last executing test programs: 13m2.178972743s ago: executing program 32 (id=236): write(0xffffffffffffffff, &(0x7f00000000c0)='$', 0x1) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x400203, @private0, 0x401}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000640)='c', 0x1}], 0x1}}], 0x1, 0x40) shutdown(r0, 0x1) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) 12m49.377316224s ago: executing program 33 (id=315): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40043, 0x142) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000006400)={0x50, 0x0, 0xffffffffffff2573, {0x7, 0x29, 0x1, 0xa748a1016cff1f3b, 0xdd1, 0x7, 0xb, 0x800, 0x0, 0x0, 0x182, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x28, {0x8, 0xffffffff, 0x0, {0x5, 0x1, 0x8, 0x8, 0xa, 0xffffffffffffff0c, 0x9, 0x35741063, 0x9, 0x8000, 0x9ea, 0xffffffffffffffff, 0xee01, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 11m19.931562853s ago: executing program 6 (id=910): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000002b80)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "4766b6", 0xd4b, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x6, 0x1, 0x5, 0x0, 0x0, 0x3, 0x1, 0x2}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x2, {{0xf, 0x2, 0x5a, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x2, {0xfffffff7, 0x5, 0x1, 0x9, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "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"}}}}}}}, 0x0) 11m19.269299093s ago: executing program 6 (id=912): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f00008a1000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 11m17.563741845s ago: executing program 6 (id=928): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'bridge_slave_0\x00', @random="f4db5767da71"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 11m16.702345432s ago: executing program 34 (id=930): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r1, &(0x7f0000000980)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="c207218727e88690d7376f5fdec6fb1eb0c0851843b22aa952ed50eaeeb5b996794658abc6290f63a9f3d4f5c7b35fc3f43abfc91f03ef1ff62fb349f75469", 0x3f}], 0x1, 0x0, 0x0, 0x20000010}], 0x1, 0x4008800) 11m16.671822072s ago: executing program 6 (id=935): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) accept4(r0, 0x0, 0x0, 0x80000) 11m16.354043442s ago: executing program 6 (id=936): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000200)=@req3={0x2, 0xf1e, 0x596, 0xfffffff7, 0x0, 0x401, 0x7}, 0x1c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 11m15.331235763s ago: executing program 6 (id=943): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7f, 0xa, 0x3, 0xff, 0x5200, 0x20000000000003, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) 11m2.178318306s ago: executing program 7 (id=931): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) unshare(0x62020600) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e2e, 0x3, 'wrr\x00', 0x11, 0x5, 0x46}, 0x2c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) 11m0.014141542s ago: executing program 35 (id=943): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7f, 0xa, 0x3, 0xff, 0x5200, 0x20000000000003, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) 10m46.977111492s ago: executing program 36 (id=931): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) unshare(0x62020600) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e2e, 0x3, 'wrr\x00', 0x11, 0x5, 0x46}, 0x2c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) 10m30.671186421s ago: executing program 0 (id=1094): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_emit_ethernet(0x7e, &(0x7f0000000100)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x6, 0x3}]}}, "20d7336c805b4af66b4d81bc0893fb6439a387adb72a225cada8b9f58596bc6482168d1e581e92e37486f534c34600107fc6cbc29ca9988000d49e860dc87e7199dfcce20000000000000000"}}}}, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004a00)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000000080)={0x50, 0x0, 0x7, {0x7, 0x29, 0x1000, 0x24ff871989b45d65, 0xe87, 0x9, 0xb, 0x5, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000009d00), r1) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000009e40)={0x0, 0x0, &(0x7f0000009e00)={&(0x7f0000009d40)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x6, 0xa8, @random='\x00o'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000800) lgetxattr(&(0x7f0000002840)='./file0\x00', &(0x7f0000002880)=@known='system.posix_acl_default\x00', 0x0, 0x0) 10m30.329319401s ago: executing program 0 (id=1096): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000200)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 10m29.760388139s ago: executing program 0 (id=1097): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 10m29.171704647s ago: executing program 0 (id=1101): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x2b4b) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 10m28.848514996s ago: executing program 0 (id=1103): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000200)=r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 10m28.08492407s ago: executing program 0 (id=1105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x64000400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 10m12.822559767s ago: executing program 37 (id=1105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x64000400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 8m36.628638562s ago: executing program 2 (id=1561): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x5, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0xfffffffd, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x10, 0x3}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 8m36.419791629s ago: executing program 3 (id=1562): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r1, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1}, 0xd2c7}], 0x40000, 0x2, 0x0) close(0x3) 8m36.02473505s ago: executing program 2 (id=1564): r0 = socket(0x1e, 0x802, 0x0) r1 = epoll_create1(0x80000) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0x60002005}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x1c0002009}) 8m35.529462316s ago: executing program 2 (id=1566): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) 8m35.169871787s ago: executing program 3 (id=1568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x6f01, 0x8100}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @ipv6=@tipc_packet={0x5, 0x6, '}G!', 0x18, 0x6, 0xff, @mcast2, @private2, {[], @payload_conn={{{0x18, 0x0, 0x1, 0x0, 0x1, 0x6, 0x1, 0x2, 0x6, 0x0, 0x3, 0x2, 0x3, 0x0, 0xfffb, 0xaab, 0x1, 0x4e23, 0x4e21}}}}}}, 0x4e) 8m34.497895177s ago: executing program 3 (id=1570): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x80}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 8m34.330074202s ago: executing program 2 (id=1572): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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") chdir(&(0x7f0000000240)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002480)={{r0}, 0x0, 0x2, @unused=[0x0, 0x804], @subvolid=0x3}) 8m33.194769217s ago: executing program 3 (id=1576): unshare(0xa000400) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20742, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121500, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) fdatasync(r0) 8m32.715318542s ago: executing program 3 (id=1578): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x80000, 0x12d) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 8m32.208918097s ago: executing program 3 (id=1581): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x66e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, 0x0, &(0x7f0000000080), &(0x7f0000000280)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 8m30.516347219s ago: executing program 2 (id=1588): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x388}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r5, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 8m16.635722714s ago: executing program 38 (id=1581): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_io_uring_setup(0x66e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, 0x0, &(0x7f0000000080), &(0x7f0000000280)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 8m15.844175688s ago: executing program 2 (id=1613): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000002400018006000500224e0000060001000200051b08000300ac1414aa080006"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 8m14.825749179s ago: executing program 39 (id=1613): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000002400018006000500224e0000060001000200051b08000300ac1414aa080006"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 22.302326151s ago: executing program 5 (id=3609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000011c0)=[@in={0x2, 0x4e22, @private=0xa010102}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 20.388103768s ago: executing program 5 (id=3613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ufs\x00', 0x2208004, 0x0) 19.337599179s ago: executing program 5 (id=3616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000) 19.336904799s ago: executing program 8 (id=3617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_gettime(r3, 0x0) 19.072454247s ago: executing program 9 (id=3620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r4, r3}, 0xc) 12.079965538s ago: executing program 8 (id=3621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000400)}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={'sha3-224\x00'}}) 12.079571148s ago: executing program 5 (id=3622): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="3c0000001000030426bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a4290400000000001400350076657468305f766972745f776966690008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 11.99660794s ago: executing program 1 (id=3623): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.01067742s ago: executing program 9 (id=3625): r0 = socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d5f5f732c5f289423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="a64a6f8911da357ba323a96d75"]}]}, 0xe0}], 0x1}, 0x0) 11.01004437s ago: executing program 8 (id=3626): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) accept4(r1, &(0x7f0000000740)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x60442, 0x0) dup(r2) recvmmsg$unix(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac2(0x4, 0x8b, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000200)}, 0xf) 10.778753867s ago: executing program 1 (id=3627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 9.706510948s ago: executing program 9 (id=3628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x9, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r3, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) 8.557279873s ago: executing program 4 (id=3630): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18, 0x800}, 0xc084) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) 7.972974691s ago: executing program 5 (id=3631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r3, &(0x7f0000001940), 0x0}, 0x20) 7.922395993s ago: executing program 1 (id=3632): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x3fa5, &(0x7f0000000000)={0x0, 0x6cae, 0x100, 0x1, 0x5a}) epoll_create1(0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040), 0x800) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 7.646310061s ago: executing program 8 (id=3633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x0) recvmmsg(r3, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}, 0xd1}], 0x1, 0x10202, 0x0) 4.164397566s ago: executing program 5 (id=3634): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}, {@dioread_nolock}, {@errors_remount}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@dioread_lock}]}, 0x1, 0x47a, &(0x7f00000006c0)="$eJzs28uPFMUfAPBv9z6AH4/lh/gAUVeJyUbjLrugcvCi0cQYjCZ6wOM6O5ANA2vY1QgSWYzxZGJI9Ew8Gv0LvBkTo55MuHryZEiIcgE8remebpgdZni4M8yy8/kkPVPVXT1VNdWP6qqZAPrWaPaSRGyKiN8jYqQeXZ5gtP525dKpytVLpypJLC299VeSp7t86VSlTFrut7GIjKUR6adJkcly8ydOHpmu1arHi/jEwtH3JuZPnHzmg6PTh6uHq8em9u/ft3fy+eemnu1IPbN6Xd758dyuHa++c/b1ysGz7/7yXVbeTcX2xnp0ymhW8b+Xcs3bnux0Zj22uSGcDPawINyRgYjImmsoP/9HYiCuN95IvPJJTwsHdFV2b1rXfvPiErCGJdHrEgC9Ud7os+ffcrlLXY9V4eKL9QegrN5XiqW+ZTDSIs1Q0/NtJ41GxMHFf85lS3RpHAIAoNHnla8ODEfER1e/fS3re4xERDke9ED++kf+uqWYQ9kaEf+PiG0RcV9EbI+I+4u0D0bEQyssz439n/TCCj/yprL+3wvF3Nby/l/Z+4utA0Vsc17/oeTQbK26J9bl38lYDK3L4pM3yeOHl89/0W5bY/8vW7L8y75gUY4Lg00DdDPTC9N5p7QDLp6J2DnYqv7JtZmAJCJ2RMTOO/voLWVg9qlvdrVL1Lr+l8/dVg4dmGda+jqr3mJW/8Voqn8paZyfnL1hfnJifdSqeybqR0Urv/722Zvt8r91+3fXxWr9vaH9m5NsTRrna+c7m/9/PP7T4eTtfJ55uFj34fTCwvHJiOHkQB5ftn7q+r5lvEyfHf9ju1uf/9uKfbL6PxwR2UH8SEQ8GhGPFWV/PCKeiIjdN6njzy/duv6R9qj9z0TMtLz+XTv+m9r/zgMDR376vl3+t9f++/LQWLEmv/7dQqviZJeL5gKu5LsDAACAe0Wa/wY+ScevhdN0fLz+G/7t8b+0Nje/8PShufePzcT5LfXxz7Qc6RopxkNrs7XqZLJYfGJ9fHSqGCsux0v3FuPGXw5syOPjlbnaTI/rDv1uY5vzP/PnQK9LB3TZhpZrp4bvekGAHmieR0+XR0+/ES4GsFb5vzb0r/L8b/O83/g/GGCNcf+H/tXq/D/dFDcXAGuT+z/0L+c/9Kn0xxXs7KkA7nXu/9CXVvK//i4G1q+OYvQmsFobJQ9ElIF0VZRHoEuBXl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuPfAAAA//+Pc+dq") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x3) r0 = openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r0, 0x0, 0x29) splice(r0, 0x0, r2, 0x0, 0x807, 0x0) vmsplice(r1, 0x0, 0x0, 0xd) timer_create(0x2, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r3, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000300)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x32) 4.055232718s ago: executing program 9 (id=3635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0xffff0001}], 0x1, 0x12000, 0x0) 3.961456381s ago: executing program 4 (id=3636): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x4, 0x0, &(0x7f0000000180)) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) r1 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x70bd2a, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = dup(r2) write$binfmt_elf32(r4, &(0x7f0000000740)=ANY=[], 0x58) close_range(r1, 0xffffffffffffffff, 0x0) 3.300971421s ago: executing program 1 (id=3637): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x78d, &(0x7f00000007c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) socket$vsock_stream(0x28, 0x1, 0x0) symlink(0x0, 0x0) 2.912655773s ago: executing program 8 (id=3638): pipe2(&(0x7f0000000080), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) socket$packet(0x11, 0x2, 0x300) dup(r0) r1 = getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_pidfd_open(r1, 0x0) socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730121000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) 2.121341616s ago: executing program 4 (id=3639): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000600), &(0x7f0000001380)=@udp=r1}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x0) close(0x3) 2.107285007s ago: executing program 9 (id=3640): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) close(0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="14000200ff020000000000000000000000000001080008000207"], 0x34}}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.082300768s ago: executing program 8 (id=3641): fdatasync(0xffffffffffffffff) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.878320063s ago: executing program 4 (id=3642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="08150000000511040000000000000000010000055402"], 0x1508}}, 0x10) 1.852242435s ago: executing program 9 (id=3643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 1.725021198s ago: executing program 1 (id=3644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) 629.365241ms ago: executing program 4 (id=3645): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r5}, 0x8) 576.831893ms ago: executing program 1 (id=3646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) 0s ago: executing program 4 (id=3647): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000380)=ANY=[], 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ptrace(0x10, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) rseq(0x0, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000300), 0x0) syz_ublk_setup_io_uring(0xf17, 0x0, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/37) kernel console output (not intermixed with test programs): control endpoint instead) [ 454.283874][ T4643] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 454.620733][ T4771] usb 6-1: USB disconnect, device number 13 [ 454.621142][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 454.658617][T11012] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 454.707134][ T4771] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 454.907411][T11043] loop9: detected capacity change from 0 to 512 [ 455.080899][T11043] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.1789: iget: bad i_size value: 38620345925642 [ 455.118524][T11043] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.1789: couldn't read orphan inode 15 (err -117) [ 455.156937][T11043] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 455.241257][ T26] audit: type=1326 audit(1781868215.552:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11050 comm="syz.5.1790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 455.447609][ T26] audit: type=1326 audit(1781868215.612:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11050 comm="syz.5.1790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 455.567461][ T26] audit: type=1326 audit(1781868215.612:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11050 comm="syz.5.1790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 455.638371][ T4643] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 455.718219][T11046] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 455.759568][ T26] audit: type=1326 audit(1781868215.612:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11050 comm="syz.5.1790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 455.864551][ T26] audit: type=1326 audit(1781868215.612:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11050 comm="syz.5.1790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 456.000461][ T26] audit: type=1326 audit(1781868215.612:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11050 comm="syz.5.1790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 456.167386][ T26] audit: type=1326 audit(1781868215.612:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11050 comm="syz.5.1790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 456.398229][ T26] audit: type=1326 audit(1781868215.612:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11050 comm="syz.5.1790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 456.507736][ T6174] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2000 with error 28 [ 456.577325][ T26] audit: type=1326 audit(1781868215.612:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11050 comm="syz.5.1790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 456.598000][ T6174] EXT4-fs (loop9): This should not happen!! Data will be lost [ 456.598000][ T6174] [ 456.679004][ T6174] EXT4-fs (loop9): Total free blocks count 0 [ 456.710847][ T26] audit: type=1326 audit(1781868215.632:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11050 comm="syz.5.1790" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 456.742752][ T6174] EXT4-fs (loop9): Free/Dirty block details [ 456.779396][ T6174] EXT4-fs (loop9): free_blocks=0 [ 456.813328][ T6174] EXT4-fs (loop9): dirty_blocks=2000 [ 456.852382][ T6174] EXT4-fs (loop9): Block reservation details [ 456.891975][ T6174] EXT4-fs (loop9): i_reserved_data_blocks=2000 [ 457.394457][ T4643] usb 10-1: unable to get BOS descriptor or descriptor too short [ 457.413936][ T4643] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 457.443717][ T4643] usb 10-1: can't read configurations, error -71 [ 457.800072][T11074] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1795'. [ 457.811422][ T4332] device hsr_slave_0 left promiscuous mode [ 457.838605][ T4332] device hsr_slave_1 left promiscuous mode [ 457.901307][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.947234][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.969037][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.006142][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.053851][ T7904] EXT4-fs (loop9): unmounting filesystem. [ 458.068648][ T4332] device bridge_slave_1 left promiscuous mode [ 458.085691][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.138253][ T4332] device bridge_slave_0 left promiscuous mode [ 458.144521][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.423532][ T4332] device veth1_macvtap left promiscuous mode [ 458.430158][ T4332] device veth0_macvtap left promiscuous mode [ 458.462364][ T4332] device veth1_vlan left promiscuous mode [ 458.508356][ T4332] device veth0_vlan left promiscuous mode [ 460.041670][T11137] loop1: detected capacity change from 0 to 1024 [ 460.135455][T11137] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 460.158332][T11137] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.202964][T11137] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.1812: lblock 0 mapped to illegal pblock 0 (length 1) [ 460.257984][T11137] EXT4-fs (loop1): Remounting filesystem read-only [ 460.374183][T11147] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.1812: lblock 0 mapped to illegal pblock 0 (length 1) [ 460.502332][T11147] EXT4-fs (loop1): Remounting filesystem read-only [ 460.524360][T11135] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.1812: lblock 0 mapped to illegal pblock 0 (length 1) [ 460.542301][T11135] EXT4-fs (loop1): Remounting filesystem read-only [ 460.576256][T11147] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.1812: lblock 0 mapped to illegal pblock 0 (length 1) [ 460.589198][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1817'. [ 460.602873][T11147] EXT4-fs (loop1): Remounting filesystem read-only [ 460.625998][T11135] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.1812: lblock 0 mapped to illegal pblock 0 (length 1) [ 460.662426][T11135] EXT4-fs (loop1): Remounting filesystem read-only [ 460.671098][T11147] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.1812: lblock 0 mapped to illegal pblock 0 (length 1) [ 460.687271][T11147] EXT4-fs (loop1): Remounting filesystem read-only [ 460.694200][T11135] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.1812: lblock 0 mapped to illegal pblock 0 (length 1) [ 460.708782][T11135] EXT4-fs (loop1): Remounting filesystem read-only [ 460.715890][T11147] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.1812: lblock 0 mapped to illegal pblock 0 (length 1) [ 460.729985][T11147] EXT4-fs (loop1): Remounting filesystem read-only [ 460.736642][T11135] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.1812: lblock 0 mapped to illegal pblock 0 (length 1) [ 460.786623][T11135] EXT4-fs (loop1): Remounting filesystem read-only [ 460.796889][T11147] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.1812: lblock 0 mapped to illegal pblock 0 (length 1) [ 461.457081][ T4332] team0 (unregistering): Port device team_slave_1 removed [ 461.611903][ T4332] team0 (unregistering): Port device team_slave_0 removed [ 461.740825][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.846658][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.702453][ T4332] bond0 (unregistering): Released all slaves [ 462.873029][T11155] netlink: 10716 bytes leftover after parsing attributes in process `syz.8.1817'. [ 462.898842][T11155] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1817'. [ 462.981266][T11155] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1817'. [ 463.192535][T11197] lo speed is unknown, defaulting to 1000 [ 464.163371][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1827'. [ 465.528463][T11247] loop4: detected capacity change from 0 to 256 [ 466.417755][T11267] netlink: 'syz.4.1846': attribute type 12 has an invalid length. [ 467.504284][T11289] lo speed is unknown, defaulting to 1000 [ 468.047838][T11307] loop5: detected capacity change from 0 to 2048 [ 468.075202][T11306] loop1: detected capacity change from 0 to 2048 [ 468.130837][T11307] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 468.187503][T11311] loop9: detected capacity change from 0 to 1024 [ 468.194985][T11307] NILFS (loop5): mounting unchecked fs [ 468.230958][T11306] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 468.260684][T11311] EXT4-fs: Ignoring removed nomblk_io_submit option [ 468.291230][T11307] NILFS (loop5): recovery complete [ 468.326951][T11320] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 468.359087][T11311] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 468.577920][ T7904] EXT4-fs (loop9): unmounting filesystem. [ 468.591172][T10245] EXT4-fs (loop1): unmounting filesystem. [ 468.793494][ T4325] libceph: connect (1)[c::]:6789 error -101 [ 468.809938][ T4325] libceph: mon0 (1)[c::]:6789 connect error [ 468.821220][T11326] ceph: No mds server is up or the cluster is laggy [ 469.104879][ T4325] libceph: connect (1)[c::]:6789 error -101 [ 469.118232][ T4325] libceph: mon0 (1)[c::]:6789 connect error [ 469.372867][T11343] loop9: detected capacity change from 0 to 1024 [ 469.493119][T11343] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 469.569255][T11343] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.714020][T11343] EXT4-fs error (device loop9): ext4_map_blocks:747: inode #15: comm syz.9.1865: lblock 0 mapped to illegal pblock 0 (length 1) [ 469.807817][T11343] EXT4-fs (loop9): Remounting filesystem read-only [ 469.839973][T11361] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #15: comm syz.9.1865: lblock 0 mapped to illegal pblock 0 (length 1) [ 469.903626][T11361] EXT4-fs (loop9): Remounting filesystem read-only [ 469.935412][T11342] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #15: comm syz.9.1865: lblock 0 mapped to illegal pblock 0 (length 1) [ 469.994778][T11342] EXT4-fs (loop9): Remounting filesystem read-only [ 470.039109][T11361] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #15: comm syz.9.1865: lblock 0 mapped to illegal pblock 0 (length 1) [ 470.076907][T11361] EXT4-fs (loop9): Remounting filesystem read-only [ 470.106032][T11342] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #15: comm syz.9.1865: lblock 0 mapped to illegal pblock 0 (length 1) [ 470.168374][T11342] EXT4-fs (loop9): Remounting filesystem read-only [ 470.175112][T11361] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #15: comm syz.9.1865: lblock 0 mapped to illegal pblock 0 (length 1) [ 470.233688][T11361] EXT4-fs (loop9): Remounting filesystem read-only [ 470.252918][T11342] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #15: comm syz.9.1865: lblock 0 mapped to illegal pblock 0 (length 1) [ 470.305304][T11342] EXT4-fs (loop9): Remounting filesystem read-only [ 470.328398][T11342] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #15: comm syz.9.1865: lblock 0 mapped to illegal pblock 0 (length 1) [ 470.431032][T11342] EXT4-fs (loop9): Remounting filesystem read-only [ 470.437647][T11361] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #15: comm syz.9.1865: lblock 0 mapped to illegal pblock 0 (length 1) [ 470.478656][T11361] EXT4-fs (loop9): Remounting filesystem read-only [ 470.485333][T11342] EXT4-fs error (device loop9): ext4_map_blocks:637: inode #15: comm syz.9.1865: lblock 0 mapped to illegal pblock 0 (length 1) [ 470.947093][T11379] loop1: detected capacity change from 0 to 1024 [ 470.977791][T11379] EXT4-fs: test_dummy_encryption requires encrypt feature [ 471.564773][T11404] loop1: detected capacity change from 0 to 128 [ 471.600537][T11404] EXT4-fs: Ignoring removed nobh option [ 471.661378][T11404] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 471.709117][T11404] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 471.971442][T11418] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1887'. [ 472.011037][T11418] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1887'. [ 472.042379][T11418] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1887'. [ 472.060937][T10245] EXT4-fs (loop1): unmounting filesystem. [ 472.125531][T11424] loop9: detected capacity change from 0 to 512 [ 472.217756][T11424] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 472.298439][T11424] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.333527][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'. [ 472.377334][T11437] netlink: 'syz.5.1891': attribute type 1 has an invalid length. [ 472.479951][T11437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.504773][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'. [ 472.528605][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'. [ 472.547404][T11439] bond1: Error: No native XDP support for the current bonding mode [ 472.619580][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'. [ 472.670597][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'. [ 473.095474][ T7904] EXT4-fs (loop9): unmounting filesystem. [ 473.336680][ T4645] libceph: connect (1)[c::]:6789 error -101 [ 473.344706][ T4645] libceph: mon0 (1)[c::]:6789 connect error [ 473.377587][T11457] ceph: No mds server is up or the cluster is laggy [ 473.581715][T11469] loop4: detected capacity change from 0 to 1024 [ 473.727996][T11469] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 473.769238][T11469] EXT4-fs (loop4): unmounting filesystem. [ 474.762487][T11509] loop5: detected capacity change from 0 to 128 [ 474.812397][T11509] EXT4-fs: inline encryption not supported [ 474.908889][T11509] EXT4-fs (loop5): Test dummy encryption mode enabled [ 474.964507][T11509] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 475.004050][T11509] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.573456][T11509] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 475.605716][T11530] loop1: detected capacity change from 0 to 64 [ 475.810407][ T5138] EXT4-fs (loop5): unmounting filesystem. [ 476.402255][T11562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1921'. [ 476.828932][ T22] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 476.880316][T11571] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 477.021872][ T22] usb 10-1: config 0 has no interfaces? [ 477.031634][T11582] team0: No ports can be present during mode change [ 477.045882][ T22] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 477.082654][ T22] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.113924][ T22] usb 10-1: config 0 descriptor?? [ 477.360024][ T22] usb 10-1: USB disconnect, device number 7 [ 478.157767][T11613] loop9: detected capacity change from 0 to 512 [ 478.207705][T11613] EXT4-fs: Ignoring removed i_version option [ 478.261781][T11613] EXT4-fs: Ignoring removed bh option [ 478.375763][T11613] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 478.413906][T11613] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.645706][ T7904] EXT4-fs (loop9): unmounting filesystem. [ 479.002958][T11640] kvm [11638]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 479.062402][T11640] kvm [11638]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 479.868186][ T4325] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 480.062403][ T4325] usb 6-1: config 0 has no interfaces? [ 480.068509][ T4325] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 480.077723][ T4325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.161676][ T4325] usb 6-1: config 0 descriptor?? [ 480.375771][ T4325] usb 6-1: USB disconnect, device number 14 [ 481.972530][T11718] loop9: detected capacity change from 0 to 256 [ 482.108599][T11718] FAT-fs (loop9): Directory bread(block 64) failed [ 482.135892][T11718] FAT-fs (loop9): Directory bread(block 65) failed [ 482.170009][T11718] FAT-fs (loop9): Directory bread(block 66) failed [ 482.196587][T11718] FAT-fs (loop9): Directory bread(block 67) failed [ 482.228494][T11718] FAT-fs (loop9): Directory bread(block 68) failed [ 482.278157][T11718] FAT-fs (loop9): Directory bread(block 69) failed [ 482.304550][T11718] FAT-fs (loop9): Directory bread(block 70) failed [ 482.341953][T11718] FAT-fs (loop9): Directory bread(block 71) failed [ 482.376904][T11718] FAT-fs (loop9): Directory bread(block 72) failed [ 482.424391][T11718] FAT-fs (loop9): Directory bread(block 73) failed [ 484.639535][T11740] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.733573][T11740] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.967458][T11740] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.978623][T11740] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.997831][T11767] device macvlan2 entered promiscuous mode [ 485.036366][T11767] bond1: (slave macvlan2): Opening slave failed [ 485.175204][T11740] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.227705][T11740] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.335396][T11796] fuse: Bad value for 'fd' [ 486.400273][T11740] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.434557][T11740] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.721189][ T26] kauditd_printk_skb: 242 callbacks suppressed [ 486.721205][ T26] audit: type=1326 audit(1781868247.032:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11819 comm="syz.5.1983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b75d9ce59 code=0x0 [ 486.784777][T11740] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.801756][T11740] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.881196][T11740] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.905911][T11740] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.971713][T11740] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.003946][T11740] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.046344][T11740] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.071538][T11740] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.096396][T11831] lo speed is unknown, defaulting to 1000 [ 487.315365][T11836] loop5: detected capacity change from 0 to 7 [ 487.352430][ T4539] loop5: [ 487.355593][ T4539] loop5: partition table partially beyond EOD, truncated [ 487.380806][T11836] loop5: [ 487.384089][T11836] loop5: partition table partially beyond EOD, truncated [ 488.895997][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1999'. [ 488.989849][T11885] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.999297][T11885] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.008123][T11885] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.016942][T11885] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.223192][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1999'. [ 489.284334][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1999'. [ 490.027808][T11905] lo speed is unknown, defaulting to 1000 [ 490.395167][T11917] loop4: detected capacity change from 0 to 128 [ 490.544415][T11925] loop9: detected capacity change from 0 to 512 [ 490.550773][T11917] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 490.570833][T11917] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 490.584815][T11925] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 490.601854][T11925] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 490.660258][T11925] EXT4-fs (loop9): orphan cleanup on readonly fs [ 490.732268][T11925] Quota error (device loop9): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 490.757260][T11917] EXT4-fs (loop4): shut down requested (1) [ 490.779608][T11925] EXT4-fs warning (device loop9): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 490.795962][T11917] fscrypt (loop4, inode 12): Error -5 getting encryption context [ 490.826420][T11925] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 490.881781][T11925] EXT4-fs error (device loop9): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 490.971352][T11925] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #12: comm syz.9.2012: corrupted inode contents [ 490.985957][T10208] EXT4-fs (loop4): unmounting filesystem. [ 491.059038][T11925] EXT4-fs error (device loop9): ext4_dirty_inode:6156: inode #12: comm syz.9.2012: mark_inode_dirty error [ 491.114060][T11925] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #12: comm syz.9.2012: corrupted inode contents [ 491.175392][T11925] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #12: comm syz.9.2012: mark_inode_dirty error [ 491.190874][ T26] audit: type=1326 audit(1781868251.482:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11903 comm="syz.5.2005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b75d9ce59 code=0x0 [ 491.248190][T11925] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #12: comm syz.9.2012: corrupted inode contents [ 491.287840][T11925] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 491.308600][T11925] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #12: comm syz.9.2012: corrupted inode contents [ 491.334002][T11941] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2015'. [ 491.353783][T11925] EXT4-fs error (device loop9): ext4_truncate:4325: inode #12: comm syz.9.2012: mark_inode_dirty error [ 491.386004][T11925] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 491.420048][T11925] EXT4-fs (loop9): 1 truncate cleaned up [ 491.430251][T11941] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.436273][T11925] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 491.438001][T11941] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.531612][T11942] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2015'. [ 491.608191][T11942] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.615444][T11942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.623008][T11942] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.630219][T11942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.660366][T11942] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2015'. [ 491.695473][T11942] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.702843][T11942] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.803274][ T7904] EXT4-fs (loop9): unmounting filesystem. [ 493.029306][ T7224] wlan1: Trigger new scan to find an IBSS to join [ 493.507905][T11987] lo speed is unknown, defaulting to 1000 [ 493.791441][ T4325] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 493.990111][ T4325] usb 10-1: config 0 has no interfaces? [ 493.995813][ T4325] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 494.061416][ T4325] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.116072][ T4325] usb 10-1: config 0 descriptor?? [ 494.435365][T11987] netlink: 'syz.9.2029': attribute type 1 has an invalid length. [ 494.504816][T11987] device bond0 entered promiscuous mode [ 494.511216][T11987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.654957][T11987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.679387][T11987] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 494.708625][T11987] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 494.736244][T11987] bond0: (slave vti0): making interface the new active one [ 494.753298][T11987] device vti0 entered promiscuous mode [ 494.777780][T11987] bond0: (slave vti0): Enslaving as an active interface with an up link [ 494.812241][ T6183] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 494.911634][ T4772] usb 10-1: USB disconnect, device number 8 [ 495.005190][T12004] loop4: detected capacity change from 0 to 32768 [ 495.043593][T12004] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 495.464041][ T4539] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 496.062084][ T6183] wlan1: Trigger new scan to find an IBSS to join [ 496.252318][ T4332] bond0: (slave vti0): Releasing backup interface [ 496.274330][ T4332] device vti0 left promiscuous mode [ 496.319879][ T4332] bond0: Destroying bond [ 496.362691][T12064] netlink: 'syz.5.2047': attribute type 11 has an invalid length. [ 496.419064][T12064] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2047'. [ 497.331908][T12083] loop9: detected capacity change from 0 to 256 [ 497.477958][T12083] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963609d, utbl_chksum : 0xe619d30d) [ 497.714197][ T4332] bond0 (unregistering): Released all slaves [ 497.813692][T12087] netlink: 'syz.1.2055': attribute type 13 has an invalid length. [ 498.070150][T12087] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 498.171708][T12087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 498.221627][T12099] tipc: Failed to remove unknown binding: 66,0,0/0:3045030369/3045030370 [ 498.268558][T12087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 499.098770][ T6190] wlan1: Trigger new scan to find an IBSS to join [ 500.106465][ T6178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.116191][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 500.824752][T12174] netlink: 'syz.8.2075': attribute type 1 has an invalid length. [ 500.962323][T12174] 8021q: adding VLAN 0 to HW filter on device bond4 [ 501.152885][T12179] bond4: (slave veth11): Enslaving as an active interface with an up link [ 501.222958][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 502.635468][T12223] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2089'. [ 502.708788][T12226] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2089'. [ 503.055387][T12232] loop4: detected capacity change from 0 to 512 [ 503.096223][T12232] EXT4-fs: Ignoring removed bh option [ 503.137176][T12235] lo speed is unknown, defaulting to 1000 [ 503.160842][T12232] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 503.305101][T12232] EXT4-fs (loop4): 1 truncate cleaned up [ 503.312167][T12232] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 503.551554][T12245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.827427][T10208] EXT4-fs (loop4): unmounting filesystem. [ 503.874318][T12255] netlink: 'syz.9.2097': attribute type 1 has an invalid length. [ 503.981970][T12255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 504.000015][T12255] bond1: (slave bond2): making interface the new active one [ 504.007884][T12255] bond1: (slave bond2): Enslaving as an active interface with an up link [ 504.073190][T12261] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 504.206267][T12255] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2097'. [ 504.274946][T12255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.132531][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.139062][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.667046][T12274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.737812][T12274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.930669][T12323] loop9: detected capacity change from 0 to 32768 [ 507.996980][T12323] XFS (loop9): Mounting V5 Filesystem [ 508.095992][T12323] XFS (loop9): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 508.139480][T12323] XFS (loop9): Starting recovery (logdev: internal) [ 508.180933][T12323] XFS (loop9): Ending recovery (logdev: internal) [ 508.276398][ T26] audit: type=1800 audit(1781868268.582:440): pid=12323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2110" name="file1" dev="loop9" ino=4422 res=0 errno=0 [ 508.406224][ T26] audit: type=1800 audit(1781868268.712:441): pid=12335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2110" name="file1" dev="loop9" ino=4422 res=0 errno=0 [ 508.732898][T12274] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.744285][T12274] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.757969][T12274] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.767271][T12274] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.915748][ T7904] XFS (loop9): Unmounting Filesystem [ 509.057602][T12274] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.066877][T12274] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.076082][T12274] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.085121][T12274] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.217282][T12284] netlink: 'syz.5.2104': attribute type 1 has an invalid length. [ 509.306791][T12284] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.409196][T12287] bond2: (slave veth9): Enslaving as an active interface with an up link [ 509.457932][ T6174] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 509.721359][ T4292] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 509.731854][ T4292] CPU: 0 PID: 4292 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 509.739447][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 509.749581][ T4292] Workqueue: hci2 hci_rx_work [ 509.754540][ T4292] Call Trace: [ 509.757876][ T4292] [ 509.760844][ T4292] dump_stack_lvl+0x188/0x24e [ 509.765636][ T4292] ? show_regs_print_info+0x12/0x12 [ 509.770972][ T4292] ? load_image+0x400/0x400 [ 509.775542][ T4292] sysfs_create_dir_ns+0x26a/0x290 [ 509.780731][ T4292] ? sysfs_warn_dup+0xa0/0xa0 [ 509.785433][ T4292] ? do_raw_spin_unlock+0x11d/0x230 [ 509.790735][ T4292] kobject_add_internal+0x61c/0xcc0 [ 509.796121][ T4292] kobject_add+0x160/0x230 [ 509.800608][ T4292] ? kobject_init+0x1d0/0x1d0 [ 509.805378][ T4292] ? klist_children_get+0x50/0x50 [ 509.810533][ T4292] ? get_device_parent+0x121/0x3f0 [ 509.815714][ T4292] device_add+0x48c/0x1000 [ 509.820196][ T4292] ? kmem_cache_free+0xf7/0x290 [ 509.825152][ T4292] hci_conn_add_sysfs+0xd1/0x1e0 [ 509.830180][ T4292] le_conn_complete_evt+0x1062/0x1670 [ 509.835614][ T4292] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 509.841902][ T4292] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 509.847694][ T4292] ? skb_pull_data+0xf7/0x200 [ 509.852535][ T4292] hci_le_enh_conn_complete_evt+0x185/0x460 [ 509.858496][ T4292] ? hci_le_remote_conn_param_req_evt+0xce0/0xce0 [ 509.864945][ T4292] ? hci_remote_host_features_evt+0x270/0x270 [ 509.871045][ T4292] hci_event_packet+0x7b9/0x1280 [ 509.876015][ T4292] ? bis_list+0x280/0x280 [ 509.880794][ T4292] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 509.886778][ T4292] ? kcov_remote_start+0x4c7/0x7e0 [ 509.891947][ T4292] ? mt_dump_node+0x750/0x1920 [ 509.896732][ T4292] ? hci_send_to_monitor+0x9c/0x4a0 [ 509.901973][ T4292] hci_rx_work+0x3eb/0xd40 [ 509.906487][ T4292] ? _raw_spin_unlock+0x40/0x40 [ 509.911384][ T4292] ? process_one_work+0x7b0/0x1160 [ 509.916591][ T4292] process_one_work+0x8a2/0x1160 [ 509.921558][ T4292] ? worker_detach_from_pool+0x240/0x240 [ 509.927222][ T4292] ? _raw_spin_lock_irq+0xb7/0xf0 [ 509.932274][ T4292] ? _raw_spin_lock_irqsave+0x100/0x100 [ 509.937843][ T4292] ? kthread_data+0x4b/0xc0 [ 509.942437][ T4292] worker_thread+0xaa2/0x1270 [ 509.947157][ T4292] kthread+0x29d/0x330 [ 509.951247][ T4292] ? worker_clr_flags+0x1a0/0x1a0 [ 509.956342][ T4292] ? kthread_blkcg+0xd0/0xd0 [ 509.960959][ T4292] ret_from_fork+0x1f/0x30 [ 509.965517][ T4292] [ 509.969734][ T4292] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 509.983168][ T4292] Bluetooth: hci2: failed to register connection device [ 510.162516][ T26] audit: type=1326 audit(1781868270.472:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12353 comm="syz.9.2112" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c58d9ce59 code=0x0 [ 510.337264][T12356] lo speed is unknown, defaulting to 1000 [ 511.179699][T12385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2124'. [ 511.228431][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2124'. [ 512.494820][T12417] device bridge_slave_1 left promiscuous mode [ 512.525639][T12417] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.621948][T12417] device bridge_slave_0 left promiscuous mode [ 512.648698][T12417] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.257218][T12454] Process accounting resumed [ 515.489333][T12469] device bond3 entered promiscuous mode [ 517.263547][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2153'. [ 517.293216][T12509] loop5: detected capacity change from 0 to 512 [ 517.407538][T12509] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 517.460786][T12509] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.832941][ T5138] EXT4-fs (loop5): unmounting filesystem. [ 520.244962][T12498] lo speed is unknown, defaulting to 1000 [ 521.870060][T12577] loop9: detected capacity change from 0 to 256 [ 521.911570][T12577] exfat: Deprecated parameter 'utf8' [ 521.947192][T12577] exfat: Deprecated parameter 'namecase' [ 521.998902][T12577] exfat: Deprecated parameter 'namecase' [ 522.024585][T12577] exfat: Deprecated parameter 'utf8' [ 522.062110][T12577] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 522.479082][T12587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2172'. [ 522.567290][T12590] bridge0: port 3(syz_tun) entered blocking state [ 522.588459][T12590] bridge0: port 3(syz_tun) entered disabled state [ 522.617989][T12587] loop4: detected capacity change from 0 to 512 [ 522.655359][T12590] device syz_tun entered promiscuous mode [ 522.742210][T12598] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 522.831415][T12587] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix. [ 522.893381][T12587] EXT4-fs (loop4): mount failed [ 524.262795][T12630] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 526.564990][T12662] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 527.801047][T12688] lo speed is unknown, defaulting to 1000 [ 528.770282][ T26] audit: type=1326 audit(1781868289.082:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12711 comm="syz.8.2204" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4347d9ce59 code=0x0 [ 529.178815][T12719] netlink: 388 bytes leftover after parsing attributes in process `syz.9.2206'. [ 529.338242][ T4292] Bluetooth: hci1: command 0x0406 tx timeout [ 530.937824][T12731] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2210'. [ 531.249156][T12737] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2211'. [ 532.383093][ T6161] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 532.683410][T12784] team0 (unregistering): Port device team_slave_0 removed [ 532.720986][T12784] team0 (unregistering): Failed to send options change via netlink (err -105) [ 532.756713][T12784] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 532.833990][T12784] team0 (unregistering): Port device team_slave_1 removed [ 533.975711][T12811] netlink: 'syz.9.2232': attribute type 1 has an invalid length. [ 534.031798][T12811] 8021q: adding VLAN 0 to HW filter on device bond4 [ 534.046486][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2233'. [ 534.108226][T12814] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 534.170182][T12817] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 534.239619][T12811] device macvlan2 entered promiscuous mode [ 534.268715][T12811] device bond4 entered promiscuous mode [ 534.315096][T12811] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 534.333427][T12811] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 534.362459][T12811] device bond4 left promiscuous mode [ 534.458323][ T4292] Bluetooth: hci2: command 0x0406 tx timeout [ 534.905242][T12842] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 534.983665][T12842] batman_adv: batadv0: Adding interface: gretap2 [ 535.028634][T12842] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.096509][T12842] batman_adv: batadv0: Interface activated: gretap2 [ 535.145067][T12847] netlink: 'syz.1.2243': attribute type 1 has an invalid length. [ 535.246477][T12847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.290699][T12852] netlink: 'syz.4.2245': attribute type 10 has an invalid length. [ 535.395289][T12852] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 535.405928][T12852] team0: Failed to send options change via netlink (err -105) [ 535.414239][T12852] team0: Port device netdevsim0 added [ 535.491167][T12864] loop9: detected capacity change from 0 to 128 [ 535.534258][T12857] bond2: (slave ip6gretap1): making interface the new active one [ 535.573232][T12857] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 535.619978][T12864] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 535.635048][T12864] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 535.717554][ T6159] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 535.781317][ T7904] EXT4-fs (loop9): unmounting filesystem. [ 535.806306][T12875] netlink: 'syz.4.2248': attribute type 1 has an invalid length. [ 535.989199][T12875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 536.616099][T12901] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2255'. [ 536.969880][T12908] lo speed is unknown, defaulting to 1000 [ 537.576026][T12925] netlink: 'syz.8.2263': attribute type 4 has an invalid length. [ 537.686472][T12925] netlink: 'syz.8.2263': attribute type 17 has an invalid length. [ 537.758948][T12925] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 537.812296][ T4767] lo speed is unknown, defaulting to 1000 [ 537.820088][ T4772] lo speed is unknown, defaulting to 1000 [ 537.879674][T12935] tipc: Failed to remove unknown binding: 66,0,0/0:514080619/514080620 [ 537.910431][T12935] tipc: Failed to remove unknown binding: 66,0,0/0:514080619/514080620 [ 538.792838][T12967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.820056][T12967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.795851][T12988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2279'. [ 540.263304][T12999] netlink: 'syz.4.2283': attribute type 3 has an invalid length. [ 540.353112][T12999] netlink: 'syz.4.2283': attribute type 3 has an invalid length. [ 540.578702][T13000] netlink: 452 bytes leftover after parsing attributes in process `syz.1.2284'. [ 540.797400][T13015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2287'. [ 541.057189][T13015] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 542.298599][ T4292] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 542.309274][ T4292] Bluetooth: hci5: Injecting HCI hardware error event [ 542.322652][ T4282] Bluetooth: hci5: hardware error 0x00 [ 544.378197][ T4282] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 545.441731][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2307'. [ 545.657109][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2308'. [ 545.739072][T13097] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 546.100499][T13108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2313'. [ 546.142652][T13111] netlink: 'syz.5.2314': attribute type 1 has an invalid length. [ 546.206476][T13111] 8021q: adding VLAN 0 to HW filter on device bond3 [ 546.344744][T13111] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.373929][T13111] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.403407][T13111] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.442695][T13111] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.480362][T13111] bond3: (slave geneve2): making interface the new active one [ 546.542055][T13111] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 546.611832][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 546.644407][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2317'. [ 546.846871][T13111] syz.5.2314 (13111) used greatest stack depth: 18992 bytes left [ 546.962121][ T26] audit: type=1326 audit(1781868307.272:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13136 comm="syz.8.2320" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f4347d96bd7 code=0x0 [ 547.227010][ T4772] kernel read not supported for file inotify (pid: 4772 comm: kworker/1:18) [ 548.512747][T13187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2335'. [ 549.199317][T13207] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2341'. [ 550.293318][T13236] sctp: [Deprecated]: syz.9.2349 (pid 13236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 550.293318][T13236] Use struct sctp_sack_info instead [ 551.380695][T13247] netlink: 'syz.9.2353': attribute type 4 has an invalid length. [ 551.719381][T13259] loop5: detected capacity change from 0 to 512 [ 551.897653][T13259] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 551.927306][T13259] ext4 filesystem being mounted at /404/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.277638][ T26] audit: type=1800 audit(1781868312.582:445): pid=13270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2357" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 552.339721][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2357'. [ 552.387931][ T26] audit: type=1800 audit(1781868312.622:446): pid=13259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2357" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 552.597025][ T5138] EXT4-fs (loop5): unmounting filesystem. [ 552.892060][T13285] bridge0: port 1(vlan3) entered blocking state [ 552.912542][T13285] bridge0: port 1(vlan3) entered disabled state [ 552.947050][T13285] device vlan3 entered promiscuous mode [ 552.963887][T13285] device bridge_slave_0 entered promiscuous mode [ 553.010468][T13291] bond4: (slave veth0_to_bond): Releasing active interface [ 553.107245][T13291] bond0: (slave bond_slave_0): Releasing backup interface [ 553.144485][T13291] bond0: (slave bond_slave_1): Releasing backup interface [ 553.186512][T13291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.225796][T13291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.248956][T13291] bond1: (slave bond2): Releasing backup interface [ 553.263488][T13291] bond1: (slave bond2): the permanent HWaddr of slave - 12:77:75:94:aa:79 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 553.292800][T13291] bond1: (slave gretap1): making interface the new active one [ 553.364434][T13291] bond1: (slave gretap1): Releasing backup interface [ 553.396068][T13291] batman_adv: batadv0: Interface deactivated: gretap2 [ 553.413509][T13291] batman_adv: batadv0: Removing interface: gretap2 [ 553.430548][T13291] device vlan3 left promiscuous mode [ 553.442947][T13291] device bridge_slave_0 left promiscuous mode [ 553.457590][T13291] bridge0: port 1(vlan3) entered disabled state [ 553.903550][T13305] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2369'. [ 554.918555][T13328] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 556.038139][ T4772] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 556.222063][T13362] overlayfs: failed to clone upperpath [ 556.260498][ T4772] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.298851][ T4772] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.344215][ T4772] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 556.375725][ T4772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 556.405018][ T4772] usb 6-1: SerialNumber: syz [ 556.657916][ T4772] usb 6-1: 0:2 : does not exist [ 556.777967][ T4772] usb 6-1: USB disconnect, device number 15 [ 557.049126][ T4539] udevd[4539]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 558.671948][T13389] Can't find ip_set type has [ 558.676874][T13381] Can't find ip_set type has [ 559.099249][T13401] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 559.122826][T13401] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 559.174580][T13409] loop4: detected capacity change from 0 to 512 [ 559.239360][T13411] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 559.257960][T13409] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 559.302049][T13401] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 559.309768][T13401] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 559.318714][T13401] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 559.335397][T13409] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.458388][T13401] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 559.487248][T13401] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 559.539860][T13401] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 559.728523][T13401] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 559.781272][T13401] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 559.841692][T13401] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 559.896172][T13401] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 560.233579][T13430] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2399'. [ 560.521825][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2399'. [ 560.555165][T10208] EXT4-fs (loop4): unmounting filesystem. [ 561.098361][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 561.338127][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 561.498362][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 561.818520][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 561.929525][T13482] lo speed is unknown, defaulting to 1000 [ 563.178427][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 563.418453][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 563.578543][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 563.871166][T13517] loop9: detected capacity change from 0 to 128 [ 563.898236][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 563.949028][T13517] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 564.019053][T13517] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 564.388239][ T6159] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 564.988813][T13538] bond4: (slave ip6gretap1): making interface the new active one [ 565.018971][T13538] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 565.039897][T13544] netlink: 'syz.9.2424': attribute type 1 has an invalid length. [ 565.154338][T13544] 8021q: adding VLAN 0 to HW filter on device bond5 [ 565.553214][T13551] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.653782][T13551] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.726676][T13551] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.857198][T13551] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.945486][T13556] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2427'. [ 565.986244][T13551] bond5: (slave geneve2): making interface the new active one [ 566.049879][T13551] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 566.074458][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 566.273152][T13567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2429'. [ 566.385195][T13567] device bond5 entered promiscuous mode [ 566.398557][T13567] 8021q: adding VLAN 0 to HW filter on device bond5 [ 566.535371][T13572] 8021q: adding VLAN 0 to HW filter on device bond5 [ 566.585178][T13572] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 566.667686][T13572] bond5: (slave sit1): Error -95 calling set_mac_address [ 567.119206][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2433'. [ 567.191236][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2433'. [ 567.343053][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2433'. [ 567.570634][T13605] lo speed is unknown, defaulting to 1000 [ 567.762724][T13612] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2440'. [ 568.036965][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2440'. [ 568.230784][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.237361][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.899705][T13633] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 569.262630][ T26] audit: type=1804 audit(1781868329.572:447): pid=13650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2450" name="file0" dev="ramfs" ino=65850 res=1 errno=0 [ 569.778241][ T26] audit: type=1326 audit(1781868330.082:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13640 comm="syz.5.2447" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b75d9ce59 code=0x0 [ 571.201876][T13686] 9pnet_fd: Insufficient options for proto=fd [ 571.258903][T13693] overlayfs: failed to clone upperpath [ 572.790847][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2478'. [ 573.764493][T13781] bridge0: port 1(vlan4) entered blocking state [ 573.783830][T13781] bridge0: port 1(vlan4) entered disabled state [ 573.814682][T13781] device vlan4 entered promiscuous mode [ 573.845532][T13781] device bridge_slave_0 entered promiscuous mode [ 573.879648][T13782] team0: Port device xfrm0 removed [ 573.924311][T13782] bond2: (slave veth9): Releasing backup interface [ 573.973669][T13782] bond3: (slave geneve2): Releasing active interface [ 574.010716][T13782] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.040462][T13782] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.070797][T13782] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.097740][T13782] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.134821][T13782] bond4: (slave ip6gretap1): Releasing active interface [ 574.237315][T13782] device vlan4 left promiscuous mode [ 574.285407][T13782] device bridge_slave_0 left promiscuous mode [ 574.334028][T13782] bridge0: port 1(vlan4) entered disabled state [ 574.415226][T13786] netlink: 'syz.9.2490': attribute type 10 has an invalid length. [ 574.468687][T13787] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2490'. [ 574.823004][T13802] loop5: detected capacity change from 0 to 512 [ 574.878123][T13802] EXT4-fs (loop5): #blocks per group too big: 65535 [ 576.812649][T13855] lo speed is unknown, defaulting to 1000 [ 579.953682][T13939] I/O error, dev loop18, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 579.997481][T13939] EXT4-fs (loop18): unable to read superblock [ 581.727478][T13967] loop9: detected capacity change from 0 to 128 [ 581.781674][T13967] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 581.814370][T13970] loop4: detected capacity change from 0 to 1024 [ 581.952961][T13970] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 582.011109][T13970] overlayfs: missing 'lowerdir' [ 582.018371][T13946] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.026790][T13946] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.035422][T13946] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.043869][T13946] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.203820][T13946] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.214933][T13946] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.238222][T13946] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.246728][T13946] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.345678][T13970] EXT4-fs error (device loop4): xattr_find_entry:297: inode #12: comm syz.4.2540: corrupted xattr entries [ 582.403481][ T4772] lo speed is unknown, defaulting to 1000 [ 582.460435][T13963] lo: Caught tx_queue_len zero misconfig [ 582.469264][T10208] EXT4-fs (loop4): unmounting filesystem. [ 582.537469][T13965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2538'. [ 583.025058][T13988] loop5: detected capacity change from 0 to 4096 [ 583.032632][T13988] EXT4-fs: Ignoring removed bh option [ 583.096820][T13988] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 583.105660][T13988] EXT4-fs (loop5): Test dummy encryption mode enabled [ 583.137750][T13988] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 583.689035][ T4282] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 584.299698][T14018] delete_channel: no stack [ 584.307020][T14018] delete_channel: no stack [ 585.317486][T14033] tipc: Failed to remove unknown binding: 66,0,0/0:3209297742/3209297744 [ 585.368177][T14033] tipc: Failed to remove unknown binding: 66,0,0/0:3209297742/3209297743 [ 586.243823][T14047] loop4: detected capacity change from 0 to 512 [ 586.255921][T14042] device syzkaller0 entered promiscuous mode [ 586.414678][T14047] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 586.459587][T14047] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 586.499863][ T5138] EXT4-fs (loop5): unmounting filesystem. [ 587.642732][T14067] netlink: 'syz.9.2567': attribute type 11 has an invalid length. [ 588.521626][T10208] EXT4-fs (loop4): unmounting filesystem. [ 588.750711][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2569'. [ 588.948410][T14075] bond0: option arp_all_targets: invalid value (8) [ 589.628189][T14078] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2570'. [ 590.076173][T14104] ieee802154 phy0 wpan0: encryption failed: -22 [ 591.042660][T14132] loop9: detected capacity change from 0 to 512 [ 591.122646][T14132] EXT4-fs (loop9): orphan cleanup on readonly fs [ 591.179960][T14132] EXT4-fs error (device loop9): ext4_ext_check_inode:520: inode #13: comm syz.9.2584: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48132(4), depth 0(0) [ 591.228512][T14132] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.2584: couldn't read orphan inode 13 (err -117) [ 591.276502][T14132] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 591.315271][T14140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2596'. [ 591.425196][ T7904] EXT4-fs (loop9): unmounting filesystem. [ 591.604036][T14149] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2587'. [ 591.673343][T14150] bridge0: port 1(dummy0) entered blocking state [ 591.696567][T14150] bridge0: port 1(dummy0) entered disabled state [ 591.729371][T14150] device dummy0 entered promiscuous mode [ 591.779490][T14149] netlink: 'syz.9.2587': attribute type 10 has an invalid length. [ 591.787462][T14149] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2587'. [ 591.877952][T14149] bridge0: port 1(dummy0) entered blocking state [ 591.884473][T14149] bridge0: port 1(dummy0) entered forwarding state [ 591.926066][T14149] bridge0: port 1(dummy0) entered disabled state [ 592.209394][ T4282] Bluetooth: hci1: Invalid handle: 0xff00 > 0x0eff [ 592.219432][T14168] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2595'. [ 592.241749][T14170] loop4: detected capacity change from 0 to 256 [ 592.321028][T14170] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 592.403848][T14170] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 592.502257][T14170] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 596.378329][ T41] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 596.808361][ T26] audit: type=1326 audit(1781868357.092:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.9.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c58d9ce59 code=0x7ffc0000 [ 597.176614][ T26] audit: type=1326 audit(1781868357.112:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.9.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c58d9ce59 code=0x7ffc0000 [ 597.678187][ T26] audit: type=1326 audit(1781868357.112:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.9.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c58d9ce59 code=0x7ffc0000 [ 597.818133][ T26] audit: type=1326 audit(1781868357.112:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.9.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c58d9ce59 code=0x7ffc0000 [ 597.908130][ T26] audit: type=1326 audit(1781868357.112:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.9.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9c58d9ce59 code=0x7ffc0000 [ 597.940833][T14267] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2623'. [ 598.008686][T14267] bond1: (slave dummy0): Releasing active interface [ 598.018988][ T26] audit: type=1326 audit(1781868357.112:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.9.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c58d9ce59 code=0x7ffc0000 [ 598.060446][T14267] bridge5: port 1(dummy0) entered blocking state [ 598.103994][T14267] bridge5: port 1(dummy0) entered disabled state [ 598.121973][T14267] device dummy0 entered promiscuous mode [ 598.129775][ T26] audit: type=1326 audit(1781868357.112:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.9.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c58d9ce59 code=0x7ffc0000 [ 598.165422][T14269] netlink: 'syz.8.2623': attribute type 10 has an invalid length. [ 598.185667][T14269] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2623'. [ 598.206433][ T26] audit: type=1326 audit(1781868357.112:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.9.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c58d9ce59 code=0x7ffc0000 [ 598.241375][T14269] bridge5: port 1(dummy0) entered blocking state [ 598.247854][T14269] bridge5: port 1(dummy0) entered forwarding state [ 598.272245][T14269] bridge5: port 1(dummy0) entered disabled state [ 598.283394][ T26] audit: type=1326 audit(1781868357.112:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.9.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c58d9ce59 code=0x7ffc0000 [ 598.343425][T14272] netlink: 'syz.1.2624': attribute type 1 has an invalid length. [ 598.449111][T14272] 8021q: adding VLAN 0 to HW filter on device bond3 [ 598.565629][T14273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.574549][ T26] audit: type=1326 audit(1781868357.112:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.9.2618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9c58d9ce59 code=0x7ffc0000 [ 598.658231][T14273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.697669][T14273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.009338][T14273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.434347][T14273] bond3: (slave geneve2): making interface the new active one [ 599.471226][T14273] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 599.521158][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 599.739018][T14294] 9pnet: p9_errstr2errno: server reported unknown error 000000000000000000000100xffffffffffffffff [ 599.803941][T14297] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2631'. [ 600.062330][T14305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2633'. [ 600.247723][T14275] loop4: detected capacity change from 0 to 4096 [ 600.287841][T14275] EXT4-fs: Ignoring removed nobh option [ 600.293731][T14275] EXT4-fs: Ignoring removed bh option [ 600.304865][T14275] EXT4-fs (loop4): Test dummy encryption mode enabled [ 600.376427][T14275] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 601.336127][T10208] EXT4-fs (loop4): unmounting filesystem. [ 606.140651][T14365] netlink: 'syz.1.2647': attribute type 4 has an invalid length. [ 606.365087][T14372] netlink: 'syz.1.2647': attribute type 4 has an invalid length. [ 607.841215][T14395] lo speed is unknown, defaulting to 1000 [ 610.157794][T14439] loop9: detected capacity change from 0 to 512 [ 610.218775][T14440] netlink: 11 bytes leftover after parsing attributes in process `syz.8.2663'. [ 610.334260][T14439] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.9.2662: corrupted xattr block 95 [ 610.442212][T14439] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.2662: bg 0: block 7: invalid block bitmap [ 610.515992][T14439] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 610.540617][T14439] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2918: inode #11: comm syz.9.2662: corrupted xattr block 95 [ 610.628388][T14439] EXT4-fs warning (device loop9): ext4_evict_inode:301: xattr delete (err -117) [ 610.637709][T14439] EXT4-fs (loop9): 1 orphan inode deleted [ 610.688119][T14439] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 610.873384][ T7904] EXT4-fs (loop9): unmounting filesystem. [ 612.635127][T14487] device syzkaller0 entered promiscuous mode [ 614.350180][T14498] netlink: 'syz.8.2675': attribute type 1 has an invalid length. [ 614.656859][T14498] 8021q: adding VLAN 0 to HW filter on device bond5 [ 614.710010][T14501] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 614.799269][T14507] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.808452][T14507] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.817254][T14507] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.826093][T14507] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.883924][T14507] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.893241][T14507] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.902226][T14507] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.911182][T14507] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.035473][T14510] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.044510][T14510] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.053543][T14510] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.062376][T14510] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.094519][T14510] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.103720][T14510] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.112788][T14510] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.121786][T14510] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.325665][T14498] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 616.752311][T14547] syz.4.2685 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 617.735990][T14572] netlink: 'syz.5.2693': attribute type 1 has an invalid length. [ 617.831348][T14572] 8021q: adding VLAN 0 to HW filter on device bond6 [ 617.892576][T14576] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 618.045826][T14577] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 618.664629][T14592] lo speed is unknown, defaulting to 1000 [ 620.275827][T14625] netlink: 'syz.5.2707': attribute type 4 has an invalid length. [ 620.359139][T14625] netlink: 'syz.5.2707': attribute type 4 has an invalid length. [ 625.081197][T14695] loop5: detected capacity change from 0 to 1024 [ 625.149228][T14695] EXT4-fs: inline encryption not supported [ 625.168327][T14695] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 625.216040][T14695] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 625.380958][T14708] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 625.548121][ T4353] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 625.748081][ T4353] usb 10-1: Using ep0 maxpacket: 32 [ 625.765803][ T4353] usb 10-1: unable to get BOS descriptor or descriptor too short [ 625.793664][ T4353] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 625.818157][ T4353] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 625.858152][ T4353] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 625.887484][ T4353] usb 10-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.921972][ T4353] usb 10-1: config 1 interface 1 has no altsetting 1 [ 625.951020][ T4353] usb 10-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 625.998121][ T4353] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.006315][ T4353] usb 10-1: Product: syz [ 626.044961][ T4353] usb 10-1: Manufacturer: syz [ 626.058317][ T4353] usb 10-1: SerialNumber: syz [ 626.070769][ T5138] EXT4-fs (loop5): unmounting filesystem. [ 626.469528][ T4353] usb 10-1: 0:2 : does not exist [ 626.494392][ T4353] usb 10-1: unable to issue vendor read request (ret = -71) [ 626.560053][ T4353] usb 10-1: unable to issue vendor read request (ret = -71) [ 626.636507][ T4353] usb 10-1: unable to issue vendor read request (ret = -71) [ 626.670661][ T4353] usb 10-1: unable to issue vendor read request (ret = -71) [ 626.774120][ T4353] usb 10-1: USB disconnect, device number 9 [ 626.911375][ T26] kauditd_printk_skb: 68 callbacks suppressed [ 626.911392][ T26] audit: type=1804 audit(1781868387.222:527): pid=14733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2732" name="bus" dev="ramfs" ino=68349 res=1 errno=0 [ 627.037275][ T26] audit: type=1804 audit(1781868387.282:528): pid=14733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2732" name="bus" dev="ramfs" ino=68349 res=1 errno=0 [ 627.211850][T14701] udevd[14701]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 628.383314][T12317] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 628.788148][ T4353] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 628.887706][T14759] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2740'. [ 628.968241][ T4353] usb 6-1: Using ep0 maxpacket: 32 [ 628.975606][ T4353] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 629.014330][ T4353] usb 6-1: config 0 has no interface number 0 [ 629.024001][ T4353] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 629.034841][ T4353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.043943][ T4353] usb 6-1: Product: syz [ 629.048626][ T4353] usb 6-1: Manufacturer: syz [ 629.053623][ T4353] usb 6-1: SerialNumber: syz [ 629.075028][ T4353] usb 6-1: config 0 descriptor?? [ 629.088533][ T4353] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 629.302194][ T4353] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 629.353805][ T4353] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 629.665280][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.672025][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.628214][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 631.639947][ T127] usb 6-1: USB disconnect, device number 16 [ 631.685324][ T127] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 631.768383][ T127] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 631.993159][ T127] quatech2 6-1:0.51: device disconnected [ 633.383609][ T4282] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 634.027270][T13893] bond2: (slave erspan1): Releasing active interface [ 634.035489][T13893] device erspan1 left promiscuous mode [ 634.339034][T13893] bond3: (slave gretap0): Removing an active aggregator [ 634.420042][T13893] bond3: (slave gretap0): Releasing backup interface [ 635.649767][T14843] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2756'. [ 637.658924][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2763'. [ 638.263713][T14868] team0: Port device team_slave_0 removed [ 639.870352][T14895] loop5: detected capacity change from 0 to 8 [ 639.927192][T14895] SQUASHFS error: Failed to read block 0x62: -5 [ 639.934572][T14895] squashfs image failed sanity check [ 640.246845][T13893] device hsr_slave_0 left promiscuous mode [ 640.286868][T13893] device hsr_slave_1 left promiscuous mode [ 640.326770][T13893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.355310][T13893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.404244][T13893] device bridge_slave_1 left promiscuous mode [ 640.415161][T13893] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.279176][T13893] bond4 (unregistering): (slave bond5): Releasing backup interface [ 644.295469][T13893] bond5 (unregistering): Released all slaves [ 644.834360][T13893] bond4 (unregistering): Released all slaves [ 645.271377][T13893] bond3 (unregistering): Released all slaves [ 645.755118][T13893] bond2 (unregistering): Released all slaves [ 645.789543][T13893] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 645.797549][T13893] device vcan1 left promiscuous mode [ 646.102857][T13893] bond1 (unregistering): Released all slaves [ 647.112406][T13893] team0 (unregistering): Port device team_slave_1 removed [ 647.197699][T13893] team0 (unregistering): Port device team_slave_0 removed [ 647.302754][T13893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.401946][T13893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.005970][T13893] bond0 (unregistering): Released all slaves [ 648.164517][T14904] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 648.258772][T14925] bond6: (slave ip6gretap2): Releasing active interface [ 648.460312][T14926] team0: Mode changed to "activebackup" [ 648.920924][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2791'. [ 650.351497][T15011] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2798'. [ 650.906222][T15026] tipc: Failed to remove unknown binding: 66,0,0/0:2549850232/2549850234 [ 650.931870][T15026] tipc: Failed to remove unknown binding: 66,0,0/0:2549850232/2549850233 [ 650.982896][T15026] tipc: Failed to remove unknown binding: 66,0,0/0:2549850232/2549850234 [ 651.008792][T15026] tipc: Failed to remove unknown binding: 66,0,0/0:2549850232/2549850233 [ 652.828528][T15070] netlink: 'syz.1.2816': attribute type 1 has an invalid length. [ 653.049886][T15070] 8021q: adding VLAN 0 to HW filter on device bond4 [ 653.142222][T15081] tmpfs: Bad value for 'nr_inodes' [ 653.878819][T15076] bond4: (slave ip6gretap2): making interface the new active one [ 653.909616][T15076] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 654.216656][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2818'. [ 655.515665][T15110] overlayfs: failed to clone upperpath [ 655.731839][T15119] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2829'. [ 655.844510][T15123] MPTCP: kernel_bind error, err=-99 [ 656.479671][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2835'. [ 656.520242][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2835'. [ 656.537634][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2835'. [ 656.576404][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2835'. [ 656.594099][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2835'. [ 658.717803][T15182] netlink: 'syz.5.2847': attribute type 1 has an invalid length. [ 658.801205][T15182] 8021q: adding VLAN 0 to HW filter on device bond7 [ 658.826501][T15184] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.835599][T15184] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.844461][T15184] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.853504][T15184] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.865027][T15184] bond7: (slave geneve3): making interface the new active one [ 658.939880][T15184] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 658.989296][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 659.083164][T15190] Device name cannot be null; rc = [-22] [ 660.400334][T11039] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 661.154789][T15208] netlink: 'syz.4.2856': attribute type 1 has an invalid length. [ 661.263870][T15208] 8021q: adding VLAN 0 to HW filter on device bond2 [ 661.299278][T15210] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2855'. [ 661.595928][T15216] 8021q: adding VLAN 0 to HW filter on device bond8 [ 661.674334][T15218] loop5: detected capacity change from 0 to 8192 [ 661.825712][T15218] loop5: p1 < > p3[EZD] [ 661.853397][T15218] loop5: p3 start 3238002688 is beyond EOD, truncated [ 662.327173][T14970] udevd[14970]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 662.339912][T15216] bond8 (unregistering): Released all slaves [ 662.394885][T15208] bond2: (slave ip6gretap1): making interface the new active one [ 662.404440][T15208] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 662.730506][T15251] netlink: 'syz.1.2868': attribute type 12 has an invalid length. [ 662.759227][T15251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2868'. [ 662.789977][T15251] bond0: option primary_reselect: invalid value (8) [ 663.033351][T15265] netlink: 'syz.5.2870': attribute type 1 has an invalid length. [ 663.072189][T15265] netlink: 'syz.5.2870': attribute type 2 has an invalid length. [ 666.159526][T15305] veth1_to_team: Caught tx_queue_len zero misconfig [ 669.207291][T15366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.221824][T15366] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.455082][T15366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 669.745148][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2896'. [ 670.509922][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2901'. [ 670.529573][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2901'. [ 671.273077][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2901'. [ 671.285980][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2901'. [ 671.297513][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2901'. [ 671.451278][T15398] overlayfs: failed to clone upperpath [ 671.719731][T15408] loop5: detected capacity change from 0 to 128 [ 671.727141][T15408] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 671.772044][T15408] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 671.851533][T15410] netlink: 'syz.1.2906': attribute type 1 has an invalid length. [ 671.893928][T15410] 8021q: adding VLAN 0 to HW filter on device bond5 [ 671.928497][ T7222] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 673.649909][T15438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2915'. [ 678.347625][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2931'. [ 678.792448][T15521] device bond6 entered promiscuous mode [ 678.886277][T15521] 8021q: adding VLAN 0 to HW filter on device bond6 [ 679.051341][T15524] 8021q: adding VLAN 0 to HW filter on device bond6 [ 679.109841][T15524] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 679.186829][T15524] bond6: (slave ip6gre1): Error -95 calling set_mac_address [ 679.650410][T15555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2939'. [ 681.928898][T15589] device ip6gre1 entered promiscuous mode [ 683.079668][ T4282] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 684.850354][T15643] loop9: detected capacity change from 0 to 256 [ 685.409708][ T4772] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 686.260094][ T4772] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 686.273013][ T4772] usb 10-1: config 0 has no interface number 0 [ 686.290143][ T4772] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 686.314860][ T4772] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.350060][ T4772] usb 10-1: Product: syz [ 686.354371][ T4772] usb 10-1: Manufacturer: syz [ 686.388180][ T4772] usb 10-1: SerialNumber: syz [ 686.417589][ T4772] usb 10-1: config 0 descriptor?? [ 687.292436][ T4772] usb 10-1: Found UVC 0.08 device syz (046d:0823) [ 687.305753][ T4772] usb 10-1: No valid video chain found. [ 687.320619][ T4772] usb 10-1: USB disconnect, device number 10 [ 688.125572][T15676] loop9: detected capacity change from 0 to 512 [ 688.353164][T15676] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 688.442630][T15676] EXT4-fs (loop9): orphan cleanup on readonly fs [ 688.465223][T15676] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3861: comm syz.9.2967: Allocating blocks 41-42 which overlap fs metadata [ 688.496030][T15676] Quota error (device loop9): write_blk: dquota write failed [ 688.505355][T15676] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 688.515805][T15676] EXT4-fs error (device loop9): ext4_acquire_dquot:6841: comm syz.9.2967: Failed to acquire dquot type 0 [ 688.529813][T15676] EXT4-fs error (device loop9): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 688.555390][T15676] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #12: comm syz.9.2967: corrupted inode contents [ 688.578104][T15676] EXT4-fs error (device loop9): ext4_dirty_inode:6156: inode #12: comm syz.9.2967: mark_inode_dirty error [ 688.623703][T15676] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #12: comm syz.9.2967: corrupted inode contents [ 688.788267][T15676] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #12: comm syz.9.2967: mark_inode_dirty error [ 688.817273][T15676] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #12: comm syz.9.2967: corrupted inode contents [ 688.893395][T15676] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 689.566511][T15676] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #12: comm syz.9.2967: corrupted inode contents [ 689.658879][T15676] EXT4-fs error (device loop9): ext4_truncate:4325: inode #12: comm syz.9.2967: mark_inode_dirty error [ 689.727796][T15676] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 689.798745][T15676] EXT4-fs (loop9): 1 truncate cleaned up [ 689.805063][T15676] EXT4-fs (loop9): pa ffff8880400bd9a0: logic 1, phys. 41, len 23 [ 689.813024][T15676] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 689.940845][T15676] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 691.019358][ T7904] EXT4-fs (loop9): unmounting filesystem. [ 691.101320][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.107681][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.488948][ T6172] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 694.721700][T15730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2981'. [ 694.881530][T15730] device bond3 entered promiscuous mode [ 694.887328][T15730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 695.327470][T15742] netlink: 'syz.1.2983': attribute type 4 has an invalid length. [ 695.694296][T15744] netlink: 'syz.1.2983': attribute type 4 has an invalid length. [ 695.845239][T15745] 8021q: adding VLAN 0 to HW filter on device bond3 [ 695.871495][T15745] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 695.912990][T15745] bond3: (slave ip6gre1): Error -95 calling set_mac_address [ 695.956776][T15744] netlink: 'syz.1.2983': attribute type 4 has an invalid length. [ 696.348787][T15762] bridge0: port 1(vlan6) entered blocking state [ 696.378383][T15762] bridge0: port 1(vlan6) entered disabled state [ 696.385754][T15762] device vlan6 entered promiscuous mode [ 696.399972][T15762] device bond0 entered promiscuous mode [ 698.160490][T15776] xt_recent: hitcount (33554435) is larger than allowed maximum (255) [ 699.939701][T15804] netlink: 'syz.8.2998': attribute type 49 has an invalid length. [ 700.067955][T15804] device ip6gretap0 entered promiscuous mode [ 700.281029][T15811] device team0 entered promiscuous mode [ 700.306613][T15811] device team_slave_0 entered promiscuous mode [ 700.326607][T15811] device team_slave_1 entered promiscuous mode [ 700.354616][T15811] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 700.389595][T15811] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 700.411639][T15814] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2999'. [ 700.463287][T15814] device bond8 entered promiscuous mode [ 700.478434][T15814] 8021q: adding VLAN 0 to HW filter on device bond8 [ 700.510212][T15815] bridge0: port 3(vlan3) entered blocking state [ 700.558208][T15815] bridge0: port 3(vlan3) entered disabled state [ 700.586082][T15815] device vlan3 entered promiscuous mode [ 700.727485][T15815] device bond0 entered promiscuous mode [ 700.896932][T15815] device bond_slave_0 entered promiscuous mode [ 700.930083][T15815] device bond_slave_1 entered promiscuous mode [ 700.966417][T15815] device macvlan2 entered promiscuous mode [ 701.167462][T15821] 8021q: adding VLAN 0 to HW filter on device bond8 [ 701.226999][T15821] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 701.290553][T15821] bond8: (slave ip6gre1): Error -95 calling set_mac_address [ 701.560427][T15845] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 704.569483][T15911] x_tables: duplicate underflow at hook 2 [ 705.719681][T15935] netlink: 212884 bytes leftover after parsing attributes in process `syz.8.3026'. [ 707.516648][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3029'. [ 708.206508][T15972] autofs4:pid:15972:autofs_fill_super: called with bogus options [ 708.832058][ T26] audit: type=1804 audit(1781868469.142:529): pid=15970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3037" name="/newroot/531/file1" dev="fuse" ino=1 res=1 errno=0 [ 708.883535][ T26] audit: type=1800 audit(1781868469.172:530): pid=15970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3037" name="/" dev="fuse" ino=1 res=0 errno=0 [ 709.426568][T16000] netlink: 'syz.1.3043': attribute type 11 has an invalid length. [ 709.452701][T15994] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 710.451376][T16014] loop9: detected capacity change from 0 to 16 [ 710.928799][T16014] erofs: (device loop9): mounted with root inode @ nid 36. [ 711.196295][ T4282] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 711.250811][T16014] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 711.267508][ T26] audit: type=1800 audit(1781868471.572:531): pid=16014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3046" name="file2" dev="loop9" ino=89 res=0 errno=0 [ 713.912778][T16056] loop5: detected capacity change from 0 to 512 [ 714.036114][T16056] EXT4-fs (loop5): Test dummy encryption mode enabled [ 714.817322][T16056] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 714.944452][T16056] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 715.048047][T16056] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 715.894809][ T5138] EXT4-fs (loop5): unmounting filesystem. [ 716.178374][ T26] audit: type=1326 audit(1781868476.482:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16075 comm="syz.5.3058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b75d9ce59 code=0x7fc00000 [ 716.308544][ T26] audit: type=1326 audit(1781868476.482:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16075 comm="syz.5.3058" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8b75d9ce59 code=0x7fc00000 [ 717.042112][ T4347] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 717.238308][ T4347] usb 10-1: Using ep0 maxpacket: 16 [ 717.245898][ T4347] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 717.296064][ T4347] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 57357, setting to 1024 [ 717.499281][ T4347] usb 10-1: config 0 interface 0 has no altsetting 0 [ 717.506118][ T4347] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 717.515686][ T4347] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.526221][ T4347] usb 10-1: config 0 descriptor?? [ 718.779062][ T4347] hid (null): report_id 0 is invalid [ 718.795475][ T4347] hid (null): unknown global tag 0xe [ 718.814981][ T4347] hid (null): unknown global tag 0xc [ 718.820706][ T4347] hid (null): unknown global tag 0xc [ 718.830826][ T4347] hid (null): unknown global tag 0xe [ 719.006123][ T4645] usb 10-1: USB disconnect, device number 11 [ 719.021151][ T4347] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 719.250397][ T4347] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.271387][ T4347] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 719.309834][ T4347] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 719.320804][ T4347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 719.329731][ T4347] usb 6-1: SerialNumber: syz [ 719.556900][ T4347] usb 6-1: 0:2 : does not exist [ 719.604509][ T4347] usb 6-1: USB disconnect, device number 17 [ 719.868651][T14970] udevd[14970]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 720.050294][T16169] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3079'. [ 722.435246][T16213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3090'. [ 724.342125][T16238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3095'. [ 725.658536][ T6176] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 728.732247][T16299] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 729.188937][T16304] tipc: Started in network mode [ 729.194372][T16304] tipc: Node identity 76657468115f, cluster identity 4711 [ 729.236703][T16304] tipc: Enabled bearer , priority 0 [ 730.354315][ T127] tipc: Node number set to 1731884136 [ 731.455427][T16341] virt_wifi0 speed is unknown, defaulting to 1000 [ 731.463291][T16341] virt_wifi0 speed is unknown, defaulting to 1000 [ 731.477250][T16341] virt_wifi0 speed is unknown, defaulting to 1000 [ 731.533905][T16341] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 731.725184][T16341] virt_wifi0 speed is unknown, defaulting to 1000 [ 731.738301][T16341] virt_wifi0 speed is unknown, defaulting to 1000 [ 731.751357][T16341] virt_wifi0 speed is unknown, defaulting to 1000 [ 731.763989][T16341] virt_wifi0 speed is unknown, defaulting to 1000 [ 731.775122][T16341] virt_wifi0 speed is unknown, defaulting to 1000 [ 734.693475][T16411] tipc: Enabling of bearer rejected, failed to enable media [ 734.710296][T16396] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3120'. [ 739.206886][T16475] device syzkaller0 entered promiscuous mode [ 739.262491][T16478] tipc: Started in network mode [ 739.267456][T16478] tipc: Node identity 26993f8e9453, cluster identity 4711 [ 739.285730][T16482] loop9: detected capacity change from 0 to 256 [ 739.312559][T16478] tipc: Enabled bearer , priority 0 [ 739.364361][T16472] tipc: Resetting bearer [ 739.409099][T16482] FAT-fs (loop9): Directory bread(block 64) failed [ 739.453163][T16482] FAT-fs (loop9): Directory bread(block 65) failed [ 739.494080][T16482] FAT-fs (loop9): Directory bread(block 66) failed [ 739.545371][T16482] FAT-fs (loop9): Directory bread(block 67) failed [ 739.551701][T16472] tipc: Disabling bearer [ 739.570186][T16482] FAT-fs (loop9): Directory bread(block 68) failed [ 739.603342][T16486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3145'. [ 739.632873][T16482] FAT-fs (loop9): Directory bread(block 69) failed [ 739.668363][ T26] audit: type=1326 audit(1781868499.982:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16487 comm="syz.8.3142" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4347d9ce59 code=0x7ffc0000 [ 739.705515][T16482] FAT-fs (loop9): Directory bread(block 70) failed [ 739.728362][T16482] FAT-fs (loop9): Directory bread(block 71) failed [ 739.735040][T16482] FAT-fs (loop9): Directory bread(block 72) failed [ 739.791583][ T26] audit: type=1326 audit(1781868499.982:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16487 comm="syz.8.3142" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4347d9ce59 code=0x7ffc0000 [ 739.816450][ T26] audit: type=1326 audit(1781868499.982:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16487 comm="syz.8.3142" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4347d9ce59 code=0x7ffc0000 [ 739.842377][T16482] FAT-fs (loop9): Directory bread(block 73) failed [ 739.853559][ T26] audit: type=1326 audit(1781868499.982:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16487 comm="syz.8.3142" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4347d9ce59 code=0x7ffc0000 [ 739.937136][ T26] audit: type=1326 audit(1781868499.982:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16487 comm="syz.8.3142" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4347d9ce59 code=0x7ffc0000 [ 740.058374][ T26] audit: type=1326 audit(1781868499.982:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16487 comm="syz.8.3142" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4347d9ce59 code=0x7ffc0000 [ 740.188606][ T26] audit: type=1326 audit(1781868499.982:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16487 comm="syz.8.3142" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4347d9ce59 code=0x7ffc0000 [ 740.270212][ T26] audit: type=1326 audit(1781868499.982:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16487 comm="syz.8.3142" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4347d9ce59 code=0x7ffc0000 [ 740.366967][T16503] tipc: Started in network mode [ 740.391660][ T26] audit: type=1326 audit(1781868500.012:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16487 comm="syz.8.3142" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4347d9ce59 code=0x7ffc0000 [ 740.438451][T16503] tipc: Node identity 080211000001, cluster identity 4711 [ 740.472783][T16503] tipc: Enabled bearer , priority 0 [ 740.498410][ T26] audit: type=1326 audit(1781868500.012:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16487 comm="syz.8.3142" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4347d9ce59 code=0x7ffc0000 [ 740.528362][T16509] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 740.839287][T16527] 9pnet_virtio: no channels available for device syz [ 741.230585][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3156'. [ 741.239796][T16535] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3156'. [ 741.254102][T16535] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 741.510093][ T22] tipc: Node number set to 134418688 [ 741.538236][T16544] tipc: Enabling of bearer rejected, already enabled [ 741.689928][T16546] netlink: 'syz.1.3158': attribute type 1 has an invalid length. [ 741.909863][T16556] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3161'. [ 741.950371][T16556] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3161'. [ 743.188331][T16587] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3169'. [ 743.316374][T16590] bond9: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 743.834173][T16590] bond9: (slave ip_vti0): Error -95 calling set_mac_address [ 744.452325][T16626] tipc: Failed to remove unknown binding: 66,0,0/0:3352327071/3352327072 [ 746.176946][T16657] SET target dimension over the limit! [ 752.178945][T16724] siw: device registration error -23 [ 752.542307][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.548918][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.831031][T16723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3201'. [ 753.030480][T16737] bond8: (slave veth9): Enslaving as an active interface with an up link [ 753.354317][T16747] bridge0: port 4(vxlan0) entered blocking state [ 753.413549][T16747] bridge0: port 4(vxlan0) entered disabled state [ 753.468621][T16747] device vxlan0 entered promiscuous mode [ 755.156686][T16770] tipc: Enabling of bearer rejected, already enabled [ 755.327223][T16780] tipc: Enabling of bearer rejected, failed to enable media [ 755.382077][T16779] MPTCP: kernel_bind error, err=-99 [ 757.305400][T16813] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=9 (18 ns) > initial count (12 ns). Using initial count to start timer. [ 758.280063][T16848] tipc: Enabling of bearer rejected, failed to enable media [ 759.722328][ T7226] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 763.911322][T16873] overlayfs: failed to clone upperpath [ 768.584156][T16931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3252'. [ 768.874423][T16931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3252'. [ 768.916325][T16931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3252'. [ 770.032354][T16931] bond5: (slave veth3): Enslaving as an active interface with an up link [ 773.349886][T16974] tipc: Enabling of bearer rejected, failed to enable media [ 777.209712][T17022] tipc: Enabling of bearer rejected, already enabled [ 779.259776][T17048] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3277'. [ 780.027348][T17063] loop9: detected capacity change from 0 to 128 [ 780.120083][T17063] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 780.132692][T17063] hpfs: filesystem error: improperly stopped [ 780.138988][T17063] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 780.146948][T17063] hpfs: You really don't want any checks? You are crazy... [ 780.157998][T17063] hpfs: hpfs_map_sector(): read error [ 780.163455][T17063] hpfs: code page support is disabled [ 780.177447][T17063] hpfs: hpfs_map_4sectors(): unaligned read [ 780.186322][T17063] hpfs: hpfs_map_4sectors(): unaligned read [ 780.192469][T17063] hpfs: filesystem error: unable to find root dir [ 781.319695][T17078] tipc: Enabling of bearer rejected, already enabled [ 781.356720][T17082] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3296'. [ 781.380147][T17082] device ip6gre1 entered promiscuous mode [ 781.689559][T17084] netlink: 'syz.1.3296': attribute type 6 has an invalid length. [ 782.345175][T17084] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3296'. [ 784.983665][T17106] Process accounting resumed [ 785.051492][T17142] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3298'. [ 786.778995][T17172] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3308'. [ 786.826858][T17172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3308'. [ 787.088295][T17169] 9pnet: p9_errstr2errno: server reported unknown error 'I$۷= [ 788.678215][T17187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3311'. [ 790.483427][T17187] bridge4: port 1(veth11) entered blocking state [ 790.490947][T17187] bridge4: port 1(veth11) entered disabled state [ 790.508645][T17187] device veth11 entered promiscuous mode [ 790.781961][T17203] bridge4: port 2(veth0_to_bond) entered blocking state [ 790.808246][T17203] bridge4: port 2(veth0_to_bond) entered disabled state [ 790.835558][T17203] device veth0_to_bond entered promiscuous mode [ 791.149251][T17217] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3319'. [ 791.193960][ T26] kauditd_printk_skb: 46 callbacks suppressed [ 791.193975][ T26] audit: type=1326 audit(1781868551.502:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17220 comm="syz.5.3321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 791.308203][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3319'. [ 791.317216][T17217] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3319'. [ 791.326946][ T26] audit: type=1326 audit(1781868551.542:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17220 comm="syz.5.3321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 791.588079][ T26] audit: type=1326 audit(1781868551.542:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17220 comm="syz.5.3321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 791.612393][ T26] audit: type=1326 audit(1781868551.542:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17220 comm="syz.5.3321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 791.654136][ T26] audit: type=1326 audit(1781868551.542:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17220 comm="syz.5.3321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 791.685169][T17217] bond10: (slave veth11): Enslaving as an active interface with an up link [ 792.791271][ T26] audit: type=1326 audit(1781868551.542:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17220 comm="syz.5.3321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 792.966893][ T26] audit: type=1326 audit(1781868551.542:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17220 comm="syz.5.3321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 793.223448][ T26] audit: type=1326 audit(1781868551.542:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17220 comm="syz.5.3321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 793.399985][ T26] audit: type=1326 audit(1781868551.542:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17220 comm="syz.5.3321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 793.566328][ T26] audit: type=1326 audit(1781868551.542:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17220 comm="syz.5.3321" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f8b75d9ce59 code=0x7ffc0000 [ 793.827129][T17247] tipc: Enabling of bearer rejected, failed to enable media [ 795.250741][T17276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3331'. [ 795.418138][ T7220] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 795.799306][T17279] bridge2: port 1(veth5) entered blocking state [ 795.805779][T17279] bridge2: port 1(veth5) entered disabled state [ 795.813441][T17279] device veth5 entered promiscuous mode [ 795.895958][T17276] bridge2: port 2(veth0_to_bond) entered blocking state [ 795.924396][T17276] bridge2: port 2(veth0_to_bond) entered disabled state [ 795.964355][T17276] device veth0_to_bond entered promiscuous mode [ 796.092051][T17291] Invalid option length (1040762) for dns_resolver key [ 797.996512][T17295] netlink: 'syz.9.3335': attribute type 1 has an invalid length. [ 798.083944][T17295] 8021q: adding VLAN 0 to HW filter on device bond11 [ 798.329227][T17308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3338'. [ 798.480444][T17308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3338'. [ 798.495893][T17308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3338'. [ 798.568858][T17308] bond9: (slave veth13): Enslaving as an active interface with an up link [ 798.644663][T17319] bond5: (slave geneve2): Releasing active interface [ 799.170347][T17325] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3340'. [ 799.756983][T17319] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.806045][T17319] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.835598][T17319] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.875731][T17319] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.016216][T17319] bond10: (slave veth11): Releasing backup interface [ 802.143086][T17369] netlink: 'syz.8.3353': attribute type 2 has an invalid length. [ 802.190471][T17369] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3353'. [ 802.290406][T17381] sctp: [Deprecated]: syz.9.3359 (pid 17381) Use of struct sctp_assoc_value in delayed_ack socket option. [ 802.290406][T17381] Use struct sctp_sack_info instead [ 802.512461][T17388] loop9: detected capacity change from 0 to 256 [ 802.525551][T17388] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 802.536289][T17388] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 802.551256][T17388] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 803.001278][T17407] device syzkaller0 entered promiscuous mode [ 803.398775][T17421] netlink: 1335 bytes leftover after parsing attributes in process `syz.9.3368'. [ 805.769435][T17446] netlink: 'syz.1.3374': attribute type 1 has an invalid length. [ 806.937353][T17446] 8021q: adding VLAN 0 to HW filter on device bond10 [ 807.058690][T17446] bond10: (slave gretap1): making interface the new active one [ 807.093989][T17446] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 807.126252][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 807.126266][ T26] audit: type=1326 audit(1781868567.432:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17449 comm="syz.5.3376" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b75d9ce59 code=0x0 [ 807.138503][ T6148] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 807.748250][ T4767] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 807.907996][ T4767] usb 10-1: device descriptor read/64, error -71 [ 808.302734][ T4767] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 809.158059][ T4767] usb 10-1: device descriptor read/64, error -71 [ 809.168961][T17494] netlink: 'syz.4.3385': attribute type 2 has an invalid length. [ 809.373026][ T4767] usb usb10-port1: attempt power cycle [ 810.389378][T17507] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3389'. [ 810.445470][T17507] 8021q: adding VLAN 0 to HW filter on device bond12 [ 810.497120][T17507] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3389'. [ 810.539832][T17507] device bond12 entered promiscuous mode [ 810.633150][T17514] device dummy0 left promiscuous mode [ 810.664244][T17514] device dummy0 entered promiscuous mode [ 810.696713][T17514] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 812.023569][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3398'. [ 812.174449][T17546] bridge3: port 1(veth11) entered blocking state [ 812.206576][T17546] bridge3: port 1(veth11) entered disabled state [ 812.232202][T17546] device veth11 entered promiscuous mode [ 812.263608][T17543] bridge3: port 2(veth0_to_bond) entered blocking state [ 812.291057][T17543] bridge3: port 2(veth0_to_bond) entered disabled state [ 812.309614][T17543] device veth0_to_bond entered promiscuous mode [ 812.349083][T17549] netlink: 1335 bytes leftover after parsing attributes in process `syz.8.3400'. [ 812.640894][T17567] device veth0_to_bond left promiscuous mode [ 812.647295][T17567] bridge3: port 2(veth0_to_bond) entered disabled state [ 812.790113][T17567] bond7: (slave geneve3): Releasing active interface [ 813.308885][T17567] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.379450][T17567] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.498086][T17567] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.507032][T17567] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.713391][T17567] device vlan6 left promiscuous mode [ 813.732756][T17567] device bond0 left promiscuous mode [ 813.766023][T17567] bridge0: port 1(vlan6) entered disabled state [ 813.817829][T17567] device veth11 left promiscuous mode [ 813.838677][T17567] bridge3: port 1(veth11) entered disabled state [ 813.997113][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.003575][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.032897][T17606] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 815.064073][T17606] device syzkaller0 entered promiscuous mode [ 815.686653][T17577] loop9: detected capacity change from 0 to 40427 [ 815.763341][T17577] F2FS-fs (loop9): build fault injection attr: rate: 771, type: 0x3ffff [ 816.578503][T17577] F2FS-fs (loop9): invalid crc value [ 816.588329][T17577] F2FS-fs (loop9): Failed to start F2FS issue_checkpoint_thread (-12) [ 816.685174][T17628] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3415'. [ 816.806045][T17631] device bond9 entered promiscuous mode [ 818.390320][T17658] device bridge_slave_0 left promiscuous mode [ 818.427046][T17658] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.496109][T17658] device bridge_slave_1 left promiscuous mode [ 818.553131][T17658] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.685252][T17658] bond0: (slave bond_slave_0): Releasing backup interface [ 818.854805][T17658] bond0: (slave bond_slave_1): Releasing backup interface [ 819.289876][T17658] team0: Port device team_slave_1 removed [ 819.331799][T17671] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 819.343447][T17658] bond1: (slave veth3): Releasing active interface [ 819.352279][T17658] bond3: (slave geneve2): Releasing active interface [ 819.372008][T17658] bond4: (slave veth11): Releasing backup interface [ 819.409686][T17658] bond5: (slave ip6gretap1): Releasing active interface [ 819.448721][T17664] team0: Mode changed to "activebackup" [ 820.031572][T17696] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3432'. [ 821.639698][T17707] device syzkaller0 entered promiscuous mode [ 821.655086][T17708] sctp: [Deprecated]: syz.1.3434 (pid 17708) Use of struct sctp_assoc_value in delayed_ack socket option. [ 821.655086][T17708] Use struct sctp_sack_info instead [ 822.410467][ T4645] usb 10-1: new low-speed USB device number 15 using dummy_hcd [ 822.666002][ T4645] usb 10-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 822.801935][ T4645] usb 10-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 822.814455][ T4645] usb 10-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 822.839253][ T4645] usb 10-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 822.859092][ T4645] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.084187][ T4645] usb 10-1: string descriptor 0 read error: -71 [ 823.184693][ T4645] usb 10-1: USB disconnect, device number 15 [ 823.335691][T17730] device syz_tun left promiscuous mode [ 823.345145][T17730] bridge0: port 3(syz_tun) entered disabled state [ 823.367073][T17730] device bridge_slave_0 left promiscuous mode [ 823.388596][T17730] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.580658][T17730] device bridge_slave_1 left promiscuous mode [ 824.037210][T17736] loop9: detected capacity change from 0 to 512 [ 824.044662][T17736] EXT4-fs: Ignoring removed oldalloc option [ 824.050773][T17736] EXT4-fs: Ignoring removed bh option [ 824.080441][T17736] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 824.206066][T17745] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 824.206066][T17745] The task syz.5.3440 (17745) triggered the difference, watch for misbehavior. [ 824.358272][T17736] EXT4-fs (loop9): 1 truncate cleaned up [ 824.364073][T17736] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 824.388102][T16976] udevd[16976]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 824.509871][T17730] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.633290][T17730] device veth0_to_bond left promiscuous mode [ 824.639727][T17730] bridge2: port 2(veth0_to_bond) entered disabled state [ 824.661203][T17730] bond0: (slave bond_slave_0): Releasing backup interface [ 824.677614][ T7904] EXT4-fs (loop9): unmounting filesystem. [ 824.718465][ C0] vkms_vblank_simulate: vblank timer overrun [ 824.729117][T17730] bond0: (slave bond_slave_1): Releasing backup interface [ 824.769884][T17749] netlink: 'syz.1.3442': attribute type 2 has an invalid length. [ 824.833514][T17747] binder: 17733:17747 ioctl 4018620d 0 returned -22 [ 824.863417][T17730] team0: Port device team_slave_0 removed [ 824.930476][T17730] team0: Port device team_slave_1 removed [ 824.936653][T17730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.022327][T17730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.277881][T17755] dns_resolver: Unsupported content type (152) [ 826.300027][T17730] team0: Port device netdevsim0 removed [ 826.332270][T17730] bond2: (slave ip6gretap1): Releasing active interface [ 826.386682][T17730] bond5: (slave veth3): Releasing backup interface [ 826.448406][T17730] device veth5 left promiscuous mode [ 826.453956][T17730] bridge2: port 1(veth5) entered disabled state [ 826.563335][T17732] team0: Mode changed to "activebackup" [ 826.618398][T17762] netlink: 'syz.5.3446': attribute type 1 has an invalid length. [ 826.795327][T17762] device bond10 entered promiscuous mode [ 826.860799][T17762] 8021q: adding VLAN 0 to HW filter on device bond10 [ 826.899252][T17768] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3446'. [ 826.941728][T17772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3447'. [ 827.032626][T17767] bond10: (slave bridge4): making interface the new active one [ 827.068084][T17767] device bridge4 entered promiscuous mode [ 827.079574][T17767] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 827.112156][ T7221] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 830.647557][T17817] loop5: detected capacity change from 0 to 4096 [ 830.858591][T17817] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 831.974877][T17817] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 832.428094][ T22] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 833.258425][ T22] usb 6-1: device descriptor read/64, error -71 [ 833.502593][ T5138] EXT4-fs (loop5): unmounting filesystem. [ 834.266398][T17896] netlink: 'syz.5.3470': attribute type 1 has an invalid length. [ 834.433437][T17894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3472'. [ 834.778974][T17907] device ip6erspan0 entered promiscuous mode [ 836.167612][T17918] ip6t_srh: unknown srh invflags 4449 [ 840.809696][T17960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3488'. [ 840.905765][T17963] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3490'. [ 841.082429][T17963] lo speed is unknown, defaulting to 1000 [ 841.116374][T17963] virt_wifi0 speed is unknown, defaulting to 1000 [ 841.308229][ T22] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 841.498062][ T22] usb 6-1: Using ep0 maxpacket: 8 [ 841.506343][ T22] usb 6-1: unable to get BOS descriptor or descriptor too short [ 841.558986][ T22] usb 6-1: config index 0 descriptor too short (expected 8192, got 63) [ 841.598505][ T22] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.049257][ T22] usb 6-1: config 0 has no interfaces? [ 842.650112][ T22] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 842.700660][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.744700][ T22] usb 6-1: Product: syz [ 842.805607][ T22] usb 6-1: Manufacturer: syz [ 842.861591][ T22] usb 6-1: SerialNumber: syz [ 843.032060][ T22] usb 6-1: config 0 descriptor?? [ 843.263705][T17993] loop9: detected capacity change from 0 to 512 [ 843.607257][ T22] usb 6-1: USB disconnect, device number 20 [ 845.654387][T18020] netlink: 'syz.9.3502': attribute type 2 has an invalid length. [ 849.483252][T18044] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3509'. [ 850.646235][T18072] loop5: detected capacity change from 0 to 512 [ 850.658546][T18070] loop9: detected capacity change from 0 to 512 [ 850.690214][T18068] netlink: 'syz.8.3515': attribute type 14 has an invalid length. [ 850.709206][T18072] EXT4-fs: Ignoring removed mblk_io_submit option [ 850.738333][T18068] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3515'. [ 850.747394][T18068] bond0: option xmit_hash_policy: invalid value (8) [ 850.757065][T18070] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 850.787324][T18072] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 850.874082][T18070] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.3514: invalid indirect mapped block 9 (level 0) [ 850.944231][T18072] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.3516: corrupted in-inode xattr [ 850.953231][T18070] EXT4-fs (loop9): 1 truncate cleaned up [ 850.965801][T18072] EXT4-fs (loop5): Remounting filesystem read-only [ 850.993011][T18072] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.3516: couldn't read orphan inode 15 (err -117) [ 851.008616][T18070] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 851.099012][T18072] EXT4-fs (loop5): Remounting filesystem read-only [ 851.116109][T18072] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 852.052053][ T5138] EXT4-fs (loop5): unmounting filesystem. [ 852.466095][ T7904] EXT4-fs (loop9): unmounting filesystem. [ 858.431752][ T6180] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 859.392856][T18161] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3539'. [ 859.429294][T18162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3538'. [ 859.993173][T18181] loop5: detected capacity change from 0 to 128 [ 860.036209][T18181] FAT-fs (loop5): Unrecognized mount option "" or missing value [ 862.119448][T18221] fuse: Bad value for 'fd' [ 862.359827][T18228] netem: change failed [ 863.292373][T18240] loop5: detected capacity change from 0 to 512 [ 863.377346][T18241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3557'. [ 863.435325][T18240] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 863.445879][T18243] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3558'. [ 863.501740][ C0] vkms_vblank_simulate: vblank timer overrun [ 863.508810][T18243] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3558'. [ 863.518457][T18243] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3558'. [ 865.446137][T18259] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 865.830962][ T5138] EXT4-fs (loop5): unmounting filesystem. [ 867.070716][ T26] audit: type=1800 audit(2000000025.870:645): pid=18276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3564" name="bus" dev="ramfs" ino=77866 res=0 errno=0 [ 867.548246][T18303] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 867.555542][T18303] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 868.798005][ T22] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 868.821544][T18303] vhci_hcd vhci_hcd.0: Device attached [ 868.913181][T18306] vhci_hcd: connection reset by peer [ 868.956402][T11038] vhci_hcd: stop threads [ 868.979502][T11038] vhci_hcd: release socket [ 869.006589][T11038] vhci_hcd: disconnect device [ 873.278792][T18368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3584'. [ 874.048143][ T22] vhci_hcd: vhci_device speed not set [ 875.478505][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.484927][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.136938][T18414] loop9: detected capacity change from 0 to 512 [ 876.428273][T18414] FAT-fs (loop9): FAT read failed (blocknr 128) [ 878.114948][T18445] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 879.080330][ T4282] Bluetooth: Unknown LE signaling command 0x1d [ 879.086646][ T4282] Bluetooth: Wrong link type (-22) [ 889.655425][T18517] netlink: 'syz.5.3622': attribute type 1 has an invalid length. [ 890.152448][ T4332] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 890.357398][T18517] 8021q: adding VLAN 0 to HW filter on device bond11 [ 890.598058][T18526] bond11: (slave gretap1): making interface the new active one [ 890.616096][T18526] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 891.634674][ T6176] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready [ 891.951777][T18529] bond11: (slave veth13): Enslaving as an active interface with a down link [ 891.983647][T18517] device veth0_virt_wifi entered promiscuous mode [ 891.993864][T18517] bond11: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 899.291341][T18591] overlayfs: failed to resolve './file0': -2 [ 900.019870][T18616] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3642'. [ 900.236681][T18618] "syz.1.3644" (18618) uses obsolete ecb(arc4) skcipher [ 901.351507][T18629] loop5: detected capacity change from 0 to 512 [ 901.511117][T18629] [ 901.513551][T18629] ====================================================== [ 901.520604][T18629] WARNING: possible circular locking dependency detected [ 901.527717][T18629] syzkaller #0 Not tainted [ 901.532162][T18629] ------------------------------------------------------ [ 901.539212][T18629] syz.5.3634/18629 is trying to acquire lock: [ 901.545304][T18629] ffff888076c5cc18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x20f/0x2f40 [ 901.555556][T18629] [ 901.555556][T18629] but task is already holding lock: [ 901.562946][T18629] ffff8880401d4700 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 901.572904][T18629] [ 901.572904][T18629] which lock already depends on the new lock. [ 901.572904][T18629] [ 901.583350][T18629] [ 901.583350][T18629] the existing dependency chain (in reverse order) is: [ 901.592665][T18629] [ 901.592665][T18629] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 901.600289][T18629] down_write+0x36/0x60 [ 901.605017][T18629] ext4_destroy_inline_data+0x24/0xe0 [ 901.610975][T18629] ext4_writepages+0x670/0x2f40 [ 901.616484][T18629] do_writepages+0x3ba/0x640 [ 901.621715][T18629] filemap_fdatawrite_wbc+0x11e/0x180 [ 901.627715][T18629] filemap_flush+0xe0/0x140 [ 901.632929][T18629] ext4_convert_inline_data+0x18b/0x5f0 [ 901.639087][T18629] ext4_page_mkwrite+0x1c5/0x10d0 [ 901.644695][T18629] do_page_mkwrite+0x16b/0x5c0 [ 901.650136][T18629] wp_page_shared+0x167/0x370 [ 901.655395][T18629] handle_mm_fault+0x1d19/0x3ee0 [ 901.660917][T18629] do_user_addr_fault+0x51f/0xb10 [ 901.666605][T18629] exc_page_fault+0x60/0x100 [ 901.671810][T18629] asm_exc_page_fault+0x22/0x30 [ 901.677244][T18629] copy_user_short_string+0xd/0x40 [ 901.682925][T18629] _copy_to_user+0xea/0x130 [ 901.688083][T18629] do_fcntl+0xe29/0x1270 [ 901.692939][T18629] __se_sys_fcntl+0xc9/0x190 [ 901.698109][T18629] do_syscall_64+0x4c/0xa0 [ 901.703124][T18629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 901.709601][T18629] [ 901.709601][T18629] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 901.718093][T18629] __lock_acquire+0x2d07/0x7d10 [ 901.718167][ T26] audit: type=1326 audit(2000000060.510:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.4.3647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f319ce59 code=0x7ffc0000 [ 901.723540][T18629] lock_acquire+0x1bb/0x4a0 [ 901.752694][T18629] percpu_down_read+0x44/0x1a0 [ 901.758028][T18629] ext4_writepages+0x20f/0x2f40 [ 901.763452][T18629] do_writepages+0x3ba/0x640 [ 901.768620][T18629] __writeback_single_inode+0x156/0x1160 [ 901.774939][T18629] writeback_single_inode+0x3cb/0x8e0 [ 901.780898][T18629] write_inode_now+0x17f/0x210 [ 901.786245][T18629] iput+0x613/0x980 [ 901.790665][T18629] ext4_xattr_block_set+0x249a/0x32b0 [ 901.796694][T18629] ext4_expand_extra_isize_ea+0x120b/0x1dc0 [ 901.803169][T18629] __ext4_expand_extra_isize+0x301/0x3e0 [ 901.809372][T18629] __ext4_mark_inode_dirty+0x47f/0x770 [ 901.815418][T18629] ext4_evict_inode+0xa7f/0x1110 [ 901.820946][T18629] evict+0x4c9/0x8d0 [ 901.825412][T18629] ext4_orphan_cleanup+0xbeb/0x1420 [ 901.831273][T18629] ext4_fill_super+0x6ee3/0x78c0 [ 901.834320][ T26] audit: type=1326 audit(2000000060.510:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.4.3647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f319ce59 code=0x7ffc0000 [ 901.836768][T18629] get_tree_bdev+0x3f1/0x610 [ 901.866109][T18629] vfs_get_tree+0x88/0x270 [ 901.871099][T18629] do_new_mount+0x24a/0xa40 [ 901.876169][T18629] __se_sys_mount+0x2e3/0x3d0 [ 901.881414][T18629] do_syscall_64+0x4c/0xa0 [ 901.886402][T18629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 901.893042][T18629] [ 901.893042][T18629] other info that might help us debug this: [ 901.893042][T18629] [ 901.903318][T18629] Possible unsafe locking scenario: [ 901.903318][T18629] [ 901.906389][ T26] audit: type=1326 audit(2000000060.560:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.4.3647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f319ce59 code=0x7ffc0000 [ 901.910786][T18629] CPU0 CPU1 [ 901.910794][T18629] ---- ---- [ 901.910800][T18629] lock(&ei->xattr_sem); [ 901.910817][T18629] lock(&sbi->s_writepages_rwsem); [ 901.910833][T18629] lock(&ei->xattr_sem); [ 901.964748][T18629] lock(&sbi->s_writepages_rwsem); [ 901.969993][T18629] [ 901.969993][T18629] *** DEADLOCK *** [ 901.969993][T18629] [ 901.972165][ T26] audit: type=1326 audit(2000000060.560:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.4.3647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f98f319ce59 code=0x7ffc0000 [ 901.978158][T18629] 3 locks held by syz.5.3634/18629: [ 901.978171][T18629] #0: ffff88807a36c0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930 [ 902.017579][T18629] #1: ffff88807a36c650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x43c/0x1110 [ 902.027150][T18629] #2: ffff8880401d4700 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 902.036207][ T26] audit: type=1326 audit(2000000060.560:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.4.3647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f319ce59 code=0x7ffc0000 [ 902.037475][T18629] [ 902.037475][T18629] stack backtrace: [ 902.037484][T18629] CPU: 0 PID: 18629 Comm: syz.5.3634 Not tainted syzkaller #0 [ 902.074950][T18629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 902.085058][T18629] Call Trace: [ 902.088381][T18629] [ 902.091360][T18629] dump_stack_lvl+0x188/0x24e [ 902.096093][T18629] ? load_image+0x400/0x400 [ 902.100657][T18629] ? show_regs_print_info+0x12/0x12 [ 902.105905][T18629] ? print_circular_bug+0x12b/0x1a0 [ 902.106477][ T26] audit: type=1326 audit(2000000060.560:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.4.3647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f319ce59 code=0x7ffc0000 [ 902.111138][T18629] check_noncircular+0x296/0x330 [ 902.111173][T18629] ? look_up_lock_class+0x75/0x140 [ 902.111201][T18629] ? add_chain_block+0x940/0x940 [ 902.111231][T18629] ? lockdep_lock+0xf1/0x1f0 [ 902.111262][T18629] ? _find_first_zero_bit+0xcf/0x100 [ 902.160275][T18629] __lock_acquire+0x2d07/0x7d10 [ 902.165193][T18629] ? verify_lock_unused+0x140/0x140 [ 902.169986][ T26] audit: type=1326 audit(2000000060.570:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.4.3647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f319ce59 code=0x7ffc0000 [ 902.170430][T18629] ? verify_lock_unused+0x140/0x140 [ 902.199724][T18629] ? verify_lock_unused+0x140/0x140 [ 902.204991][T18629] ? verify_lock_unused+0x140/0x140 [ 902.210253][T18629] ? verify_lock_unused+0x140/0x140 [ 902.215507][T18629] ? rcu_is_watching+0x11/0xa0 [ 902.220427][T18629] lock_acquire+0x1bb/0x4a0 [ 902.224987][T18629] ? ext4_writepages+0x20f/0x2f40 [ 902.230072][T18629] ? unwind_next_frame+0x1880/0x20b0 [ 902.233039][ T26] audit: type=1326 audit(2000000060.570:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.4.3647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f319ce59 code=0x7ffc0000 [ 902.235396][T18629] ? __might_sleep+0xd0/0xd0 [ 902.264206][T18629] ? read_lock_is_recursive+0x10/0x10 [ 902.269638][T18629] ? mark_lock+0x94/0x320 [ 902.274031][T18629] percpu_down_read+0x44/0x1a0 [ 902.278836][T18629] ? ext4_writepages+0x20f/0x2f40 [ 902.283917][T18629] ext4_writepages+0x20f/0x2f40 [ 902.288821][T18629] ? mark_lock+0x94/0x320 [ 902.293210][T18629] ? verify_lock_unused+0x140/0x140 [ 902.298540][T18629] ? __lock_acquire+0x12f4/0x7d10 [ 902.303619][T18629] ? add_chain_block+0x940/0x940 [ 902.307229][ T26] audit: type=1326 audit(2000000060.570:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.4.3647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f98f319ce59 code=0x7ffc0000 [ 902.308597][T18629] ? mark_lock+0x94/0x320 [ 902.308630][T18629] ? ext4_read_folio+0x370/0x370 [ 902.308655][T18629] ? __lock_acquire+0x13cf/0x7d10 [ 902.347029][T18629] ? __lock_acquire+0x7d10/0x7d10 [ 902.352110][T18629] ? do_raw_spin_lock+0x128/0x2f0 [ 902.357233][T18629] ? do_raw_spin_unlock+0x11d/0x230 [ 902.362479][T18629] ? ext4_read_folio+0x370/0x370 [ 902.367464][T18629] do_writepages+0x3ba/0x640 [ 902.372150][T18629] ? __writepage+0x130/0x130 [ 902.374835][ T26] audit: type=1326 audit(2000000060.570:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.4.3647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f319ce59 code=0x7ffc0000 [ 902.376779][T18629] ? writeback_single_inode+0x3c0/0x8e0 [ 902.376822][T18629] ? __lock_acquire+0x7d10/0x7d10 [ 902.411550][T18629] ? do_raw_spin_lock+0x128/0x2f0 [ 902.416636][T18629] __writeback_single_inode+0x156/0x1160 [ 902.422340][T18629] writeback_single_inode+0x3cb/0x8e0 [ 902.427782][T18629] ? write_inode_now+0x210/0x210 [ 902.432771][T18629] ? ext4_xattr_inode_update_ref+0x411/0x540 [ 902.438814][T18629] write_inode_now+0x17f/0x210 [ 902.443627][T18629] ? bdi_split_work_to_wbs+0x910/0x910 [ 902.449146][T18629] ? ext4_xattr_inode_update_ref+0x411/0x540 [ 902.455200][T18629] ? do_raw_spin_unlock+0x11d/0x230 [ 902.460456][T18629] iput+0x613/0x980 [ 902.464366][T18629] ext4_xattr_block_set+0x249a/0x32b0 [ 902.469814][T18629] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 902.475331][T18629] ? ext4_xattr_block_find+0xd7/0x2b0 [ 902.480775][T18629] ext4_expand_extra_isize_ea+0x120b/0x1dc0 [ 902.486755][T18629] __ext4_expand_extra_isize+0x301/0x3e0 [ 902.492457][T18629] __ext4_mark_inode_dirty+0x47f/0x770 [ 902.497997][T18629] ext4_evict_inode+0xa7f/0x1110 [ 902.502991][T18629] ? _raw_spin_unlock+0x24/0x40 [ 902.507900][T18629] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 902.513849][T18629] ? do_raw_spin_unlock+0x11d/0x230 [ 902.519184][T18629] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 902.525135][T18629] evict+0x4c9/0x8d0 [ 902.529088][T18629] ? proc_nr_inodes+0x2f0/0x2f0 [ 902.533998][T18629] ? do_raw_spin_unlock+0x11d/0x230 [ 902.539250][T18629] ? _raw_spin_unlock+0x24/0x40 [ 902.544159][T18629] ? iput+0x768/0x980 [ 902.548204][T18629] ext4_orphan_cleanup+0xbeb/0x1420 [ 902.553474][T18629] ? ext4_orphan_del+0xbf0/0xbf0 [ 902.558526][T18629] ? ext4_register_sysfs+0x27e/0x2c0 [ 902.563904][T18629] ? errseq_check_and_advance+0x62/0x120 [ 902.569615][T18629] ext4_fill_super+0x6ee3/0x78c0 [ 902.574621][T18629] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 902.580924][T18629] ? set_blocksize+0x1d0/0x470 [ 902.585869][T18629] ? sb_set_blocksize+0xa5/0xe0 [ 902.590785][T18629] get_tree_bdev+0x3f1/0x610 [ 902.595569][T18629] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 902.601868][T18629] vfs_get_tree+0x88/0x270 [ 902.606344][T18629] do_new_mount+0x24a/0xa40 [ 902.610909][T18629] __se_sys_mount+0x2e3/0x3d0 [ 902.615637][T18629] ? __x64_sys_mount+0xc0/0xc0 [ 902.620455][T18629] ? lockdep_hardirqs_on+0x94/0x140 [ 902.625706][T18629] ? __x64_sys_mount+0x1c/0xc0 [ 902.630519][T18629] do_syscall_64+0x4c/0xa0 [ 902.634991][T18629] ? clear_bhb_loop+0x60/0xb0 [ 902.639721][T18629] ? clear_bhb_loop+0x60/0xb0 [ 902.644460][T18629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 902.650413][T18629] RIP: 0033:0x7f8b75d9e0ca [ 902.654881][T18629] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.674544][T18629] RSP: 002b:00007f8b76c22e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 902.683014][T18629] RAX: ffffffffffffffda RBX: 00007f8b76c22ee0 RCX: 00007f8b75d9e0ca [ 902.691026][T18629] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f8b76c22ea0 [ 902.699044][T18629] RBP: 0000200000000180 R08: 00007f8b76c22ee0 R09: 0000000000000000 [ 902.707060][T18629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 902.715084][T18629] R13: 00007f8b76c22ea0 R14: 000000000000047a R15: 000000000000002c [ 902.723114][T18629] [ 902.756112][T18629] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.3634: iget: bad extra_isize 58 (inode size 256) [ 902.770544][T18629] EXT4-fs (loop5): Remounting filesystem read-only [ 902.777234][T18629] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.3634: error while reading EA inode 11 err=-117 [ 902.789975][T18629] EXT4-fs (loop5): Remounting filesystem read-only [ 902.796716][T18629] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.3634: iget: bad extra_isize 58 (inode size 256) [ 902.811005][T18629] EXT4-fs (loop5): Remounting filesystem read-only [ 902.817769][T18629] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.3634: error while reading EA inode 11 err=-117 [ 902.830461][T18629] EXT4-fs (loop5): Remounting filesystem read-only [ 902.837136][T18629] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #18: comm syz.5.3634: iget: bad extra_isize 58 (inode size 256) [ 902.853590][T18629] EXT4-fs (loop5): Remounting filesystem read-only [ 902.860546][T18629] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.3634: error while reading EA inode 18 err=-117 [ 902.875744][T18629] EXT4-fs (loop5): Remounting filesystem read-only [ 902.882485][T18629] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #18: comm syz.5.3634: iget: bad extra_isize 58 (inode size 256) [ 902.898774][T18629] EXT4-fs (loop5): Remounting filesystem read-only [ 902.905514][T18629] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.3634: error while reading EA inode 18 err=-117 [ 902.919434][T18629] EXT4-fs (loop5): Remounting filesystem read-only [ 902.926167][T18629] EXT4-fs (loop5): 1 orphan inode deleted [ 902.932174][T18629] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 902.967783][T18629] EXT4-fs error (device loop5): __ext4_iget:5102: inode #14: block 1886221359: comm syz.5.3634: invalid block [ 902.982480][T18629] EXT4-fs (loop5): Remounting filesystem read-only [ 903.004558][ T5138] EXT4-fs (loop5): unmounting filesystem.