last executing test programs: 4m22.05097734s ago: executing program 3 (id=1056): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 4m21.846926863s ago: executing program 3 (id=1057): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x54}}, 0x0) 4m21.111130016s ago: executing program 3 (id=1060): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) 4m20.094910295s ago: executing program 3 (id=1064): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6465636f6d706f73652c666f7263652c666f7263652c756d61736b3d30303030303030303030303030303030303030303031302c6e6c733d64656661756c742c00d4023937168c6a03faba6a3338c76bbb2cc123a1966858d8147d2c8f6696a3afb73a4233a7d6d17cbf793d9f3d5dc088fadadfdb7688c6a99fb22e09bb9b1fbe01fd94fae1e35f93fdbc2d26ac49430c71a16ad073e2416238a4b5f8c9877c553b2690fd7148fad9a9579680000d1a5caad58758c05f80c742dfc96510890d6ab62c3d6bc97ea00353e76f0f436500c88ef1b3ec52d6d1b6189c2c09e76160176ee4c21e9bcebdcac3565569f673575a04183f4095c2743d1547baa170a07fb5b39c0af610bbf13953ecb5e354858f41aa5b7bf2fbde", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0x0, 0x6, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0xb0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000180), 0x4) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 4m17.201257435s ago: executing program 3 (id=1072): getsockopt(0xffffffffffffffff, 0x28, 0x6, 0xfffffffffffffffc, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(r0, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="b702000002000000bfa300000000000007030000007effff7a0af0ff3f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27126e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb6220fd8d4b470e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef0420f0000cac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e885340133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421a8223fe5308e4e65ee93e107000000f8ddeff70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b12000000000000000030711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dabec3d18fd0699ff3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623243643db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e69578e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea7e764dde8725d2b4a0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10b98c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5924948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476f9e0407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd96d2da66059de81abfa1acc9f889555eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b4fdc08000be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd9b31bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac4794680f3037f250e96f61cb20d46d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401413f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60530000000000000004b023e4954c9eb6cd70627f5c03edd4f5ce48b8a874c852064dd0efafc3df20ec8faf3d194db76127f88f1b4fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8b310900000c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1d8e80311895f0b99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44b57e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db6e3080000000000003e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f27b6c15b1ba971de1cb9c7e6a000000000000001478b2a78f9abfefce4448303ef54c71199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b462426ff9293a28a544a6a9e2279b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718b3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5f61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6485987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434cbd52325296e22802475edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a1471bab551bd6beae7dbf58530136c238e545b28211a92000000001501ae7d7cc75007e8ff56e6d8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db9966addf4877204047be633792118efdb6b88023e80da74fdf723c7f000000009f13c7e851dfc91ec01219af568825de0cedd55a92eafe9edd98a8529d64cbaa0b9f89f391b2db7369e934085e486b946a4558c68e195af1a6e6e878609f9ed7406dc9c93a5d5cc76e037d66abe4fe54f18b4c969814c7f2094ebe736ef0f0cd65b90942f2e8de44f6fd69a94ca27bb6d92e2282d4a0b0ee3abe30d877579aed9b54f460247890aed19ef12e45097631548d8639fb2b6eb9b41c7e89ee7223cdeae1b2d02cf664df99e4a661feecb63953a4d86f3060372861ac184824b7a4fd1c605128f1307f2bba91b9fbfe2884639073c1d51e42feeb5312b23b8e1e468aa31ea8e7597f5eb6ad1897a04afc8369ebec808165218b625a64a237ed01636880f70f0ed"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4m15.341503564s ago: executing program 3 (id=1076): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000700)={0x2, {{0xa, 0x4e21, 0x8, @empty, 0x5}}, {{0xa, 0x4e21, 0xfffffff9, @rand_addr=' \x01\x00', 0x80}}}, 0x108) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x200000, 0x0, 0xa}, 0x18) r4 = socket(0x10, 0x80803, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001bc0), 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) 3m59.998403295s ago: executing program 32 (id=1076): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000700)={0x2, {{0xa, 0x4e21, 0x8, @empty, 0x5}}, {{0xa, 0x4e21, 0xfffffff9, @rand_addr=' \x01\x00', 0x80}}}, 0x108) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x200000, 0x0, 0xa}, 0x18) r4 = socket(0x10, 0x80803, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001bc0), 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) 51.158071967s ago: executing program 0 (id=1467): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x0, 0x7, 0xee0d, 0x9, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000004008500000082000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/176, 0xb0}], 0x1}, 0x6e}], 0x1, 0x2, 0x0) r6 = socket(0x11, 0xa, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000040)=0x2040, 0x4) sendmsg$can_bcm(r6, 0x0, 0x0) getdents64(r5, &(0x7f0000000340)=""/243, 0xf3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 48.411602909s ago: executing program 0 (id=1470): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x0, 0x7, 0xee0d, 0x9, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000004008500000082000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/176, 0xb0}], 0x1}, 0x6e}], 0x1, 0x2, 0x0) r6 = socket(0x11, 0xa, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000040)=0x2040, 0x4) sendmsg$can_bcm(r6, 0x0, 0x0) getdents64(r5, &(0x7f0000000340)=""/243, 0xf3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 46.254564375s ago: executing program 0 (id=1474): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r3, &(0x7f0000000180), 0x100000000000003c) 44.699968146s ago: executing program 0 (id=1476): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="020a00000200000000000000000000002200"], 0x10}}, 0x0) close(r4) 43.301322359s ago: executing program 0 (id=1479): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) timer_create(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0xffffffffffffffff) 40.860228462s ago: executing program 0 (id=1484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x0, 0x7, 0xee0d, 0x9, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000004008500000082000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/176, 0xb0}], 0x1}, 0x6e}], 0x1, 0x2, 0x0) r6 = socket(0x11, 0xa, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000040)=0x2040, 0x4) sendmsg$can_bcm(r6, 0x0, 0x0) getdents64(r5, &(0x7f0000000340)=""/243, 0xf3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 24.87462204s ago: executing program 33 (id=1484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x0, 0x7, 0xee0d, 0x9, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000004008500000082000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/176, 0xb0}], 0x1}, 0x6e}], 0x1, 0x2, 0x0) r6 = socket(0x11, 0xa, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000040)=0x2040, 0x4) sendmsg$can_bcm(r6, 0x0, 0x0) getdents64(r5, &(0x7f0000000340)=""/243, 0xf3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 21.346433947s ago: executing program 4 (id=1522): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x1e, 0x8, 0x0, 0x3, @multicast}, 0x10) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 18.962485367s ago: executing program 4 (id=1527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17.411005427s ago: executing program 4 (id=1531): syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 15.914423596s ago: executing program 2 (id=1533): r0 = socket(0x1e, 0x4, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r2, 0x1}}, 0x18) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req={0x7, 0x3, 0x7, 0x7e0}, 0x10) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x1, [], [0x20000000, 0x0, 0x1000010, 0x20000], [0x0, 0x40002, 0xfffffffe], [0x0, 0x10000000000000]}) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xffc}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x640, 0x0, 0x4}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 15.777974264s ago: executing program 4 (id=1534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000002bc0)=ANY=[@ANYBLOB="02c90010000c00050017050800b5ae84f0ffffffff"], 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[], 0x7) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x206, 0x8401) ioctl$USBDEVFS_WAIT_FOR_RESUME(r3, 0x8008550e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 14.801653711s ago: executing program 4 (id=1535): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x5, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 10.630521625s ago: executing program 1 (id=1543): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xb49) write$proc_mixer(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() syz_open_dev$sndpcmp(0x0, 0x401, 0x4000) madvise(&(0x7f00001c5000/0x2000)=nil, 0x2000, 0x3) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x50000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mq_notify(0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0xab1, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020}, 0x2020) writev(0xffffffffffffffff, &(0x7f0000002140)=[{&(0x7f00000000c0)='T01', 0x3}, {&(0x7f0000000100)}], 0x2) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000880)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x40) 9.311060513s ago: executing program 2 (id=1544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000002bc0)=ANY=[@ANYBLOB="02c90010000c00050017050800b5ae84f0ffffffff"], 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[], 0x7) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x206, 0x8401) ioctl$USBDEVFS_WAIT_FOR_RESUME(r3, 0x8008550e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 8.969309003s ago: executing program 5 (id=1545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x22, 0x2, 0x3) ioctl$IMGETCOUNT(r1, 0x80044943, 0x0) 8.612470154s ago: executing program 1 (id=1546): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) timer_create(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0xffffffffffffffff) 8.548930478s ago: executing program 4 (id=1547): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r0 = socket(0x28, 0x3, 0x1000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket(0x200000000000011, 0x2, 0xd) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000003900)=""/4096, 0x900}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0xff8}, 0x1, 0x0, 0x0, 0x2404a0d0}, 0x10000) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x24000854) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f0000000800)={{}, 0xfe}) unshare(0x68040200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) 7.426916783s ago: executing program 2 (id=1548): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x844) r7 = dup2(r1, r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r7) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x7, 0x200000d1) 6.308742359s ago: executing program 2 (id=1549): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x1e, 0x8, 0x0, 0x3, @multicast}, 0x10) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 6.086807692s ago: executing program 1 (id=1550): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') pread64(r0, &(0x7f0000002140)=""/17, 0x11, 0x0) 5.95905024s ago: executing program 5 (id=1551): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000100)=""/82, 0x52}, {&(0x7f00000003c0)=""/192, 0xc0}], 0x3, 0x1, 0x3) 5.805908539s ago: executing program 1 (id=1552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x0, 0x7, 0xee0d, 0x9, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/176, 0xb0}], 0x1}, 0x6e}], 0x1, 0x2, 0x0) r5 = socket(0x11, 0xa, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0x2040, 0x4) sendmsg$can_bcm(r5, 0x0, 0x0) getdents64(r4, &(0x7f0000000340)=""/243, 0xf3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 5.715765704s ago: executing program 5 (id=1553): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r3, &(0x7f0000000180), 0x100000000000003c) 4.330876566s ago: executing program 5 (id=1554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="16ecaaaeb69ec105e9dd534f1bd77f8051db33a07055391264d230088248daa370b0bc75883a507be52e9744ca1479096e0a1d347324d779b5fe3167e722437570ee9c472c6399c49d1473a32016f512dee12a2f9dc3bd6060001c8139ae43a3cbf08d05c66712c9a0b2994264c8614da6c0251fdeb06bcb94139d6b3df7bd60ac9d53ac834c97388aa638bb50457e57f90b3e8e11975ebd2c81a2a13cb5dc9b7fae4411137ad278cf52dd8d32de5b07a396cd19a242b247d2ca16ce1a663064abfc1ba4", 0xc4}], 0x1}}], 0x1, 0x400c0) sendto$inet(r5, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 2.409193308s ago: executing program 1 (id=1555): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec799", 0xa0}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170", 0x12}], 0x3, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x844) r7 = dup2(r1, r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r7) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x7, 0x200000d1) 2.407384838s ago: executing program 5 (id=1556): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xb49) write$proc_mixer(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() syz_open_dev$sndpcmp(0x0, 0x401, 0x4000) madvise(&(0x7f00001c5000/0x2000)=nil, 0x2000, 0x3) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x50000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mq_notify(0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0xab1, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r2, &(0x7f0000002240)={0x2020}, 0x2020) writev(r2, &(0x7f0000002140)=[{&(0x7f00000000c0)='T01', 0x3}, {&(0x7f0000000100)}], 0x2) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000880)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x40) 2.177037342s ago: executing program 2 (id=1557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000002bc0)=ANY=[@ANYBLOB="02c90010000c00050017050800b5ae84f0ffffffff"], 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[], 0x7) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x206, 0x8401) ioctl$USBDEVFS_WAIT_FOR_RESUME(r3, 0x8008550e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.373176199s ago: executing program 5 (id=1558): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,port=']) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="000094703db313710009000000000000007900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x41bd}) syz_open_dev$dri(0x0, 0x40100001, 0x189002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r6 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397", 0xc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000000)={&(0x7f00000004c0)=""/131, 0x83, 0x2, 0x9}) r7 = socket$nl_audit(0x10, 0x3, 0x9) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000000000)='./file1\x00', 0x3200041, &(0x7f0000000400)={[{@gid}, {@eas_rw}, {@eas_rw}, {@check_none}]}, 0x1, 0x9e18, &(0x7f000000a040)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000200)="25b730fce588d5b3808d4ca2c7b5600e41a2643c178790a200e32d32d1154012647455c3c0c7aa15d3204f6e34c413e9103de6026cc24992e45bf049d2650d866b3305b381d198be47c684077bf624fdfa0f36e607e95ed5484f371f8f5adec3f1fef10deb16ebd3f7ac174b7fb84668d83d4ed8ed13cec012eac3b3cccaf3bb820c525964e741171080538043e4ca54b8f433e2698e754e50d518a5bfa2b9e15b1a60d66338b91c5111ea1376cbade65c1f448a884805", &(0x7f0000000000), &(0x7f00000002c0)="77b4ec155c6c841a71913e381616def3a29608a9e34767590e2a2a9822d108930199bd1ac4b7d8f42aaa9125c91b1d79e0953827afa1c35dc482a486d3d933e47fe6955a2c43bebae6409593538a34ab24", &(0x7f0000000080)="1d5f93d2fe4a6f805b7b580c8ad1420b141d65ba8d54fe4b", 0x5, r0}, 0x38) sendmsg$AUDIT_USER_AVC(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000530404"], 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0x2080) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 748.046506ms ago: executing program 1 (id=1559): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) timer_create(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0xffffffffffffffff) 0s ago: executing program 2 (id=1560): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FBIOPUTCMAP(r3, 0x4605, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x84, 0x1, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): network, BSSID 50:50:50:50:50:50 [ 68.796792][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.844992][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.857653][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.885014][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.893000][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.910960][ T4405] syz.0.9: attempt to access beyond end of device [ 68.910960][ T4405] loop0: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 68.929240][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.944671][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.014983][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.030453][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.057909][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.067253][ T4405] loop5: detected capacity change from 0 to 7 [ 69.107886][ T4405] Dev loop5: unable to read RDB block 7 [ 69.146366][ T4405] loop5: AHDI p1 p2 p3 [ 69.150614][ T4405] loop5: partition table partially beyond EOD, truncated [ 69.184296][ T4405] loop5: p1 start 1601398130 is beyond EOD, truncated [ 69.965459][ T4405] loop5: p2 start 1702059890 is beyond EOD, truncated [ 70.193318][ T4419] loop1: detected capacity change from 0 to 512 [ 70.273980][ T4419] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 70.302383][ T4419] UDF-fs: Scanning with blocksize 512 failed [ 70.330692][ T4419] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 70.356841][ T4419] UDF-fs: Scanning with blocksize 1024 failed [ 70.357282][ T4423] loop2: detected capacity change from 0 to 1764 [ 70.371463][ T4419] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 70.474048][ T4419] UDF-fs: Scanning with blocksize 2048 failed [ 70.490862][ T4419] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 70.536106][ T4423] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 70.592671][ T4419] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.731734][ T4429] loop0: detected capacity change from 0 to 256 [ 70.755137][ T4417] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.885397][ T4429] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 71.078549][ T4429] fuse: Unknown parameter 'group_i00000000000000000000' [ 71.115296][ T4429] overlayfs: missing 'lowerdir' [ 71.162184][ T4417] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 71.604748][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.611411][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.646328][ T4417] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 71.718451][ T4417] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 71.777207][ T4417] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 72.072492][ T4417] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 72.230073][ T4417] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 72.280048][ T4417] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 72.340908][ T4417] usb 5-1: Product: syz [ 72.367923][ T4417] usb 5-1: Manufacturer: syz [ 72.650040][ T4417] cdc_wdm 5-1:1.0: skipping garbage [ 72.666571][ T4435] loop3: detected capacity change from 0 to 256 [ 72.678561][ T4417] cdc_wdm 5-1:1.0: skipping garbage [ 72.718524][ T4417] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 72.732738][ T4417] cdc_wdm 5-1:1.0: Unknown control protocol [ 72.773977][ T4435] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.840914][ T4435] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 72.865611][ T4435] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 74.899150][ T4386] usb 5-1: USB disconnect, device number 2 [ 75.827209][ T4460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16'. [ 76.668856][ T128] cfg80211: failed to load regulatory.db [ 77.864654][ T4469] loop2: detected capacity change from 0 to 40427 [ 77.885266][ T4469] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 77.893080][ T4469] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 77.902045][ T4469] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 80.976418][ T4484] loop1: detected capacity change from 0 to 1024 [ 81.179094][ T4484] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 81.258379][ T4484] EXT4-fs (loop1): orphan cleanup on readonly fs [ 81.302094][ T4484] EXT4-fs error (device loop1): ext4_free_blocks:6221: comm syz.1.24: Freeing blocks not in datazone - block = 0, count = 4096 [ 81.367296][ T4484] EXT4-fs (loop1): 1 orphan inode deleted [ 81.420775][ T4484] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 81.890690][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 83.466242][ T4526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.36'. [ 83.475245][ T4526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.36'. [ 84.186671][ T4532] loop1: detected capacity change from 0 to 1024 [ 85.159587][ T4546] loop4: detected capacity change from 0 to 1764 [ 85.226275][ T4433] hfsplus: b-tree write err: -5, ino 4 [ 85.253845][ T4403] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 85.556010][ T4403] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.566346][ T4403] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.147101][ T4554] loop4: detected capacity change from 0 to 1024 [ 86.153620][ T4403] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.163868][ T4403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.379660][ T4403] usb 1-1: usb_control_msg returned -32 [ 86.398904][ T4403] usbtmc 1-1:16.0: can't read capabilities [ 86.606366][ T4433] hfsplus: b-tree write err: -5, ino 4 [ 87.076427][ T4569] loop4: detected capacity change from 0 to 256 [ 87.100572][ T4571] loop2: detected capacity change from 0 to 16 [ 87.125084][ T4569] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 87.166827][ T4571] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x8a67bcf9, 0x7bbbea8c expected [ 87.181424][ T4261] udevd[4261]: incorrect erofs checksum on /dev/loop2 [ 87.261949][ T4261] udevd[4261]: incorrect erofs checksum on /dev/loop2 [ 88.303552][ T4577] loop3: detected capacity change from 0 to 1024 [ 88.396427][ T14] usb 1-1: USB disconnect, device number 2 [ 88.805906][ T4583] loop4: detected capacity change from 0 to 1764 [ 88.861304][ T4583] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 89.138061][ T4430] hfsplus: b-tree write err: -5, ino 4 [ 89.215001][ T4587] loop4: detected capacity change from 0 to 64 [ 89.226375][ T4587] ======================================================= [ 89.226375][ T4587] WARNING: The mand mount option has been deprecated and [ 89.226375][ T4587] and is ignored by this kernel. Remove the mand [ 89.226375][ T4587] option from the mount to silence this warning. [ 89.226375][ T4587] ======================================================= [ 90.342491][ T4595] loop1: detected capacity change from 0 to 1024 [ 90.347458][ T4597] loop3: detected capacity change from 0 to 256 [ 90.681782][ T4599] Zero length message leads to an empty skb [ 91.202772][ T2958] hfsplus: b-tree write err: -5, ino 4 [ 91.298630][ T4606] tipc: Can't bind to reserved service type 0 [ 92.169111][ T4616] loop2: detected capacity change from 0 to 1024 [ 92.368533][ T4616] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 92.442568][ T4616] EXT4-fs (loop2): orphan cleanup on readonly fs [ 92.533637][ T4616] EXT4-fs error (device loop2): ext4_free_blocks:6221: comm syz.2.64: Freeing blocks not in datazone - block = 0, count = 4096 [ 92.638857][ T4616] EXT4-fs (loop2): 1 orphan inode deleted [ 93.899402][ T4616] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 94.179496][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 97.566419][ T4643] loop3: detected capacity change from 0 to 16 [ 97.595715][ T4643] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x8a67bcf9, 0x7bbbea8c expected [ 97.631956][ T4257] udevd[4257]: incorrect erofs checksum on /dev/loop3 [ 99.142434][ T4665] lo speed is unknown, defaulting to 1000 [ 99.148987][ T4665] lo speed is unknown, defaulting to 1000 [ 99.164393][ T4665] lo speed is unknown, defaulting to 1000 [ 99.190210][ T4665] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.228662][ T4665] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 99.369542][ T4665] lo speed is unknown, defaulting to 1000 [ 99.382323][ T4665] lo speed is unknown, defaulting to 1000 [ 99.393602][ T4665] lo speed is unknown, defaulting to 1000 [ 99.404483][ T4665] lo speed is unknown, defaulting to 1000 [ 99.415687][ T4665] lo speed is unknown, defaulting to 1000 [ 99.741406][ T4670] loop2: detected capacity change from 0 to 1024 [ 100.552878][ T4485] hfsplus: b-tree write err: -5, ino 4 [ 100.869537][ T4690] loop2: detected capacity change from 0 to 1764 [ 101.023181][ T4690] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 103.257083][ T4714] loop4: detected capacity change from 0 to 40427 [ 103.291778][ T4714] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 103.299400][ T4714] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 103.308891][ T4714] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 105.691968][ T4728] loop2: detected capacity change from 0 to 1024 [ 106.060483][ T4736] loop4: detected capacity change from 0 to 256 [ 106.167501][ T4736] FAT-fs (loop4): Directory bread(block 64) failed [ 106.220661][ T4736] FAT-fs (loop4): Directory bread(block 65) failed [ 106.266575][ T4736] FAT-fs (loop4): Directory bread(block 66) failed [ 106.309827][ T4736] FAT-fs (loop4): Directory bread(block 67) failed [ 106.328833][ T4736] FAT-fs (loop4): Directory bread(block 68) failed [ 106.335511][ T4736] FAT-fs (loop4): Directory bread(block 69) failed [ 106.342133][ T4736] FAT-fs (loop4): Directory bread(block 70) failed [ 106.349339][ T4736] FAT-fs (loop4): Directory bread(block 71) failed [ 106.356012][ T4736] FAT-fs (loop4): Directory bread(block 72) failed [ 106.362563][ T4736] FAT-fs (loop4): Directory bread(block 73) failed [ 106.589058][ T11] hfsplus: b-tree write err: -5, ino 4 [ 106.977152][ T4743] loop4: detected capacity change from 0 to 1024 [ 107.111978][ T4743] hfsplus: failed to load root directory [ 107.551520][ T4750] loop2: detected capacity change from 0 to 1024 [ 107.941502][ T4485] hfsplus: b-tree write err: -5, ino 4 [ 110.130716][ T4776] loop3: detected capacity change from 0 to 1024 [ 111.064195][ T4446] hfsplus: b-tree write err: -5, ino 4 [ 113.509490][ T4810] loop1: detected capacity change from 0 to 1024 [ 113.539199][ T4810] hfsplus: failed to load root directory [ 115.251241][ T4819] lo speed is unknown, defaulting to 1000 [ 115.742096][ T4825] loop1: detected capacity change from 0 to 1024 [ 116.208924][ T4366] hfsplus: b-tree write err: -5, ino 4 [ 116.373730][ C1] sched: RT throttling activated [ 120.023068][ T4861] loop3: detected capacity change from 0 to 128 [ 120.060123][ T4861] FAT-fs (loop3): Unrecognized mount option "nonUmtail=0" or missing value [ 121.110450][ T4869] loop1: detected capacity change from 0 to 1024 [ 121.177370][ T4869] hfsplus: failed to load root directory [ 125.062763][ T4886] loop4: detected capacity change from 0 to 32768 [ 126.625732][ T4886] (syz.4.134,4886,0):ocfs2_initialize_super:2286 ERROR: status = -12 [ 126.647955][ T4886] (syz.4.134,4886,1):ocfs2_fill_super:1176 ERROR: status = -12 [ 127.426259][ T4916] loop1: detected capacity change from 0 to 256 [ 128.163298][ T4923] loop4: detected capacity change from 0 to 1024 [ 128.246652][ T4923] hfsplus: failed to load root directory [ 130.132740][ T4928] loop2: detected capacity change from 0 to 32768 [ 132.125488][ T4928] read_mapping_page failed! [ 132.130701][ T4928] ERROR: (device loop2): txCommit: [ 132.130701][ T4928] [ 132.565468][ T4949] loop3: detected capacity change from 0 to 64 [ 132.766357][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.772812][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.445125][ T4962] loop4: detected capacity change from 0 to 16 [ 134.454425][ T4962] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0x8a67bcf9, 0x7bbbea8c expected [ 136.122519][ T4284] Bluetooth: Wrong link type (-22) [ 138.037185][ T4993] loop1: detected capacity change from 0 to 1024 [ 138.351375][ T5001] lo speed is unknown, defaulting to 1000 [ 138.543486][ T56] hfsplus: b-tree write err: -5, ino 4 [ 139.605232][ T4417] libceph: connect (1)[c::]:6789 error -101 [ 139.675649][ T4417] libceph: mon0 (1)[c::]:6789 connect error [ 139.800276][ T5004] ceph: No mds server is up or the cluster is laggy [ 139.808354][ T4417] libceph: connect (1)[c::]:6789 error -101 [ 139.814496][ T4417] libceph: mon0 (1)[c::]:6789 connect error [ 140.086366][ T4417] libceph: connect (1)[c::]:6789 error -101 [ 140.096676][ T4417] libceph: mon0 (1)[c::]:6789 connect error [ 140.360466][ T4407] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 140.471192][ T48] Bluetooth: Wrong link type (-22) [ 140.590034][ T4407] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.718141][ T4407] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 140.978643][ T4407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 141.113870][ T4407] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 143.952481][ T4407] usb 3-1: string descriptor 0 read error: -71 [ 143.966958][ T4407] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 144.062439][ T4407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.209165][ T4407] usb 3-1: config 0 descriptor?? [ 144.237862][ T4407] usb 3-1: can't set config #0, error -71 [ 144.251646][ T4407] usb 3-1: USB disconnect, device number 2 [ 147.235016][ T5073] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 147.300305][ T5073] lo speed is unknown, defaulting to 1000 [ 149.125359][ T5076] loop2: detected capacity change from 0 to 40427 [ 149.157354][ T5076] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 149.165075][ T5076] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 149.173547][ T5076] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 150.582292][ T5089] loop1: detected capacity change from 0 to 64 [ 151.576340][ T48] Bluetooth: Wrong link type (-22) [ 152.257191][ T5105] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 152.655102][ T5109] loop2: detected capacity change from 0 to 40427 [ 152.737753][ T5109] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 152.745399][ T5109] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 152.755952][ T5109] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 153.199120][ T4257] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 153.438550][ T5110] loop1: detected capacity change from 0 to 256 [ 154.164023][ T4339] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 154.473830][ T4339] usb 4-1: Using ep0 maxpacket: 8 [ 154.480774][ T4339] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 154.489481][ T4339] usb 4-1: config 0 has no interface number 0 [ 154.496000][ T4339] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48 [ 154.507682][ T4339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.316988][ T5125] loop4: detected capacity change from 0 to 40427 [ 155.334569][ T5125] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 155.342101][ T5125] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 155.350494][ T5125] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 155.360767][ T4339] usb 4-1: config 0 descriptor?? [ 155.555102][ T5129] loop2: detected capacity change from 0 to 64 [ 156.204016][ T4284] Bluetooth: hci4: command 0x0405 tx timeout [ 156.674010][ T4339] usb 4-1: USB disconnect, device number 2 [ 156.811367][ T5146] loop2: detected capacity change from 0 to 64 [ 160.046334][ T5171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'. [ 160.220670][ T5166] loop3: detected capacity change from 0 to 32768 [ 160.255116][ T5175] tipc: Started in network mode [ 160.260216][ T5175] tipc: Node identity 7f000001, cluster identity 4711 [ 160.377613][ T5175] tipc: Enabled bearer , priority 10 [ 161.283237][ T5166] XFS (loop3): Mounting V5 Filesystem [ 161.500304][ T5166] XFS (loop3): Ending clean mount [ 161.517925][ T4325] tipc: Node number set to 2130706433 [ 161.749730][ T5206] netlink: 'syz.1.217': attribute type 10 has an invalid length. [ 161.785158][ T5166] XFS (loop3): Quotacheck needed: Please wait. [ 161.915932][ T5206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.929939][ T5206] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 163.130744][ T5166] XFS (loop3): Quotacheck: Done. [ 163.175342][ T5211] loop4: detected capacity change from 0 to 64 [ 163.609765][ T5216] team0: Port device team_slave_0 removed [ 163.808268][ T4270] XFS (loop3): Unmounting Filesystem [ 164.597324][ T5228] loop1: detected capacity change from 0 to 1024 [ 164.640750][ T5228] hfsplus: failed to load root directory [ 165.876144][ T5243] loop2: detected capacity change from 0 to 16 [ 165.885391][ T5243] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x8a67bcf9, 0x7bbbea8c expected [ 165.921259][ T4261] udevd[4261]: incorrect erofs checksum on /dev/loop2 [ 166.237855][ T48] Bluetooth: Wrong link type (-22) [ 166.878026][ T5254] loop2: detected capacity change from 0 to 1024 [ 167.077926][ T5257] loop3: detected capacity change from 0 to 1764 [ 167.128844][ T5257] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 169.849834][ T48] Bluetooth: Wrong link type (-22) [ 169.926093][ T4446] hfsplus: b-tree write err: -5, ino 4 [ 171.914829][ T5320] loop3: detected capacity change from 0 to 1024 [ 171.991580][ T5320] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 172.005724][ T5320] EXT4-fs (loop3): orphan cleanup on readonly fs [ 172.015213][ T5320] EXT4-fs error (device loop3): ext4_free_blocks:6221: comm syz.3.253: Freeing blocks not in datazone - block = 0, count = 4096 [ 172.030902][ T5320] EXT4-fs (loop3): 1 orphan inode deleted [ 172.036843][ T5320] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 172.796007][ T5322] loop1: detected capacity change from 0 to 1024 [ 172.933315][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 173.036662][ T5330] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.686635][ T4430] hfsplus: b-tree write err: -5, ino 4 [ 174.661327][ T48] Bluetooth: Wrong link type (-22) [ 176.258583][ T5353] loop3: detected capacity change from 0 to 64 [ 180.099890][ T5385] loop1: detected capacity change from 0 to 40427 [ 180.625130][ T5385] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 180.632682][ T5385] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 180.641074][ T5385] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 180.960336][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 180.960392][ T4272] Bluetooth: hci0: command 0x0406 tx timeout [ 180.966746][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 180.972608][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 180.985586][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 183.047577][ T5415] loop3: detected capacity change from 0 to 128 [ 183.817432][ T5415] EXT4-fs (loop3): Test dummy encryption mode enabled [ 183.979477][ T5415] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 184.050955][ T5415] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 185.280656][ T5438] loop1: detected capacity change from 0 to 40427 [ 185.445096][ T5438] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 185.452759][ T5438] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 185.461759][ T5438] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 186.051058][ T4281] Bluetooth: Wrong link type (-22) [ 186.285571][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 187.552129][ T5467] loop1: detected capacity change from 0 to 1024 [ 187.659766][ T5474] loop3: detected capacity change from 0 to 1024 [ 187.670617][ T5467] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 187.787872][ T5467] EXT4-fs (loop1): orphan cleanup on readonly fs [ 187.831563][ T5467] EXT4-fs error (device loop1): ext4_free_blocks:6221: comm syz.1.295: Freeing blocks not in datazone - block = 0, count = 4096 [ 188.518837][ T5467] EXT4-fs (loop1): 1 orphan inode deleted [ 188.541538][ T5467] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 188.783090][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 189.456364][ T5487] loop1: detected capacity change from 0 to 64 [ 190.091969][ T56] hfsplus: b-tree write err: -5, ino 4 [ 190.157247][ T4281] Bluetooth: Wrong link type (-22) [ 190.162882][ T4281] Bluetooth: hci0: link tx timeout [ 190.170391][ T4281] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 190.683849][ T5492] loop2: detected capacity change from 0 to 32768 [ 190.700471][ T5492] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.303 (5492) [ 190.740565][ T5492] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.787224][ T5492] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 190.872090][ T5492] BTRFS info (device loop2): using free space tree [ 191.146279][ T5515] input: syz1 as /devices/virtual/input/input7 [ 191.891607][ T5529] loop4: detected capacity change from 0 to 64 [ 192.049108][ T5532] loop1: detected capacity change from 0 to 64 [ 192.751628][ T5492] BTRFS info (device loop2): enabling ssd optimizations [ 193.066917][ T4271] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.212876][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.219209][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.687670][ T4281] Bluetooth: Wrong link type (-22) [ 194.693231][ T4281] Bluetooth: hci2: link tx timeout [ 194.699067][ T4281] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 196.495451][ T5590] loop2: detected capacity change from 0 to 64 [ 199.048677][ T5616] siw: device registration error -23 [ 199.649198][ T5623] loop1: detected capacity change from 0 to 1024 [ 199.983909][ T4403] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 200.785416][ T4403] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 200.828890][ T4403] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1600, setting to 64 [ 200.858753][ T4403] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 200.926495][ T4403] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.976529][ T4403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 201.053089][ T4403] usb 4-1: SerialNumber: syz [ 201.132168][ T5621] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 201.147663][ T5621] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 201.447810][ T5637] netlink: 72 bytes leftover after parsing attributes in process `syz.3.336'. [ 204.497884][ T4403] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 204.529694][ T4403] usb 4-1: USB disconnect, device number 3 [ 204.565480][ T5643] loop4: detected capacity change from 0 to 64 [ 204.709394][ T5645] loop2: detected capacity change from 0 to 1024 [ 205.062758][ T5649] IPv6: NLM_F_CREATE should be specified when creating new route [ 205.629298][ T5651] loop4: detected capacity change from 0 to 512 [ 205.648941][ T5651] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.665589][ T46] hfsplus: b-tree write err: -5, ino 4 [ 205.825495][ T5651] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 205.856865][ T5651] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.363377][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 208.310578][ T5671] siw: device registration error -23 [ 208.750143][ T4446] hfsplus: b-tree write err: -5, ino 4 [ 209.065278][ T5674] loop4: detected capacity change from 0 to 32768 [ 209.181059][ T5674] XFS (loop4): Mounting V5 Filesystem [ 209.249467][ T5674] XFS (loop4): Ending clean mount [ 209.259658][ T5674] XFS (loop4): Quotacheck needed: Please wait. [ 209.444524][ T5691] tipc: Started in network mode [ 209.449533][ T5691] tipc: Node identity ac14140f, cluster identity 4711 [ 209.456735][ T5691] tipc: New replicast peer: 255.255.255.83 [ 209.463316][ T5691] tipc: Enabled bearer , priority 10 [ 210.111076][ T5674] XFS (loop4): Quotacheck: Done. [ 210.388477][ T5695] overlayfs: missing 'lowerdir' [ 210.635903][ T5568] tipc: Node number set to 2886997007 [ 210.833530][ T4278] XFS (loop4): Unmounting Filesystem [ 212.134041][ T4339] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 212.790209][ T4339] usb 5-1: Using ep0 maxpacket: 32 [ 212.875230][ T5723] ALSA: mixer_oss: invalid OSS volume '' [ 213.091335][ T4339] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 213.343536][ T4339] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 213.549341][ T4339] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 213.608834][ T4339] usb 5-1: Product: syz [ 213.613062][ T4339] usb 5-1: Manufacturer: syz [ 213.658495][ T4339] usb 5-1: SerialNumber: syz [ 214.076643][ T4339] usb 5-1: config 0 descriptor?? [ 214.108011][ T5709] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 214.127643][ T4339] hub 5-1:0.0: bad descriptor, ignoring hub [ 214.146359][ T4339] hub: probe of 5-1:0.0 failed with error -5 [ 214.629404][ T5735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.653607][ T5735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.954010][ T4339] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 215.289932][ T4339] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.308166][ T4339] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.452570][ T4339] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.621385][ T4339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.952814][ T5568] usb 5-1: USB disconnect, device number 3 [ 216.247714][ T4339] usb 2-1: usb_control_msg returned -32 [ 216.253480][ T4339] usbtmc 2-1:16.0: can't read capabilities [ 216.313323][ T4339] usb 2-1: USB disconnect, device number 2 [ 221.039280][ T5791] loop1: detected capacity change from 0 to 1024 [ 222.408727][ T11] hfsplus: b-tree write err: -5, ino 4 [ 224.389844][ T5809] loop1: detected capacity change from 0 to 40427 [ 224.416585][ T5809] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 224.424592][ T5809] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 224.433022][ T5809] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 228.148380][ T5833] loop2: detected capacity change from 0 to 40427 [ 228.252025][ T5833] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 228.260484][ T5833] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 228.269072][ T5833] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 228.671781][ T5842] ALSA: mixer_oss: invalid OSS volume '' [ 229.361843][ T5850] loop4: detected capacity change from 0 to 256 [ 229.546740][ T5852] loop1: detected capacity change from 0 to 1024 [ 229.583636][ T5852] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 229.592839][ T5852] EXT4-fs (loop1): orphan cleanup on readonly fs [ 229.599435][ T5852] EXT4-fs error (device loop1): ext4_free_blocks:6221: comm syz.1.396: Freeing blocks not in datazone - block = 0, count = 4096 [ 229.618461][ T5852] EXT4-fs (loop1): 1 orphan inode deleted [ 229.624637][ T5852] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 229.816899][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 230.720656][ T5870] loop2: detected capacity change from 0 to 64 [ 231.295661][ T5572] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 231.499524][ T5572] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.554962][ T5572] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.589041][ T5572] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.650185][ T5572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.444618][ T5888] loop1: detected capacity change from 0 to 40427 [ 233.020033][ T5888] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 233.027635][ T5888] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 233.036120][ T5888] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 233.272920][ T5572] usb 3-1: usb_control_msg returned -32 [ 233.284524][ T5572] usbtmc 3-1:16.0: can't read capabilities [ 233.309445][ T5572] usb 3-1: USB disconnect, device number 3 [ 233.956997][ T5899] ALSA: mixer_oss: invalid OSS volume '' [ 234.459823][ T4281] Bluetooth: Wrong link type (-22) [ 234.466145][ T4281] Bluetooth: hci3: link tx timeout [ 234.473521][ T4281] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 234.481860][ T4281] Bluetooth: hci3: link tx timeout [ 234.533855][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.714792][ T4272] Bluetooth: hci3: command 0x0406 tx timeout [ 238.182224][ T5941] loop1: detected capacity change from 0 to 40427 [ 238.218987][ T5941] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 238.226769][ T5941] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 238.235408][ T5941] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 238.276898][ T5940] loop3: detected capacity change from 0 to 64 [ 238.687332][ T5947] loop3: detected capacity change from 0 to 1024 [ 239.003963][ T5572] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 239.055701][ T5955] ALSA: mixer_oss: invalid OSS volume '' [ 239.230883][ T5572] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.343249][ T5572] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.678962][ T5572] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.688376][ T5572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.917728][ T5572] usb 1-1: usb_control_msg returned -32 [ 239.923519][ T5572] usbtmc 1-1:16.0: can't read capabilities [ 239.955010][ T5572] usb 1-1: USB disconnect, device number 3 [ 242.397481][ T5986] loop2: detected capacity change from 0 to 256 [ 243.985205][ T4430] hfsplus: b-tree write err: -5, ino 4 [ 244.365506][ T6000] ALSA: mixer_oss: invalid OSS volume '' [ 245.156949][ T6006] loop2: detected capacity change from 0 to 64 [ 246.509458][ T6028] loop2: detected capacity change from 0 to 256 [ 247.991464][ T6039] loop4: detected capacity change from 0 to 1024 [ 248.092732][ T6043] ALSA: mixer_oss: invalid OSS volume '' [ 252.233902][ T6083] ALSA: mixer_oss: invalid OSS volume '' [ 252.864543][ T4430] hfsplus: b-tree write err: -5, ino 4 [ 254.085109][ T6093] loop4: detected capacity change from 0 to 256 [ 254.142001][ T6097] loop3: detected capacity change from 0 to 64 [ 254.519276][ T6104] loop3: detected capacity change from 0 to 16 [ 254.533965][ T6104] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x8a67bcf9, 0x7bbbea8c expected [ 254.618941][ T4261] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 255.593542][ T6114] loop3: detected capacity change from 0 to 1024 [ 255.646727][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.653368][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.011945][ T6122] siw: device registration error -23 [ 257.794289][ T6140] loop2: detected capacity change from 0 to 40427 [ 257.810670][ T6140] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 257.819419][ T6140] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 257.828023][ T6140] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 257.876333][ T4257] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 259.666837][ T56] hfsplus: b-tree write err: -5, ino 4 [ 262.271014][ T6184] siw: device registration error -23 [ 265.652210][ T6217] loop3: detected capacity change from 0 to 256 [ 266.935380][ T6224] loop4: detected capacity change from 0 to 64 [ 268.271220][ T6243] siw: device registration error -23 [ 270.294781][ T6250] loop1: detected capacity change from 0 to 64 [ 273.341350][ T6285] loop1: detected capacity change from 0 to 40427 [ 273.361231][ T6285] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 273.369466][ T6285] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 273.377867][ T6285] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 275.998992][ T6295] siw: device registration error -23 [ 276.469346][ T6303] loop3: detected capacity change from 0 to 1024 [ 276.510674][ T6303] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 276.519465][ T6303] EXT4-fs (loop3): orphan cleanup on readonly fs [ 276.526019][ T6303] EXT4-fs error (device loop3): ext4_free_blocks:6221: comm syz.3.526: Freeing blocks not in datazone - block = 0, count = 4096 [ 276.648626][ T6303] EXT4-fs (loop3): 1 orphan inode deleted [ 276.654805][ T6303] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 277.001323][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 278.748972][ T6322] loop4: detected capacity change from 0 to 40427 [ 278.758934][ T6322] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 278.768384][ T6322] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 278.776790][ T6322] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 283.724623][ T6364] loop1: detected capacity change from 0 to 40427 [ 283.745041][ T6364] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 283.752546][ T6364] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 283.760873][ T6364] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 283.843839][ T4257] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 283.928635][ T6370] loop3: detected capacity change from 0 to 1024 [ 284.960900][ T4487] hfsplus: b-tree write err: -5, ino 4 [ 287.342490][ T6387] input: syz1 as /devices/virtual/input/input8 [ 287.634368][ T6392] loop2: detected capacity change from 0 to 1024 [ 288.986977][ T2958] hfsplus: b-tree write err: -5, ino 4 [ 289.086999][ T6409] loop3: detected capacity change from 0 to 256 [ 291.273434][ T6433] input: syz1 as /devices/virtual/input/input9 [ 296.029053][ T6478] input: syz1 as /devices/virtual/input/input10 [ 298.993219][ T6510] loop3: detected capacity change from 0 to 1024 [ 299.025748][ T6510] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 299.034623][ T6510] EXT4-fs (loop3): orphan cleanup on readonly fs [ 299.041214][ T6510] EXT4-fs error (device loop3): ext4_free_blocks:6221: comm syz.3.586: Freeing blocks not in datazone - block = 0, count = 4096 [ 299.055270][ T6510] EXT4-fs (loop3): 1 orphan inode deleted [ 299.061547][ T6510] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 299.917244][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 300.221882][ T4281] Bluetooth: Wrong link type (-22) [ 302.784432][ T125] libceph: connect (1)[c::]:6789 error -101 [ 302.865994][ T125] libceph: mon0 (1)[c::]:6789 connect error [ 302.933923][ T6547] ceph: No mds server is up or the cluster is laggy [ 304.605668][ T6555] loop3: detected capacity change from 0 to 1024 [ 304.750584][ T6562] loop2: detected capacity change from 0 to 1024 [ 304.762309][ T6562] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 304.771055][ T6562] EXT4-fs (loop2): orphan cleanup on readonly fs [ 304.778430][ T6562] EXT4-fs error (device loop2): ext4_free_blocks:6221: comm syz.2.600: Freeing blocks not in datazone - block = 0, count = 4096 [ 305.439584][ T6562] EXT4-fs (loop2): 1 orphan inode deleted [ 305.445434][ T6562] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 305.561037][ T6555] hfsplus: failed to load root directory [ 305.618140][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 308.438028][ T6605] siw: device registration error -23 [ 309.511329][ T4281] Bluetooth: Wrong link type (-22) [ 309.516708][ T4281] Bluetooth: hci1: link tx timeout [ 309.522361][ T4281] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 311.933819][ T4339] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 312.474045][ T4339] usb 5-1: device descriptor read/64, error -71 [ 312.777033][ T4339] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 313.153464][ T6659] loop1: detected capacity change from 0 to 40427 [ 313.163902][ T6659] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 313.171442][ T6659] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 313.179802][ T6659] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 313.318716][ T4339] usb 5-1: device descriptor read/64, error -71 [ 313.342734][ T6663] loop3: detected capacity change from 0 to 16 [ 313.361511][ T6663] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x8a67bcf9, 0x7bbbea8c expected [ 313.388116][ T4259] udevd[4259]: incorrect erofs checksum on /dev/loop3 [ 313.464588][ T4339] usb usb5-port1: attempt power cycle [ 314.683836][ T4339] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 314.785753][ T4339] usb 5-1: device descriptor read/8, error -71 [ 317.090023][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.100075][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.271072][ T6706] loop1: detected capacity change from 0 to 16 [ 318.279289][ T6706] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x8a67bcf9, 0x7bbbea8c expected [ 319.259583][ T6712] siw: device registration error -23 [ 319.573840][ T4346] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 319.798547][ T4346] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 320.511535][ T4346] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 320.520734][ T4346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.548502][ T6747] loop2: detected capacity change from 0 to 40427 [ 322.653196][ T6747] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 322.834520][ T6747] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 322.872698][ T6559] usb 2-1: USB disconnect, device number 3 [ 323.574093][ T6747] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 324.824396][ T6768] siw: device registration error -23 [ 325.168722][ T6771] loop1: detected capacity change from 0 to 1024 [ 325.377405][ T6774] loop3: detected capacity change from 0 to 1024 [ 325.454005][ T6774] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 325.465933][ T6774] EXT4-fs (loop3): orphan cleanup on readonly fs [ 325.473605][ T6774] EXT4-fs error (device loop3): ext4_free_blocks:6221: comm syz.3.658: Freeing blocks not in datazone - block = 0, count = 4096 [ 325.492849][ T6774] EXT4-fs (loop3): 1 orphan inode deleted [ 325.499104][ T6774] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 326.286926][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 327.675805][ T5048] hfsplus: b-tree write err: -5, ino 4 [ 327.818969][ T6786] netlink: 40 bytes leftover after parsing attributes in process `syz.2.662'. [ 327.862600][ T6789] loop1: detected capacity change from 0 to 256 [ 330.510042][ T6828] loop1: detected capacity change from 0 to 256 [ 330.770891][ T6833] loop1: detected capacity change from 0 to 1024 [ 330.878838][ T6833] hfsplus: failed to load root directory [ 332.449218][ T6846] loop3: detected capacity change from 0 to 64 [ 336.428941][ T125] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 336.741485][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.756362][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.772101][ T125] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 337.416073][ T125] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 337.439368][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.645078][ T125] usb 5-1: config 0 descriptor?? [ 338.078968][ T125] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 338.177498][ T125] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 338.543904][ T5568] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 339.315506][ T5568] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 339.332596][ T5568] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 339.361048][ T5568] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.385568][ T6902] loop3: detected capacity change from 0 to 64 [ 339.603968][ T5568] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 339.647510][ T6913] loop4: detected capacity change from 0 to 256 [ 341.039140][ T6559] usb 5-1: USB disconnect, device number 8 [ 341.842514][ T6942] loop4: detected capacity change from 0 to 1024 [ 341.891747][ T6942] hfsplus: failed to load root directory [ 342.047676][ T4257] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 342.885599][ T5568] usb 3-1: USB disconnect, device number 4 [ 343.608453][ T6962] loop4: detected capacity change from 0 to 256 [ 344.217036][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 344.708429][ T6975] siw: device registration error -23 [ 346.571535][ T6990] loop3: detected capacity change from 0 to 1024 [ 346.774382][ T6990] hfsplus: failed to load root directory [ 346.862696][ T7000] loop1: detected capacity change from 0 to 256 [ 349.405422][ T7027] siw: device registration error -23 [ 355.724492][ T7094] loop1: detected capacity change from 0 to 40427 [ 355.838488][ T7094] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 355.846138][ T7094] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 355.855101][ T7094] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 360.011909][ T7120] loop1: detected capacity change from 0 to 32768 [ 360.265203][ T7146] siw: device registration error -23 [ 360.414175][ T7120] XFS (loop1): Mounting V5 Filesystem [ 360.482836][ T7120] XFS (loop1): Ending clean mount [ 360.505107][ T7120] XFS (loop1): Quotacheck needed: Please wait. [ 360.636682][ T7120] XFS (loop1): Quotacheck: Done. [ 360.800817][ T4267] XFS (loop1): Unmounting Filesystem [ 362.837170][ T7175] loop4: detected capacity change from 0 to 1024 [ 363.218322][ T7181] IPv6: NLM_F_CREATE should be specified when creating new route [ 363.709975][ T4387] hfsplus: b-tree write err: -5, ino 4 [ 366.802283][ T7205] team0: Port device team_slave_0 removed [ 367.393968][ T7216] loop3: detected capacity change from 0 to 64 [ 367.709441][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'. [ 372.084455][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 372.093317][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 372.436251][ T7279] loop3: detected capacity change from 0 to 512 [ 373.002752][ T7279] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 373.011127][ T7279] System zones: 0-2, 18-18, 34-34 [ 373.017989][ T7279] EXT4-fs (loop3): orphan cleanup on readonly fs [ 373.029573][ T7279] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.802: bad orphan inode 13 [ 373.055627][ T7279] ext4_test_bit(bit=12, block=18) = 1 [ 373.061138][ T7279] is_bad_inode(inode)=0 [ 373.065666][ T7279] NEXT_ORPHAN(inode)=2130706432 [ 373.072489][ T7279] max_ino=32 [ 373.076002][ T7279] i_nlink=1 [ 373.204796][ T7279] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 374.196239][ T7302] netlink: 172 bytes leftover after parsing attributes in process `syz.3.802'. [ 376.981295][ T7320] loop4: detected capacity change from 0 to 64 [ 377.848375][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.819'. [ 377.857368][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.819'. [ 378.425156][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 378.534289][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.540678][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.853791][ T125] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 379.119330][ T125] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 379.390956][ T125] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 379.400823][ T125] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 379.414199][ T125] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 379.423330][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.478822][ T125] usbtmc 5-1:16.0: bulk endpoints not found [ 380.224557][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 382.380847][ T7373] loop1: detected capacity change from 0 to 64 [ 383.124220][ T125] usb 5-1: USB disconnect, device number 9 [ 383.617105][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'. [ 383.626089][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'. [ 386.316581][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'. [ 388.663819][ T5568] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 388.929542][ T5568] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 388.965406][ T5568] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 388.994728][ T5568] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 389.119899][ T5568] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 389.129673][ T5568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.149816][ T5568] usbtmc 1-1:16.0: bulk endpoints not found [ 390.631122][ T7451] device bridge1 entered promiscuous mode [ 393.223240][ T4339] usb 1-1: USB disconnect, device number 4 [ 396.413811][ T4346] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 396.700566][ T4339] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 396.730476][ T4346] usb 4-1: config 247 has an invalid interface number: 161 but max is 0 [ 396.818958][ T4346] usb 4-1: config 247 has no interface number 0 [ 396.921383][ T4346] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a3d, bcdDevice=9e.6d [ 396.989511][ T4339] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 397.068219][ T4339] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 397.104190][ T4346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.205052][ T4346] usb 4-1: Product: syz [ 397.212259][ T4339] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 397.271631][ T4346] usb 4-1: Manufacturer: syz [ 397.347793][ T4346] usb 4-1: SerialNumber: syz [ 397.409861][ T4339] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 397.533916][ T4339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.910133][ T4339] usbtmc 1-1:16.0: bulk endpoints not found [ 398.158080][ T4346] usb 4-1: USB disconnect, device number 4 [ 399.879565][ T7525] siw: device registration error -23 [ 399.956314][ T4339] usb 1-1: USB disconnect, device number 5 [ 405.413889][ T125] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 405.666579][ T125] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 405.683768][ T125] usb 5-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 405.695086][ T125] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.709591][ T125] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 405.719234][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.733543][ T125] usbtmc 5-1:16.0: bulk endpoints not found [ 406.722043][ T7598] loop3: detected capacity change from 0 to 1024 [ 406.736064][ T7598] hfsplus: failed to load root directory [ 406.799142][ T7583] loop1: detected capacity change from 0 to 32768 [ 406.864211][ T7583] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.887 (7583) [ 406.942576][ T7583] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 406.953090][ T7583] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 406.961967][ T7583] BTRFS info (device loop1): using free space tree [ 407.289352][ T7583] BTRFS info (device loop1): enabling ssd optimizations [ 407.391252][ T4267] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 407.802320][ T22] usb 5-1: USB disconnect, device number 10 [ 409.316389][ T22] libceph: connect (1)[c::]:6789 error -101 [ 409.349339][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 409.487474][ T22] libceph: connect (1)[c::]:6789 error -101 [ 409.493529][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 409.564353][ T7634] ceph: No mds server is up or the cluster is laggy [ 409.794266][ T4339] libceph: connect (1)[c::]:6789 error -101 [ 409.802834][ T4339] libceph: mon0 (1)[c::]:6789 connect error [ 414.044774][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.913'. [ 414.454359][ T7706] Bluetooth: MGMT ver 1.22 [ 414.939232][ T5567] libceph: connect (1)[c::]:6789 error -101 [ 414.949656][ T5567] libceph: mon0 (1)[c::]:6789 connect error [ 414.981499][ T7698] ceph: No mds server is up or the cluster is laggy [ 416.319947][ T7738] device bridge1 entered promiscuous mode [ 417.425209][ T7744] loop4: detected capacity change from 0 to 64 [ 420.369206][ T7801] loop2: detected capacity change from 0 to 1024 [ 420.585712][ T4339] libceph: connect (1)[c::]:6789 error -101 [ 420.592200][ T4339] libceph: mon0 (1)[c::]:6789 connect error [ 420.782729][ T7803] ceph: No mds server is up or the cluster is laggy [ 421.066539][ T4339] libceph: connect (1)[c::]:6789 error -101 [ 421.192495][ T4339] libceph: mon0 (1)[c::]:6789 connect error [ 421.407196][ T4446] hfsplus: b-tree write err: -5, ino 4 [ 421.844865][ T7818] loop2: detected capacity change from 0 to 32768 [ 421.862968][ T7818] (syz.2.946,7818,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 421.876666][ T7818] (syz.2.946,7818,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 422.089753][ T7818] JBD2: Ignoring recovery information on journal [ 423.007622][ T7818] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 425.237013][ T7847] ceph: No mds server is up or the cluster is laggy [ 425.244132][ T22] libceph: connect (1)[c::]:6789 error -101 [ 425.250149][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 425.334084][ T22] libceph: connect (1)[c::]:6789 error -101 [ 425.373519][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 425.551729][ T7859] ceph: No mds server is up or the cluster is laggy [ 425.806947][ T22] libceph: connect (1)[c::]:6789 error -101 [ 425.842460][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 425.917488][ T22] libceph: connect (1)[c::]:6789 error -101 [ 425.980278][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 426.586231][ T22] libceph: connect (1)[c::]:6789 error -101 [ 426.598623][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 426.701049][ T22] libceph: connect (1)[c::]:6789 error -101 [ 426.768570][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 427.204173][ T22] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 427.436116][ T22] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 427.458419][ T22] usb 5-1: config 0 has no interface number 0 [ 427.479309][ T22] usb 5-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 427.510770][ T22] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 427.556985][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.604038][ T22] usb 5-1: config 0 descriptor?? [ 427.805402][ T22] libceph: connect (1)[c::]:6789 error -101 [ 427.816531][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 427.841183][ T22] usb 5-1: USB disconnect, device number 11 [ 428.015827][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 428.524586][ T7883] siw: device registration error -23 [ 430.355910][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 430.364844][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 430.429990][ T7896] raw_sendmsg: syz.3.969 forgot to set AF_INET. Fix it! [ 430.483985][ T22] libceph: connect (1)[c::]:6789 error -101 [ 430.500525][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 430.528338][ T7906] ceph: No mds server is up or the cluster is laggy [ 431.058206][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'. [ 431.067327][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'. [ 434.484898][ T4325] libceph: connect (1)[c::]:6789 error -101 [ 434.503120][ T4325] libceph: mon0 (1)[c::]:6789 connect error [ 434.602362][ T7956] ceph: No mds server is up or the cluster is laggy [ 434.621547][ T4325] libceph: connect (1)[c::]:6789 error -101 [ 434.711000][ T4325] libceph: mon0 (1)[c::]:6789 connect error [ 435.545169][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'. [ 435.545220][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'. [ 435.916166][ T4281] Bluetooth: Wrong link type (-22) [ 435.922346][ T4281] Bluetooth: hci2: link tx timeout [ 435.929771][ T4281] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 435.938766][ T4281] Bluetooth: hci2: link tx timeout [ 435.944011][ T4281] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 437.231393][ T8004] loop2: detected capacity change from 0 to 256 [ 437.247182][ T8004] exfat: Deprecated parameter 'utf8' [ 437.268487][ T8004] exfat: Deprecated parameter 'utf8' [ 437.367266][ T8004] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 437.419109][ T5567] libceph: connect (1)[c::]:6789 error -101 [ 437.430323][ T5567] libceph: mon0 (1)[c::]:6789 connect error [ 437.483342][ T8002] ceph: No mds server is up or the cluster is laggy [ 438.126634][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 438.579003][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 438.588024][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 440.064865][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.071229][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.078793][ T4281] Bluetooth: Wrong link type (-22) [ 440.428574][ T8020] loop2: detected capacity change from 0 to 32768 [ 440.471979][ T8020] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1005 (8020) [ 440.853871][ T8020] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 440.913953][ T8020] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 440.949334][ T8020] BTRFS info (device loop2): force clearing of disk cache [ 441.088793][ T8020] BTRFS info (device loop2): enabling auto defrag [ 441.144021][ T8020] BTRFS info (device loop2): max_inline at 0 [ 441.150043][ T8020] BTRFS info (device loop2): enabling disk space caching [ 441.203916][ T8020] BTRFS info (device loop2): disk space caching is enabled [ 441.809957][ T8020] BTRFS error (device loop2): open_ctree failed: -12 [ 442.796423][ T8069] loop1: detected capacity change from 0 to 256 [ 442.877373][ T8069] exfat: Deprecated parameter 'utf8' [ 443.508823][ T8069] exfat: Deprecated parameter 'utf8' [ 445.811575][ T8069] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 447.102238][ T8089] siw: device registration error -23 [ 447.320737][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 447.329681][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 448.404156][ T8108] lo speed is unknown, defaulting to 1000 [ 450.114459][ T4346] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 450.395393][ T4346] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 451.022823][ T4346] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1600, setting to 64 [ 451.135958][ T4346] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 451.240893][ T4346] usb 5-1: string descriptor 0 read error: -71 [ 451.417142][ T4346] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.447163][ T4346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 452.169877][ T4346] usb 5-1: can't set config #1, error -71 [ 452.198561][ T4346] usb 5-1: USB disconnect, device number 12 [ 452.388144][ T8136] loop1: detected capacity change from 0 to 256 [ 452.484716][ T8136] exfat: Deprecated parameter 'utf8' [ 452.490121][ T8136] exfat: Deprecated parameter 'utf8' [ 452.623813][ T8136] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 452.932494][ T26] audit: type=1326 audit(1768963397.070:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345d79acb9 code=0x7ffc0000 [ 452.986725][ T8147] tipc: Started in network mode [ 453.018367][ T8147] tipc: Node identity 7f000001, cluster identity 4711 [ 453.028412][ T26] audit: type=1326 audit(1768963397.110:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f345d79acb9 code=0x7ffc0000 [ 453.070468][ T8147] tipc: Enabling of bearer rejected, failed to enable media [ 453.118606][ T26] audit: type=1326 audit(1768963397.110:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345d79acb9 code=0x7ffc0000 [ 453.202864][ T26] audit: type=1326 audit(1768963397.110:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f345d79acb9 code=0x7ffc0000 [ 453.228804][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 453.238202][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 453.398617][ T26] audit: type=1326 audit(1768963397.110:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345d79acb9 code=0x7ffc0000 [ 453.443925][ T26] audit: type=1326 audit(1768963397.110:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f345d79c547 code=0x7ffc0000 [ 453.502231][ T26] audit: type=1326 audit(1768963397.110:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f345d75b58e code=0x7ffc0000 [ 453.658482][ T26] audit: type=1326 audit(1768963397.110:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f345d75b58e code=0x7ffc0000 [ 453.793280][ T26] audit: type=1326 audit(1768963397.110:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f345d75b58e code=0x7ffc0000 [ 453.823962][ T26] audit: type=1326 audit(1768963397.110:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f345d75b58e code=0x7ffc0000 [ 455.340640][ T8170] loop1: detected capacity change from 0 to 64 [ 458.879023][ T8189] loop4: detected capacity change from 0 to 512 [ 458.901650][ T8189] EXT4-fs: Ignoring removed bh option [ 459.038208][ T8192] loop1: detected capacity change from 0 to 256 [ 459.057682][ T8189] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 459.140751][ T8189] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 459.937141][ T8192] exfat: Deprecated parameter 'utf8' [ 460.074039][ T8192] exfat: Deprecated parameter 'utf8' [ 460.358664][ T8205] siw: device registration error -23 [ 461.431353][ T8192] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 461.462691][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 462.321107][ T8227] loop2: detected capacity change from 0 to 256 [ 462.534484][ T8227] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 462.581418][ T8234] loop1: detected capacity change from 0 to 128 [ 462.604579][ T8234] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 462.671284][ T4261] udevd[4261]: incorrect ext4 checksum on /dev/loop1 [ 463.911081][ T8243] loop3: detected capacity change from 0 to 1024 [ 463.948418][ T8246] loop2: detected capacity change from 0 to 512 [ 463.981572][ T8246] EXT4-fs: Ignoring removed i_version option [ 464.053116][ T8246] EXT4-fs (loop2): orphan cleanup on readonly fs [ 464.383942][ T8246] EXT4-fs warning (device loop2): ext4_xattr_inode_get:506: inode #11: comm syz.2.1066: EA inode hash validation failed [ 464.414899][ T8246] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 464.507984][ T8251] loop4: detected capacity change from 0 to 64 [ 465.087642][ T8246] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.1066: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 465.243828][ T8246] EXT4-fs (loop2): Remounting filesystem read-only [ 465.268534][ T8246] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.2.1066: ea_inode dec ref err=-117 [ 465.294541][ T8246] EXT4-fs (loop2): 1 orphan inode deleted [ 465.300468][ T8246] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 466.588297][ T11] hfsplus: b-tree write err: -5, ino 4 [ 468.134663][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 469.565187][ T8297] loop2: detected capacity change from 0 to 512 [ 469.634204][ T8297] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 470.029152][ T8297] EXT4-fs (loop2): 1 orphan inode deleted [ 470.042258][ T8297] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 470.065904][ T8297] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.091200][ T4446] __quota_error: 18 callbacks suppressed [ 470.091235][ T4446] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 470.144063][ T4446] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:12: Failed to release dquot type 1 [ 471.051493][ T4446] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 471.143927][ T4446] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:12: Failed to release dquot type 1 [ 471.367270][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 474.995006][ T8336] loop2: detected capacity change from 0 to 128 [ 475.635334][ T8340] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1090'. [ 476.974366][ T8336] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 476.994578][ T8336] ext4 filesystem being mounted at /221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 478.274616][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 478.518614][ T8350] loop4: detected capacity change from 0 to 128 [ 480.823369][ T8350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 480.842148][ T8350] ext4 filesystem being mounted at /231/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 481.568766][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 482.010066][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'. [ 483.611769][ T8376] tipc: Started in network mode [ 483.618240][ T8376] tipc: Node identity ac14140f, cluster identity 4711 [ 483.625669][ T8376] tipc: New replicast peer: 255.255.255.255 [ 483.634308][ T8376] tipc: Enabled bearer , priority 10 [ 483.643998][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1095'. [ 484.755565][ T22] tipc: Node number set to 2886997007 [ 487.546747][ T8410] IPv6: NLM_F_CREATE should be specified when creating new route [ 487.909714][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 487.925212][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 487.934858][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 487.945907][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 487.971569][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 488.033975][ T8411] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 488.132012][ T8408] lo speed is unknown, defaulting to 1000 [ 488.315074][ T8408] chnl_net:caif_netlink_parms(): no params data found [ 488.895421][ T8408] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.902758][ T8408] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.911326][ T8408] device bridge_slave_0 entered promiscuous mode [ 488.956060][ T8408] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.169762][ T8408] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.942134][ T8445] siw: device registration error -23 [ 490.123908][ T4272] Bluetooth: hci5: command 0x0409 tx timeout [ 490.153631][ T8408] device bridge_slave_1 entered promiscuous mode [ 490.441424][ T8408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.545544][ T8408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.631750][ T8408] team0: Port device team_slave_0 added [ 490.773664][ T8456] loop4: detected capacity change from 0 to 128 [ 492.372662][ T4272] Bluetooth: hci5: command 0x041b tx timeout [ 492.546712][ T8408] team0: Port device team_slave_1 added [ 494.203150][ T8456] EXT4-fs: error -4 creating inode table initialization thread [ 494.211569][ T8456] EXT4-fs (loop4): mount failed [ 494.366811][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.386212][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.444403][ T4272] Bluetooth: hci5: command 0x040f tx timeout [ 494.550671][ T8465] loop4: detected capacity change from 0 to 1024 [ 494.557622][ T8408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.602745][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.613660][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.810872][ T8408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.522096][ T8476] loop2: detected capacity change from 0 to 64 [ 496.137950][ T2958] hfsplus: b-tree write err: -5, ino 4 [ 496.365562][ T8408] device hsr_slave_0 entered promiscuous mode [ 496.403189][ T8408] device hsr_slave_1 entered promiscuous mode [ 496.421540][ T8408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.456209][ T8408] Cannot create hsr debugfs directory [ 496.524595][ T4272] Bluetooth: hci5: command 0x0419 tx timeout [ 496.717871][ T8486] loop4: detected capacity change from 0 to 512 [ 496.852361][ T8486] EXT4-fs (loop4): 1 orphan inode deleted [ 496.915619][ T4387] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 496.933801][ T8486] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 496.945289][ T8492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1127'. [ 496.974041][ T4387] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:9: Failed to release dquot type 1 [ 496.980376][ T8486] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.112625][ T34] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.195814][ T8499] loop2: detected capacity change from 0 to 128 [ 498.346255][ T8499] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 498.356537][ T8499] ext4 filesystem being mounted at /234/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 499.378363][ T6378] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 499.439801][ T6378] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:17: Failed to release dquot type 1 [ 499.454197][ T34] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.533617][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 499.741507][ T34] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.995947][ T8408] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 500.730426][ T34] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.752310][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 500.934206][ T8408] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 500.967879][ T8408] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 501.017117][ T8408] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 501.170563][ T8519] loop2: detected capacity change from 0 to 64 [ 501.406211][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.412678][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.127329][ T8408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.201596][ T8408] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.291556][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 502.306750][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 502.386963][ T34] tipc: Left network mode [ 502.409578][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 502.457817][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 502.497980][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.505205][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.636179][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 502.695840][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 502.725861][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.733010][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.741259][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 502.751036][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 502.925412][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 503.153079][ T8546] loop2: detected capacity change from 0 to 256 [ 503.194763][ T8546] exfat: Deprecated parameter 'utf8' [ 503.219845][ T8546] exfat: Deprecated parameter 'utf8' [ 503.229096][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 503.257434][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 503.295059][ T8546] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 503.397468][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 503.417884][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 503.430930][ T5572] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 503.465585][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 503.493317][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 503.548200][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 503.620927][ T8408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 503.635624][ T5572] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 503.667925][ T8408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 503.675438][ T5572] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1600, setting to 64 [ 503.699536][ T5572] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 503.713161][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 503.736875][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 503.759425][ T5572] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.788533][ T5572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 503.816594][ T5572] usb 1-1: SerialNumber: syz [ 503.855676][ T8544] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 503.863321][ T8544] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 504.251824][ T8566] loop2: detected capacity change from 0 to 128 [ 506.967127][ T8566] EXT4-fs: error -4 creating inode table initialization thread [ 506.975096][ T8566] EXT4-fs (loop2): mount failed [ 508.493776][ T5572] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 509.073338][ T5572] usb 1-1: USB disconnect, device number 6 [ 509.395883][ T8579] loop4: detected capacity change from 0 to 64 [ 511.889964][ T8592] input: syz0 as /devices/virtual/input/input11 [ 512.010684][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 512.032135][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.147740][ T8408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.810681][ T8620] loop4: detected capacity change from 0 to 128 [ 514.010146][ T8620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 514.020468][ T8620] ext4 filesystem being mounted at /245/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 514.299332][ T8625] loop1: detected capacity change from 0 to 256 [ 514.427389][ T8625] exfat: Deprecated parameter 'namecase' [ 514.433126][ T8625] exfat: Unknown parameter 'zero_size_dir' [ 515.233910][ T5572] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 515.458293][ T5572] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 515.493748][ T5572] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1600, setting to 64 [ 515.550199][ T5572] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 515.618048][ T5572] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 515.620493][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 515.649518][ T5572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 515.668171][ T5572] usb 2-1: SerialNumber: syz [ 515.699902][ T8635] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 515.708323][ T34] device hsr_slave_0 left promiscuous mode [ 515.724194][ T8635] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 515.773995][ T34] device hsr_slave_1 left promiscuous mode [ 515.800479][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.829077][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.851058][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.175749][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.194543][ T34] device bridge_slave_1 left promiscuous mode [ 517.609340][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.074052][ T34] device bridge_slave_0 left promiscuous mode [ 518.191925][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.995844][ T5572] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 519.036859][ T5572] usb 2-1: USB disconnect, device number 4 [ 519.036960][ T34] device veth1_macvtap left promiscuous mode [ 519.055112][ T34] device veth0_macvtap left promiscuous mode [ 519.061484][ T34] device veth1_vlan left promiscuous mode [ 519.073096][ T34] device veth0_vlan left promiscuous mode [ 521.064097][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1162'. [ 526.058354][ T34] team0 (unregistering): Port device team_slave_1 removed [ 526.171152][ T34] team0 (unregistering): Port device team_slave_0 removed [ 526.307249][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.395850][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.911886][ T34] bond0 (unregistering): Released all slaves [ 527.264129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 527.281081][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 527.343226][ T8704] loop2: detected capacity change from 0 to 512 [ 527.357532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 527.393276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 527.463460][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 527.498461][ T8704] EXT4-fs (loop2): 1 orphan inode deleted [ 527.519815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 527.552687][ T4446] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 527.570716][ T8710] loop4: detected capacity change from 0 to 1024 [ 527.573965][ T8704] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 527.585491][ T4446] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:12: Failed to release dquot type 1 [ 527.600105][ T8408] device veth0_vlan entered promiscuous mode [ 527.623138][ T8704] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.642500][ T8408] device veth1_vlan entered promiscuous mode [ 527.787912][ T8408] device veth0_macvtap entered promiscuous mode [ 527.808411][ T8408] device veth1_macvtap entered promiscuous mode [ 528.744707][ T4944] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 528.788041][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 528.800361][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 528.810031][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 528.818847][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 528.831145][ T6378] hfsplus: b-tree write err: -5, ino 4 [ 528.844781][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 528.852822][ T4944] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:15: Failed to release dquot type 1 [ 528.899869][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 529.202913][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 529.571830][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.601773][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.612088][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.645208][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.667925][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.678797][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.690408][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.702811][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.758964][ T8726] loop4: detected capacity change from 0 to 128 [ 529.824979][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.996334][ T8726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 530.006886][ T8726] ext4 filesystem being mounted at /251/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 530.535985][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.219818][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.309512][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.409489][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.624777][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.635678][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.645604][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.684572][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.853512][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.874718][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 532.875405][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 532.875891][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 532.876356][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 532.883573][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 532.894725][ T8408] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.894763][ T8408] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.894790][ T8408] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.894816][ T8408] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.229262][ T4487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.308811][ T4487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.484081][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 533.523143][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1183'. [ 533.532777][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.563966][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.718550][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058194000: rx timeout, send abort [ 534.126397][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 543.948584][ T8874] device bridge1 entered promiscuous mode [ 543.963420][ T8880] loop4: detected capacity change from 0 to 1024 [ 544.652003][ T8877] loop2: detected capacity change from 0 to 1024 [ 545.195821][ T4487] hfsplus: b-tree write err: -5, ino 4 [ 545.446464][ T56] hfsplus: b-tree write err: -5, ino 4 [ 545.986814][ T8917] capability: warning: `syz.4.1194' uses 32-bit capabilities (legacy support in use) [ 546.828316][ T8928] loop4: detected capacity change from 0 to 128 [ 546.993909][ T8928] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 546.996499][ T8928] ext4 filesystem being mounted at /257/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 548.865470][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 548.938034][ T8903] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.948464][ T8903] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.576798][ T8943] loop1: detected capacity change from 0 to 1024 [ 550.498739][ T8903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.597727][ T8903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.693866][ T32] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 550.742390][ T8955] loop4: detected capacity change from 0 to 1024 [ 550.887741][ T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 550.940871][ T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1600, setting to 64 [ 550.958175][ T32] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 550.984864][ T32] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 551.009542][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 551.020426][ T32] usb 1-1: SerialNumber: syz [ 551.069808][ T8949] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 551.166616][ T8949] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 553.434673][ T4433] hfsplus: b-tree write err: -5, ino 4 [ 553.440651][ T4487] hfsplus: b-tree write err: -5, ino 4 [ 553.600957][ T32] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 553.632422][ T32] usb 1-1: USB disconnect, device number 7 [ 554.041646][ T8967] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 555.064058][ T8903] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.072993][ T8903] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.563593][ T8903] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.798553][ T8903] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.106192][ T8980] loop4: detected capacity change from 0 to 128 [ 557.329626][ T8980] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 557.347589][ T8980] ext4 filesystem being mounted at /262/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 558.985765][ T8974] lo speed is unknown, defaulting to 1000 [ 559.510745][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 561.173640][ T9015] loop2: detected capacity change from 0 to 1024 [ 562.321576][ T4487] hfsplus: b-tree write err: -5, ino 4 [ 562.901110][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.921085][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.813177][ T9048] loop4: detected capacity change from 0 to 2048 [ 565.009069][ T9048] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 565.024544][ T9048] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.230581][ T9072] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1225: bg 0: block 345: padding at end of block bitmap is not set [ 565.317223][ T9078] loop2: detected capacity change from 0 to 1024 [ 565.348322][ T9072] EXT4-fs (loop4): Remounting filesystem read-only [ 566.310273][ T4487] hfsplus: b-tree write err: -5, ino 4 [ 566.381572][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 566.390638][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 566.674173][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 568.231949][ T9120] loop4: detected capacity change from 0 to 512 [ 568.442433][ T9125] xt_policy: too many policy elements [ 568.451028][ T9125] rdma_op ffff88802f84a9f0 conn xmit_rdma 0000000000000000 [ 570.146364][ T9120] EXT4-fs (loop4): 1 orphan inode deleted [ 570.172634][ T9120] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 570.215922][ T9120] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.253921][ T5568] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 570.262008][ T4430] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 570.288121][ T4430] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:10: Failed to release dquot type 1 [ 570.326202][ T9135] loop1: detected capacity change from 0 to 1024 [ 570.459207][ T5568] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.495754][ T5568] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 571.404865][ T5568] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.588591][ T5568] usb 3-1: config 0 descriptor?? [ 571.602696][ T9134] sctp: failed to load transform for md5: -2 [ 571.674463][ T5568] usb 3-1: can't set config #0, error -71 [ 571.697202][ T5568] usb 3-1: USB disconnect, device number 5 [ 571.844004][ T56] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 571.895926][ T56] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:4: Failed to release dquot type 1 [ 572.084670][ T4387] hfsplus: b-tree write err: -5, ino 4 [ 572.355746][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 572.812624][ T9165] loop1: detected capacity change from 0 to 2048 [ 573.193129][ T9165] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 573.572272][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1251'. [ 573.581927][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1251'. [ 578.377974][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 584.002600][ T9259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1272'. [ 587.254760][ T9278] kAFS: No cell specified [ 587.759303][ T9278] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 588.513122][ T9298] loop5: detected capacity change from 0 to 128 [ 588.996388][ T9298] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 589.401054][ T9298] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 591.094395][ T8408] EXT4-fs (loop5): unmounting filesystem. [ 591.286027][ T4272] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 591.453046][ T9311] loop5: detected capacity change from 0 to 1024 [ 593.228152][ T9332] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1289'. [ 594.134023][ T9311] EXT4-fs: Ignoring removed i_version option [ 594.140530][ T9311] EXT4-fs: inline encryption not supported [ 594.151103][ T9311] EXT4-fs (loop5): Test dummy encryption mode enabled [ 594.162646][ T9311] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 596.236321][ T9352] fscrypt (loop5): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 596.462421][ T9362] loop1: detected capacity change from 0 to 1024 [ 596.674039][ T9364] loop2: detected capacity change from 0 to 64 [ 596.702260][ T9362] hfsplus: failed to load root directory [ 597.066375][ T8408] EXT4-fs (loop5): unmounting filesystem. [ 601.199591][ T9400] loop2: detected capacity change from 0 to 40427 [ 601.238900][ T9400] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x3ffff [ 601.289194][ T9421] loop1: detected capacity change from 0 to 512 [ 601.327016][ T8919] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 601.709696][ T9421] EXT4-fs (loop1): 1 orphan inode deleted [ 602.003413][ T9421] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 602.013653][ T4433] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 602.026459][ T9421] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.034468][ T4433] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:11: Failed to release dquot type 1 [ 602.924028][ T4433] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 602.934034][ T4433] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:11: Failed to release dquot type 1 [ 602.969538][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 605.230463][ T56] Bluetooth: hci1: Frame reassembly failed (-84) [ 605.842908][ T56] Bluetooth: hci1: Frame reassembly failed (-84) [ 607.244343][ T4281] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 607.251017][ T4272] Bluetooth: hci1: command 0x1003 tx timeout [ 607.503306][ T9464] loop2: detected capacity change from 0 to 1024 [ 607.986347][ T9469] loop1: detected capacity change from 0 to 40427 [ 608.149206][ T9469] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 608.157375][ T9469] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 608.165731][ T9469] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 608.294644][ T8919] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 608.307863][ T4944] hfsplus: b-tree write err: -5, ino 4 [ 609.480473][ T9484] loop1: detected capacity change from 0 to 512 [ 609.680102][ T9494] loop2: detected capacity change from 0 to 512 [ 609.700386][ T9494] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 609.827293][ T9495] delete_channel: no stack [ 609.836401][ T9495] loop5: detected capacity change from 0 to 22 [ 609.843330][ T9495] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 609.865449][ T9495] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 610.704444][ T9494] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 610.783607][ T9484] EXT4-fs (loop1): 1 orphan inode deleted [ 610.799863][ T4433] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 610.834519][ T9484] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 610.864098][ T9494] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.1321: Invalid inode table block 1 in block_group 0 [ 610.900605][ T4433] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:11: Failed to release dquot type 1 [ 610.977292][ T9484] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 611.014926][ T9494] EXT4-fs (loop2): get root inode failed [ 611.020627][ T9494] EXT4-fs (loop2): mount failed [ 611.779790][ T4387] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 611.890205][ T4387] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:9: Failed to release dquot type 1 [ 612.209449][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 612.957570][ T9525] loop2: detected capacity change from 0 to 256 [ 612.975814][ T9525] FAT-fs (loop2): Directory bread(block 64) failed [ 612.982384][ T9525] FAT-fs (loop2): Directory bread(block 65) failed [ 613.458680][ T9525] FAT-fs (loop2): Directory bread(block 66) failed [ 613.513866][ T9525] FAT-fs (loop2): Directory bread(block 67) failed [ 613.520653][ T9525] FAT-fs (loop2): Directory bread(block 68) failed [ 613.660417][ T9525] FAT-fs (loop2): Directory bread(block 69) failed [ 613.671013][ T9525] FAT-fs (loop2): Directory bread(block 70) failed [ 613.677899][ T9525] FAT-fs (loop2): Directory bread(block 71) failed [ 613.692958][ T9525] FAT-fs (loop2): Directory bread(block 72) failed [ 613.700220][ T9525] FAT-fs (loop2): Directory bread(block 73) failed [ 617.107481][ T4272] Bluetooth: hci5: link tx timeout [ 617.120123][ T4272] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 617.135746][ T4272] Bluetooth: hci5: link tx timeout [ 617.142422][ T4272] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 618.749119][ T9577] batman_adv: batadv0: Adding interface: dummy0 [ 618.814637][ T9577] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.873837][ T9577] batman_adv: batadv0: Interface activated: dummy0 [ 619.340139][ T4272] Bluetooth: hci5: command 0x0406 tx timeout [ 621.758123][ T4272] Bluetooth: hci5: command 0x0406 tx timeout [ 622.596122][ T9619] loop1: detected capacity change from 0 to 4096 [ 622.697605][ T9619] EXT4-fs (loop1): Test dummy encryption mode enabled [ 622.727456][ T9619] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 622.736057][ T9619] System zones: 0-5 [ 622.763328][ T9627] loop5: detected capacity change from 0 to 128 [ 622.783203][ T9619] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 622.851335][ T9627] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 622.925979][ T9614] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 624.314587][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.386021][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.703898][ T9622] loop4: detected capacity change from 0 to 32768 [ 624.920309][ T9622] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1351 (9622) [ 624.990500][ T9650] loop2: detected capacity change from 0 to 40427 [ 625.027069][ T9622] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 625.048730][ T9650] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 625.057077][ T9650] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 625.065443][ T9650] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value [ 625.084145][ T9622] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 625.101687][ T9622] BTRFS info (device loop4): using free space tree [ 625.117021][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 625.664549][ T9622] BTRFS info (device loop4): enabling ssd optimizations [ 626.424155][ T4278] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 629.018703][ T9713] loop5: detected capacity change from 0 to 512 [ 629.209621][ T9713] EXT4-fs (loop5): 1 orphan inode deleted [ 629.223961][ T9713] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 629.225108][ T9713] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.690357][ T9732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1367'. [ 630.697559][ T6378] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 630.785245][ T6378] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:17: Failed to release dquot type 1 [ 631.052336][ T6378] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 631.052405][ T6378] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:17: Failed to release dquot type 1 [ 631.122848][ T8408] EXT4-fs (loop5): unmounting filesystem. [ 631.363110][ T9742] loop5: detected capacity change from 0 to 2048 [ 631.426098][ T9742] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 632.287768][ T5569] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 632.433881][ T5569] usb 3-1: device descriptor read/64, error -71 [ 632.803870][ T5569] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 632.963881][ T5569] usb 3-1: device descriptor read/64, error -71 [ 633.084029][ T5569] usb usb3-port1: attempt power cycle [ 633.493821][ T5569] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 633.524997][ T5569] usb 3-1: device descriptor read/8, error -71 [ 633.657334][ T8408] EXT4-fs (loop5): unmounting filesystem. [ 633.748723][ T9749] tty tty1: ldisc open failed (-12), clearing slot 0 [ 633.842477][ T9761] loop5: detected capacity change from 0 to 1024 [ 633.880402][ T5569] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 633.924553][ T5569] usb 3-1: device descriptor read/8, error -71 [ 634.103535][ T9760] IPv6: NLM_F_CREATE should be specified when creating new route [ 634.405574][ T5569] usb usb3-port1: unable to enumerate USB device [ 634.531507][ T56] hfsplus: b-tree write err: -5, ino 4 [ 635.469263][ T9772] loop1: detected capacity change from 0 to 40427 [ 635.586973][ T9773] loop2: detected capacity change from 0 to 64 [ 636.549985][ T9785] loop5: detected capacity change from 0 to 512 [ 636.874089][ T9785] EXT4-fs (loop5): 1 orphan inode deleted [ 637.012594][ T9785] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 637.271037][ T9785] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.494169][ T34] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 637.539470][ T34] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:2: Failed to release dquot type 1 [ 637.807289][ T9801] loop2: detected capacity change from 0 to 2048 [ 638.134615][ T4944] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 638.159747][ T9801] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 638.163926][ T4944] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:15: Failed to release dquot type 1 [ 638.181691][ T8408] EXT4-fs (loop5): unmounting filesystem. [ 638.442458][ T32] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 638.644088][ T32] usb 5-1: device descriptor read/64, error -71 [ 639.553256][ T32] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 639.713842][ T32] usb 5-1: device descriptor read/64, error -71 [ 639.844440][ T32] usb usb5-port1: attempt power cycle [ 639.859929][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 640.254076][ T32] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 640.293196][ T32] usb 5-1: device descriptor read/8, error -71 [ 640.563983][ T32] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 640.607959][ T32] usb 5-1: device descriptor read/8, error -71 [ 640.726929][ T32] usb usb5-port1: unable to enumerate USB device [ 641.061469][ T9844] loop2: detected capacity change from 0 to 64 [ 642.003138][ T9847] kAFS: No cell specified [ 643.774942][ T9855] loop4: detected capacity change from 0 to 512 [ 643.882101][ T9855] EXT4-fs (loop4): 1 orphan inode deleted [ 643.899192][ T4487] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 643.935130][ T9855] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 643.951438][ T4487] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:14: Failed to release dquot type 1 [ 644.018756][ T9855] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.944198][ T56] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 644.961862][ T56] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:4: Failed to release dquot type 1 [ 645.050523][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 646.518757][ T4403] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 646.714678][ T4403] usb 1-1: device descriptor read/64, error -71 [ 647.034121][ T4403] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 647.224078][ T4403] usb 1-1: device descriptor read/64, error -71 [ 647.364507][ T4403] usb usb1-port1: attempt power cycle [ 647.530866][ T9903] kAFS: No cell specified [ 647.813941][ T4403] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 647.884671][ T4403] usb 1-1: device descriptor read/8, error -71 [ 648.112840][ T9904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.184032][ T4403] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 648.250148][ T4403] usb 1-1: device descriptor read/8, error -71 [ 648.474401][ T4403] usb usb1-port1: unable to enumerate USB device [ 648.526537][ C1] llc_conn_state_process: llc_conn_service failed [ 648.814692][ T9904] bond0: (slave rose0): Enslaving as an active interface with an up link [ 648.869030][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 649.039396][ T9914] loop2: detected capacity change from 0 to 512 [ 649.187583][ T9914] EXT4-fs (loop2): 1 orphan inode deleted [ 649.193396][ T9914] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 649.273581][ T4487] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 649.343850][ T4487] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:14: Failed to release dquot type 1 [ 649.422525][ T9914] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.844543][ T34] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 650.902263][ T34] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:2: Failed to release dquot type 1 [ 651.169013][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 652.061491][ T9945] loop5: detected capacity change from 0 to 2048 [ 652.217797][ T9945] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 652.530482][ T9969] kAFS: No cell specified [ 653.957469][ T8408] EXT4-fs (loop5): unmounting filesystem. [ 654.204912][ T9979] loop2: detected capacity change from 0 to 128 [ 655.997056][ T9982] siw: device registration error -23 [ 656.805044][ T9979] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 656.863761][ T9979] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 657.283851][ T8574] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 657.305959][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 657.454050][ T8574] usb 6-1: device descriptor read/64, error -71 [ 657.884117][ T8574] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 658.213959][ T8574] usb 6-1: device descriptor read/64, error -71 [ 658.346359][T10007] loop2: detected capacity change from 0 to 512 [ 658.354070][ T8574] usb usb6-port1: attempt power cycle [ 658.440334][T10007] EXT4-fs (loop2): 1 orphan inode deleted [ 658.472979][T10007] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 658.553459][T10017] kAFS: No cell specified [ 658.570144][T10007] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.684371][ T6378] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 658.793906][ T8574] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 658.806011][ T6378] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:17: Failed to release dquot type 1 [ 658.875998][ T8574] usb 6-1: device descriptor read/8, error -71 [ 659.364057][ T8574] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 659.677948][ T56] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 659.702875][ T56] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:4: Failed to release dquot type 1 [ 659.906769][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 660.291756][ T8574] usb 6-1: device descriptor read/8, error -71 [ 660.309491][T10027] loop4: detected capacity change from 0 to 1764 [ 660.423962][ T8574] usb usb6-port1: unable to enumerate USB device [ 662.073415][T10052] loop1: detected capacity change from 0 to 512 [ 662.227879][T10055] siw: device registration error -23 [ 662.466442][T10052] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 662.625119][T10052] EXT4-fs (loop1): shut down requested (0) [ 662.766789][T10061] loop4: detected capacity change from 0 to 64 [ 663.753068][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 665.421360][T10075] loop1: detected capacity change from 0 to 512 [ 665.546983][T10075] EXT4-fs (loop1): 1 orphan inode deleted [ 665.563947][T10075] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 665.576907][ T4433] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 665.589515][ T4433] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:11: Failed to release dquot type 1 [ 665.715342][T10075] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.915690][ T8574] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 666.503271][ T8574] usb 6-1: device descriptor read/64, error -71 [ 666.684330][ T4430] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 666.723025][ T4430] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:10: Failed to release dquot type 1 [ 666.763190][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 666.882302][ T8574] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 668.458642][T10113] loop1: detected capacity change from 0 to 40427 [ 668.471578][ T8574] usb 6-1: device descriptor read/64, error -71 [ 668.549873][T10113] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 668.557580][T10113] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 668.566682][T10113] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 668.835763][ T8574] usb usb6-port1: attempt power cycle [ 671.639173][T10145] loop2: detected capacity change from 0 to 512 [ 671.689989][T10145] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 671.729576][T10145] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 671.818702][T10145] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.1465: Invalid inode table block 1 in block_group 0 [ 671.887835][T10145] EXT4-fs (loop2): get root inode failed [ 671.900326][T10145] EXT4-fs (loop2): mount failed [ 672.119279][T10154] loop1: detected capacity change from 0 to 512 [ 673.612308][T10163] loop2: detected capacity change from 0 to 512 [ 673.799807][T10163] EXT4-fs (loop2): 1 orphan inode deleted [ 673.844912][T10163] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 673.904732][ T4487] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 673.914959][T10163] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.926513][ T4487] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:14: Failed to release dquot type 1 [ 674.819075][ T4430] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 674.859551][ T4430] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:10: Failed to release dquot type 1 [ 674.923667][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 676.823873][ T4403] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 677.043847][ T4403] usb 3-1: device descriptor read/64, error -71 [ 678.507274][T10196] loop4: detected capacity change from 0 to 40427 [ 678.664062][T10196] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0) [ 678.671693][T10196] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 678.680869][T10196] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 679.364480][ T4403] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 680.103886][ T4403] usb 3-1: device descriptor read/64, error -71 [ 680.233972][ T4403] usb usb3-port1: attempt power cycle [ 681.055083][T10226] loop5: detected capacity change from 0 to 128 [ 684.003395][T10226] EXT4-fs: failed to create workqueue [ 684.008880][T10226] EXT4-fs (loop5): mount failed [ 685.744652][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.751271][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.993182][T10247] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 687.134073][ T5568] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 687.683806][ T5568] usb 2-1: Using ep0 maxpacket: 32 [ 687.690552][ T5568] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.707116][ T5568] usb 2-1: config 0 has no interfaces? [ 687.743502][ T5568] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 688.004078][ T5568] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 688.012312][ T5568] usb 2-1: Product: syz [ 688.141923][ T5568] usb 2-1: Manufacturer: syz [ 688.275613][ T4272] Bluetooth: Wrong link type (-22) [ 688.790005][ T5568] usb 2-1: SerialNumber: syz [ 688.797340][ T5568] usb 2-1: config 0 descriptor?? [ 689.242434][T10263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.546701][T10263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.617067][ T7] usb 2-1: USB disconnect, device number 5 [ 693.104348][T10308] loop5: detected capacity change from 0 to 40427 [ 693.598797][T10308] F2FS-fs (loop5): Wrong segment_count / block_count (31 > 0) [ 693.606420][T10308] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 693.615017][T10308] F2FS-fs (loop5): Unrecognized mount option "age_extent_cache" or missing value [ 699.910710][T10365] loop5: detected capacity change from 0 to 40427 [ 699.921820][T10365] F2FS-fs (loop5): Wrong segment_count / block_count (31 > 0) [ 699.929488][T10365] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 699.938291][T10365] F2FS-fs (loop5): Unrecognized mount option "age_extent_cache" or missing value [ 700.606098][T10376] kAFS: No cell specified [ 700.998461][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 701.025951][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 701.040816][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 701.061221][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 701.079281][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 701.096639][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 701.853493][T10377] lo speed is unknown, defaulting to 1000 [ 703.165773][ T4272] Bluetooth: hci1: command 0x0409 tx timeout [ 703.855361][T10377] chnl_net:caif_netlink_parms(): no params data found [ 704.857873][T10377] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.908278][T10377] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.925571][T10377] device bridge_slave_0 entered promiscuous mode [ 704.941596][T10377] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.109447][T10377] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.465374][ T4272] Bluetooth: hci1: command 0x041b tx timeout [ 705.491420][T10377] device bridge_slave_1 entered promiscuous mode [ 705.613158][T10377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.614065][T10428] loop2: detected capacity change from 0 to 256 [ 705.634374][T10377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.662001][T10428] exFAT-fs (loop2): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 705.677311][T10377] team0: Port device team_slave_0 added [ 705.687496][T10377] team0: Port device team_slave_1 added [ 705.919020][T10428] netlink: 'syz.2.1530': attribute type 9 has an invalid length. [ 706.006420][T10431] kAFS: No cell specified [ 706.502402][T10377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.628637][T10377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.655492][ C0] vkms_vblank_simulate: vblank timer overrun [ 706.730177][T10433] loop5: detected capacity change from 0 to 512 [ 707.260881][T10377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.263977][T10433] EXT4-fs (loop5): 1 orphan inode deleted [ 707.273829][T10377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.284629][T10377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.311540][T10377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.327307][ T4430] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 707.338659][ T4430] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:10: Failed to release dquot type 1 [ 707.411173][T10433] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 707.429055][T10433] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 707.491661][ T4272] Bluetooth: hci1: command 0x040f tx timeout [ 707.524852][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.990704][ T4272] Bluetooth: Wrong link type (-22) [ 708.234003][ T4272] Bluetooth: hci4: link tx timeout [ 708.240096][ T4272] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 708.259200][T10377] device hsr_slave_0 entered promiscuous mode [ 708.296542][T10377] device hsr_slave_1 entered promiscuous mode [ 708.324329][T10377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 708.398640][T10377] Cannot create hsr debugfs directory [ 708.428891][ T4944] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 708.493840][ T4944] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:15: Failed to release dquot type 1 [ 708.517667][ T8408] EXT4-fs (loop5): unmounting filesystem. [ 708.525970][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.573862][ T5569] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 708.772920][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.845816][ T5569] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 708.869000][ T5569] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1600, setting to 64 [ 709.503844][ T5569] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 709.535154][ T5569] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 709.571254][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 709.603156][ T5569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 709.636653][ T5569] usb 3-1: SerialNumber: syz [ 709.809177][T10439] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 709.824716][T10439] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 709.847285][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.592826][ T5569] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 710.634643][ T5569] usb 3-1: USB disconnect, device number 13 [ 710.751322][T10377] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 710.824833][T10377] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 711.197674][T10377] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 711.461889][T10377] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 711.854178][ T56] tipc: Disabling bearer [ 711.868719][ T56] tipc: Left network mode [ 711.972003][T10483] loop5: detected capacity change from 0 to 128 [ 712.241249][T10483] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 712.252655][T10483] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 714.310736][ T8408] EXT4-fs (loop5): unmounting filesystem. [ 714.851281][T10497] loop1: detected capacity change from 0 to 512 [ 714.938490][T10377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.747555][T10497] EXT4-fs (loop1): 1 orphan inode deleted [ 715.764525][ T6378] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 715.827062][T10497] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 715.904261][ T6378] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:17: Failed to release dquot type 1 [ 715.948353][T10497] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.614862][ T4944] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 716.657557][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 716.690819][ T4944] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:15: Failed to release dquot type 1 [ 716.786074][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 716.949929][T10377] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.161829][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 717.184989][T10510] lo speed is unknown, defaulting to 1000 [ 717.368452][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 717.404355][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 717.461938][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.469599][ T6378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.516260][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 717.804186][T10544] loop1: detected capacity change from 0 to 128 [ 718.894982][T10544] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 718.904578][T10544] ext4 filesystem being mounted at /313/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 720.831214][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 720.845801][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 720.856111][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 720.899208][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.908375][ T6378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.151140][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 721.306218][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 721.870223][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 722.329987][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 722.339561][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 722.443855][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 722.452829][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 722.712924][T10568] loop5: detected capacity change from 0 to 128 [ 722.905890][T10568] hpfs: filesystem error: invalid number of hotfixes: 256, used: 2066844985; already mounted read-only [ 722.918014][T10568] hpfs: filesystem error: improperly stopped [ 722.924350][T10568] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 722.932161][T10568] hpfs: You really don't want any checks? You are crazy... [ 722.941694][T10568] hpfs: hpfs_map_sector(): read error [ 722.947201][T10568] hpfs: code page support is disabled [ 723.227668][T10568] ================================================================== [ 723.235877][T10568] BUG: KASAN: use-after-free in strcmp+0x67/0xb0 [ 723.243324][T10568] Read of size 1 at addr ffff88805105c000 by task syz.5.1558/10568 [ 723.252111][T10568] [ 723.254471][T10568] CPU: 1 PID: 10568 Comm: syz.5.1558 Not tainted syzkaller #0 [ 723.262119][T10568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 723.263360][T10569] loop1: detected capacity change from 0 to 512 [ 723.272199][T10568] Call Trace: [ 723.272220][T10568] [ 723.272227][T10568] dump_stack_lvl+0x188/0x24e [ 723.272262][T10568] ? read_lock_is_recursive+0x10/0x10 [ 723.272286][T10568] ? show_regs_print_info+0x12/0x12 [ 723.272308][T10568] ? load_image+0x400/0x400 [ 723.272328][T10568] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 723.272349][T10568] ? __virt_addr_valid+0x188/0x540 [ 723.272375][T10568] ? __virt_addr_valid+0x465/0x540 [ 723.272398][T10568] ? strcmp+0x67/0xb0 [ 723.272414][T10568] print_report+0xa8/0x210 [ 723.272433][T10568] kasan_report+0x10b/0x140 [ 723.334133][T10568] ? strcmp+0x67/0xb0 [ 723.338138][T10568] strcmp+0x67/0xb0 [ 723.342030][T10568] hpfs_get_ea+0x132/0xde0 [ 723.346730][T10568] ? out_of_line_wait_on_bit_lock+0x138/0x190 [ 723.352910][T10568] ? hpfs_read_ea+0xc20/0xc20 [ 723.357637][T10568] ? bit_waitqueue+0x30/0x30 [ 723.362248][T10568] ? __bread_gfp+0x16c/0x330 [ 723.366852][T10568] ? hpfs_map_sector+0x14a/0x2e0 [ 723.371933][T10568] ? hpfs_map_fnode+0x27a/0x690 [ 723.376904][T10568] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 723.382927][T10568] hpfs_read_inode+0x1a3/0x1050 [ 723.387967][T10568] ? hpfs_init_inode+0x2c0/0x2c0 [ 723.392953][T10568] ? lockdep_hardirqs_on+0x94/0x140 [ 723.398786][T10568] ? hpfs_init_inode+0x1cc/0x2c0 [ 723.403757][T10568] hpfs_fill_super+0x135a/0x1fd0 [ 723.408716][T10568] ? hpfs_mount+0x40/0x40 [ 723.413065][T10568] ? snprintf+0xe5/0x140 [ 723.417683][T10568] ? set_blocksize+0x1d0/0x470 [ 723.422741][T10568] ? sb_set_blocksize+0xa5/0xe0 [ 723.427710][T10568] mount_bdev+0x287/0x3c0 [ 723.432051][T10568] ? hpfs_mount+0x40/0x40 [ 723.436377][T10568] legacy_get_tree+0xe6/0x180 [ 723.441055][T10568] ? hpfs_ioctl+0x260/0x260 [ 723.445619][T10568] vfs_get_tree+0x88/0x270 [ 723.450117][T10568] do_new_mount+0x24a/0xa40 [ 723.454728][T10568] __se_sys_mount+0x2e3/0x3d0 [ 723.459587][T10568] ? __x64_sys_mount+0xc0/0xc0 [ 723.464365][T10568] ? lockdep_hardirqs_on+0x94/0x140 [ 723.469661][T10568] ? __x64_sys_mount+0x1c/0xc0 [ 723.474420][T10568] do_syscall_64+0x4c/0xa0 [ 723.478838][T10568] ? clear_bhb_loop+0x60/0xb0 [ 723.483512][T10568] ? clear_bhb_loop+0x60/0xb0 [ 723.488272][T10568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 723.494175][T10568] RIP: 0033:0x7fb19659bf4a [ 723.498597][T10568] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.518549][T10568] RSP: 002b:00007fb197485e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 723.526972][T10568] RAX: ffffffffffffffda RBX: 00007fb197485ee0 RCX: 00007fb19659bf4a [ 723.535238][T10568] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007fb197485ea0 [ 723.543341][T10568] RBP: 000020000000a000 R08: 00007fb197485ee0 R09: 0000000003200041 [ 723.551402][T10568] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 723.559409][T10568] R13: 00007fb197485ea0 R14: 0000000000009e18 R15: 0000200000000400 [ 723.567394][T10568] [ 723.570418][T10568] [ 723.572736][T10568] The buggy address belongs to the physical page: [ 723.579146][T10568] page:ffffea0001441700 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x1 pfn:0x5105c [ 723.589557][T10568] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 723.596679][T10568] raw: 00fff00000000000 ffffea0001287708 ffffea00013fcf08 0000000000000000 [ 723.605277][T10568] raw: 0000000000000001 0000000000000002 00000000ffffff7f 0000000000000000 [ 723.613863][T10568] page dumped because: kasan: bad access detected [ 723.620271][T10568] page_owner tracks the page as freed [ 723.625639][T10568] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 10473, tgid 10470 (syz.1.1541), ts 711651626064, free_ts 712504536418 [ 723.643957][T10568] post_alloc_hook+0x173/0x1a0 [ 723.648729][T10568] get_page_from_freelist+0x1a1e/0x1ab0 [ 723.654294][T10568] __alloc_pages+0x1ec/0x4f0 [ 723.659008][T10568] __folio_alloc+0xe/0x30 [ 723.663473][T10568] vma_alloc_folio+0x4a3/0x900 [ 723.668278][T10568] shmem_alloc_and_acct_folio+0x463/0xbc0 [ 723.674099][T10568] shmem_get_folio_gfp+0x1361/0x3400 [ 723.679469][T10568] shmem_fault+0x1b6/0x780 [ 723.683970][T10568] __do_fault+0x13b/0x4e0 [ 723.688378][T10568] handle_mm_fault+0x2407/0x3ee0 [ 723.693541][T10568] __get_user_pages+0x40d/0xec0 [ 723.698738][T10568] populate_vma_page_range+0x214/0x2b0 [ 723.704300][T10568] __mm_populate+0x25c/0x380 [ 723.708998][T10568] vm_mmap_pgoff+0x212/0x2d0 [ 723.713828][T10568] do_syscall_64+0x4c/0xa0 [ 723.718351][T10568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 723.724258][T10568] page last free stack trace: [ 723.728921][T10568] free_unref_page_prepare+0x8b4/0x9a0 [ 723.734378][T10568] free_unref_page_list+0xbb/0x8e0 [ 723.739661][T10568] release_pages+0x1fa6/0x2220 [ 723.744506][T10568] __pagevec_release+0x6d/0xe0 [ 723.749318][T10568] shmem_undo_range+0x7c2/0x20c0 [ 723.754264][T10568] shmem_evict_inode+0x25b/0xa80 [ 723.759301][T10568] evict+0x4c9/0x8d0 [ 723.763212][T10568] __dentry_kill+0x431/0x650 [ 723.767994][T10568] dentry_kill+0xb8/0x290 [ 723.772438][T10568] dput+0xfa/0x1d0 [ 723.776367][T10568] __fput+0x5e0/0x920 [ 723.780535][T10568] task_work_run+0x1d0/0x260 [ 723.785226][T10568] do_exit+0x982/0x2480 [ 723.789631][T10568] do_group_exit+0x217/0x2d0 [ 723.794238][T10568] get_signal+0x1272/0x1350 [ 723.798838][T10568] arch_do_signal_or_restart+0xc4/0x1350 [ 723.804484][T10568] [ 723.806892][T10568] Memory state around the buggy address: [ 723.812633][T10568] ffff88805105bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 723.820699][T10568] ffff88805105bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 723.828947][T10568] >ffff88805105c000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 723.837001][T10568] ^ [ 723.841059][T10568] ffff88805105c080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 723.849109][T10568] ffff88805105c100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 723.857155][T10568] ================================================================== [ 723.865364][T10568] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 723.872573][T10568] CPU: 1 PID: 10568 Comm: syz.5.1558 Not tainted syzkaller #0 [ 723.880136][T10568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 723.890208][T10568] Call Trace: [ 723.893504][T10568] [ 723.896457][T10568] dump_stack_lvl+0x188/0x24e [ 723.901173][T10568] ? memcpy+0x3c/0x60 [ 723.905185][T10568] ? show_regs_print_info+0x12/0x12 [ 723.910414][T10568] ? load_image+0x400/0x400 [ 723.914946][T10568] panic+0x2e5/0x730 [ 723.918890][T10568] ? bpf_jit_dump+0xd0/0xd0 [ 723.923429][T10568] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 723.929439][T10568] ? _raw_spin_unlock+0x40/0x40 [ 723.934331][T10568] check_panic_on_warn+0x80/0xa0 [ 723.939346][T10568] ? strcmp+0x67/0xb0 [ 723.943350][T10568] end_report+0x66/0x110 [ 723.947689][T10568] kasan_report+0x118/0x140 [ 723.952199][T10568] ? strcmp+0x67/0xb0 [ 723.956195][T10568] strcmp+0x67/0xb0 [ 723.960013][T10568] hpfs_get_ea+0x132/0xde0 [ 723.964526][T10568] ? out_of_line_wait_on_bit_lock+0x138/0x190 [ 723.970611][T10568] ? hpfs_read_ea+0xc20/0xc20 [ 723.975307][T10568] ? bit_waitqueue+0x30/0x30 [ 723.979914][T10568] ? __bread_gfp+0x16c/0x330 [ 723.984507][T10568] ? hpfs_map_sector+0x14a/0x2e0 [ 723.989574][T10568] ? hpfs_map_fnode+0x27a/0x690 [ 723.994437][T10568] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 724.000424][T10568] hpfs_read_inode+0x1a3/0x1050 [ 724.005294][T10568] ? hpfs_init_inode+0x2c0/0x2c0 [ 724.010856][T10568] ? lockdep_hardirqs_on+0x94/0x140 [ 724.016232][T10568] ? hpfs_init_inode+0x1cc/0x2c0 [ 724.021348][T10568] hpfs_fill_super+0x135a/0x1fd0 [ 724.026317][T10568] ? hpfs_mount+0x40/0x40 [ 724.030642][T10568] ? snprintf+0xe5/0x140 [ 724.034887][T10568] ? set_blocksize+0x1d0/0x470 [ 724.039649][T10568] ? sb_set_blocksize+0xa5/0xe0 [ 724.044594][T10568] mount_bdev+0x287/0x3c0 [ 724.049039][T10568] ? hpfs_mount+0x40/0x40 [ 724.053369][T10568] legacy_get_tree+0xe6/0x180 [ 724.058044][T10568] ? hpfs_ioctl+0x260/0x260 [ 724.063049][T10568] vfs_get_tree+0x88/0x270 [ 724.067512][T10568] do_new_mount+0x24a/0xa40 [ 724.072307][T10568] __se_sys_mount+0x2e3/0x3d0 [ 724.077089][T10568] ? __x64_sys_mount+0xc0/0xc0 [ 724.081940][T10568] ? lockdep_hardirqs_on+0x94/0x140 [ 724.087335][T10568] ? __x64_sys_mount+0x1c/0xc0 [ 724.092221][T10568] do_syscall_64+0x4c/0xa0 [ 724.096945][T10568] ? clear_bhb_loop+0x60/0xb0 [ 724.101892][T10568] ? clear_bhb_loop+0x60/0xb0 [ 724.106661][T10568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 724.112772][T10568] RIP: 0033:0x7fb19659bf4a [ 724.117195][T10568] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.137691][T10568] RSP: 002b:00007fb197485e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 724.146650][T10568] RAX: ffffffffffffffda RBX: 00007fb197485ee0 RCX: 00007fb19659bf4a [ 724.154825][T10568] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007fb197485ea0 [ 724.163671][T10568] RBP: 000020000000a000 R08: 00007fb197485ee0 R09: 0000000003200041 [ 724.173662][T10568] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 724.182692][T10568] R13: 00007fb197485ea0 R14: 0000000000009e18 R15: 0000200000000400 [ 724.192063][T10568] [ 724.195741][T10568] Kernel Offset: disabled [ 724.200147][T10568] Rebooting in 86400 seconds..