728][T12692] ext4: Unknown parameter 'nouser_xattr' [ 856.602589][T12694] loop4: detected capacity change from 0 to 4096 [ 856.640876][T12694] EXT4-fs: inline encryption not supported [ 856.681614][T12694] EXT4-fs (loop4): Test dummy encryption mode enabled [ 856.719835][T12694] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 856.744464][T12694] System zones: 0-5 [ 856.775482][T12694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 857.141828][T12680] loop0: detected capacity change from 0 to 40427 [ 857.584289][T12680] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 857.590763][T12680] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 857.804928][T12680] F2FS-fs (loop0): invalid crc value [ 858.180472][T11616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.281457][T12680] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 858.329295][T12680] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 858.644581][ T28] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 858.724589][ T5772] syz-executor: attempt to access beyond end of device [ 858.724589][ T5772] loop0: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 858.759270][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 858.773561][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 858.787207][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 858.849306][ T28] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.869716][ T28] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 858.888648][ T28] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 858.913570][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 858.934311][ T28] usb 5-1: SerialNumber: syz [ 860.217048][ T28] usb 5-1: 0:2 : does not exist [ 860.227011][ T28] usb 5-1: unit 5 not found! [ 860.265323][ T28] usb 5-1: USB disconnect, device number 3 [ 860.361250][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 863.194113][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'. [ 863.539135][T12750] 9pnet_fd: Insufficient options for proto=fd [ 865.854576][T12748] overlay: ./file0 is not a directory [ 866.288459][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1602'. [ 866.299962][T12329] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 866.315351][T12736] Bluetooth: hci0: command 0x0406 tx timeout [ 866.702835][T12763] loop5: detected capacity change from 0 to 512 [ 866.808399][T12763] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 866.838847][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1607'. [ 866.925924][T12763] EXT4-fs (loop5): 1 truncate cleaned up [ 866.979526][T12763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 867.154326][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1606'. [ 867.179701][T12776] 9pnet_fd: Insufficient options for proto=fd [ 867.691348][T12766] loop4: detected capacity change from 0 to 4096 [ 868.447630][T12766] EXT4-fs: inline encryption not supported [ 869.316356][T12766] EXT4-fs (loop4): Test dummy encryption mode enabled [ 869.701264][T12766] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 869.758102][T12766] System zones: 0-5 [ 869.763917][T12766] EXT4-fs: error -4 creating inode table initialization thread [ 869.772771][T12766] EXT4-fs (loop4): mount failed [ 869.785211][T11969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.431999][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.438646][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.151315][T12806] loop4: detected capacity change from 0 to 512 [ 871.175834][T12806] EXT4-fs warning (device loop4): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 871.234696][T12806] EXT4-fs warning (device loop4): ext4_multi_mount_protect:318: MMP failure info: last update time: 1756377954, last update node: nogikhp920.muc.corp.google.com, last update device: loop12 [ 871.313846][T12777] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 871.739002][T12810] loop4: detected capacity change from 0 to 256 [ 871.759876][T12810] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 871.770750][T12810] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 871.811118][T12810] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 874.589607][T12829] loop0: detected capacity change from 0 to 512 [ 875.933735][T12837] loop0: detected capacity change from 0 to 256 [ 875.993309][T12837] FAT-fs (loop0): Directory bread(block 64) failed [ 876.018596][T12837] FAT-fs (loop0): Directory bread(block 65) failed [ 876.030572][T12837] FAT-fs (loop0): Directory bread(block 66) failed [ 876.068100][T12837] FAT-fs (loop0): Directory bread(block 67) failed [ 876.076851][T12837] FAT-fs (loop0): Directory bread(block 68) failed [ 876.083421][T12837] FAT-fs (loop0): Directory bread(block 69) failed [ 876.108945][T12837] FAT-fs (loop0): Directory bread(block 70) failed [ 876.124285][T12837] FAT-fs (loop0): Directory bread(block 71) failed [ 876.131151][T12837] FAT-fs (loop0): Directory bread(block 72) failed [ 876.137937][T12837] FAT-fs (loop0): Directory bread(block 73) failed [ 877.232849][T12803] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 877.242452][T12803] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 877.252164][T12803] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 877.731798][T12858] loop4: detected capacity change from 0 to 512 [ 877.747347][T12858] EXT4-fs: Ignoring removed nobh option [ 877.784420][ T9318] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 877.796242][T12858] [ 877.798613][T12858] ====================================================== [ 877.805648][T12858] WARNING: possible circular locking dependency detected [ 877.813120][T12858] syzkaller #0 Not tainted [ 877.817635][T12858] ------------------------------------------------------ [ 877.824695][T12858] syz.4.1630/12858 is trying to acquire lock: [ 877.830797][T12858] ffff88802ea7cbd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 877.840862][T12858] [ 877.840862][T12858] but task is already holding lock: [ 877.848243][T12858] ffff88805c7c6ec8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 877.858124][T12858] [ 877.858124][T12858] which lock already depends on the new lock. [ 877.858124][T12858] [ 877.868541][T12858] [ 877.868541][T12858] the existing dependency chain (in reverse order) is: [ 877.877569][T12858] [ 877.877569][T12858] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 877.885158][T12858] down_write+0x97/0x200 [ 877.889953][T12858] ext4_destroy_inline_data+0x28/0xe0 [ 877.895904][T12858] ext4_do_writepages+0x4f0/0x3990 [ 877.901579][T12858] ext4_writepages+0x1dd/0x350 [ 877.906907][T12858] do_writepages+0x3b3/0x630 [ 877.912057][T12858] filemap_fdatawrite_wbc+0x122/0x180 [ 877.918005][T12858] file_write_and_wait_range+0x197/0x280 [ 877.924179][T12858] generic_buffers_fsync_noflush+0x6f/0x160 [ 877.930620][T12858] ext4_sync_file+0x454/0xc00 [ 877.935844][T12858] ext4_buffered_write_iter+0x2c0/0x350 [ 877.941934][T12858] ext4_file_write_iter+0x1d9/0x1880 [ 877.947766][T12858] do_iter_write+0x738/0xc30 [ 877.952925][T12858] do_pwritev+0x241/0x3a0 [ 877.957822][T12858] do_syscall_64+0x55/0xa0 [ 877.962806][T12858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 877.969252][T12858] [ 877.969252][T12858] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 877.977710][T12858] __lock_acquire+0x2df1/0x7d40 [ 877.983119][T12858] lock_acquire+0x19e/0x420 [ 877.988252][T12858] percpu_down_read+0x44/0x1a0 [ 877.993587][T12858] ext4_writepages+0x1a4/0x350 [ 877.998926][T12858] do_writepages+0x3b3/0x630 [ 878.004062][T12858] __writeback_single_inode+0x153/0xec0 [ 878.010164][T12858] writeback_single_inode+0x21f/0x760 [ 878.016083][T12858] write_inode_now+0x183/0x210 [ 878.021395][T12858] iput+0x5ae/0x920 [ 878.025755][T12858] ext4_xattr_block_set+0x273f/0x32b0 [ 878.031691][T12858] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 878.038139][T12858] __ext4_expand_extra_isize+0x306/0x400 [ 878.044332][T12858] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 878.050349][T12858] ext4_evict_inode+0x7f3/0xea0 [ 878.055750][T12858] evict+0x4ca/0x8d0 [ 878.060281][T12858] ext4_orphan_cleanup+0xbec/0x1420 [ 878.066024][T12858] ext4_fill_super+0x5ed0/0x6790 [ 878.071507][T12858] get_tree_bdev+0x3f3/0x520 [ 878.076639][T12858] vfs_get_tree+0x8c/0x280 [ 878.081650][T12858] do_new_mount+0x24b/0xa40 [ 878.086692][T12858] __se_sys_mount+0x2e7/0x3d0 [ 878.091918][T12858] do_syscall_64+0x55/0xa0 [ 878.096893][T12858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 878.103339][T12858] [ 878.103339][T12858] other info that might help us debug this: [ 878.103339][T12858] [ 878.113591][T12858] Possible unsafe locking scenario: [ 878.113591][T12858] [ 878.121066][T12858] CPU0 CPU1 [ 878.126458][T12858] ---- ---- [ 878.131847][T12858] lock(&ei->xattr_sem); [ 878.136218][T12858] lock(&sbi->s_writepages_rwsem); [ 878.143966][T12858] lock(&ei->xattr_sem); [ 878.150862][T12858] rlock(&sbi->s_writepages_rwsem); [ 878.156372][T12858] [ 878.156372][T12858] *** DEADLOCK *** [ 878.156372][T12858] [ 878.164543][T12858] 3 locks held by syz.4.1630/12858: [ 878.169762][T12858] #0: ffff88805c8b80e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x353/0x520 [ 878.179928][T12858] #1: ffff88805c8b8608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2bf/0xea0 [ 878.189407][T12858] #2: ffff88805c7c6ec8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 878.199852][T12858] [ 878.199852][T12858] stack backtrace: [ 878.205776][T12858] CPU: 0 PID: 12858 Comm: syz.4.1630 Not tainted syzkaller #0 [ 878.213352][T12858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 878.223437][T12858] Call Trace: [ 878.226762][T12858] [ 878.229714][T12858] dump_stack_lvl+0x18c/0x250 [ 878.234433][T12858] ? load_image+0x400/0x400 [ 878.238981][T12858] ? show_regs_print_info+0x20/0x20 [ 878.244222][T12858] ? print_circular_bug+0x12b/0x1a0 [ 878.249458][T12858] check_noncircular+0x2fc/0x400 [ 878.254435][T12858] ? look_up_lock_class+0x75/0x140 [ 878.259585][T12858] ? print_deadlock_bug+0x5d0/0x5d0 [ 878.264818][T12858] ? lockdep_lock+0xf5/0x230 [ 878.269441][T12858] ? mark_lock+0x94/0x320 [ 878.273811][T12858] ? _find_first_zero_bit+0xd3/0x100 [ 878.279141][T12858] __lock_acquire+0x2df1/0x7d40 [ 878.284057][T12858] ? mark_lock+0x94/0x320 [ 878.288429][T12858] ? verify_lock_unused+0x140/0x140 [ 878.293711][T12858] ? __lock_acquire+0x1347/0x7d40 [ 878.298779][T12858] lock_acquire+0x19e/0x420 [ 878.303315][T12858] ? ext4_writepages+0x1a4/0x350 [ 878.308296][T12858] ? __perf_event_task_sched_in+0xf8/0x1490 [ 878.314314][T12858] ? __might_sleep+0xe0/0xe0 [ 878.318948][T12858] ? read_lock_is_recursive+0x20/0x20 [ 878.324365][T12858] ? mark_lock+0x94/0x320 [ 878.328728][T12858] ? __lock_acquire+0x1347/0x7d40 [ 878.333790][T12858] percpu_down_read+0x44/0x1a0 [ 878.338593][T12858] ? ext4_writepages+0x1a4/0x350 [ 878.343584][T12858] ext4_writepages+0x1a4/0x350 [ 878.348407][T12858] ? ext4_read_folio+0x2f0/0x2f0 [ 878.353394][T12858] ? __rwlock_init+0x150/0x150 [ 878.358200][T12858] ? do_raw_spin_unlock+0x121/0x230 [ 878.363435][T12858] ? ext4_read_folio+0x2f0/0x2f0 [ 878.368438][T12858] do_writepages+0x3b3/0x630 [ 878.373169][T12858] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 878.378933][T12858] ? writeback_single_inode+0x214/0x760 [ 878.384570][T12858] ? __lock_acquire+0x7d40/0x7d40 [ 878.389639][T12858] ? do_raw_spin_lock+0x11f/0x2c0 [ 878.394722][T12858] __writeback_single_inode+0x153/0xec0 [ 878.400330][T12858] writeback_single_inode+0x21f/0x760 [ 878.405759][T12858] ? io_schedule+0x80/0xd0 [ 878.410224][T12858] ? write_inode_now+0x210/0x210 [ 878.415214][T12858] write_inode_now+0x183/0x210 [ 878.420024][T12858] ? bdi_split_work_to_wbs+0x910/0x910 [ 878.425543][T12858] ? do_raw_spin_unlock+0x121/0x230 [ 878.430784][T12858] iput+0x5ae/0x920 [ 878.434639][T12858] ext4_xattr_block_set+0x273f/0x32b0 [ 878.440050][T12858] ? __might_sleep+0xe0/0xe0 [ 878.444687][T12858] ? xattr_find_entry+0x12b/0x2f0 [ 878.449747][T12858] ? ext4_xattr_block_find+0x350/0x350 [ 878.455240][T12858] ? ext4_xattr_block_find+0x2d4/0x350 [ 878.460749][T12858] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 878.466703][T12858] __ext4_expand_extra_isize+0x306/0x400 [ 878.472379][T12858] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 878.477884][T12858] ext4_evict_inode+0x7f3/0xea0 [ 878.482767][T12858] ? _raw_spin_unlock+0x28/0x40 [ 878.487746][T12858] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 878.493674][T12858] ? do_raw_spin_unlock+0x121/0x230 [ 878.498920][T12858] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 878.504850][T12858] evict+0x4ca/0x8d0 [ 878.508784][T12858] ? proc_nr_inodes+0x230/0x230 [ 878.513674][T12858] ? do_raw_spin_unlock+0x121/0x230 [ 878.518930][T12858] ? _raw_spin_unlock+0x28/0x40 [ 878.523831][T12858] ? iput+0x706/0x920 [ 878.527869][T12858] ext4_orphan_cleanup+0xbec/0x1420 [ 878.533120][T12858] ? ext4_orphan_del+0xbf0/0xbf0 [ 878.538106][T12858] ? ext4_register_li_request+0x183/0x940 [ 878.543885][T12858] ? errseq_check_and_advance+0x66/0x120 [ 878.549569][T12858] ext4_fill_super+0x5ed0/0x6790 [ 878.554570][T12858] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 878.560862][T12858] ? __might_sleep+0xe0/0xe0 [ 878.565493][T12858] ? read_lock_is_recursive+0x20/0x20 [ 878.570911][T12858] ? snprintf+0xe9/0x140 [ 878.575198][T12858] ? down_read_killable+0x340/0x340 [ 878.580436][T12858] ? setup_bdev_super+0x56b/0x660 [ 878.585504][T12858] get_tree_bdev+0x3f3/0x520 [ 878.590152][T12858] ? vfs_parse_fs_string+0x170/0x170 [ 878.595489][T12858] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 878.601772][T12858] ? setup_bdev_super+0x660/0x660 [ 878.606828][T12858] ? apparmor_capable+0x137/0x1a0 [ 878.611979][T12858] ? bpf_lsm_capable+0x9/0x10 [ 878.616711][T12858] ? security_capable+0x89/0xb0 [ 878.621599][T12858] vfs_get_tree+0x8c/0x280 [ 878.626064][T12858] do_new_mount+0x24b/0xa40 [ 878.630607][T12858] __se_sys_mount+0x2e7/0x3d0 [ 878.635323][T12858] ? __x64_sys_mount+0xc0/0xc0 [ 878.640118][T12858] ? lockdep_hardirqs_on+0x98/0x150 [ 878.645359][T12858] ? __x64_sys_mount+0x20/0xc0 [ 878.650160][T12858] do_syscall_64+0x55/0xa0 [ 878.654616][T12858] ? clear_bhb_loop+0x40/0x90 [ 878.659343][T12858] ? clear_bhb_loop+0x40/0x90 [ 878.664079][T12858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 878.670008][T12858] RIP: 0033:0x7ffb5599da8a [ 878.674465][T12858] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.694202][T12858] RSP: 002b:00007ffb56788e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 878.702662][T12858] RAX: ffffffffffffffda RBX: 00007ffb56788ee0 RCX: 00007ffb5599da8a [ 878.710679][T12858] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007ffb56788ea0 [ 878.718852][T12858] RBP: 0000200000000180 R08: 00007ffb56788ee0 R09: 0000000000800718 [ 878.725776][T12859] loop5: detected capacity change from 0 to 131072 [ 878.726848][T12858] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 878.741367][T12858] R13: 00007ffb56788ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 878.749478][T12858] [ 878.756329][T12858] ------------[ cut here ]------------ [ 878.761883][T12858] EA inode 11 i_nlink=1026 [ 878.762181][T12858] WARNING: CPU: 1 PID: 12858 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x53c/0x590 [ 878.777766][T12858] Modules linked in: [ 878.781728][T12858] CPU: 1 PID: 12858 Comm: syz.4.1630 Not tainted syzkaller #0 [ 878.789698][T12858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 878.800209][T12858] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 878.807580][T12858] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 85 d5 98 ff 49 8b 37 48 c7 c7 a0 d6 de 8a 89 da e8 94 51 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 6e 7d 3f 08 [ 878.827731][T12858] RSP: 0018:ffffc900038371a0 EFLAGS: 00010246 [ 878.833937][T12858] RAX: be7b5ebf92e95300 RBX: 0000000000000402 RCX: 0000000000080000 [ 878.842081][T12858] RDX: ffffc90019fb9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 878.850156][T12858] RBP: ffffc90003837298 R08: ffffc90003836da7 R09: 1ffff92000706db4 [ 878.858361][T12858] R10: dffffc0000000000 R11: fffff52000706db5 R12: dffffc0000000000 [ 878.866575][T12858] R13: ffff88805c4c54a8 R14: ffff88805c4c52b0 R15: ffff88805c4c5300 [ 878.874652][T12858] FS: 00007ffb567896c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 878.883635][T12858] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 878.888599][T12859] F2FS-fs (loop5): invalid crc value [ 878.890293][T12858] CR2: 00007fd7cfd98000 CR3: 000000007780f000 CR4: 00000000003506e0 [ 878.903619][T12858] Call Trace: [ 878.907323][T12858] [ 878.910304][T12858] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 878.916437][T12858] ? ext4_xattr_inode_iget+0x3df/0x600 [ 878.921957][T12858] ext4_xattr_set_entry+0xcda/0x1e90 [ 878.927676][T12858] ext4_xattr_ibody_set+0x254/0x6a0 [ 878.932925][T12858] ext4_expand_extra_isize_ea+0x1398/0x1e80 [ 878.939255][T12858] __ext4_expand_extra_isize+0x306/0x400 [ 878.944293][ T9318] usb 1-1: Using ep0 maxpacket: 16 [ 878.945286][T12858] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 878.951693][ T9318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.955834][T12858] ext4_evict_inode+0x7f3/0xea0 [ 878.967643][ T9318] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 878.970971][T12858] ? _raw_spin_unlock+0x28/0x40 [ 878.971004][T12858] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 878.991725][T12858] ? do_raw_spin_unlock+0x121/0x230 [ 878.992345][ T9318] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 878.997356][T12858] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 879.012814][T12858] evict+0x4ca/0x8d0 [ 879.017145][T12858] ? proc_nr_inodes+0x230/0x230 [ 879.022399][T12858] ? do_raw_spin_unlock+0x121/0x230 [ 879.022956][ T9318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.027952][T12858] ? _raw_spin_unlock+0x28/0x40 [ 879.040935][T12858] ? iput+0x706/0x920 [ 879.045319][T12858] ext4_orphan_cleanup+0xbec/0x1420 [ 879.046616][ T9318] usb 1-1: config 0 descriptor?? [ 879.050543][T12858] ? ext4_orphan_del+0xbf0/0xbf0 [ 879.050569][T12858] ? ext4_register_li_request+0x183/0x940 [ 879.067011][T12858] ? errseq_check_and_advance+0x66/0x120 [ 879.072693][T12858] ext4_fill_super+0x5ed0/0x6790 [ 879.078077][T12858] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 879.085595][T12858] ? __might_sleep+0xe0/0xe0 [ 879.090322][T12858] ? read_lock_is_recursive+0x20/0x20 [ 879.096183][T12858] ? snprintf+0xe9/0x140 [ 879.100482][T12858] ? down_read_killable+0x340/0x340 [ 879.106487][T12858] ? setup_bdev_super+0x56b/0x660 [ 879.111561][T12858] get_tree_bdev+0x3f3/0x520 [ 879.116548][T12858] ? vfs_parse_fs_string+0x170/0x170 [ 879.121889][T12858] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 879.128533][T12858] ? setup_bdev_super+0x660/0x660 [ 879.133601][T12858] ? apparmor_capable+0x137/0x1a0 [ 879.139313][T12858] ? bpf_lsm_capable+0x9/0x10 [ 879.144040][T12858] ? security_capable+0x89/0xb0 [ 879.149273][T12858] vfs_get_tree+0x8c/0x280 [ 879.153730][T12858] do_new_mount+0x24b/0xa40 [ 879.158572][T12858] __se_sys_mount+0x2e7/0x3d0 [ 879.163299][T12858] ? __x64_sys_mount+0xc0/0xc0 [ 879.168658][T12858] ? lockdep_hardirqs_on+0x98/0x150 [ 879.173903][T12858] ? __x64_sys_mount+0x20/0xc0 [ 879.179066][T12858] do_syscall_64+0x55/0xa0 [ 879.183535][T12858] ? clear_bhb_loop+0x40/0x90 [ 879.187028][T12859] F2FS-fs (loop5): Found nat_bits in checkpoint [ 879.188663][T12858] ? clear_bhb_loop+0x40/0x90 [ 879.199591][T12858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 879.206010][T12858] RIP: 0033:0x7ffb5599da8a [ 879.210463][T12858] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.230639][T12858] RSP: 002b:00007ffb56788e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 879.239469][T12858] RAX: ffffffffffffffda RBX: 00007ffb56788ee0 RCX: 00007ffb5599da8a [ 879.247882][T12858] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007ffb56788ea0 [ 879.256651][T12858] RBP: 0000200000000180 R08: 00007ffb56788ee0 R09: 0000000000800718 [ 879.265080][T12858] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 879.267018][T12859] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 879.273070][T12858] R13: 00007ffb56788ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 879.273096][T12858] [ 879.273105][T12858] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 879.273114][T12858] CPU: 1 PID: 12858 Comm: syz.4.1630 Not tainted syzkaller #0 [ 879.273130][T12858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 879.273140][T12858] Call Trace: [ 879.273146][T12858] [ 879.273153][T12858] dump_stack_lvl+0x18c/0x250 [ 879.273184][T12858] ? show_regs_print_info+0x20/0x20 [ 879.273208][T12858] ? load_image+0x400/0x400 [ 879.273234][T12858] panic+0x2dc/0x730 [ 879.273254][T12858] ? bpf_jit_dump+0xd0/0xd0 [ 879.273280][T12858] __warn+0x2e0/0x470 [ 879.273297][T12858] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 879.273322][T12858] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 879.273345][T12858] report_bug+0x2be/0x4f0 [ 879.273360][T12858] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 879.273383][T12858] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 879.273406][T12858] ? ext4_xattr_inode_update_ref+0x53e/0x590 [ 879.273429][T12858] handle_bug+0xcf/0x120 [ 879.273444][T12858] exc_invalid_op+0x1a/0x50 [ 879.273459][T12858] asm_exc_invalid_op+0x1a/0x20 [ 879.273486][T12858] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 879.273512][T12858] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 85 d5 98 ff 49 8b 37 48 c7 c7 a0 d6 de 8a 89 da e8 94 51 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 6e 7d 3f 08 [ 879.273527][T12858] RSP: 0018:ffffc900038371a0 EFLAGS: 00010246 [ 879.273543][T12858] RAX: be7b5ebf92e95300 RBX: 0000000000000402 RCX: 0000000000080000 [ 879.273555][T12858] RDX: ffffc90019fb9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 879.273567][T12858] RBP: ffffc90003837298 R08: ffffc90003836da7 R09: 1ffff92000706db4 [ 879.273579][T12858] R10: dffffc0000000000 R11: fffff52000706db5 R12: dffffc0000000000 [ 879.273591][T12858] R13: ffff88805c4c54a8 R14: ffff88805c4c52b0 R15: ffff88805c4c5300 [ 879.273613][T12858] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 879.273637][T12858] ? ext4_xattr_inode_iget+0x3df/0x600 [ 879.273662][T12858] ext4_xattr_set_entry+0xcda/0x1e90 [ 879.273699][T12858] ext4_xattr_ibody_set+0x254/0x6a0 [ 879.273726][T12858] ext4_expand_extra_isize_ea+0x1398/0x1e80 [ 879.273762][T12858] __ext4_expand_extra_isize+0x306/0x400 [ 879.273790][T12858] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 879.273816][T12858] ext4_evict_inode+0x7f3/0xea0 [ 879.273837][T12858] ? _raw_spin_unlock+0x28/0x40 [ 879.273860][T12858] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 879.273882][T12858] ? do_raw_spin_unlock+0x121/0x230 [ 879.273905][T12858] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 879.273926][T12858] evict+0x4ca/0x8d0 [ 879.273949][T12858] ? proc_nr_inodes+0x230/0x230 [ 879.273967][T12858] ? do_raw_spin_unlock+0x121/0x230 [ 879.273989][T12858] ? _raw_spin_unlock+0x28/0x40 [ 879.274007][T12858] ? iput+0x706/0x920 [ 879.274026][T12858] ext4_orphan_cleanup+0xbec/0x1420 [ 879.274048][T12858] ? ext4_orphan_del+0xbf0/0xbf0 [ 879.274064][T12858] ? ext4_register_li_request+0x183/0x940 [ 879.274089][T12858] ? errseq_check_and_advance+0x66/0x120 [ 879.274113][T12858] ext4_fill_super+0x5ed0/0x6790 [ 879.274141][T12858] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 879.274167][T12858] ? __might_sleep+0xe0/0xe0 [ 879.274187][T12858] ? read_lock_is_recursive+0x20/0x20 [ 879.274204][T12858] ? snprintf+0xe9/0x140 [ 879.274229][T12858] ? down_read_killable+0x340/0x340 [ 879.274248][T12858] ? setup_bdev_super+0x56b/0x660 [ 879.274266][T12858] get_tree_bdev+0x3f3/0x520 [ 879.274283][T12858] ? vfs_parse_fs_string+0x170/0x170 [ 879.274304][T12858] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 879.274323][T12858] ? setup_bdev_super+0x660/0x660 [ 879.274339][T12858] ? apparmor_capable+0x137/0x1a0 [ 879.274357][T12858] ? bpf_lsm_capable+0x9/0x10 [ 879.274379][T12858] ? security_capable+0x89/0xb0 [ 879.274402][T12858] vfs_get_tree+0x8c/0x280 [ 879.274419][T12858] do_new_mount+0x24b/0xa40 [ 879.274438][T12858] __se_sys_mount+0x2e7/0x3d0 [ 879.274457][T12858] ? __x64_sys_mount+0xc0/0xc0 [ 879.274484][T12858] ? lockdep_hardirqs_on+0x98/0x150 [ 879.274501][T12858] ? __x64_sys_mount+0x20/0xc0 [ 879.274519][T12858] do_syscall_64+0x55/0xa0 [ 879.274542][T12858] ? clear_bhb_loop+0x40/0x90 [ 879.274560][T12858] ? clear_bhb_loop+0x40/0x90 [ 879.274581][T12858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 879.274600][T12858] RIP: 0033:0x7ffb5599da8a [ 879.274614][T12858] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.274627][T12858] RSP: 002b:00007ffb56788e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 879.274645][T12858] RAX: ffffffffffffffda RBX: 00007ffb56788ee0 RCX: 00007ffb5599da8a [ 879.274657][T12858] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007ffb56788ea0 [ 879.274669][T12858] RBP: 0000200000000180 R08: 00007ffb56788ee0 R09: 0000000000800718 [ 879.274680][T12858] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 879.274691][T12858] R13: 00007ffb56788ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 879.274709][T12858] [ 879.280670][T12858] Kernel Offset: disabled