last executing test programs: 7m46.4409564s ago: executing program 0 (id=141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r3, 0x15b4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 7m45.067939459s ago: executing program 0 (id=146): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 7m44.570280554s ago: executing program 0 (id=151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xe4, 0x6, 0x3, 0x201, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x9}, [@nested={0xb5, 0xa, 0x0, 0x1, [@generic="572bc35b94e593f206de4c86da6bf6d9f41b2e16988f61851dc2c4d137c365782cbcde4b14311700db7ed7c9485d7f7e85d2bc085e6c681340a751d97d05dc784e5bb56fd7106546a7fc3b31e264f27e938cb43e474cc308f69953298d3c", @nested={0x4, 0xd}, @generic="4093c0ff7b9cf17276", @generic="9ba3c350e4fdd22b243be48327763dff4d2cfbc8c4e470193c317f5ff68ce310880876f4ccdbc1a81d697e375230e37acf2b", @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@mcast2}]}, @typed={0x8, 0x11c, 0x0, 0x0, @uid}, @generic="62fc626ea379aa554bd9d746d9"]}, 0xe4}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)={0x18, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x6}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x804) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m44.405159143s ago: executing program 0 (id=154): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000002f40)={[{@bh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") socket(0x8, 0x803, 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) 7m43.747948708s ago: executing program 0 (id=157): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x20008844) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7}, 0x1c) bind$inet6(r1, 0x0, 0x0) 7m40.251285183s ago: executing program 0 (id=167): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 7m39.320102876s ago: executing program 32 (id=167): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 6m57.258271045s ago: executing program 2 (id=322): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000600034000010000080007"], 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 6m56.887412684s ago: executing program 2 (id=313): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, 0x0, 0x0) 6m55.903648797s ago: executing program 2 (id=314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050) 6m54.908310327s ago: executing program 2 (id=315): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) alarm(0x100000001) mkdir(0x0, 0x18b) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x4000000, &(0x7f0000000140)=ANY=[], 0x1, 0x54d, &(0x7f00000015c0)="$eJzs3d9u01gewPGfQ8t2sxKLdlcIVQUOZVdqpRKcBIIibvA6J+mBxI5sB7VXqKItqkhhRBlp2jtumBlp5iG4nYeYu7kaaa7mNdA8woz8pyWhTVJa2lTV9xO1Pjk+Oed3Uss/OY1tAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYrk12y5a0jReZ0kN5tYCvzVkfS7rb75vMWRcESv+kakpuZpWXf3Px9VX4l+zMiPyu4jMyFT8fEp2/nHl8oN/T+R2Xz8koFOxtb3zYqXbXXs97kDGpKE9E/qm5TS0MqGvqpWKfWexHqq6aepwOYx0S7mBdiI/UHPuvCpWq2WlC8t+x2vUnKberbx/u2TbFfWo0NZOEPrenUeF0F00zabxGkmbeHXc5n68IT42kYq001JqfaO7Vh4VZNyo2FeTi3/9c1+j0qieSnapVCyWSsXKveq9+7Y9sa/C/oTsazH+jRbjdQJ7ceBocln+l6YY8aQjS6IOfLhSk0B8afXVPtwrZZLEn5P5/915OHTc3vw/k1bNXP24elqS/H89fXZ9UP4fEOvpPbZkW3bkhaxIV7qyJq+P2tON8c/lKI+G6Mu/iUgovhhpiRPXiBKT1CipSkUqYstTWZS6hKKkLkaaoiWUZQklEp1sUa4EosWRSHwJRMmcuDIvSopSlaqURYmWgiyLLx3xpCE1cZJe1mUjed/LQ2Lca1Q8TKPSkEbkfxzfSezGgSP5czf/AwAAAACAc8tKPn2Pj/8n5VpSqpumtscdFgAAAAAA+IKS//zPxIvJuHRNLI7/AQAAAAA4b6zkHDtLRPJyIy3tngnFhwAAAAAAAJwTyf//r8eLfFy6IRbH/wAAAAAAnDff7V19d9A1dsP236yf/5AgmLTetpf+a206cTtn80L6uguf9hjVp61LWSfJojKRPXP1jJVd/XLvIpgfssX6qDisLxCA/CA30zY3V9Pl6u6adJR83TR1wfWbD4riOJdykV6Kvn658Y0k0//ea12yZH2ju1Z49qq7msTyNu7l7WZ2AcV911EcEsub5HoLyTkXB854MjkRIxs3n45r984/u+VC7jPGfCezaZvZfLrM989/Kh6zWHhQlImDZp9FUTzmzN/JrbTNrblb6eKAKEqFj3+DX7M++6Io9UZxpPfiEFGUC4O2hCyK8jGjAIBxWR+Rhaz9if8Ie7l92f3iSWT3dzKXtpmbTnasE9MH7NHtUXt0+5jZ7ad990AalGPjcX/8JKu+j1/wfuC4YbNkxW/hhTebX8mVre2d2xubK8/Xnq+9LJXKFfuubd8ryWQyjWxB7gEAHGD0PXZGtrDujjiq/tfeVwoK8kxeSVdWZSE52yD5xsGBveZ7voawMOKoNd9zh5eFEUd1+Z4bvRy+bfkU/hIAAJye2RF5+DD5f2HEcXd/Lh9+dNyby0cYfoNBAAAwkA4+WPnoWysITPtpsVotOtGiVoHvPlaBqTW0Ml6kA3fR8RpatQM/8l2/GReemJoOVdhpt/0gUnU/UG0/NEvJnd9Vduv3ULccLzJu2G5qJ9TK9b3IcSNVM6Gr2p3/N024qIPkxWFbu6Zufsk+8fY7gasLSoVa9zQ0Ne1Fpm7ioqfagWk5wbJ64jc7La1qOnQD0478tMPdsYxX94OWExnfK4z7zQYA4IzY2t55sdLtrr0+wcK45wgAAPqRpQEAAAAAAAAAAAAAAAAAAAAAOPu+9Nl+f98tXMwGONEzCymcYOFzt43cGYh5ZCF3NsI4i4WL0lcz5h0TgBP3VwAAAP//SKxNoA==") 6m54.858918538s ago: executing program 2 (id=316): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) readv(r1, &(0x7f00000013c0)=[{&(0x7f0000000280)=""/186, 0xba}], 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0x4}, 'port0\x00', 0x786520dbf34c80ff, 0x20a03, 0x122, 0x0, 0x0, 0xc, 0x400, 0x0, 0x0, 0x87}) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x123482, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x93, &(0x7f0000000500)={@local, @empty, @val={@val={0x88a8, 0x6, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @generic={0xf, 0x6, "c74e6f", 0x55, 0x32, 0xff, @dev={0xfe, 0x80, '\x00', 0x38}, @mcast2, {[@srh={0x2b, 0x2, 0x4, 0x1, 0x5, 0x0, 0xa3, [@remote]}, @srh={0x73, 0x2, 0x4, 0x1, 0x3, 0x0, 0x0, [@loopback]}], "fa37c10773bd20bea3d4ea7a0a663d13f372bc2be105a5d840e991b5eb422ee2a3a367ba69"}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 6m53.894698535s ago: executing program 2 (id=320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 6m52.938851823s ago: executing program 33 (id=320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3m45.188805747s ago: executing program 3 (id=880): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169282, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x70, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x70}}, 0x4008000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000880)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000480)=ANY=[@ANYBLOB='-', @ANYRESDEC=r5], 0x27) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) connect$can_j1939(r2, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x57, 0x0, 0x4, {0xffff, 0x1}, {0x45, 0x5}, @cond=[{0x2, 0x5388, 0x6, 0x800, 0x80cb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000200)=""/88) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x2) ptrace$pokeuser(0x6, r0, 0x358, 0xafe8) 3m43.965998535s ago: executing program 3 (id=885): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r4, 0xffffffffffffffff, 0x11, 0x0, r4}, 0x11) 3m42.484879443s ago: executing program 3 (id=886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x20000000, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 3m40.728705159s ago: executing program 3 (id=892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 3m39.574863859s ago: executing program 3 (id=895): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4008000) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r4, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x922, 0x12) 3m38.023122774s ago: executing program 3 (id=901): r0 = userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0xb58}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x9, 0x6, 0x8, 0x209, 0x2]}, &(0x7f0000000180)=0x54) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) unshare(0x20000400) 3m22.364300195s ago: executing program 34 (id=901): r0 = userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0xb58}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x9, 0x6, 0x8, 0x209, 0x2]}, &(0x7f0000000180)=0x54) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) unshare(0x20000400) 3.10712744s ago: executing program 6 (id=1767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) writev(r0, &(0x7f0000000a00)=[{&(0x7f0000001700)="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", 0x281}, {0x0}], 0x2) 2.650186194s ago: executing program 6 (id=1771): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) 1.547376194s ago: executing program 7 (id=1778): syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.495370764s ago: executing program 6 (id=1780): sched_setscheduler(0x0, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 1.460304647s ago: executing program 5 (id=1781): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@grpjquota}]}, 0x1, 0x3f7, &(0x7f0000000ac0)="$eJzs3U1vG0UfAPD/bt7atE+TSs+Bl4sFSERCJE3aApVAIuLCoT3RA0es2C1RnQYlRqJVxItA3EAC8QHgAHwEjnDgO8AZOEClCOVAys1o7V3HxHbapA6ukt9PGnlmZ+2Z9XjW68nsJIBjqxQRL0fESESci4ipfHuah3i/FbL9trc2lv7e2lhKotF47c8kknxb8VpJ/ngqf4GZNCL9KInHe5S7fuv2jXKtVl3L03P1lbfm1m/dfnZ5pXy9er16c+G58xcuXnzh0sLzAzvWzZXkk6e+ufzbZx9XPv/pj++ns/qezvM6j2NQSlFqvye7XRp0YUN2oiOejA6xIgAA7CnNr/1Hm9f/UzESOxdvU/Hpj0OtHAAAADAQjUbxCAAAABxdid/+AAAAcMQV8wC2tzaWijDE6Qj8xzYXI2K61f5389DKGW3f0zu26/7eQSpFxKsnrixkIQ7pPmwAAACA4+yHxdbCf93jf2k80rHfyYiYLNb2G6DSrnT3+E96Z8BF0mFzMeLFiLjbNf6XFrtMj+Sp/zWHCseSa8u16rmIOBMRMzE2kaXn9yjj3SdufNsvr3P878tfX5/Pys8ed/ZI74xO/Ps5lXK9/CDHzI7NDyIeG+3V/kl7zLdzncyDeGN5+6V+eVn7Z+1dhO725zA1vop4umf/31m5NNl7fda55vlgLj8rTHSX8cvprz/sV35n/89CVn7xtwAOX9b/J/du/+Y6ue31etf3X8Z3f135uV/evdu/9/l/PLnarOB4vu2dcr2+Nh8xnlzu3u7T1Fa8H8X7lbX/zJO9v/+L678k/+4/07E+9H688t7Zq/3y9P/hytq/sq/+v//Im5OPzvQr//76/4VmZYoXcf13b/fbQMOuJwAAAAAAAACDkTbn9iXpbDueprOzrXm+/4/JtLa6Xn/m2urbNyutOYDTMZYW8z+nOuaDzrduI2+nF3alz0fE2Yj4YupkMz27tFqrDPvgAQAA4Jg41ef3f+b3g9zsAQAAADycpoddAQAAAODQ+f0PAAAAR9qDrOtfq64V/yLogE8XETlYZCT/4D0s9Tl6kSGelAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIfwIAAP//keS8Nw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40042, 0x100) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000500)=0x1) write$nbd(r0, 0x0, 0x0) 1.381502492s ago: executing program 7 (id=1783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4ab02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'macvtap0\x00', 0x400}) close(0x3) 1.381022532s ago: executing program 4 (id=1784): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000100010ac05470200000000000109024300010000000009040000010300000009210000000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.3138073s ago: executing program 5 (id=1785): r0 = socket(0x2a, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) 1.255884908s ago: executing program 7 (id=1786): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, 0x0) 1.21150508s ago: executing program 1 (id=1787): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8}, {@overriderock}, {@nojoliet}, {@nojoliet}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x3}}, {@nocompress}, {@mode}, {}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed}, {@nojoliet}, {@check_relaxed}, {@map_acorn}]}, 0x1, 0xa51, &(0x7f0000001240)="$eJzs3ctvXNd9B/DvHZISQ7u24qiuKzjiSK4UxmEpkqqlCl6kEjmSmPJRkBRgoYsojahCEFu3cQs4RoEoQNFVjBZo0UW7M7rqykA2TReFN0W7a1ZdFCj8LwRdqSsG986QHJIzHIrhy8rnQ8zMffzuOec+zj2cmTv3hC+WtVe3jK2tVY99jt/75yMoMSfYrenPP/n04/Lxw6c5lb68U/xLMpiknvQneSMZmJpeXJjrkdCT5EGSz5Iiyek0X/fkQYq/zsub45+l+Mcy365O7TVlelnjl9pxH38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHASFVPT4+MTxanMzN97r96U1HeYml5cKLK2tnPO+jJNP6l6/S5+0jPfpCgfGRxc7+r7jbObs19PUr+YN5tjb1YdkmcwH730+pl3v9JfW1++W2l+Iaf3nuwH3//oyXdWV1e+13FuURxgqU6Y5jFypzE/s7QwM3fzTqM+s7RQv3Ht2viVu7eX6rdnZhtL95eWG3P1qcXGzeWFxfrI1NfrEzduXK03xu4v3Ju/Mz0221ifeP03J8fHr9W/NfZ7jZuLSwvzV741tjR1d2Z2dmb+ThVTzi5jrpcH4u/OLNeXGzfn6vVHj1dXrm4rWV+2Hb9l0ESv9SmDJnsFTY5PTk5MTE5O/LDVe/bGhGvv3Hjn+vh4/3jTy2kNZEfEIR20nCxf6r6bD/4kDvtUa7b/yWxmMp97eS/1jn9Tmc5iFjLXZX7Levt/6Upj12zT1v63Wvn+tvnnyqeLOd8aHezS/ncpy9H9fZDv56M8yXeymtWs5HvHXqKj/buTRuYzk6UsZCZzuVlNqbem1HMj13It4/l27mY4S+nP7cxkNo0s5X6WspxGdURNZTGN3MxyFrKYekYyla+nnoncyI1cTT2NjOV+FnIv87mT6dysUnmUx9V2v7pLGTeCJvYSNLlL0I7GvFv7v2H7Io3t/5zwAqrtupcP4SwO+7PWav9P9Q4dmdoy2n94hQIAAAAO1K//Z145+9p//G9S5KvV9/K3Z2Yb48ddLAAAAOAAVZfrvVm+DJRDX03h/T8AAAC8aIrqN3ZFkqEMN4fWfwnlQwAAAAB4QVTf/59PMbw5wft/AAAAeMH0vsd+z4hidP32v/WHzdeHrYjmWDF0e2a2MTa1MPvuRC5XdxmofmmwI7W+pBiofn7wdi40oy4MNV+HNlMs8xwsoybG3p3I27nYWpGRt8qXt0Y6RE42I7/WjPxae2RftkReLSMB4EV3cZf2eK/t/9sZbUaMnqua/P5zW9rgvqplHdeyAsBJsdHHzv+3ujTr0P6fb94b4Hy39v+3dnn/X0a8lkfDzUsKxvLdvJ/VPMxoWlccDHdKdb03guZlCKM9Pg0Yal2y8NPrtYzu+DxgcGNd22NXMpnRjp8ItKVbrJfhajOu77D2AgAcrYu7tsPr7X/1IXnX9n909/f/bW2uSwoB4CTY6MH+eQeG9x583OsIAGyllQYAAAAAAAAAAAAAAAAAAAAAAAAAAICDt6cb+P/X5WR1dSXZb2cBHQZ++u//+itdY370UjL4PCXcfaCWAynz6SQHsu6HN9CX5Lhy/2aee6lyH5+UTfciDRRPqwr7C6VzzCcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjkSR9HWaXktOJxlPcuXoS3V4nh53AQ5KfX+LFc/yLB/mlYMuDgAAAAAAAAAAAAAAAAAAAAAAAAAAAADAL7vW/f9rab6+1JyU/lpyKcmDJL9/3GV8HoM95j87onKcPH9UPbfd/7+WDGStSH/W1tbWkmJganpxYa48FIrT5fzPP/n04/LRNckfrA/s7FWhTKDMYUvnEq0c2qYMbF3qy9VSQ9MrHzz5s/f/pD59qzowby3fnp2eu7P4O5uBrxc/bnaB0N4Nwnp5/+LSv/1N2+RTrcx/nP5uK7I939tVvtM78/21Tkt3yXcPHq+uTJY5LTfeW/7zP661z3otF5K3RpKRrTn9YfnoktOF7dtzq+JnxV8Vr+Tv86Da/+XWKNaKche9Wq3/lx49Xl0Z++77qw83yvSDxx+2JXAmw0kebq1lPco0XJ1POnqpynWgzHW8CiqfzvZIb1dtKU5sbtct6/Dl6pAZeq51qHdfh0qP7d4q0dXtJVorK8nf/ulXcnnXPX26Q4qXe+TYUfGz4n+Ku/nv/GVb/x+1cv9fSsfa2SGJKrLtSGmft6V61S5trvlk+4xvb0+za63kEPwof5Df3tj/ter8315vJrvUm43z0TfbJnapN+tVq0u9OL21pu6oFy296sXOmvpPr+5oUbbmmrPbWqTW2afbMq1ynm1GdSnnr+YbSf+55zqjfKPHGaXX8vut//9QjOT/8lT/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMlXJH2dpteSS0nOJHm1HK8na9tjnu4jv9pQsZ9iHpj9lPmLp+i6osWzPMuHeeWoSwQAAAAAAADA4bg1/fknn35cPqrv4/vyG7XWnHrSn+RM8XcDU9OLC3M9EhpIHqx/pT/YOaTL5Dwon17eHP+sHHujR37He/kAAHyh/TwAAP//FnluMg==") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1.119365002s ago: executing program 5 (id=1788): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC], 0x0, 0x1d2, &(0x7f0000000a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]}) 1.119191872s ago: executing program 7 (id=1789): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x3a, 0x0, 0x2}]}) 1.05332191s ago: executing program 7 (id=1790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x11) 1.042036078s ago: executing program 1 (id=1791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x28000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000740)={0x2, 0x0, [{0x1, 0x5, 0x4, 0x6, 0xa000000, 0xfffff0b0, 0xd2}, {0xd, 0x1, 0x1, 0x800, 0x0, 0xb, 0x9391}]}) 871.319716ms ago: executing program 5 (id=1792): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x0) getdents64(r0, 0x0, 0x22) 703.716253ms ago: executing program 4 (id=1793): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) 591.758492ms ago: executing program 6 (id=1794): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x1, 0x7, [@multicast, @empty, @empty, @broadcast, @random="50e6388c9fde", @multicast, @broadcast]}) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 551.308504ms ago: executing program 1 (id=1795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c886f1e5c860656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421db9fbcb634df876aa2133fd62e245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd60824768691005cbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440f", @ANYRES32=0x0, @ANYRES16, @ANYRES16], 0xd, 0x2d5, &(0x7f0000000bc0)="$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") fsopen(0x0, 0x0) 551.049844ms ago: executing program 4 (id=1796): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000500)={{0x1, 0x8000000, 0xc, 0x60, 0x6, 0x80, 0x4, 0x7, 0xf, 0x9, 0xfb, 0x6}, {0x0, 0xffff1000, 0x3, 0xd, 0x2, 0x8, 0x81, 0x9, 0x9, 0x5, 0x7, 0x9}, {0x8000000, 0x2000, 0x10, 0x32, 0x3, 0x9, 0x2, 0x7, 0x0, 0x1, 0x2, 0xc2}, {0x54000, 0xdddd0000, 0xa, 0xd, 0x5, 0x6, 0x2, 0x6, 0x9, 0x8, 0x3, 0x9}, {0x1000, 0x10000, 0x10, 0x9d, 0x0, 0x2, 0xd9, 0x3, 0x3, 0x6, 0x5}, {0x30000, 0xeeee8000, 0xc, 0xce, 0x8, 0x6, 0x81, 0xb, 0x9, 0x6, 0x2, 0xc}, {0xffffffff, 0x5000, 0x4, 0x1, 0x9, 0x8, 0x2, 0xfb, 0x1, 0x4, 0x6, 0x6}, {0x58000, 0x70000, 0xb, 0x2, 0x49, 0x8, 0x2, 0x7f, 0xf7, 0x3, 0xd1, 0x9}, {0xffff1000, 0x5}, {0xfec00000, 0x400}, 0x0, 0x0, 0x30000, 0x2f0253, 0xe, 0x3400, 0x2000, 0x0, [0x0, 0x9, 0x101, 0x7]}) 533.677271ms ago: executing program 5 (id=1797): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "83e624170a2005004d5e9ac5be09e4bae4ffffffe900000000000000001300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000280)={"840d6042cee820000028000000e8ff0000002000000000000000000f00", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0383e04, &(0x7f0000000140)={"c4650da6c04da5a743eadb230a98b1079aa302394a0000d10000000200", r1, 0xffffffffffffffff, 0x2}) 479.27901ms ago: executing program 6 (id=1798): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000000)={[{@inlinecrypt}, {@usrquota}, {@test_dummy_encryption_v1}, {@data_err_ignore}]}, 0x2, 0xbd1, &(0x7f0000001340)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000440)) 454.220706ms ago: executing program 4 (id=1799): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xd) ptrace$pokeuser(0x6, r0, 0x358, 0xfffffffffffffff8) 430.944141ms ago: executing program 1 (id=1800): unshare(0x6020400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x5c, 0x4}}) pread64(r0, &(0x7f00000014c0)=""/4104, 0x1008, 0x10000) 299.282196ms ago: executing program 4 (id=1801): bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r0, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000006a}, 0x10) 298.945556ms ago: executing program 1 (id=1802): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) sendfile(r0, r1, &(0x7f0000000040), 0x3) 236.204304ms ago: executing program 5 (id=1803): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup2(r0, r0) fcntl$setstatus(r0, 0x4, 0x42800) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) 226.488973ms ago: executing program 4 (id=1804): sched_setscheduler(0x0, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 149.423528ms ago: executing program 7 (id=1805): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0) 100.216578ms ago: executing program 6 (id=1806): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x2000009, @private2={0xfc, 0x2, '\x00', 0x5}, 0x216f}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x9}, 0x8) 0s ago: executing program 1 (id=1807): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) truncate(&(0x7f0000000a80)='./file2\x00', 0x6e8) kernel console output (not intermixed with test programs): 3] usb 2-1: Using ep0 maxpacket: 16 [ 151.449513][ T4465] device hsr_slave_0 left promiscuous mode [ 151.456083][ T4465] device hsr_slave_1 left promiscuous mode [ 151.462601][ T4465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.470043][ T4465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.482037][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.482552][ T4465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.502632][ T5697] BTRFS error (device loop5): open_ctree failed: -12 [ 151.518369][ T23] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 152.102950][ T23] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 152.169699][ T5781] Bluetooth: hci3: command 0x040f tx timeout [ 152.274878][ T4465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.282442][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.328334][ T23] usb 2-1: Product: syz [ 152.342822][ T4465] device bridge_slave_1 left promiscuous mode [ 152.349070][ T4465] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.355747][ T23] usb 2-1: Manufacturer: syz [ 152.360924][ T23] usb 2-1: SerialNumber: syz [ 152.423331][ T4465] device bridge_slave_0 left promiscuous mode [ 152.471575][ T4465] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.542969][ T4465] device veth1_macvtap left promiscuous mode [ 152.549111][ T4465] device veth0_macvtap left promiscuous mode [ 153.299643][ T4465] device veth1_vlan left promiscuous mode [ 153.305539][ T4465] device veth0_vlan left promiscuous mode [ 153.371347][ T5796] loop5: detected capacity change from 0 to 256 [ 153.400819][ T5796] exfat: Deprecated parameter 'utf8' [ 153.433511][ T5796] exfat: Unknown parameter 'k+eep@last_dots' [ 154.302115][ T5774] Bluetooth: hci3: command 0x0419 tx timeout [ 156.893255][ T4465] team0 (unregistering): Port device team_slave_1 removed [ 156.938023][ T4465] team0 (unregistering): Port device team_slave_0 removed [ 156.997267][ T4465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.021611][ T4465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.178489][ T4465] bond0 (unregistering): Released all slaves [ 157.280557][ T5659] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.287879][ T5659] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.296172][ T5659] device bridge_slave_0 entered promiscuous mode [ 157.316089][ T5833] device syzkaller0 entered promiscuous mode [ 157.325648][ T1347] usb 2-1: USB disconnect, device number 5 [ 157.630385][ T5659] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.671671][ T5659] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.895284][ T5659] device bridge_slave_1 entered promiscuous mode [ 157.994215][ T5659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.095840][ T5659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.121216][ T5850] syz.5.371 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 158.139854][ T5850] loop5: detected capacity change from 0 to 1024 [ 158.173362][ T5659] team0: Port device team_slave_0 added [ 158.249637][ T5850] EXT4-fs (loop5): Ignoring removed orlov option [ 158.375229][ T5659] team0: Port device team_slave_1 added [ 158.483574][ T5850] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,usrjquota=,,errors=continue. Quota mode: none. [ 158.555892][ T5863] loop4: detected capacity change from 0 to 128 [ 158.574315][ T26] audit: type=1800 audit(1773329049.104:7): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.371" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 158.599547][ T5659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.606581][ T5659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.634607][ T5659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.646672][ T5864] netlink: 68 bytes leftover after parsing attributes in process `syz.3.373'. [ 158.667230][ T5659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.683007][ T5659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.692743][ T5850] Trying to write to read-only block-device loop5 [ 158.729276][ T5863] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.733684][ T5659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.809756][ T5863] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.823751][ T5850] Trying to write to read-only block-device loop5 [ 158.848470][ T5850] Trying to write to read-only block-device loop5 [ 158.858629][ T5659] device hsr_slave_0 entered promiscuous mode [ 158.865587][ T5850] Trying to write to read-only block-device loop5 [ 158.872825][ T5659] device hsr_slave_1 entered promiscuous mode [ 158.879493][ T5850] Trying to write to read-only block-device loop5 [ 158.905289][ T5850] Trying to write to read-only block-device loop5 [ 158.954711][ T5850] Trying to write to read-only block-device loop5 [ 159.008018][ T5850] Trying to write to read-only block-device loop5 [ 159.187334][ T5850] Trying to write to read-only block-device loop5 [ 159.212257][ T5850] Trying to write to read-only block-device loop5 [ 160.117134][ T26] audit: type=1326 audit(1773329050.644:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297d476799 code=0x7ffc0000 [ 160.139354][ T26] audit: type=1326 audit(1773329050.644:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297d476799 code=0x7ffc0000 [ 160.161942][ T26] audit: type=1326 audit(1773329050.644:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f297d476799 code=0x7ffc0000 [ 160.193966][ T26] audit: type=1326 audit(1773329050.644:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297d476799 code=0x7ffc0000 [ 161.234347][ T26] audit: type=1326 audit(1773329050.644:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297d476799 code=0x7ffc0000 [ 161.262400][ T5898] loop1: detected capacity change from 0 to 128 [ 161.268911][ T26] audit: type=1326 audit(1773329050.644:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f297d476799 code=0x7ffc0000 [ 161.296247][ T26] audit: type=1326 audit(1773329050.644:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297d476799 code=0x7ffc0000 [ 161.318680][ T5896] loop4: detected capacity change from 0 to 2048 [ 161.322281][ T26] audit: type=1326 audit(1773329050.644:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297d476799 code=0x7ffc0000 [ 161.352776][ T26] audit: type=1326 audit(1773329050.644:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5879 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f297d476799 code=0x7ffc0000 [ 161.355270][ T5898] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.415007][ T5659] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 161.503577][ T5774] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 161.519814][ T5659] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 162.147921][ T5659] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 162.184176][ T5659] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 162.205637][ T5896] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.311910][ T5896] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.331824][ T5774] usb 4-1: Using ep0 maxpacket: 8 [ 162.452007][ T5774] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 162.460369][ T5774] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.231903][ T5774] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.281821][ T5774] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.311816][ T5774] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.332810][ T5659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.349659][ T5774] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 163.379308][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.451369][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.481148][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.533228][ T5659] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.673945][ T633] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.758002][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.761991][ T5774] usb 4-1: usb_control_msg returned -32 [ 163.852192][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.968690][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.975844][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.279609][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.492973][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.532871][ T5774] usbtmc 4-1:16.0: can't read capabilities [ 164.574259][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.581335][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.685643][ T4237] usb 4-1: USB disconnect, device number 4 [ 164.818745][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.836418][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.763724][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.772649][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.783580][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.792572][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.801360][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.825534][ T5659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.836048][ T5659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.863446][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.872183][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.891340][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.919673][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.931023][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.939873][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.063492][ T5962] loop4: detected capacity change from 0 to 32768 [ 166.945184][ T5962] XFS (loop4): Mounting V5 Filesystem [ 167.186839][ T5962] XFS (loop4): Ending clean mount [ 167.203539][ T5962] XFS (loop4): Quotacheck needed: Please wait. [ 167.346776][ T5991] hugetlbfs: syz.1.396 (5991): Using mlock ulimits for SHM_HUGETLB is deprecated [ 167.377685][ T5962] XFS (loop4): Quotacheck: Done. [ 168.045180][ T4185] XFS (loop4): Unmounting Filesystem [ 169.148408][ T633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.162518][ T633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.196552][ T5659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.289156][ T6013] device syzkaller0 entered promiscuous mode [ 169.518425][ T6019] loop5: detected capacity change from 0 to 128 [ 172.041380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.076533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.163721][ T5659] device veth0_vlan entered promiscuous mode [ 172.244074][ T633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.337938][ T633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.546337][ T633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.669299][ T633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.804793][ T5659] device veth1_vlan entered promiscuous mode [ 173.042209][ T633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 173.099316][ T633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 173.378910][ T633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.409996][ T633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.503499][ T5659] device veth0_macvtap entered promiscuous mode [ 173.625185][ T5659] device veth1_macvtap entered promiscuous mode [ 173.715707][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.781826][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.841838][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.921890][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.350465][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.391495][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.422609][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.474696][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.481882][ T6085] binder_alloc: 6082: binder_alloc_buf size 16384 failed, no address space [ 174.523835][ T6085] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 174.541093][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.590367][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.669078][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.766595][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.855606][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.127375][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.266556][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.399030][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.599111][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.612410][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.662018][ T5776] Bluetooth: hci4: command 0x0406 tx timeout [ 175.663381][ T4237] Bluetooth: hci1: command 0x0406 tx timeout [ 175.700601][ T5659] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.714869][ T5659] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.725596][ T5659] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.738626][ T5659] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.799184][ T6112] loop1: detected capacity change from 0 to 32768 [ 177.099414][ T6116] loop3: detected capacity change from 0 to 128 [ 177.118298][ T6112] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 177.130951][ T6112] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 177.577403][ T633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.594989][ T633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.659978][ T4465] attempt to access beyond end of device [ 177.659978][ T4465] loop3: rw=1, want=1041, limit=128 [ 177.789163][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 178.018689][ T633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.198813][ T633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.350758][ T633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 178.435729][ T6134] binder: BINDER_SET_CONTEXT_MGR already set [ 178.501911][ T6134] binder: 6133:6134 ioctl 4018620d 2000000002c0 returned -16 [ 178.575270][ T6146] loop1: detected capacity change from 0 to 256 [ 178.748342][ T6141] ipt_CLUSTERIP: Please specify destination IP [ 179.028696][ T6164] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 179.181918][ T23] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 179.542466][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.562015][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.842292][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.851514][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.866609][ T23] usb 2-1: Product: syz [ 179.870801][ T23] usb 2-1: Manufacturer: syz [ 179.875784][ T23] usb 2-1: SerialNumber: syz [ 180.202488][ T23] usb 2-1: 0:2 : does not exist [ 180.852893][ T23] usb 2-1: USB disconnect, device number 6 [ 180.952564][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.438'. [ 181.456380][ T4360] udevd[4360]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.614140][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.438'. [ 181.864601][ T6200] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.897688][ T6205] loop4: detected capacity change from 0 to 128 [ 182.000311][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 182.000324][ T26] audit: type=1800 audit(1773329072.524:19): pid=6205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.441" name="bus" dev="loop4" ino=1048605 res=0 errno=0 [ 182.027135][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.446097][ T6206] rdma_rxe: ignoring netdev event = 10 for vxcan1 [ 183.457892][ T6206] infiniband syz2: set down [ 183.706211][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.754855][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.140890][ T6206] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.154170][ T6206] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.164610][ T6206] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.173623][ T6206] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.391075][ T21] vxcan1 speed is unknown, defaulting to 1000 [ 184.454021][ T21] vxcan1 speed is unknown, defaulting to 1000 [ 186.153803][ T6256] device syzkaller0 entered promiscuous mode [ 186.452894][ T6239] loop4: detected capacity change from 0 to 256 [ 187.674590][ T6292] loop5: detected capacity change from 0 to 8 [ 187.820574][ T6292] /dev/loop5: Can't open blockdev [ 187.840735][ T6297] loop1: detected capacity change from 0 to 512 [ 187.885977][ T6300] loop4: detected capacity change from 0 to 128 [ 188.614005][ T6300] ufs: You didn't specify the type of your ufs filesystem [ 188.614005][ T6300] [ 188.614005][ T6300] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 188.614005][ T6300] [ 188.614005][ T6300] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 190.402127][ T6300] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 192.221861][ T21] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 192.361283][ T6342] loop5: detected capacity change from 0 to 32768 [ 192.501846][ T21] usb 7-1: Using ep0 maxpacket: 32 [ 192.635465][ T21] usb 7-1: config 0 has no interfaces? [ 192.728743][ T4360] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (4360) [ 193.561912][ T21] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 193.672090][ T21] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 193.741479][ T21] usb 7-1: Product: syz [ 193.756014][ T21] usb 7-1: Manufacturer: syz [ 193.781840][ T21] usb 7-1: SerialNumber: syz [ 193.849017][ T21] usb 7-1: config 0 descriptor?? [ 194.093707][ T21] usb 7-1: USB disconnect, device number 2 [ 194.153323][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.166953][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.761866][ T6409] netlink: 'syz.4.490': attribute type 3 has an invalid length. [ 194.966614][ T6409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.490'. [ 195.011103][ T6418] loop5: detected capacity change from 0 to 32768 [ 195.045497][ T6409] netlink: 2 bytes leftover after parsing attributes in process `syz.4.490'. [ 195.152000][ T6418] /dev/loop5: Can't open blockdev [ 195.533694][ T6444] loop5: detected capacity change from 0 to 128 [ 197.582532][ T6470] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 197.795481][ T6471] loop6: detected capacity change from 0 to 164 [ 198.004316][ T6473] loop4: detected capacity change from 0 to 64 [ 198.024291][ T6449] loop3: detected capacity change from 0 to 4096 [ 198.095732][ T6477] loop5: detected capacity change from 0 to 256 [ 198.105088][ T6471] rock: directory entry would overflow storage [ 198.111268][ T6471] rock: sig=0x5053, size=7, remaining=4 [ 198.117418][ T6471] isofs_fill_super: root inode is not a directory. Corrupted media? [ 198.339919][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'. [ 199.095576][ T6499] netlink: 'syz.5.509': attribute type 4 has an invalid length. [ 199.362024][ T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 199.671947][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 199.843770][ T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.884718][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.5.510'. [ 199.921377][ T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.063247][ T21] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.096839][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.120462][ T21] usb 2-1: Product: syz [ 201.131238][ T21] usb 2-1: Manufacturer: syz [ 201.142987][ T21] usb 2-1: SerialNumber: syz [ 201.164665][ T6505] bridge2: port 1(veth3) entered blocking state [ 201.170971][ T6505] bridge2: port 1(veth3) entered disabled state [ 201.182630][ T6505] device veth3 entered promiscuous mode [ 201.219604][ T6504] bridge2: port 2(veth5) entered blocking state [ 201.236299][ T6504] bridge2: port 2(veth5) entered disabled state [ 201.254649][ T6504] device veth5 entered promiscuous mode [ 201.495414][ T21] usb 2-1: 0:2 : does not exist [ 201.582064][ T21] usb 2-1: USB disconnect, device number 7 [ 201.643704][ T6539] rdma_rxe: rxe_register_device failed with error -23 [ 201.651932][ T6539] rdma_rxe: failed to add vxcan1 [ 202.636312][ T4360] udevd[4360]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.005915][ T6563] netlink: 52 bytes leftover after parsing attributes in process `syz.5.521'. [ 204.272106][ T6563] bridge0: port 3(team0) entered disabled state [ 204.278860][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.287161][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.412576][ T6571] netlink: 76 bytes leftover after parsing attributes in process `syz.5.521'. [ 204.421607][ T6571] bridge0: port 3(team0) entered blocking state [ 204.427964][ T6571] bridge0: port 3(team0) entered forwarding state [ 204.434562][ T6571] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.441615][ T6571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.448997][ T6571] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.456097][ T6571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.534776][ T6571] netlink: 52 bytes leftover after parsing attributes in process `syz.5.521'. [ 205.288938][ T6585] netlink: 'syz.1.525': attribute type 7 has an invalid length. [ 205.847156][ T6571] bridge0: port 3(team0) entered disabled state [ 205.853803][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.861123][ T6571] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.441417][ T6622] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 208.767668][ T6629] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.537'. [ 208.880715][ T6633] loop5: detected capacity change from 0 to 1024 [ 208.925272][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.6.540'. [ 210.021733][ T6660] loop5: detected capacity change from 0 to 1024 [ 210.079676][ T6668] loop1: detected capacity change from 0 to 1024 [ 210.121065][ T6658] Set syz1 is full, maxelem 6117 reached [ 210.544112][ T6681] loop3: detected capacity change from 0 to 512 [ 210.992635][ T6681] EXT4-fs error (device loop3): __ext4_iget:4912: inode #11: block 1: comm syz.3.553: invalid block [ 211.402476][ T6681] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.553: couldn't read orphan inode 11 (err -117) [ 211.472174][ T6681] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,,errors=continue. Quota mode: none. [ 213.598867][ T6721] netlink: 24 bytes leftover after parsing attributes in process `syz.6.560'. [ 215.188613][ T6743] loop5: detected capacity change from 0 to 512 [ 215.978170][ T6750] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 215.985289][ T6750] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 216.032020][ T6750] vhci_hcd vhci_hcd.0: Device attached [ 216.242952][ T4228] vhci_hcd: vhci_device speed not set [ 216.322081][ T4228] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 216.377819][ T6755] vhci_hcd: connection closed [ 216.383148][ T4465] vhci_hcd: stop threads [ 216.502422][ T4465] vhci_hcd: release socket [ 216.693651][ T4465] vhci_hcd: disconnect device [ 216.882857][ T6753] syz.1.568 (6753) used greatest stack depth: 17240 bytes left [ 217.091941][ T6781] autofs4:pid:6781:autofs_fill_super: called with bogus options [ 217.288649][ T6781] loop1: detected capacity change from 0 to 128 [ 217.546889][ T6781] ufs: You didn't specify the type of your ufs filesystem [ 217.546889][ T6781] [ 217.546889][ T6781] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 217.546889][ T6781] [ 217.546889][ T6781] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 217.882222][ T6781] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 220.297669][ T6792] syz.6.577 (6792): drop_caches: 2 [ 220.466686][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 220.596739][ T6825] bridge0: port 1(veth0_to_bond) entered blocking state [ 220.639811][ T6825] bridge0: port 1(veth0_to_bond) entered disabled state [ 220.668056][ T6825] device veth0_to_bond entered promiscuous mode [ 221.581937][ T4228] vhci_hcd: vhci_device speed not set [ 221.846219][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.599'. [ 222.144860][ T6216] Bluetooth: hci2: command 0x0406 tx timeout [ 222.340714][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'. [ 223.033713][ T6846] loop1: detected capacity change from 0 to 1024 [ 223.324327][ T6857] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 224.656525][ T6846] EXT4-fs: failed to create workqueue [ 224.729175][ T6846] EXT4-fs (loop1): mount failed [ 227.048312][ T6890] loop1: detected capacity change from 0 to 4096 [ 228.095433][ T6908] device syzkaller0 entered promiscuous mode [ 228.125637][ T4228] syzkaller0: tun_net_xmit 48 [ 228.133438][ T6917] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 229.731186][ T6925] tipc: Failed to remove unknown binding: 66,0,0/0:574177383/574177384 [ 229.739944][ T6929] tipc: Failed to remove unknown binding: 66,0,0/0:4014017727/4014017729 [ 229.761913][ T6925] tipc: Failed to remove unknown binding: 66,0,0/0:574177383/574177384 [ 230.065588][ T6942] loop4: detected capacity change from 0 to 128 [ 230.301584][ T6942] FAT-fs (loop4): Directory bread(block 524322) failed [ 230.509883][ T6942] FAT-fs (loop4): Directory bread(block 524323) failed [ 230.841252][ T6942] FAT-fs (loop4): Directory bread(block 524324) failed [ 230.949506][ T6942] FAT-fs (loop4): Directory bread(block 524325) failed [ 230.967053][ T6942] FAT-fs (loop4): Directory bread(block 524326) failed [ 231.055827][ T6942] FAT-fs (loop4): Directory bread(block 524327) failed [ 231.160670][ T6942] FAT-fs (loop4): Directory bread(block 524328) failed [ 231.329445][ T6942] FAT-fs (loop4): Directory bread(block 524329) failed [ 232.064520][ T6978] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4273022513 (8546045026 ns) > initial count (2701865562 ns). Using initial count to start timer. [ 232.355447][ T6986] loop1: detected capacity change from 0 to 512 [ 232.910759][ T7000] netlink: 24 bytes leftover after parsing attributes in process `syz.6.625'. [ 233.004792][ T6986] EXT4-fs error (device loop1): __ext4_iget:4912: inode #11: block 1: comm syz.1.616: invalid block [ 233.020612][ T7006] netlink: 28 bytes leftover after parsing attributes in process `syz.6.625'. [ 233.063958][ T6986] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.616: couldn't read orphan inode 11 (err -117) [ 233.173932][ T7006] device veth5 entered promiscuous mode [ 233.176399][ T6986] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,,errors=continue. Quota mode: none. [ 233.409561][ T7018] hub 8-0:1.0: USB hub found [ 233.419787][ T7018] hub 8-0:1.0: 1 port detected [ 235.202875][ T7040] device syzkaller0 entered promiscuous mode [ 236.284835][ T4228] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 236.491825][ T5780] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 236.762954][ T4228] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 236.841170][ T4228] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.887153][ T4228] usb 4-1: config 0 has no interfaces? [ 236.913803][ T4228] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 236.923329][ T7080] device syzkaller0 entered promiscuous mode [ 236.930616][ T7069] syz.5.637 (7069): drop_caches: 2 [ 236.955414][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.965791][ T5780] usb 5-1: Using ep0 maxpacket: 8 [ 236.988586][ T4228] usb 4-1: config 0 descriptor?? [ 237.102094][ T5780] usb 5-1: config 0 has no interfaces? [ 237.107705][ T5780] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 237.151834][ T5780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.191270][ T5780] usb 5-1: config 0 descriptor?? [ 237.253181][ T7092] loop5: detected capacity change from 0 to 512 [ 238.188046][ T7092] loop5: detected capacity change from 0 to 1024 [ 238.193592][ T7104] device syzkaller0 entered promiscuous mode [ 238.209149][ T7104] 0: reclassify loop, rule prio 0, protocol 800 [ 238.485486][ T7112] loop5: detected capacity change from 0 to 512 [ 238.509089][ T4384] usb 4-1: USB disconnect, device number 5 [ 239.182383][ T7112] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 239.192380][ T7112] EXT4-fs (loop5): write access unavailable, skipping orphan cleanup [ 239.192404][ T7112] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 239.219472][ T6216] usb 5-1: USB disconnect, device number 4 [ 239.415833][ T7131] syz.3.653 (7131): drop_caches: 2 [ 239.771932][ T5776] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 240.370637][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.657'. [ 240.932782][ T5776] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 240.941162][ T5776] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.038131][ T5776] usb 2-1: config 0 has no interfaces? [ 241.045403][ T5776] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 241.058408][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.078874][ T5776] usb 2-1: config 0 descriptor?? [ 241.127443][ T7169] smc: net device wlan0 applied user defined pnetid SYZ0 [ 242.051304][ T4228] usb 2-1: USB disconnect, device number 8 [ 243.541711][ T7190] device macvtap0 entered promiscuous mode [ 243.562178][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.6.664'. [ 243.629879][ T7190] device veth0_macvtap left promiscuous mode [ 243.728728][ T7190] device macvtap0 left promiscuous mode [ 245.170637][ T7221] device bridge1 entered promiscuous mode [ 245.243537][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.673'. [ 245.558275][ T7221] team0: Port device bridge1 added [ 245.675485][ T7222] bridge0: port 3(team0) entered blocking state [ 245.719807][ T7222] bridge0: port 3(team0) entered disabled state [ 245.930017][ T7222] device team0 entered promiscuous mode [ 245.956183][ T7222] device team_slave_0 entered promiscuous mode [ 246.004191][ T7222] device team_slave_1 entered promiscuous mode [ 246.052159][ T7222] bridge0: port 3(team0) entered blocking state [ 246.058478][ T7222] bridge0: port 3(team0) entered forwarding state [ 249.288132][ T7239] bridge0: port 3(team0) entered disabled state [ 249.294579][ T7239] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.301981][ T7239] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.734720][ T7284] pit: kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 250.746921][ T7284] pit: kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 250.758277][ T7284] pit: kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 250.771126][ T7284] pit: kvm: requested 103923 ns i8254 timer period limited to 200000 ns [ 250.780086][ T7284] pit: kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 250.796509][ T7284] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 250.805476][ T7284] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 250.817875][ T7284] pit: kvm: requested 89676 ns i8254 timer period limited to 200000 ns [ 250.827028][ T7284] pit: kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 250.837284][ T7284] pit: kvm: requested 15085 ns i8254 timer period limited to 200000 ns [ 250.867364][ T7239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.909955][ T7239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.661714][ T26] audit: type=1800 audit(1773329142.184:20): pid=7304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.688" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 251.734798][ T7239] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.747712][ T7239] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.775778][ T7239] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.808832][ T7239] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.836205][ T7320] loop5: detected capacity change from 0 to 128 [ 255.507489][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.514555][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.421116][ T7366] loop3: detected capacity change from 0 to 131072 [ 256.518144][ T7366] F2FS-fs (loop3): invalid crc value [ 256.682775][ T7366] F2FS-fs (loop3): Found nat_bits in checkpoint [ 256.859765][ T7381] loop5: detected capacity change from 0 to 2048 [ 257.461584][ T7366] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 262.397688][ T7419] device syzkaller0 entered promiscuous mode [ 262.510323][ T7421] loop4: detected capacity change from 0 to 1024 [ 262.565993][ T7421] EXT4-fs (loop4): Ignoring removed orlov option [ 262.587197][ T7421] EXT4-fs (loop4): Ignoring removed bh option [ 263.243294][ T7421] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,orlov,data_err=ignore,grpquota,abort,resgid=0x0000000000000000,bh,nouid32,,errors=continue. Quota mode: writeback. [ 263.345630][ T26] audit: type=1800 audit(1773329153.874:21): pid=7421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.716" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 264.041183][ T7421] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3885: comm syz.4.716: Allocating blocks 497-513 which overlap fs metadata [ 264.572822][ T7421] EXT4-fs (loop4): pa ffff88805ff4a460: logic 256, phys. 385, len 8 [ 264.580910][ T7421] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 267.719799][ T7483] device syzkaller0 entered promiscuous mode [ 268.487580][ T7496] loop3: detected capacity change from 0 to 512 [ 269.214700][ T7503] loop3: detected capacity change from 0 to 256 [ 269.368127][ T7514] netlink: 24 bytes leftover after parsing attributes in process `syz.6.733'. [ 270.846178][ T7524] block device autoloading is deprecated and will be removed. [ 270.987752][ T7531] loop3: detected capacity change from 0 to 128 [ 271.126796][ T7531] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 272.415165][ T7545] loop4: detected capacity change from 0 to 128 [ 273.310336][ T7551] device syzkaller0 entered promiscuous mode [ 273.320101][ T7551] 0: reclassify loop, rule prio 0, protocol 800 [ 273.403552][ T4465] attempt to access beyond end of device [ 273.403552][ T4465] loop4: rw=1, want=1041, limit=128 [ 274.350071][ T4465] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 276.535826][ T7573] loop4: detected capacity change from 0 to 128 [ 276.611502][ T7576] device syzkaller0 entered promiscuous mode [ 276.615393][ T7578] loop7: detected capacity change from 0 to 16384 [ 276.922027][ T7582] loop_set_status: loop7 () has still dirty pages (nrpages=448) [ 277.638945][ T7586] netlink: 52 bytes leftover after parsing attributes in process `syz.1.754'. [ 277.653318][ T7586] device syz_tun left promiscuous mode [ 277.668290][ T7586] bridge0: port 3(syz_tun) entered disabled state [ 277.683584][ T7586] device bridge_slave_1 left promiscuous mode [ 277.733383][ T7586] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.755346][ T7586] device bridge_slave_0 left promiscuous mode [ 277.771164][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.185052][ T7600] rdma_rxe: rxe_register_device failed with error -23 [ 278.193243][ T7600] rdma_rxe: failed to add vxcan1 [ 278.776087][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 278.947861][ T7603] device syzkaller0 entered promiscuous mode [ 279.058588][ T7606] loop5: detected capacity change from 0 to 128 [ 285.257435][ T7641] --map-set only usable from mangle table [ 285.806153][ T7645] loop4: detected capacity change from 0 to 256 [ 285.867043][ T7645] exfat: Deprecated parameter 'utf8' [ 285.932057][ T7645] exfat: Unknown parameter 'k+eep@last_dots' [ 289.090015][ T7667] syz.5.785 (7667): drop_caches: 2 [ 292.764406][ T7700] tipc: Started in network mode [ 292.780206][ T7700] tipc: Node identity aea4b5628978, cluster identity 4711 [ 292.800641][ T7700] tipc: Enabled bearer , priority 0 [ 292.838766][ T7701] device syzkaller0 entered promiscuous mode [ 292.864229][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 292.907533][ T7700] tipc: Resetting bearer [ 292.963126][ T7697] tipc: Resetting bearer [ 292.978166][ T7697] tipc: Disabling bearer [ 294.259015][ T4228] tipc: Node number set to 668775778 [ 295.144182][ T7719] device syzkaller0 entered promiscuous mode [ 295.174250][ T7719] 0: reclassify loop, rule prio 0, protocol 800 [ 296.738270][ T7737] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 296.744821][ T7737] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 296.762140][ T7737] vhci_hcd vhci_hcd.0: Device attached [ 296.864438][ T7744] loop3: detected capacity change from 0 to 512 [ 296.982123][ T4228] vhci_hcd: vhci_device speed not set [ 297.061993][ T4228] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 297.279491][ T7749] loop4: detected capacity change from 0 to 32768 [ 297.316706][ T7744] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 297.399751][ T7744] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.457490][ T7749] XFS (loop4): Mounting V5 Filesystem [ 297.711646][ T7738] vhci_hcd: connection reset by peer [ 297.724792][ T4323] vhci_hcd: stop threads [ 297.731687][ T4323] vhci_hcd: release socket [ 298.531937][ T4323] vhci_hcd: disconnect device [ 298.727453][ T7749] XFS (loop4): Ending clean mount [ 298.743633][ T7749] XFS (loop4): Quotacheck needed: Please wait. [ 299.074731][ T7749] XFS (loop4): Quotacheck: Done. [ 299.432004][ T26] audit: type=1800 audit(1773329189.944:22): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.800" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0 [ 299.473679][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.783304][ T4185] XFS (loop4): Unmounting Filesystem [ 299.881347][ T7782] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 299.887902][ T7782] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 299.922422][ T7782] vhci_hcd vhci_hcd.0: Device attached [ 300.587817][ T7783] vhci_hcd: connection closed [ 300.588373][ T4345] vhci_hcd: stop threads [ 300.655789][ T4345] vhci_hcd: release socket [ 301.104010][ T7791] loop3: detected capacity change from 0 to 512 [ 301.104388][ T4345] vhci_hcd: disconnect device [ 302.280314][ T7802] loop4: detected capacity change from 0 to 32768 [ 302.311913][ T4228] vhci_hcd: vhci_device speed not set [ 303.875151][ T7802] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 303.885652][ T7802] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 310.673744][ T7852] team0: Port device bridge0 added [ 312.434118][ T7866] loop5: detected capacity change from 0 to 32768 [ 312.712604][ T7887] netlink: 'syz.4.841': attribute type 10 has an invalid length. [ 313.429901][ T7887] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.431437][ T7887] bond0: (slave team0): Enslaving as an active interface with an up link [ 314.874859][ T7908] device syzkaller0 entered promiscuous mode [ 317.601461][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.694570][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.141794][ T7958] loop1: detected capacity change from 0 to 2048 [ 319.204755][ T7958] FAT-fs (loop1): Unrecognized mount option "?" or missing value [ 319.261694][ T7957] tipc: Started in network mode [ 319.308975][ T7957] tipc: Node identity aa489d302327, cluster identity 4711 [ 319.510795][ T7957] tipc: Enabled bearer , priority 0 [ 320.446135][ T7967] device syzkaller0 entered promiscuous mode [ 320.578368][ T7967] tipc: Resetting bearer [ 320.605852][ T4384] tipc: Node number set to 2305793328 [ 320.662744][ T7952] tipc: Resetting bearer [ 320.678483][ T7952] tipc: Disabling bearer [ 322.820658][ T7995] loop3: detected capacity change from 0 to 164 [ 325.985228][ T8023] loop6: detected capacity change from 0 to 2048 [ 326.051290][ T8023] FAT-fs (loop6): Unrecognized mount option "?" or missing value [ 326.085320][ T8021] loop1: detected capacity change from 0 to 32768 [ 326.092502][ T26] audit: type=1804 audit(1773329216.614:23): pid=8025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.867" name="/newroot/168/file1" dev="fuse" ino=1 res=1 errno=0 [ 327.438203][ T8042] netlink: 'syz.6.870': attribute type 1 has an invalid length. [ 327.448696][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.6.870'. [ 327.829401][ T8021] XFS (loop1): Mounting V5 Filesystem [ 327.914641][ T8021] XFS (loop1): log mount failed [ 329.570795][ T8061] device syzkaller0 entered promiscuous mode [ 331.574304][ T8077] loop1: detected capacity change from 0 to 2048 [ 332.196402][ T8077] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 332.284956][ T8076] netlink: 'syz.3.880': attribute type 2 has an invalid length. [ 332.373154][ T8076] netlink: 'syz.3.880': attribute type 1 has an invalid length. [ 332.493021][ T8087] loop2: detected capacity change from 0 to 7 [ 332.606627][ T4176] Dev loop2: unable to read RDB block 7 [ 332.614340][ T4176] loop2: AHDI p1 p2 p3 [ 332.623698][ T4176] loop2: partition table partially beyond EOD, truncated [ 332.656302][ T4176] loop2: p1 start 1601398130 is beyond EOD, truncated [ 332.695309][ T4176] loop2: p2 start 1702059890 is beyond EOD, truncated [ 333.031878][ T8098] device ip6gretap0 left promiscuous mode [ 333.045036][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 333.082528][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.092907][ T8098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.278271][ T8098] device syzkaller0 left promiscuous mode [ 334.245844][ T8087] Dev loop2: unable to read RDB block 7 [ 334.261990][ T8087] loop2: AHDI p1 p2 p3 [ 334.266192][ T8087] loop2: partition table partially beyond EOD, truncated [ 334.415355][ T8087] loop2: p1 start 1601398130 is beyond EOD, truncated [ 334.765880][ T8087] loop2: p2 start 1702059890 is beyond EOD, truncated [ 335.134631][ T8103] device syzkaller0 entered promiscuous mode [ 335.161548][ T8103] 0: reclassify loop, rule prio 0, protocol 700 [ 336.709677][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.6.894'. [ 337.109129][ T8136] block device autoloading is deprecated and will be removed. [ 337.157815][ T8130] device syzkaller0 entered promiscuous mode [ 343.161742][ T8189] loop5: detected capacity change from 0 to 1024 [ 344.553068][ T8200] loop6: detected capacity change from 0 to 1024 [ 344.979038][ T8200] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 345.602998][ T8200] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 348.339841][ T8231] device syzkaller0 entered promiscuous mode [ 348.455474][ T8234] fuse: Bad value for 'fd' [ 354.366968][ T8269] netlink: 'syz.4.930': attribute type 2 has an invalid length. [ 354.386852][ T8269] netlink: 'syz.4.930': attribute type 1 has an invalid length. [ 356.435068][ T8299] loop5: detected capacity change from 0 to 512 [ 356.665303][ T8298] vxcan1 speed is unknown, defaulting to 1000 [ 357.152559][ T8298] bond0 speed is unknown, defaulting to 1000 [ 358.746775][ T4384] Bluetooth: hci5: command 0x0409 tx timeout [ 359.264991][ T8335] sctp: [Deprecated]: syz.6.945 (pid 8335) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.264991][ T8335] Use struct sctp_sack_info instead [ 360.105527][ T8339] loop6: detected capacity change from 0 to 512 [ 360.476035][ T8298] chnl_net:caif_netlink_parms(): no params data found [ 360.923490][ T4384] Bluetooth: hci5: command 0x041b tx timeout [ 362.253537][ T8298] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.375932][ T8298] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.548396][ T8298] device bridge_slave_0 entered promiscuous mode [ 362.692935][ T8298] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.744976][ T8298] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.812972][ T8298] device bridge_slave_1 entered promiscuous mode [ 362.841350][ T8366] loop1: detected capacity change from 0 to 32768 [ 362.877539][ T8298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.888894][ T8298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.917581][ T8298] team0: Port device team_slave_0 added [ 362.926582][ T8298] team0: Port device team_slave_1 added [ 362.942849][ T23] Bluetooth: hci5: command 0x040f tx timeout [ 362.969988][ T8298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.977316][ T8366] XFS (loop1): Mounting V5 Filesystem [ 363.094726][ T8298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.172554][ T8298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.214823][ T8366] XFS (loop1): Ending clean mount [ 363.225390][ T8366] XFS (loop1): Quotacheck needed: Please wait. [ 363.359090][ T8366] XFS (loop1): Quotacheck: Done. [ 363.755364][ T8298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.762694][ T8298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.986970][ T8298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.077697][ T4184] XFS (loop1): Unmounting Filesystem [ 364.115302][ T8298] device hsr_slave_0 entered promiscuous mode [ 364.130766][ T8385] loop5: detected capacity change from 0 to 512 [ 364.147762][ T8298] device hsr_slave_1 entered promiscuous mode [ 364.176918][ T8298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.186982][ T8298] Cannot create hsr debugfs directory [ 365.678546][ T23] Bluetooth: hci5: command 0x0419 tx timeout [ 369.260828][ T154] tipc: Left network mode [ 369.331326][ T8298] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 369.397194][ T8298] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 369.429190][ T8298] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 369.459559][ T8298] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 369.558624][ T8434] device syzkaller0 entered promiscuous mode [ 371.070834][ T8298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.084201][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.109441][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.121144][ T8298] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.229938][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 371.250308][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.268239][ T8451] loop5: detected capacity change from 0 to 512 [ 371.285387][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.292502][ T4345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.468648][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 371.515385][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 371.573929][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.678775][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.686024][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.790021][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 371.825697][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 371.855468][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 371.901110][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 371.950695][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.976480][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 372.023495][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 372.042323][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 372.103816][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 372.339870][ T8298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.402432][ T8298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 373.410496][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 373.419988][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 374.594180][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 374.601712][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 374.675959][ T8298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.713647][ T8529] netlink: 'syz.5.989': attribute type 1 has an invalid length. [ 375.744991][ T8529] netlink: 'syz.5.989': attribute type 1 has an invalid length. [ 375.896046][ T154] device veth0_to_bond left promiscuous mode [ 375.973648][ T154] bridge0: port 1(veth0_to_bond) entered disabled state [ 376.009855][ T154] device hsr_slave_0 left promiscuous mode [ 376.022204][ T154] device hsr_slave_1 left promiscuous mode [ 376.063112][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.073385][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.306602][ T8573] loop6: detected capacity change from 0 to 1024 [ 378.425820][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.480964][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.493452][ T154] team0 (unregistering): Port device team_slave_1 removed [ 378.508830][ T154] team0 (unregistering): Port device team_slave_0 removed [ 378.617951][ T8573] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 378.717755][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.306392][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.422212][ T4286] smc: removing ib device syz2 [ 379.490281][ T154] bond0 (unregistering): Released all slaves [ 379.675033][ T4227] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 380.112224][ T4227] usb 6-1: Using ep0 maxpacket: 16 [ 380.252925][ T4227] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 380.454788][ T4227] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.498802][ T4227] usb 6-1: config 0 has no interface number 0 [ 380.800207][ T8610] loop1: detected capacity change from 0 to 512 [ 380.823499][ T4227] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 380.834557][ T4227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.996565][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 381.049744][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 381.502696][ T4227] usb 6-1: Product: syz [ 381.507087][ T4227] usb 6-1: Manufacturer: syz [ 381.511853][ T4227] usb 6-1: SerialNumber: syz [ 381.559571][ T8298] device veth0_vlan entered promiscuous mode [ 381.593212][ T8610] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 381.606348][ T8610] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 381.632853][ T8298] device veth1_vlan entered promiscuous mode [ 381.684124][ T4227] usb 6-1: config 0 descriptor?? [ 381.712588][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 381.729864][ T8610] EXT4-fs error (device loop1): ext4_init_orphan_info:621: comm syz.1.1007: orphan file block 0: bad magic [ 381.760499][ T8610] EXT4-fs (loop1): mount failed [ 381.760837][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 381.797205][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 381.813547][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 382.008536][ T4227] usb 6-1: Found UVC 0.00 device syz (046d:08d3) [ 382.202747][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 382.364253][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 382.779147][ T4227] usb 6-1: No valid video chain found. [ 382.912001][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 383.010326][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 383.021893][ T8625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.283730][ T8625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.337569][ T8298] device veth0_macvtap entered promiscuous mode [ 384.379381][ T8638] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1012'. [ 384.441669][ T8298] device veth1_macvtap entered promiscuous mode [ 384.472442][ T4227] usb 6-1: USB disconnect, device number 2 [ 384.723264][ T8298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.942848][ T8298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.284304][ T8298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.394830][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 385.415695][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 385.596203][ T8298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.617068][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 385.679413][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 385.704739][ T8298] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.827855][ T8298] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.934822][ T8677] overlayfs: failed to clone upperpath [ 385.999338][ T8298] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.071185][ T8298] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.304743][ T4465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.717396][ T4465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.018534][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 390.252296][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.354979][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.404082][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 390.476615][ T8698] loop5: detected capacity change from 0 to 512 [ 391.157208][ T8709] device syzkaller0 entered promiscuous mode [ 394.459381][ T8738] zonefs (nullb0) ERROR: Not a zoned block device [ 395.066428][ T8739] kAFS: unable to lookup cell '' [ 395.133713][ T8740] vivid-003: disconnect [ 395.422391][ T8730] vivid-003: reconnect [ 398.020163][ T8762] syz.7.1036 (8762): drop_caches: 2 [ 409.433021][ T8856] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 409.440957][ T8856] UDF-fs: Scanning with blocksize 512 failed [ 409.450800][ T8856] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 409.458371][ T8856] UDF-fs: Scanning with blocksize 1024 failed [ 409.465365][ T8856] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 409.472875][ T8856] UDF-fs: Scanning with blocksize 2048 failed [ 409.480002][ T8856] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 409.487530][ T8856] UDF-fs: Scanning with blocksize 4096 failed [ 411.371939][ T8874] syz.1.1064 (8874): drop_caches: 2 [ 416.882886][ T8920] loop5: detected capacity change from 0 to 4096 [ 416.895486][ T8940] capability: warning: `syz.7.1080' uses 32-bit capabilities (legacy support in use) [ 417.324552][ T8920] /dev/loop5: Can't open blockdev [ 417.615094][ T8944] loop7: detected capacity change from 0 to 128 [ 418.582738][ T8944] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 418.754652][ T8944] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 420.742657][ T8986] tipc: Started in network mode [ 420.747848][ T8986] tipc: Node identity 4, cluster identity 4711 [ 420.754195][ T8986] tipc: Node number set to 4 [ 422.239290][ T9002] loop1: detected capacity change from 0 to 8192 [ 423.596132][ T9002] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 423.606513][ T9002] REISERFS (device loop1): using ordered data mode [ 423.613178][ T9002] reiserfs: using flush barriers [ 423.636719][ T9002] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 423.656312][ T9002] REISERFS (device loop1): checking transaction log (loop1) [ 423.679189][ T9002] REISERFS (device loop1): Using rupasov hash to sort names [ 423.690225][ T9002] REISERFS (device loop1): using 3.5.x disk format [ 423.708433][ T9002] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 423.720492][ T9002] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 423.732136][ T9002] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 423.743500][ T9002] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 423.758105][ T9002] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 423.964686][ T8999] xt_CT: You must specify a L4 protocol and not use inversions on it [ 424.009711][ T8999] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 424.021810][ T8999] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 424.445839][ T9021] loop5: detected capacity change from 0 to 64 [ 425.262883][ T9021] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1095'. [ 429.769861][ T9074] rdma_op ffff888020b4f9f0 conn xmit_rdma 0000000000000000 [ 431.710294][ T9077] hub 8-0:1.0: USB hub found [ 431.716267][ T9077] hub 8-0:1.0: 1 port detected [ 431.766256][ T9077] loop1: detected capacity change from 0 to 512 [ 432.165796][ T9077] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 432.175289][ T9077] EXT4-fs (loop1): Ignoring removed nobh option [ 432.244499][ T9077] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c098, mo2=0002] [ 432.253483][ T9077] EXT4-fs (loop1): orphan cleanup on readonly fs [ 432.271187][ T9077] Quota error (device loop1): v2_read_file_info: Free block number too big (0 >= 0). [ 432.281091][ T9077] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 432.295791][ T9077] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 432.309317][ T9077] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #13: comm syz.1.1106: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1(1) [ 432.336399][ T9077] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1106: couldn't read orphan inode 13 (err -117) [ 432.348932][ T9077] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,usrjquota=./file1,minixdf,debug,journal_dev=0x0000000000000001,nobh,inode_readahead_blks=0x0000000000000100,max_batch_time=0x0000000000008001,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 433.327742][ T9098] loop5: detected capacity change from 0 to 128 [ 433.876019][ T9101] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 433.933776][ T9101] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 434.335917][ T9101] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 434.344384][ T9101] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 434.452995][ T9101] overlayfs: d_ino too big (220, ino=9223372036854777014, xinobits=3) [ 434.461466][ T9101] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 434.470248][ T9101] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 434.479189][ T9101] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 434.487400][ T9101] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 434.495977][ T9101] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 434.504303][ T9101] overlayfs: d_ino too big (dev, ino=4611686018427387909, xinobits=3) [ 434.513245][ T9101] overlayfs: d_ino too big (kernel, ino=4611686018427389040, xinobits=3) [ 434.659743][ T9105] syz.6.1113 sent an empty control message without MSG_MORE. [ 435.470452][ T26] audit: type=1326 audit(1773329325.995:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9121 comm="syz.7.1118" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f188abdb799 code=0x0 [ 436.673730][ T9152] rdma_op ffff88806094a1f0 conn xmit_rdma 0000000000000000 [ 437.362224][ T9142] overlayfs: failed to clone upperpath [ 437.826576][ T9163] loop7: detected capacity change from 0 to 2048 [ 437.954726][ T9163] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 439.830344][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.864174][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.461942][ T9208] rdma_op ffff88807496d1f0 conn xmit_rdma 0000000000000000 [ 444.268130][ T9222] mmap: syz.4.1136 (9222) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 447.437806][ T9225] loop7: detected capacity change from 0 to 2048 [ 447.590301][ T9225] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 450.402643][ T9268] loop5: detected capacity change from 0 to 8192 [ 452.241483][ T9267] xt_CT: You must specify a L4 protocol and not use inversions on it [ 454.532099][ T5774] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 455.601847][ T5774] usb 6-1: Using ep0 maxpacket: 8 [ 456.342037][ T5774] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 456.367552][ T5774] usb 6-1: config 0 has no interface number 0 [ 456.380027][ T9341] loop1: detected capacity change from 0 to 64 [ 456.401115][ T5774] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 456.620542][ T5774] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 456.629891][ T5774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.686069][ T5774] usb 6-1: config 0 descriptor?? [ 457.353323][ T5774] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 458.113422][ T5774] usb 6-1: USB disconnect, device number 3 [ 460.927458][ T9392] No such timeout policy "syz1" [ 461.568593][ T26] audit: type=1326 audit(1773329352.085:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188abdb799 code=0x7ffc0000 [ 462.321693][ T9413] fuse: Bad value for 'fd' [ 463.147200][ T26] audit: type=1326 audit(1773329352.095:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188abdb799 code=0x7ffc0000 [ 463.201684][ T26] audit: type=1326 audit(1773329352.095:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188abdb799 code=0x7ffc0000 [ 464.569911][ T26] audit: type=1326 audit(1773329352.095:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f188ab9bfce code=0x7ffc0000 [ 464.690213][ T9427] loop5: detected capacity change from 0 to 4096 [ 464.747194][ T26] audit: type=1326 audit(1773329352.095:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188abdb799 code=0x7ffc0000 [ 464.769478][ T26] audit: type=1326 audit(1773329352.095:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188abdb799 code=0x7ffc0000 [ 464.836462][ T26] audit: type=1326 audit(1773329352.095:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188abdb799 code=0x7ffc0000 [ 465.549672][ T9427] /dev/loop5: Can't open blockdev [ 465.604477][ T26] audit: type=1326 audit(1773329352.095:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f188abdb799 code=0x7ffc0000 [ 465.627968][ T26] audit: type=1326 audit(1773329352.095:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188abdb799 code=0x7ffc0000 [ 465.714417][ T26] audit: type=1326 audit(1773329352.095:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f188ab9bfce code=0x7ffc0000 [ 467.033598][ T26] audit: type=1326 audit(1773329352.095:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188abdb799 code=0x7ffc0000 [ 467.179003][ T26] audit: type=1326 audit(1773329352.125:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f188ab9bfce code=0x7ffc0000 [ 467.201913][ T26] audit: type=1326 audit(1773329352.125:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f188ab9bfce code=0x7ffc0000 [ 467.337064][ T9451] loop1: detected capacity change from 0 to 40427 [ 467.354206][ T26] audit: type=1326 audit(1773329352.125:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f188ab9bfce code=0x7ffc0000 [ 467.382720][ T26] audit: type=1326 audit(1773329352.125:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f188ab9bfce code=0x7ffc0000 [ 467.423536][ T9451] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 467.431292][ T9451] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 467.462430][ T26] audit: type=1326 audit(1773329352.125:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f188ab9bfce code=0x7ffc0000 [ 467.510315][ T26] audit: type=1326 audit(1773329352.125:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f188ab9bfce code=0x7ffc0000 [ 467.517806][ T9451] F2FS-fs (loop1): invalid crc value [ 467.534100][ T26] audit: type=1326 audit(1773329352.125:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f188ab9bfce code=0x7ffc0000 [ 467.588282][ T9451] F2FS-fs (loop1): Found nat_bits in checkpoint [ 467.622686][ T26] audit: type=1326 audit(1773329352.125:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f188ab9bfce code=0x7ffc0000 [ 467.648911][ T9451] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 467.655996][ T9451] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 467.668792][ T26] audit: type=1326 audit(1773329352.125:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.7.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f188ab9bfce code=0x7ffc0000 [ 471.079949][ T9477] overlayfs: failed to clone lowerpath [ 471.093821][ T9477] overlayfs: failed to clone lowerpath [ 471.190359][ T9486] loop5: detected capacity change from 0 to 512 [ 473.391889][ T9347] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 475.297391][ T9347] usb 8-1: Using ep0 maxpacket: 16 [ 476.012118][ T9347] usb 8-1: device descriptor read/all, error -71 [ 478.452612][ T9553] ALSA: mixer_oss: invalid OSS volume 'LI' [ 478.462454][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1196'. [ 479.633562][ T9573] hub 8-0:1.0: USB hub found [ 479.654306][ T9573] hub 8-0:1.0: 1 port detected [ 479.711941][ T9574] autofs4:pid:9574:autofs_fill_super: called with bogus options [ 479.943805][ T9573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1207'. [ 480.035084][ T9573] loop5: detected capacity change from 0 to 256 [ 480.712874][ T9573] exfat: Deprecated parameter 'utf8' [ 480.751958][ T9573] /dev/loop5: Can't open blockdev [ 481.011871][ T4227] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 481.155296][ T9591] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 481.271621][ T4227] usb 8-1: Using ep0 maxpacket: 16 [ 481.562530][ T4227] usb 8-1: config 0 has an invalid interface number: 213 but max is 1 [ 481.577112][ T4227] usb 8-1: config 0 has no interface number 1 [ 481.596152][ T4227] usb 8-1: config 0 interface 0 has no altsetting 0 [ 481.851946][ T4227] usb 8-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 482.195354][ T4227] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.305307][ T4227] usb 8-1: Product: syz [ 482.377028][ T4227] usb 8-1: Manufacturer: syz [ 482.434595][ T4227] usb 8-1: SerialNumber: syz [ 482.503054][ T4227] usb 8-1: config 0 descriptor?? [ 482.725825][ T4227] usb 8-1: selecting invalid altsetting 0 [ 482.734410][ T9617] netlink: 'syz.4.1218': attribute type 3 has an invalid length. [ 482.749569][ T4227] usb 8-1: Could not set interface, error -22 [ 483.265738][ T4227] usb 8-1: USB disconnect, device number 4 [ 483.406143][ T9626] loop5: detected capacity change from 0 to 512 [ 485.041837][ T9639] fuse: Bad value for 'fd' [ 485.106235][ T9638] loop1: detected capacity change from 0 to 512 [ 485.223055][ T9638] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 485.277219][ T9638] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 486.032891][ T9651] loop7: detected capacity change from 0 to 256 [ 486.062579][ T9647] /dev/loop5: Can't open blockdev [ 486.102752][ T9638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e028, mo2=0002] [ 486.134666][ T9638] EXT4-fs (loop1): orphan cleanup on readonly fs [ 486.144121][ T9638] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1222: invalid indirect mapped block 1023 (level 0) [ 486.173842][ T9638] EXT4-fs (loop1): Remounting filesystem read-only [ 486.180403][ T9638] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1222: invalid indirect mapped block 2185560079 (level 1) [ 486.183914][ T9651] exfat: Deprecated parameter 'utf8' [ 486.213452][ T9638] EXT4-fs (loop1): Remounting filesystem read-only [ 486.245854][ T9638] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1222: bg 0: block 361: padding at end of block bitmap is not set [ 486.264085][ T9638] EXT4-fs (loop1): Remounting filesystem read-only [ 486.270641][ T9638] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 486.377483][ T9638] EXT4-fs (loop1): Remounting filesystem read-only [ 487.414645][ T9638] EXT4-fs (loop1): 1 truncate cleaned up [ 487.439870][ T9651] exfat: Unexpected value for 'utf8' [ 487.440166][ T9638] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,noblock_validity,discard,errors=remount-ro,mblk_io_submit. Quota mode: none. [ 487.728130][ T9677] infiniband syz1: set active [ 487.759002][ T9677] infiniband syz1: added syz_tun [ 488.008885][ T9687] fuse: Bad value for 'fd' [ 488.025117][ T9677] RDS/IB: syz1: added [ 488.029215][ T9677] smc: adding ib device syz1 with port count 1 [ 488.035526][ T9677] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 488.506136][ T9690] device syzkaller0 entered promiscuous mode [ 488.608552][ T9696] loop1: detected capacity change from 0 to 512 [ 491.286773][ T23] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 491.731940][ T23] usb 8-1: Using ep0 maxpacket: 32 [ 491.912255][ T23] usb 8-1: unable to get BOS descriptor or descriptor too short [ 492.309388][ T5778] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 492.431997][ T23] usb 8-1: config 0 has an invalid interface number: 87 but max is 0 [ 492.441841][ T23] usb 8-1: config 0 has no interface number 0 [ 492.502584][ T23] usb 8-1: config 0 interface 87 altsetting 144 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 492.513968][ T23] usb 8-1: config 0 interface 87 has no altsetting 0 [ 492.695225][ T23] usb 8-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=81.23 [ 492.714652][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.739571][ T23] usb 8-1: Product: syz [ 492.751722][ T23] usb 8-1: Manufacturer: syz [ 492.761967][ T5778] usb 2-1: unable to get BOS descriptor or descriptor too short [ 492.779822][ T23] usb 8-1: SerialNumber: syz [ 492.812022][ T5778] usb 2-1: not running at top speed; connect to a high speed hub [ 492.813476][ T23] usb 8-1: config 0 descriptor?? [ 492.912254][ T5778] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 136, changing to 4 [ 492.942498][ T5781] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 493.204233][ T23] rtl8150 8-1:0.87: couldn't find required endpoints [ 493.211989][ T23] rtl8150: probe of 8-1:0.87 failed with error -5 [ 493.255733][ T23] usb 8-1: USB disconnect, device number 5 [ 493.339524][ T5778] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 493.349215][ T5778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.357392][ T5778] usb 2-1: Product: syz [ 493.361579][ T5778] usb 2-1: Manufacturer: syz [ 493.366341][ T5778] usb 2-1: SerialNumber: syz [ 493.813149][ T5778] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 493.893176][ T5778] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 494.289861][ T5781] usb 6-1: config 127 has an invalid interface number: 190 but max is 0 [ 494.305445][ T5781] usb 6-1: config 127 has no interface number 0 [ 494.311743][ T5781] usb 6-1: config 127 interface 190 altsetting 0 endpoint 0x4 has invalid maxpacket 68, setting to 64 [ 494.330957][ T5778] usb 2-1: USB disconnect, device number 9 [ 494.541943][ T6216] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 494.801930][ T6216] usb 8-1: Using ep0 maxpacket: 32 [ 494.962646][ T6216] usb 8-1: unable to get BOS descriptor or descriptor too short [ 495.092523][ T6216] usb 8-1: config 7 has an invalid interface number: 219 but max is 0 [ 495.129752][ T6216] usb 8-1: config 7 has no interface number 0 [ 495.197016][ T5781] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=f2.3d [ 495.215502][ T5781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.245694][ T5781] usb 6-1: Product: syz [ 495.258800][ T6216] usb 8-1: config 7 interface 219 has no altsetting 0 [ 495.258818][ T5781] usb 6-1: Manufacturer: syz [ 495.258835][ T5781] usb 6-1: SerialNumber: syz [ 495.279910][ T4360] udevd[4360]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.344447][ T9808] loop1: detected capacity change from 0 to 256 [ 495.427758][ T9808] MINIX-fs: bad superblock [ 495.635129][ T6216] usb 8-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=ed.31 [ 495.644324][ T6216] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.652434][ T6216] usb 8-1: Product: syz [ 495.657016][ T6216] usb 8-1: Manufacturer: syz [ 495.662465][ T6216] usb 8-1: SerialNumber: syz [ 496.103711][ T5781] iguanair: probe of 6-1:127.190 failed with error -12 [ 496.179598][ T5781] usb 6-1: USB disconnect, device number 4 [ 496.232789][ T9823] capability: warning: `syz.5.1268' uses deprecated v2 capabilities in a way that may be insecure [ 496.329924][ T9835] loop5: detected capacity change from 0 to 128 [ 496.493870][ T6216] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 496.500164][ T4384] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 496.530751][ T6216] usb 8-1: USB disconnect, device number 6 [ 496.741922][ T4384] usb 2-1: Using ep0 maxpacket: 8 [ 496.981969][ T4384] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1391, setting to 1024 [ 496.995441][ T4384] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 497.582354][ T9867] loop7: detected capacity change from 0 to 2048 [ 497.684893][ T9843] loop5: detected capacity change from 0 to 40427 [ 497.841935][ T4384] usb 2-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 497.851017][ T4384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.869314][ T9843] F2FS-fs (loop5): invalid crc value [ 497.883137][ T9843] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 497.892259][ T4384] usb 2-1: Product: syz [ 497.898516][ T4384] usb 2-1: Manufacturer: syz [ 497.984217][ T4384] usb 2-1: SerialNumber: syz [ 498.481328][ T9843] F2FS-fs (loop5): inconsistent node block, nid:3, node_footer[nid:83886083,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 498.527573][ T9843] F2FS-fs (loop5): Failed to read root inode [ 498.592096][ T4384] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 498.600942][ T4384] usb 2-1: 1:1 : sample bitwidth 70 in over sample bytes 7 [ 498.610055][ T4384] usb 2-1: 1:1 : unsupported sample bitwidth 70 in 7 bytes [ 498.632448][ T4384] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 498.665083][ T4384] usb 2-1: USB disconnect, device number 10 [ 498.781863][ T6216] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 498.973299][ T4360] udevd[4360]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.837965][ T9895] loop1: detected capacity change from 0 to 16 [ 499.878817][ T9895] erofs: Unexpected value for 'user_xattr' [ 500.011966][ T6216] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 500.021041][ T6216] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 500.073327][ T6216] usb 8-1: Product: syz [ 500.077836][ T6216] usb 8-1: SerialNumber: syz [ 500.091907][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 500.242322][ T6216] usb 8-1: config 0 descriptor?? [ 501.064554][ T6216] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 501.121929][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 501.159264][ T6216] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 501.220458][ T6216] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 501.251937][ T23] usb 6-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 501.265009][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.273360][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.300819][ T23] usb 6-1: config 251 has 0 interfaces, different from the descriptor's value: 1 [ 501.347510][ T6216] usb 8-1: USB disconnect, device number 7 [ 501.532434][ T23] usb 6-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 501.541593][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.558342][ T23] usb 6-1: Product: syz [ 501.577836][ T23] usb 6-1: Manufacturer: syz [ 501.598482][ T23] usb 6-1: SerialNumber: syz [ 501.817284][ T9907] loop1: detected capacity change from 0 to 32768 [ 501.907714][ T23] usb 6-1: USB disconnect, device number 5 [ 501.992286][ T9907] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1291 (9907) [ 502.290323][ T9907] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 502.340134][ T9907] BTRFS info (device loop1): force clearing of disk cache [ 502.351577][ T9907] BTRFS info (device loop1): metadata ratio 0 [ 502.357874][ T9907] BTRFS info (device loop1): enabling ssd optimizations [ 502.369870][ T9907] BTRFS info (device loop1): using spread ssd allocation scheme [ 502.380204][ T9907] BTRFS info (device loop1): using free space tree [ 502.386913][ T9907] BTRFS info (device loop1): has skinny extents [ 503.244835][ T9931] loop7: detected capacity change from 0 to 32768 [ 503.517196][ T9931] XFS (loop7): Mounting V5 Filesystem [ 503.532600][ T9907] BTRFS error (device loop1): open_ctree failed: -12 [ 503.623593][ T9931] XFS (loop7): Ending clean mount [ 503.758363][ T9968] loop5: detected capacity change from 0 to 512 [ 504.680109][ T9993] xt_CT: You must specify a L4 protocol and not use inversions on it [ 504.915124][T10002] loop1: detected capacity change from 0 to 4096 [ 505.667272][T10002] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 505.697843][ T8298] XFS (loop7): Unmounting Filesystem [ 505.829274][T10002] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 506.036203][ T4345] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 506.069692][ T4184] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 506.328020][T10026] loop1: detected capacity change from 0 to 2048 [ 506.554419][T10026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 507.922063][T10050] loop7: detected capacity change from 0 to 512 [ 508.027066][T10050] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 508.138096][T10050] EXT4-fs error (device loop7): ext4_validate_block_bitmap:420: comm syz.7.1336: bg 0: bad block bitmap checksum [ 508.153454][T10050] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6192: Filesystem failed CRC [ 508.410768][T10065] loop7: detected capacity change from 0 to 256 [ 509.035687][T10065] FAT-fs (loop7): Directory bread(block 64) failed [ 509.051571][T10065] FAT-fs (loop7): Directory bread(block 65) failed [ 509.058397][T10065] FAT-fs (loop7): Directory bread(block 66) failed [ 509.062191][ T6216] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 509.065204][T10065] FAT-fs (loop7): Directory bread(block 67) failed [ 509.080032][T10065] FAT-fs (loop7): Directory bread(block 68) failed [ 509.087293][T10065] FAT-fs (loop7): Directory bread(block 69) failed [ 509.094820][T10065] FAT-fs (loop7): Directory bread(block 70) failed [ 509.101457][T10065] FAT-fs (loop7): Directory bread(block 71) failed [ 509.109175][T10065] FAT-fs (loop7): Directory bread(block 72) failed [ 509.116365][T10065] FAT-fs (loop7): Directory bread(block 73) failed [ 509.124554][T10059] syz.5.1340 (10059): drop_caches: 2 [ 509.995792][T10082] loop7: detected capacity change from 0 to 512 [ 510.064250][ T6216] usb 2-1: Using ep0 maxpacket: 32 [ 510.165630][T10082] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #11: comm syz.7.1349: iget: bad extra_isize 90 (inode size 256) [ 510.225561][ T6216] usb 2-1: unable to get BOS descriptor or descriptor too short [ 510.226050][T10082] EXT4-fs (loop7): Remounting filesystem read-only [ 510.239933][T10082] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1349: error while reading EA inode 11 err=-117 [ 510.258831][T10082] EXT4-fs (loop7): Remounting filesystem read-only [ 510.285422][T10082] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #11: comm syz.7.1349: iget: bad extra_isize 90 (inode size 256) [ 510.306089][T10082] EXT4-fs (loop7): Remounting filesystem read-only [ 510.312108][ T6216] usb 2-1: config 137 has an invalid interface number: 5 but max is 0 [ 510.313306][T10082] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1349: error while reading EA inode 11 err=-117 [ 510.321189][ T6216] usb 2-1: config 137 has no interface number 0 [ 510.335574][T10082] EXT4-fs (loop7): Remounting filesystem read-only [ 510.339863][ T6216] usb 2-1: config 137 interface 5 has no altsetting 0 [ 510.349966][T10082] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #18: comm syz.7.1349: iget: bad extra_isize 90 (inode size 256) [ 510.405368][T10082] EXT4-fs (loop7): Remounting filesystem read-only [ 510.412106][T10082] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1349: error while reading EA inode 18 err=-117 [ 510.432374][T10082] EXT4-fs (loop7): Remounting filesystem read-only [ 510.439247][T10082] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #18: comm syz.7.1349: iget: bad extra_isize 90 (inode size 256) [ 510.456723][T10082] EXT4-fs (loop7): Remounting filesystem read-only [ 510.463725][T10082] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1349: error while reading EA inode 18 err=-117 [ 510.480986][T10082] EXT4-fs (loop7): Remounting filesystem read-only [ 510.488135][T10082] EXT4-fs (loop7): 1 orphan inode deleted [ 510.498115][T10082] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none. [ 511.322061][ T6216] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=c2.5a [ 511.331187][ T6216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.372090][ T6216] usb 2-1: Product: syz [ 511.376396][ T6216] usb 2-1: Manufacturer: syz [ 511.411967][ T6216] usb 2-1: can't set config #137, error -71 [ 511.436701][ T6216] usb 2-1: USB disconnect, device number 11 [ 511.725216][ T4227] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 512.421459][T10102] loop5: detected capacity change from 0 to 32768 [ 512.490849][T10102] XFS: attr2 mount option is deprecated. [ 512.523948][T10130] loop1: detected capacity change from 0 to 64 [ 512.622480][T10102] /dev/loop5: Can't open blockdev [ 512.865528][ T4227] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 512.880889][ T4227] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.892299][ T4227] usb 8-1: Product: syz [ 512.901231][ T4227] usb 8-1: Manufacturer: syz [ 512.917794][ T4227] usb 8-1: SerialNumber: syz [ 513.023739][ T4227] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 513.132344][ T9962] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 513.372824][ T9962] usb 2-1: Using ep0 maxpacket: 16 [ 513.412425][ T9962] usb 2-1: too many configurations: 112, using maximum allowed: 8 [ 513.901927][ T4227] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 514.191923][ T9962] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 514.201007][ T9962] usb 2-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 514.209552][ T9962] usb 2-1: Product: syz [ 514.213755][ T9962] usb 2-1: Manufacturer: syz [ 514.219890][ T9962] r8152-cfgselector 2-1: config 0 descriptor?? [ 514.291912][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1378'. [ 514.356257][ T9966] usb 8-1: USB disconnect, device number 8 [ 514.951961][ T4227] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 514.952971][ T9962] r8152-cfgselector 2-1: bad CDC descriptors [ 515.032164][ T4227] ath9k_htc: Failed to initialize the device [ 515.040688][ T9966] usb 8-1: ath9k_htc: USB layer deinitialized [ 515.050458][T10163] loop7: detected capacity change from 0 to 512 [ 515.052109][ T9962] r8152-cfgselector 2-1: Unknown version 0x0000 [ 515.071532][T10163] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 515.110854][ T9962] r8152-cfgselector 2-1: bad CDC descriptors [ 515.152734][T10168] loop1: detected capacity change from 0 to 64 [ 515.187137][T10163] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 515.198095][ T9962] r8152-cfgselector 2-1: Unknown version 0x0000 [ 515.214917][ T9962] r8152-cfgselector 2-1: USB disconnect, device number 12 [ 515.234123][T10169] loop5: detected capacity change from 0 to 256 [ 515.334903][T10171] loop7: detected capacity change from 0 to 1024 [ 515.391947][T10169] /dev/loop5: Can't open blockdev [ 515.928410][ T4465] hfsplus: b-tree write err: -5, ino 25 [ 515.949670][ T4465] hfsplus: b-tree write err: -5, ino 4 [ 516.015458][ T4465] hfsplus: b-tree write err: -5, ino 2 [ 516.224276][T10192] loop1: detected capacity change from 0 to 256 [ 516.236811][T10186] loop7: detected capacity change from 0 to 512 [ 516.362040][T10198] loop5: detected capacity change from 0 to 512 [ 516.373822][T10186] __quota_error: 49 callbacks suppressed [ 516.373838][T10186] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 516.408520][T10186] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 516.419407][T10186] EXT4-fs error (device loop7): ext4_acquire_dquot:6234: comm syz.7.1388: Failed to acquire dquot type 1 [ 516.438539][T10186] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 516.451624][T10186] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 516.516909][T10208] loop1: detected capacity change from 0 to 8 [ 516.531927][T10186] EXT4-fs error (device loop7): ext4_acquire_dquot:6234: comm syz.7.1388: Failed to acquire dquot type 1 [ 516.565508][T10186] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1388: bg 0: block 248: padding at end of block bitmap is not set [ 516.631866][T10186] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 516.781147][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1394'. [ 516.892221][T10186] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 517.418148][T10186] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 517.479145][T10186] EXT4-fs error (device loop7): ext4_acquire_dquot:6234: comm syz.7.1388: Failed to acquire dquot type 1 [ 517.546553][T10186] EXT4-fs (loop7): 1 orphan inode deleted [ 517.568046][T10186] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 517.583087][T10225] loop1: detected capacity change from 0 to 512 [ 517.592178][T10186] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.664453][T10225] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 517.694877][T10225] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.695756][T10186] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 517.725549][T10186] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 517.738274][T10186] EXT4-fs error (device loop7): ext4_acquire_dquot:6234: comm syz.7.1388: Failed to acquire dquot type 1 [ 517.742440][T10225] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1398: bg 0: block 18: invalid block bitmap [ 517.792396][ T4384] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 517.938716][T10240] loop7: detected capacity change from 0 to 1024 [ 518.046648][T10240] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback. [ 518.056163][ T4384] usb 6-1: Using ep0 maxpacket: 8 [ 518.154345][T10247] ntfs3: loop1: ino=3, Correct links count -> 2. [ 518.271986][ T4384] usb 6-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 518.292146][ T4384] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.331406][ T4384] usb 6-1: config 0 descriptor?? [ 518.406964][ T4384] usb 6-1: Found UVC 0.00 device (2801:0201) [ 518.447763][ T4384] usb 6-1: No valid video chain found. [ 518.567302][T10268] fuse: Bad value for 'fd' [ 519.368456][T10284] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1425 (10284) [ 519.409707][T10284] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 519.430071][T10284] BTRFS info (device loop1): force zlib compression, level 3 [ 519.480611][T10284] BTRFS info (device loop1): force clearing of disk cache [ 519.512801][T10284] BTRFS info (device loop1): setting nodatasum [ 519.519007][T10284] BTRFS info (device loop1): allowing degraded mounts [ 519.555191][T10284] BTRFS info (device loop1): enabling disk space caching [ 519.585197][T10284] BTRFS info (device loop1): disk space caching is enabled [ 519.599052][T10299] fuse: Bad value for 'fd' [ 519.609377][T10284] BTRFS info (device loop1): has skinny extents [ 519.716636][ T4384] usb 6-1: USB disconnect, device number 6 [ 519.933515][T10290] [ 519.933515][T10290] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 519.933515][T10290] [ 519.951485][T10284] BTRFS info (device loop1): clearing free space tree [ 520.008294][T10284] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 520.091927][T10284] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 520.116634][ T8298] [ 520.116634][ T8298] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 520.116634][ T8298] [ 520.154976][ T8298] [ 520.154976][ T8298] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 520.154976][ T8298] [ 520.395446][T10335] set_capacity_and_notify: 4 callbacks suppressed [ 520.395461][T10335] loop5: detected capacity change from 0 to 256 [ 520.486398][T10284] BTRFS info (device loop1): balance: start [ 520.664888][T10284] BTRFS info (device loop1): balance: ended with status: 0 [ 521.247137][T10345] loop5: detected capacity change from 0 to 4096 [ 521.944279][T10372] loop5: detected capacity change from 0 to 1024 [ 522.360179][T10376] loop1: detected capacity change from 0 to 32768 [ 522.501514][T10376] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 522.604972][T10382] loop7: detected capacity change from 0 to 512 [ 522.653817][T10384] loop5: detected capacity change from 0 to 4096 [ 522.676001][T10382] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 522.721520][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 522.773539][T10382] EXT4-fs (loop7): 1 truncate cleaned up [ 522.812274][T10382] EXT4-fs (loop7): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,nombcache,debug_want_extra_isize=0x0000000000000068,i_version,nodiscard,nodioread_nolock,,errors=continue. Quota mode: none. [ 523.733056][T10419] loop7: detected capacity change from 0 to 764 [ 523.738061][T10415] loop5: detected capacity change from 0 to 128 [ 523.900787][T10419] rock: directory entry would overflow storage [ 523.910355][T10419] rock: sig=0x4654, size=5, remaining=4 [ 524.014349][T10423] loop7: detected capacity change from 0 to 764 [ 524.088439][T10423] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 524.389853][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1482'. [ 524.399029][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1482'. [ 524.417408][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1482'. [ 524.442283][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1482'. [ 524.462413][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1482'. [ 524.557253][T10447] loop5: detected capacity change from 0 to 16 [ 524.581252][T10447] /dev/loop5: Can't open blockdev [ 524.596088][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1482'. [ 524.658154][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1482'. [ 524.676810][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1482'. [ 524.729889][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1482'. [ 524.761285][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1482'. [ 525.657563][T10470] loop7: detected capacity change from 0 to 64 [ 526.419379][T10484] loop7: detected capacity change from 0 to 32768 [ 526.506621][T10484] [ 526.506621][T10484] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 526.506621][T10484] [ 526.583678][T10484] ERROR: (device loop7): diWrite: ixpxd invalid [ 526.583678][T10484] [ 526.678438][T10510] fuse: Bad value for 'fd' [ 526.735598][T10484] ERROR: (device loop7): txCommit: [ 526.735598][T10484] [ 526.868558][ T8298] [ 526.868558][ T8298] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 526.868558][ T8298] [ 526.869743][T10515] loop1: detected capacity change from 0 to 1024 [ 526.898634][ T8298] [ 526.898634][ T8298] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 526.898634][ T8298] [ 527.051374][T10515] hfsplus: request for non-existent node 262144 in B*Tree [ 527.068370][T10515] hfsplus: request for non-existent node 262144 in B*Tree [ 527.315206][T10525] loop7: detected capacity change from 0 to 256 [ 527.357483][T10527] loop1: detected capacity change from 0 to 256 [ 527.394507][T10525] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xcbfa8d46, utbl_chksum : 0xe619d30d) [ 527.432638][T10525] exFAT-fs (loop7): failed to load alloc-bitmap [ 527.432689][T10527] exfat: Deprecated parameter 'namecase' [ 527.459324][T10525] exFAT-fs (loop7): failed to recognize exfat type [ 527.475372][T10527] exfat: Deprecated parameter 'utf8' [ 527.529121][T10527] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 527.680151][T10535] loop7: detected capacity change from 0 to 256 [ 527.734844][T10535] exfat: Deprecated parameter 'utf8' [ 527.740190][T10535] exfat: Deprecated parameter 'utf8' [ 527.771195][T10535] exfat: Deprecated parameter 'utf8' [ 527.826995][T10535] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 527.996937][T10547] fuse: Bad value for 'fd' [ 528.141051][T10553] No such timeout policy "syz1" [ 529.485919][T10566] MPTCP: addr_signal error, add_addr=1, echo=0 [ 529.602000][T10368] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 530.002022][T10368] usb 8-1: config 0 has no interfaces? [ 530.122051][T10368] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 530.131129][T10368] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 530.172718][T10368] usb 8-1: Product: syz [ 530.176939][T10368] usb 8-1: Manufacturer: syz [ 530.213282][T10368] usb 8-1: config 0 descriptor?? [ 531.047741][ T26] audit: type=1400 audit(2000000065.989:94): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A2F2F260902 pid=10603 comm="syz.7.1541" [ 531.048394][T10368] usb 8-1: USB disconnect, device number 9 [ 531.726419][T10679] __nla_validate_parse: 10 callbacks suppressed [ 531.726435][T10679] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1550'. [ 531.729657][T10677] loop7: detected capacity change from 0 to 256 [ 532.512243][T10677] FAT-fs (loop7): Directory bread(block 64) failed [ 532.518812][T10677] FAT-fs (loop7): Directory bread(block 65) failed [ 532.562644][T10677] FAT-fs (loop7): Directory bread(block 66) failed [ 532.569217][T10677] FAT-fs (loop7): Directory bread(block 67) failed [ 532.575988][T10677] FAT-fs (loop7): Directory bread(block 68) failed [ 532.582875][T10677] FAT-fs (loop7): Directory bread(block 69) failed [ 532.589466][T10677] FAT-fs (loop7): Directory bread(block 70) failed [ 532.599980][T10677] FAT-fs (loop7): Directory bread(block 71) failed [ 532.606888][T10677] FAT-fs (loop7): Directory bread(block 72) failed [ 532.617036][T10677] FAT-fs (loop7): Directory bread(block 73) failed [ 533.019654][T10720] loop5: detected capacity change from 0 to 128 [ 534.327369][T10733] loop1: detected capacity change from 0 to 128 [ 534.475985][T10733] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,jqfmt=vfsv1,dax=inode,dax=never,minixdf,,errors=continue. Quota mode: none. [ 534.555435][T10733] ext4 filesystem being mounted at /290/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 534.719656][T10758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1580'. [ 534.742187][ T4384] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 534.771124][T10760] loop1: detected capacity change from 0 to 512 [ 534.856037][T10760] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1583: couldn't read orphan inode 26 (err -116) [ 534.872604][T10760] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 534.885374][T10760] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.962070][T10368] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 535.005052][ T4384] usb 6-1: Using ep0 maxpacket: 8 [ 535.117644][T10772] loop1: detected capacity change from 0 to 128 [ 535.150869][T10772] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 535.162044][T10772] ext4 filesystem being mounted at /295/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 535.182156][ T4384] usb 6-1: unable to get BOS descriptor or descriptor too short [ 535.201994][T10368] usb 8-1: Using ep0 maxpacket: 32 [ 535.272066][ T4384] usb 6-1: config 7 has an invalid interface number: 45 but max is 0 [ 535.280418][ T4384] usb 6-1: config 7 has no interface number 0 [ 535.287361][ T4384] usb 6-1: config 7 interface 45 has no altsetting 0 [ 535.323940][T10368] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 535.332438][T10368] usb 8-1: config 0 has no interface number 0 [ 535.338518][T10368] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 535.350601][T10368] usb 8-1: config 0 interface 196 has no altsetting 0 [ 535.491938][ T4384] usb 6-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=52.85 [ 535.501202][ T4384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.511290][ T4384] usb 6-1: Product: syz [ 535.515557][ T4384] usb 6-1: Manufacturer: syz [ 535.520149][ T4384] usb 6-1: SerialNumber: syz [ 535.522137][T10368] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 535.535391][T10368] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.544338][T10368] usb 8-1: Product: syz [ 535.548676][T10368] usb 8-1: Manufacturer: syz [ 535.553817][T10368] usb 8-1: SerialNumber: syz [ 535.560703][T10368] usb 8-1: config 0 descriptor?? [ 535.587245][T10755] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 535.842410][ T4384] pegasus 6-1:7.45: Missing or invalid endpoints [ 535.857528][ T4384] usb 6-1: USB disconnect, device number 7 [ 536.042048][T10368] ipheth 8-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 536.053233][T10368] ipheth: probe of 8-1:0.196 failed with error -22 [ 536.245808][ T4384] usb 8-1: USB disconnect, device number 10 [ 536.327048][T10782] loop1: detected capacity change from 0 to 256 [ 537.032232][T10782] FAT-fs (loop1): Directory bread(block 64) failed [ 537.050023][T10782] FAT-fs (loop1): Directory bread(block 65) failed [ 537.059462][T10782] FAT-fs (loop1): Directory bread(block 66) failed [ 537.073291][T10782] FAT-fs (loop1): Directory bread(block 67) failed [ 537.087753][T10782] FAT-fs (loop1): Directory bread(block 68) failed [ 537.103234][T10782] FAT-fs (loop1): Directory bread(block 69) failed [ 537.117695][T10782] FAT-fs (loop1): Directory bread(block 70) failed [ 537.132114][T10782] FAT-fs (loop1): Directory bread(block 71) failed [ 537.177890][T10782] FAT-fs (loop1): Directory bread(block 72) failed [ 537.191585][T10782] FAT-fs (loop1): Directory bread(block 73) failed [ 537.928926][ T26] audit: type=1800 audit(2000000072.869:95): pid=10782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1590" name="file1" dev="loop1" ino=1048614 res=0 errno=0 [ 538.139603][T10813] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1602'. [ 538.959319][ T9966] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 540.063165][ T9966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 540.067655][T10811] loop5: detected capacity change from 0 to 32768 [ 540.084662][ T9966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 540.121535][T10811] /dev/loop5: Can't open blockdev [ 540.136751][ T9966] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 540.150637][ T9966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.171458][ T9966] usb 2-1: config 0 descriptor?? [ 540.206662][T10837] loop7: detected capacity change from 0 to 256 [ 540.277680][T10837] FAT-fs (loop7): Directory bread(block 64) failed [ 540.288776][T10837] FAT-fs (loop7): Directory bread(block 65) failed [ 540.303300][T10837] FAT-fs (loop7): Directory bread(block 66) failed [ 540.335113][T10837] FAT-fs (loop7): Directory bread(block 67) failed [ 540.342848][T10837] FAT-fs (loop7): Directory bread(block 68) failed [ 540.349391][T10837] FAT-fs (loop7): Directory bread(block 69) failed [ 540.359955][T10837] FAT-fs (loop7): Directory bread(block 70) failed [ 540.367201][T10837] FAT-fs (loop7): Directory bread(block 71) failed [ 540.378273][T10837] FAT-fs (loop7): Directory bread(block 72) failed [ 540.403367][T10837] FAT-fs (loop7): Directory bread(block 73) failed [ 540.656646][ T9966] saitek 0003:06A3:0621.0001: unknown main item tag 0x0 [ 540.671962][ T9966] saitek 0003:06A3:0621.0001: bogus close delimiter [ 540.694097][ T9966] saitek 0003:06A3:0621.0001: item 0 0 2 10 parsing failed [ 540.712285][ T9966] saitek 0003:06A3:0621.0001: parse failed [ 540.718141][ T9966] saitek: probe of 0003:06A3:0621.0001 failed with error -22 [ 540.875929][ T9966] usb 2-1: USB disconnect, device number 13 [ 540.985054][ T4384] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 541.405435][ T4384] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 541.442424][ T4384] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 541.455351][ T4384] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 541.489635][ T4384] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.532216][T10851] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 541.585895][T10877] tipc: Started in network mode [ 541.605253][T10877] tipc: Node identity , cluster identity 4711 [ 541.724891][T10879] device syzkaller0 entered promiscuous mode [ 541.825921][T10881] loop5: detected capacity change from 0 to 512 [ 542.208010][T10885] loop1: detected capacity change from 0 to 32768 [ 542.240810][T10885] XFS (loop1): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 542.585135][T10898] loop1: detected capacity change from 0 to 1024 [ 542.662012][T10898] hfsplus: bad catalog entry type [ 542.690740][ T4406] hfsplus: b-tree write err: -5, ino 25 [ 542.710643][ T4406] hfsplus: b-tree write err: -5, ino 4 [ 542.741950][ T4406] hfsplus: b-tree write err: -5, ino 2 [ 543.114720][T10924] loop5: detected capacity change from 0 to 256 [ 543.329091][ T4227] usb 8-1: USB disconnect, device number 11 [ 543.554278][T10920] loop1: detected capacity change from 0 to 40427 [ 543.573633][T10920] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 543.588218][T10920] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 543.598994][T10920] F2FS-fs (loop1): invalid crc value [ 543.616055][T10920] F2FS-fs (loop1): Found nat_bits in checkpoint [ 543.703730][T10920] F2FS-fs (loop1): Start checkpoint disabled! [ 543.732247][T10920] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 543.761326][ T26] audit: type=1800 audit(2000000078.699:96): pid=10920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1652" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 543.792863][T10920] F2FS-fs (loop1) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2b6/0x550 [ 543.820853][T10920] attempt to access beyond end of device [ 543.820853][T10920] loop1: rw=2049, want=78240, limit=40427 [ 543.982600][ T4345] attempt to access beyond end of device [ 543.982600][ T4345] loop1: rw=2049, want=40976, limit=40427 [ 544.318032][T10938] loop1: detected capacity change from 0 to 64 [ 544.635041][T10963] loop7: detected capacity change from 0 to 64 [ 544.642975][T10965] loop1: detected capacity change from 0 to 256 [ 544.703739][T10965] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 544.885905][T10968] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000010000,block_validity,,errors=continue. Quota mode: none. [ 544.949441][T10969] FAT-fs (loop7): Directory bread(block 64) failed [ 544.957699][T10969] FAT-fs (loop7): Directory bread(block 65) failed [ 544.965165][T10969] FAT-fs (loop7): Directory bread(block 66) failed [ 544.971704][T10969] FAT-fs (loop7): Directory bread(block 67) failed [ 544.978487][T10969] FAT-fs (loop7): Directory bread(block 68) failed [ 544.988401][T10969] FAT-fs (loop7): Directory bread(block 69) failed [ 544.995455][T10969] FAT-fs (loop7): Directory bread(block 70) failed [ 545.002431][T10969] FAT-fs (loop7): Directory bread(block 71) failed [ 545.009143][T10969] FAT-fs (loop7): Directory bread(block 72) failed [ 545.016982][T10969] FAT-fs (loop7): Directory bread(block 73) failed [ 545.173294][T10975] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 545.241041][T10975] EXT4-fs (loop1): shut down requested (1) [ 545.442002][T10993] set_capacity_and_notify: 4 callbacks suppressed [ 545.442017][T10993] loop1: detected capacity change from 0 to 16 [ 545.485849][T10993] erofs: (device loop1): mounted with root inode @ nid 36. [ 545.607313][T10993] overlayfs: failed to get redirect (-117) [ 545.771346][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1686'. [ 546.387726][T11001] loop1: detected capacity change from 0 to 128 [ 546.491847][ T9966] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 546.526575][T11001] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 546.571997][T11001] ext4 filesystem being mounted at /314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 546.650479][T11001] fscrypt (loop1, inode 12): Unsupported encryption flags (0x10) [ 546.761891][ T9966] usb 6-1: Using ep0 maxpacket: 32 [ 546.821231][T11022] loop1: detected capacity change from 0 to 64 [ 546.883167][ T9966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.898937][T11024] loop7: detected capacity change from 0 to 1024 [ 546.909868][ T9966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.928091][ T9966] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 546.937793][ T9966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.947442][ T9966] usb 6-1: config 0 descriptor?? [ 547.017365][T11024] EXT4-fs (loop7): Ignoring removed orlov option [ 547.046112][T11024] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 547.113136][T11029] loop1: detected capacity change from 0 to 64 [ 547.279687][T11033] loop7: detected capacity change from 0 to 512 [ 547.327939][T11033] EXT4-fs (loop7): 1 truncate cleaned up [ 547.337157][T11033] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,errors=remount-ro,usrjquota=,. Quota mode: none. [ 547.570103][T11049] loop1: detected capacity change from 0 to 256 [ 547.573817][ T9966] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 547.591887][ T9966] zydacron 0003:13EC:0006.0002: unknown main item tag 0x0 [ 547.650282][ T9966] zydacron 0003:13EC:0006.0002: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.5-1/input0 [ 547.667265][T11049] FAT-fs (loop1): Directory bread(block 64) failed [ 547.694299][T11049] FAT-fs (loop1): Directory bread(block 65) failed [ 547.711216][T11049] FAT-fs (loop1): Directory bread(block 66) failed [ 547.738087][T11049] FAT-fs (loop1): Directory bread(block 67) failed [ 547.767761][T11049] FAT-fs (loop1): Directory bread(block 68) failed [ 547.787860][T11049] FAT-fs (loop1): Directory bread(block 69) failed [ 547.807098][T11049] FAT-fs (loop1): Directory bread(block 70) failed [ 547.844274][T11049] FAT-fs (loop1): Directory bread(block 71) failed [ 547.850902][T11049] FAT-fs (loop1): Directory bread(block 72) failed [ 547.878600][T11049] FAT-fs (loop1): Directory bread(block 73) failed [ 547.996744][T11044] loop7: detected capacity change from 0 to 32768 [ 548.014094][T11044] XFS: attr2 mount option is deprecated. [ 548.076146][T11044] XFS (loop7): Mounting V5 Filesystem [ 548.093417][ T4227] usb 6-1: USB disconnect, device number 8 [ 548.217001][T11044] XFS (loop7): Ending clean mount [ 548.240862][T11044] XFS (loop7): Quotacheck needed: Please wait. [ 548.365468][T11044] XFS (loop7): Quotacheck: Done. [ 548.401841][ T26] audit: type=1800 audit(2000000083.339:97): pid=11044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1707" name="file1" dev="loop7" ino=4422 res=0 errno=0 [ 548.475686][ T8298] XFS (loop7): Unmounting Filesystem [ 549.275513][T11097] loop1: detected capacity change from 0 to 40427 [ 549.307151][T11097] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 549.324525][T11097] F2FS-fs (loop1): invalid crc value [ 549.332683][T11097] F2FS-fs (loop1): Found nat_bits in checkpoint [ 549.377033][T11097] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 549.422744][T11101] loop7: detected capacity change from 0 to 32768 [ 549.489742][T11101] (syz.7.1721,11101,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 549.525045][ T4184] attempt to access beyond end of device [ 549.525045][ T4184] loop1: rw=2049, want=45112, limit=40427 [ 549.538413][T11101] (syz.7.1721,11101,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 549.609839][T11101] JBD2: Ignoring recovery information on journal [ 549.653008][T11101] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 550.071400][ T8298] ocfs2: Unmounting device (7,7) on (node local) [ 550.185783][T11130] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 550.229282][T11130] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 550.679802][T11148] input: syz0 as /devices/virtual/input/input11 [ 550.894285][T11156] set_capacity_and_notify: 3 callbacks suppressed [ 550.894301][T11156] loop1: detected capacity change from 0 to 256 [ 551.778240][T11169] loop1: detected capacity change from 0 to 40427 [ 551.827823][T11169] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 551.855605][T11169] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 551.891996][T11169] F2FS-fs (loop1): invalid crc value [ 551.930602][T11183] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1752'. [ 551.955687][T11169] F2FS-fs (loop1): Found nat_bits in checkpoint [ 551.980322][T11183] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1752'. [ 552.009908][T11188] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1752'. [ 552.035252][T11183] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1752'. [ 552.077913][T11169] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 552.105611][T11169] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 552.237176][T11184] attempt to access beyond end of device [ 552.237176][T11184] loop1: rw=2049, want=45104, limit=40427 [ 552.550905][T11212] loop7: detected capacity change from 0 to 8192 [ 553.271391][T11212] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 553.281277][T11212] REISERFS (device loop7): using ordered data mode [ 553.292189][T11212] reiserfs: using flush barriers [ 553.304254][T11212] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 553.345090][T11212] REISERFS (device loop7): checking transaction log (loop7) [ 553.365921][T11212] REISERFS (device loop7): Using r5 hash to sort names [ 553.375313][T11212] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 553.720247][T11226] loop1: detected capacity change from 0 to 32768 [ 553.731546][T11226] XFS: ikeep mount option is deprecated. [ 553.784669][T11226] XFS (loop1): Mounting V5 Filesystem [ 553.912170][T11226] XFS (loop1): Ending clean mount [ 554.086265][ T4184] XFS (loop1): Unmounting Filesystem [ 554.271470][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1766'. [ 555.123561][T11264] 9pnet: Insufficient options for proto=fd [ 555.194733][T11269] loop5: detected capacity change from 0 to 512 [ 555.436701][T11283] loop1: detected capacity change from 0 to 1764 [ 555.467528][T11287] loop5: detected capacity change from 0 to 16 [ 555.556152][T11287] erofs: (device loop5): mounted with root inode @ nid 36. [ 555.579856][T11287] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 555.594293][T11287] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 555.844288][T11298] loop5: detected capacity change from 0 to 256 [ 555.857280][T11298] /dev/loop5: Can't open blockdev [ 556.052329][T11306] loop1: detected capacity change from 0 to 64 [ 556.336776][T11325] loop5: detected capacity change from 0 to 7 [ 556.370838][ T4360] Dev loop5: unable to read RDB block 7 [ 556.377824][ T4360] loop5: unable to read partition table [ 556.397475][ T4360] loop5: partition table beyond EOD, truncated [ 556.450159][T11325] Dev loop5: unable to read RDB block 7 [ 556.458221][T11325] loop5: unable to read partition table [ 556.493828][T11325] loop5: partition table beyond EOD, truncated [ 556.503931][T11325] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 556.529929][ T3561] Dev loop5: unable to read RDB block 7 [ 556.539899][ T3561] loop5: unable to read partition table [ 556.552834][ T3561] loop5: partition table beyond EOD, truncated [ 556.606170][ T3561] [ 556.608528][ T3561] ====================================================== [ 556.615538][ T3561] WARNING: possible circular locking dependency detected [ 556.622559][ T3561] syzkaller #0 Not tainted [ 556.626966][ T3561] ------------------------------------------------------ [ 556.633970][ T3561] udevd/3561 is trying to acquire lock: [ 556.639501][ T3561] ffff888074a70138 ((wq_completion)loop5){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0 [ 556.649244][ T3561] [ 556.649244][ T3561] but task is already holding lock: [ 556.649530][T11343] loop1: detected capacity change from 0 to 64 [ 556.656593][ T3561] ffff888020a0b468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 556.656639][ T3561] [ 556.656639][ T3561] which lock already depends on the new lock. [ 556.656639][ T3561] [ 556.656644][ T3561] [ 556.656644][ T3561] the existing dependency chain (in reverse order) is: [ 556.656648][ T3561] [ 556.656648][ T3561] -> #6 (&lo->lo_mutex){+.+.}-{3:3}: [ 556.656670][ T3561] __mutex_lock_common+0x1e3/0x2400 [ 556.704055][ T3561] mutex_lock_killable_nested+0x17/0x20 [ 556.710131][ T3561] lo_open+0x6a/0x100 [ 556.714635][ T3561] blkdev_get_whole+0x90/0x390 [ 556.719922][ T3561] blkdev_get_by_dev+0x2d0/0xa60 [ 556.725382][ T3561] blkdev_open+0x12d/0x2c0 [ 556.730316][ T3561] do_dentry_open+0x7ff/0xf80 [ 556.735514][ T3561] path_openat+0x26f5/0x2fa0 [ 556.740625][ T3561] do_filp_open+0x1e2/0x410 [ 556.745650][ T3561] do_sys_openat2+0x150/0x4b0 [ 556.750843][ T3561] __x64_sys_openat+0x135/0x160 [ 556.756211][ T3561] do_syscall_64+0x4c/0xa0 [ 556.761145][ T3561] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 556.767560][ T3561] [ 556.767560][ T3561] -> #5 (&disk->open_mutex){+.+.}-{3:3}: [ 556.775373][ T3561] __mutex_lock_common+0x1e3/0x2400 [ 556.781093][ T3561] mutex_lock_nested+0x17/0x20 [ 556.786387][ T3561] blkdev_get_by_dev+0x157/0xa60 [ 556.791847][ T3561] swsusp_check+0xa1/0x2b0 [ 556.796796][ T3561] software_resume+0xc6/0x3b0 [ 556.801999][ T3561] resume_store+0xe4/0x130 [ 556.806969][ T3561] kernfs_fop_write_iter+0x379/0x4c0 [ 556.812776][ T3561] vfs_write+0x745/0xd60 [ 556.817539][ T3561] ksys_write+0x152/0x260 [ 556.822391][ T3561] do_syscall_64+0x4c/0xa0 [ 556.827326][ T3561] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 556.833735][ T3561] [ 556.833735][ T3561] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 556.842256][ T3561] __mutex_lock_common+0x1e3/0x2400 [ 556.847985][ T3561] mutex_lock_nested+0x17/0x20 [ 556.853297][ T3561] software_resume+0x7c/0x3b0 [ 556.858503][ T3561] resume_store+0xe4/0x130 [ 556.863441][ T3561] kernfs_fop_write_iter+0x379/0x4c0 [ 556.869251][ T3561] vfs_write+0x745/0xd60 [ 556.874021][ T3561] ksys_write+0x152/0x260 [ 556.878870][ T3561] do_syscall_64+0x4c/0xa0 [ 556.883801][ T3561] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 556.890202][ T3561] [ 556.890202][ T3561] -> #3 (&of->mutex){+.+.}-{3:3}: [ 556.897393][ T3561] __mutex_lock_common+0x1e3/0x2400 [ 556.903097][ T3561] mutex_lock_nested+0x17/0x20 [ 556.908359][ T3561] kernfs_seq_start+0x51/0x3c0 [ 556.913621][ T3561] seq_read_iter+0x3c4/0xd50 [ 556.918709][ T3561] vfs_read+0x759/0xd60 [ 556.923362][ T3561] ksys_read+0x152/0x260 [ 556.928239][ T3561] do_syscall_64+0x4c/0xa0 [ 556.933166][ T3561] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 556.939559][ T3561] [ 556.939559][ T3561] -> #2 (&p->lock){+.+.}-{3:3}: [ 556.946566][ T3561] __mutex_lock_common+0x1e3/0x2400 [ 556.952265][ T3561] mutex_lock_nested+0x17/0x20 [ 556.957525][ T3561] seq_read_iter+0xad/0xd50 [ 556.962548][ T3561] do_iter_readv_writev+0x47e/0x5f0 [ 556.968262][ T3561] do_iter_read+0x20b/0x7c0 [ 556.973271][ T3561] loop_process_work+0x16dd/0x24a0 [ 556.978885][ T3561] process_one_work+0x85f/0x1010 [ 556.984319][ T3561] worker_thread+0xaa6/0x1290 [ 556.989492][ T3561] kthread+0x436/0x520 [ 556.994057][ T3561] ret_from_fork+0x1f/0x30 [ 556.998975][ T3561] [ 556.998975][ T3561] -> #1 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 557.008342][ T3561] process_one_work+0x7bb/0x1010 [ 557.013780][ T3561] worker_thread+0xaa6/0x1290 [ 557.018960][ T3561] kthread+0x436/0x520 [ 557.023537][ T3561] ret_from_fork+0x1f/0x30 [ 557.028575][ T3561] [ 557.028575][ T3561] -> #0 ((wq_completion)loop5){+.+.}-{0:0}: [ 557.036629][ T3561] __lock_acquire+0x2c42/0x7d10 [ 557.041984][ T3561] lock_acquire+0x19e/0x400 [ 557.046992][ T3561] flush_workqueue+0x16c/0x13d0 [ 557.052351][ T3561] drain_workqueue+0xcf/0x380 [ 557.057523][ T3561] destroy_workqueue+0x7b/0xb20 [ 557.062869][ T3561] __loop_clr_fd+0x234/0xb90 [ 557.067955][ T3561] blkdev_put+0x53f/0x7d0 [ 557.072785][ T3561] blkdev_close+0x76/0xa0 [ 557.077624][ T3561] __fput+0x234/0x930 [ 557.082107][ T3561] task_work_run+0x125/0x1a0 [ 557.087209][ T3561] exit_to_user_mode_loop+0x10f/0x130 [ 557.093096][ T3561] exit_to_user_mode_prepare+0xee/0x180 [ 557.099138][ T3561] syscall_exit_to_user_mode+0x16/0x40 [ 557.105095][ T3561] do_syscall_64+0x58/0xa0 [ 557.110011][ T3561] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 557.116410][ T3561] [ 557.116410][ T3561] other info that might help us debug this: [ 557.116410][ T3561] [ 557.126613][ T3561] Chain exists of: [ 557.126613][ T3561] (wq_completion)loop5 --> &disk->open_mutex --> &lo->lo_mutex [ 557.126613][ T3561] [ 557.140049][ T3561] Possible unsafe locking scenario: [ 557.140049][ T3561] [ 557.147473][ T3561] CPU0 CPU1 [ 557.152810][ T3561] ---- ---- [ 557.158151][ T3561] lock(&lo->lo_mutex); [ 557.162371][ T3561] lock(&disk->open_mutex); [ 557.169495][ T3561] lock(&lo->lo_mutex); [ 557.176231][ T3561] lock((wq_completion)loop5); [ 557.181056][ T3561] [ 557.181056][ T3561] *** DEADLOCK *** [ 557.181056][ T3561] [ 557.189176][ T3561] 2 locks held by udevd/3561: [ 557.193826][ T3561] #0: ffff888020829d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 557.203109][ T3561] #1: ffff888020a0b468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 557.212310][ T3561] [ 557.212310][ T3561] stack backtrace: [ 557.218192][ T3561] CPU: 0 PID: 3561 Comm: udevd Not tainted syzkaller #0 [ 557.225142][ T3561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 557.235312][ T3561] Call Trace: [ 557.238590][ T3561] [ 557.241601][ T3561] dump_stack_lvl+0x188/0x250 [ 557.246267][ T3561] ? load_image+0x400/0x400 [ 557.250760][ T3561] ? show_regs_print_info+0x20/0x20 [ 557.255962][ T3561] ? print_circular_bug+0x12b/0x1a0 [ 557.261155][ T3561] check_noncircular+0x296/0x330 [ 557.266080][ T3561] ? add_chain_block+0x940/0x940 [ 557.270997][ T3561] ? lockdep_lock+0xf1/0x1f0 [ 557.275573][ T3561] ? mark_lock+0x94/0x320 [ 557.279882][ T3561] __lock_acquire+0x2c42/0x7d10 [ 557.284717][ T3561] ? __lock_acquire+0x13bc/0x7d10 [ 557.289809][ T3561] ? verify_lock_unused+0x140/0x140 [ 557.294988][ T3561] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 557.300954][ T3561] ? verify_lock_unused+0x140/0x140 [ 557.306141][ T3561] ? __perf_event_task_sched_in+0x4e6/0x560 [ 557.312014][ T3561] ? memset+0x1e/0x40 [ 557.315979][ T3561] lock_acquire+0x19e/0x400 [ 557.320463][ T3561] ? flush_workqueue+0x150/0x13d0 [ 557.325466][ T3561] ? __mutex_trylock_common+0x155/0x260 [ 557.330995][ T3561] ? read_lock_is_recursive+0x10/0x10 [ 557.336350][ T3561] ? __init_swait_queue_head+0xa5/0x150 [ 557.341879][ T3561] flush_workqueue+0x16c/0x13d0 [ 557.346712][ T3561] ? flush_workqueue+0x150/0x13d0 [ 557.351714][ T3561] ? __lock_acquire+0x7d10/0x7d10 [ 557.356719][ T3561] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 557.362683][ T3561] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 557.368123][ T3561] ? rcu_work_rcufn+0x120/0x120 [ 557.372950][ T3561] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 557.378569][ T3561] ? finish_wait+0xc0/0x1d0 [ 557.383060][ T3561] drain_workqueue+0xcf/0x380 [ 557.387717][ T3561] destroy_workqueue+0x7b/0xb20 [ 557.392550][ T3561] __loop_clr_fd+0x234/0xb90 [ 557.397125][ T3561] ? lo_release+0x172/0x1f0 [ 557.401609][ T3561] ? lo_open+0x100/0x100 [ 557.405832][ T3561] blkdev_put+0x53f/0x7d0 [ 557.410149][ T3561] blkdev_close+0x76/0xa0 [ 557.414461][ T3561] ? blkdev_open+0x2c0/0x2c0 [ 557.419031][ T3561] __fput+0x234/0x930 [ 557.423003][ T3561] task_work_run+0x125/0x1a0 [ 557.427577][ T3561] exit_to_user_mode_loop+0x10f/0x130 [ 557.432928][ T3561] exit_to_user_mode_prepare+0xee/0x180 [ 557.438456][ T3561] syscall_exit_to_user_mode+0x16/0x40 [ 557.443897][ T3561] do_syscall_64+0x58/0xa0 [ 557.448293][ T3561] ? clear_bhb_loop+0x30/0x80 [ 557.452948][ T3561] ? clear_bhb_loop+0x30/0x80 [ 557.457607][ T3561] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 557.463492][ T3561] RIP: 0033:0x7f212364c407 [ 557.467888][ T3561] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 557.487474][ T3561] RSP: 002b:00007ffdf5d72f90 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 557.495869][ T3561] RAX: 0000000000000000 RBX: 00007f212355e880 RCX: 00007f212364c407 [ 557.503820][ T3561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 557.511770][ T3561] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 557.519725][ T3561] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 557.527676][ T3561] R13: 0000561fb4fa3100 R14: 0000000000000000 R15: 00007ffdf5d731d0 [ 557.535633][ T3561] [ 557.666257][T11343] Trying to free block not in datazone [ 557.672009][T11343] minix_free_block (loop1:21): bit already cleared [ 562.713235][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.719538][ T1423] ieee802154 phy1 wpan1: encryption failed: -22