last executing test programs: 9m8.177162492s ago: executing program 32 (id=171): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r0, 0xfe, 0xfffffffffffffffc}, 0x10) 7m42.872693577s ago: executing program 1 (id=898): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x20) 7m41.947960139s ago: executing program 1 (id=909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x135cfb4307d517, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0x74}}, 0x0) 7m41.366687328s ago: executing program 33 (id=909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x135cfb4307d517, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0x74}}, 0x0) 6m4.047169607s ago: executing program 34 (id=1880): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x6, r1, 0x0, &(0x7f0000000000)="48fd", 0x2, 0x2}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) 4m10.91578724s ago: executing program 35 (id=2764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}]]}, 0x30}, 0x1, 0x0, 0x0, 0xc804}, 0x0) 3m23.839252846s ago: executing program 7 (id=3052): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x12e0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x0) 3m22.542860812s ago: executing program 7 (id=3058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 3m22.101175767s ago: executing program 7 (id=3062): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 3m21.262260603s ago: executing program 7 (id=3064): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') 3m20.362215847s ago: executing program 7 (id=3070): sched_setattr(0x0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, [{0x4, 0x20, "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"}]}}}}}}, 0x0) 3m19.451463319s ago: executing program 7 (id=3078): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8054, &(0x7f0000000000)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 3m18.556789495s ago: executing program 36 (id=3078): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8054, &(0x7f0000000000)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 2m8.545523225s ago: executing program 6 (id=3555): unshare(0x22020400) unshare(0x22020600) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) 2m8.156494899s ago: executing program 6 (id=3560): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x5faa, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) 2m7.496150379s ago: executing program 6 (id=3565): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 2m7.024993493s ago: executing program 6 (id=3570): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c7) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) rmdir(&(0x7f0000000080)='./file0\x00') 2m4.285788197s ago: executing program 6 (id=3589): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000280)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@inlinecrypt}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 2m2.198894523s ago: executing program 6 (id=3603): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x120c002, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) ppoll(&(0x7f0000000080)=[{r0, 0x560}, {r0, 0x4014}], 0x2, 0x0, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)) 2m1.55044075s ago: executing program 37 (id=3603): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x120c002, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) ppoll(&(0x7f0000000080)=[{r0, 0x560}, {r0, 0x4014}], 0x2, 0x0, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)) 1m45.146792013s ago: executing program 2 (id=3716): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a040000000000080000000014000200fe8000000000000000000000000000bb140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m44.546448088s ago: executing program 2 (id=3723): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000004600)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f00000009c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000a00)='\'', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r2, 0x6}, 0x8) 1m44.25805077s ago: executing program 2 (id=3727): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0xe, 0x1, 0x3, 0x8, 0x9}, 0x14) 1m43.354053523s ago: executing program 2 (id=3735): mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m43.024386606s ago: executing program 2 (id=3737): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x6) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x3f}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 1m42.436251232s ago: executing program 2 (id=3740): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x100000000000000, 0x0, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x800) 1m41.557585865s ago: executing program 38 (id=3740): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x100000000000000, 0x0, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x800) 1m40.050327534s ago: executing program 1 (id=3605): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = epoll_create(0x7e) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xc}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x5, 0x0, 0x0, 0xd, "0062ba7d820700000000000000000000096304"}) syz_open_pts(r0, 0x114fbe4e4f02c3bf) 1m39.650254632s ago: executing program 1 (id=3750): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@data_err_ignore}, {@jqfmt_vfsv0}]}, 0x0, 0x470, &(0x7f0000000bc0)="$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") setresuid(0x0, 0xee01, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x11) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m38.419726075s ago: executing program 1 (id=3757): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="6f73782e636f6d2e6170706c652e46696e646572496e666f002a7a5a3e47207f3e6f5321c72e7b9551be8b8629359b3365847ce5c3feaa8cb4794cf9b791"], 0x0, 0x30) 1m37.030179334s ago: executing program 1 (id=3770): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0xe, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003c40)=""/4102, 0x1006}], 0x1) 1m36.290224154s ago: executing program 39 (id=3770): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0xe, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003c40)=""/4102, 0x1006}], 0x1) 3.957022651s ago: executing program 3 (id=4410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000140)=0x3) 3.534377695s ago: executing program 8 (id=4415): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r2, @ANYBLOB="00000a00100000801c001a80080002802d03fa0408000200f47b0c"], 0x44}, 0x1, 0x10000000}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.249041448s ago: executing program 3 (id=4418): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0), 0x5, 0x553, &(0x7f0000001080)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) fanotify_mark(r1, 0x1, 0x40000020, r0, &(0x7f00000000c0)='./file0\x00') 3.242883098s ago: executing program 8 (id=4419): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r0, r0}) 2.902533711s ago: executing program 8 (id=4422): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14552, &(0x7f0000000040)=ANY=[], 0xfb, 0x1238, &(0x7f0000001280)="$eJzs3M9rHGUYB/AnMU1iarJRa7UF8UUvehmaHLzoJUgK0gWlbYRWEKZmokvG3ZBZgiti4smrf4d49CaIN73k4t/gLRePFcSR7JakKVvTFdvV8vlc9mHn+e687/xYmGVnDt78+pPNjSrbyLsxOTERk1sR6XaKFJPRNxOxF6+98dPPL167cfPKSrO5ejWlyyvXl15PKS289MP7n3/78o/ds+99t/D9TOwvfnDw2/Kv++f3Lxz8ef3jVpVaVWp3uilPtzqdbn5rukjrrWozS+ndssirIrXaVbF9vLws0kbZ2drqpby9Pj+3tV1UVcrbvbRZ9FK3k7rbvZR/lLfaKcuyND8XxN6ogamjau2b23VdR9T1mZiOuq7rJ2MuzsZTMR8L0YjFeDqeiWfjXDwX5+P5eOHwoOgdJgAAAAAAAAAAAAAAAAAAAIB/z4j3/8eFfte4Rw0AAAAAAAAAAAAAAAAAAACPl2s3bl5ZaTZXr6Y0G1F+tbO2szZ4HSxf2YhWlFHEpWjEH9G/+39gUF9+u7l6KfUtxpfl7p387s7aEyfzS/3HCQzNLw3y6WR+Jubuzi9HI84Nzy8Pzc/Gq6/clc+iEb98GJ0oYz0Os8f5L5ZSeuud5j35i/2+U3gSAgAAAP8LWToy9Po9y+63fJAf4feBE9fXh9mLU2OdOhFR9T7bzMuy2H7QIvYGwaN3pkaK/4eLxhhWOhUjNE+f1jMdIw5jYiLigZt/r+v6IWyET+fHsbvPxD2H8SnF/c+UmRi+DWfvrOFvP3kiIh7mTOu63v1Hp3lejukLiUfqeKePeyQAAAAAAAAAAACM4lH83XLccwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/YgWMBAAAAAGH+1ml0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD//zxyw9Q=") open(0x0, 0x143142, 0x80) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, 0x0, 0x0, 0x0, 0x0) 2.788759196s ago: executing program 4 (id=4423): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0xc0384707, &(0x7f0000000040)={0x1, 0xff5, 0x0, 0x800000, 0x0, "3eccd8f9d20000000000001000000200000500"}) close_range(r0, 0xffffffffffffffff, 0x0) 2.704109001s ago: executing program 3 (id=4424): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000800)=ANY=[], 0xea) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r2, 0x4, 0x6800) splice(r0, 0x0, r3, 0x0, 0x6, 0x4) 2.654857375s ago: executing program 9 (id=4425): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @empty, 0xfffffffc}, 0x1c) listen(r0, 0x8) 2.239923687s ago: executing program 9 (id=4428): r0 = fsopen(&(0x7f0000000040)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 2.112163972s ago: executing program 4 (id=4429): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000780)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x1, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="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", 0x1c7}, {&(0x7f00000009c0)="f6c90cdedc37cdb39eae133fb46bb0b986be85321a17fc6e8ea85f018f6e81d55fa08f68960887cd420ea0c8ec111c66ec2c3baa2e4800207807a82a4559bad7736a5423c2d786f76c4aea14258d0bef41454167a1d439b5d9cfb6c508cd6b2fbbc751c26b5d345d2afa25b68d5d26612cc4af16ff3084f83682ac9b1e4dec81ac3bec3d01ca9c55e546bb09bdbc0534b04938b7a47cc4aa9f754b42d9012c35374c5576d7a1e7d5e64ced4d846135f8173ba207da142ad73646af1fcf1ec66859f0d2cf9fa2e6dbf733425eeb9b05ff7b1a3bfff2130084f8d175354899c362361d83c3025aa3df6db80e6187ca5ddc3a288a5405", 0xf5}, {&(0x7f0000000180)="1b0ad65e03f9915bfddf26c24e848a70b9d041082765acf5bb", 0x19}, {&(0x7f00000010c0)="547dc1cc8a8f2d3c1090633730f90ce80c98ab81e96e74e5549758ddcdda7779e05956aaeb2faec77b1345220ebb01281e29631ac1074bd184d6af1edf9319f2228346838301fbb3da884fcf06194382992e635a1ab4fa313d592b467fe61027c6597bea5c3f53c4880c7604b031f151ddbd35e1f7bc81d2a8111e367cb7c1794507414adf32e780f7a769299c70d32b833c4ccebbf967590d638c59606b09cb8d3c6c9588191bad2a638070a357f8e864fe450910b67a9d7111bdcb733cf5e8d4d3c6fcd09f7a86dfe22a35a69c2fb75645e21770b61ff50438ae0836699431", 0xe0}], 0x4}}], 0x2, 0x4048884) 2.053275691s ago: executing program 3 (id=4430): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0x1000000c, 0x12, 0x10003, &(0x7f0000000a40)}) 1.930400991s ago: executing program 9 (id=4431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 1.892713407s ago: executing program 0 (id=4432): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x6}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.812475426s ago: executing program 8 (id=4433): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', r2, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) 1.709564764s ago: executing program 3 (id=4434): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x859, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.689432696s ago: executing program 5 (id=4435): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) 1.6066457s ago: executing program 9 (id=4436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000a0a01020000000000000000020000000900010073797a30"], 0x20}}, 0x4000000) 1.605210623s ago: executing program 4 (id=4437): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4, 0x0, 0x800}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x0, 0x800}, {0x4, 0x5}], 0x2, 0x0) 1.547848794s ago: executing program 0 (id=4438): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) syz_io_uring_setup(0x1e7f, &(0x7f0000000540)={0x0, 0xac24, 0x10000, 0x1, 0xc}, &(0x7f0000000080), &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.42220563s ago: executing program 9 (id=4439): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000000)=0x10000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.411109542s ago: executing program 8 (id=4440): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x840, 0xd5) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) open$dir(&(0x7f0000000100)='./file0\x00', 0x26201, 0x6) 1.322600247s ago: executing program 3 (id=4441): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r0) 1.24968577s ago: executing program 5 (id=4442): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1.182685585s ago: executing program 0 (id=4443): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x0) 1.054286786s ago: executing program 5 (id=4444): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0x200f, {"20e30a30ed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b3f3f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d21488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000930dedf800", 0x1000}}, 0x1006) write(r0, &(0x7f0000000040)="1c0000001a", 0x5) 1.046582175s ago: executing program 8 (id=4445): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) 941.542948ms ago: executing program 0 (id=4446): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 887.593202ms ago: executing program 5 (id=4447): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) move_mount(0xffffffffffffff9c, 0x0, r0, 0x0, 0x46) 777.765522ms ago: executing program 0 (id=4448): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00', 0x3050ce16fe626417}, 0x2c) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x14, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 725.090753ms ago: executing program 5 (id=4449): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @random="f85c3132d479"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x5, @remote}, 0x10) 542.306496ms ago: executing program 4 (id=4450): r0 = socket(0xa, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="5e546507da932c3e8c628a600b17cbe584d2f93ce23f60e91af3fbcf0e16db6e759d420151c6c575", 0x77}], 0x1}}], 0x1, 0x4046040) 541.957378ms ago: executing program 0 (id=4451): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x4010, &(0x7f0000000300), 0x1, 0x9768, &(0x7f0000012f40)="$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") open(0x0, 0x802, 0x85) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8) io_setup(0x2e, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000740)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, r0, 0x0, 0x0, 0x4000000}]) 370.989904ms ago: executing program 9 (id=4452): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000af8500000086000000b7080000008000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 370.789215ms ago: executing program 5 (id=4453): syz_clone3(&(0x7f0000000400)={0x112022400, 0x0, 0x0, &(0x7f0000000140), {0x38}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=ANY=[], 0x4e8}, 0x4008000) 261.638666ms ago: executing program 4 (id=4454): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x5, 0x3, [0x1, 0x6, 0x267]}, 0xe) 0s ago: executing program 4 (id=4455): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xb3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x12141}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 1][ T59] hsr_slave_1: left promiscuous mode [ 544.538283][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.591903][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.619063][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.652513][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.652940][T16540] sg_write: data in/out 8156/38 bytes for SCSI command 0x0-- guessing data in; [ 544.652940][T16540] program syz.8.3652 not setting count and/or reply_len properly [ 544.752467][ T59] veth0_macvtap: left allmulticast mode [ 544.771259][ T59] veth1_macvtap: left promiscuous mode [ 544.788172][ T59] veth0_macvtap: left promiscuous mode [ 545.053778][ T31] audit: type=1326 audit(1771364457.292:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5c79c629 code=0x7ffc0000 [ 545.108918][ T31] audit: type=1326 audit(1771364457.292:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5c79c629 code=0x7ffc0000 [ 545.181287][ T31] audit: type=1326 audit(1771364457.292:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5c79c629 code=0x7ffc0000 [ 545.204573][ T31] audit: type=1326 audit(1771364457.292:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5c79c629 code=0x7ffc0000 [ 545.279555][ T31] audit: type=1326 audit(1771364457.292:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9c5c79c629 code=0x7ffc0000 [ 545.366322][ T31] audit: type=1326 audit(1771364457.292:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9c5c79c392 code=0x7ffc0000 [ 545.402143][ T31] audit: type=1326 audit(1771364457.292:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9c5c75cece code=0x7ffc0000 [ 545.522024][ T31] audit: type=1326 audit(1771364457.292:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9c5c79c457 code=0x7ffc0000 [ 545.600983][ T31] audit: type=1326 audit(1771364457.312:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5c79c629 code=0x7ffc0000 [ 545.700927][ T31] audit: type=1326 audit(1771364457.312:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c5c75cece code=0x7ffc0000 [ 545.954483][ T24] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 546.131975][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 546.175307][ T24] usb 9-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 546.176753][T16562] loop2: detected capacity change from 0 to 65536 [ 546.191974][T16562] xfs: Deprecated parameter 'attr2' [ 546.197195][T16562] XFS: attr2 mount option is deprecated. [ 546.245820][ T5825] Bluetooth: hci4: command tx timeout [ 546.252436][T16562] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 546.257843][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.279911][ T24] usb 9-1: Product: syz [ 546.315432][ T24] usb 9-1: Manufacturer: syz [ 546.320128][ T24] usb 9-1: SerialNumber: syz [ 546.397007][T16562] XFS (loop2): Ending clean mount [ 546.411341][T16562] XFS (loop2): Quotacheck needed: Please wait. [ 546.459269][ T59] team0 (unregistering): Port device team_slave_1 removed [ 546.603552][ T59] team0 (unregistering): Port device team_slave_0 removed [ 546.668302][T16562] XFS (loop2): Quotacheck: Done. [ 546.857117][T14727] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 546.975980][ T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 547.378004][ T24] snd-usb-audio 9-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 547.380437][T16560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.408152][T16560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.514078][ T6551] udevd[6551]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.539492][T16587] loop2: detected capacity change from 0 to 4096 [ 547.629701][ T24] usb 9-1: USB disconnect, device number 15 [ 547.663141][T16587] ntfs3(loop2): ino=b, mi_enum_attr [ 547.668467][T16587] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 547.730299][T16587] ntfs3(loop2): Failed to load $Extend (-22). [ 547.752749][T16587] ntfs3(loop2): Failed to initialize $Extend. [ 547.989176][T16422] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.996778][T16422] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.004823][T16422] bridge_slave_0: entered allmulticast mode [ 548.058611][T16422] bridge_slave_0: entered promiscuous mode [ 548.127511][T16422] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.152969][T16422] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.175360][T16422] bridge_slave_1: entered allmulticast mode [ 548.232745][T16422] bridge_slave_1: entered promiscuous mode [ 548.319723][ T5825] Bluetooth: hci4: command tx timeout [ 548.475811][T16422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.547061][T16422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.859294][T16422] team0: Port device team_slave_0 added [ 548.887761][T16422] team0: Port device team_slave_1 added [ 548.989499][T16617] loop8: detected capacity change from 0 to 512 [ 549.017323][T16617] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 549.029123][T16588] loop5: detected capacity change from 0 to 32768 [ 549.072956][T16588] (syz.5.3669,16588,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 549.141988][T16422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.181152][T16617] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 549.201912][T16588] (syz.5.3669,16588,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 549.219026][T16617] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.241372][T16422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.316871][T16588] JBD2: Ignoring recovery information on journal [ 549.345718][T16422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.369340][T16422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.376305][T16422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.424076][T16422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.483365][T11118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 549.513201][T16588] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 549.558703][ T24] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 549.633937][T16422] hsr_slave_0: entered promiscuous mode [ 549.646118][T16422] hsr_slave_1: entered promiscuous mode [ 549.718627][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 549.759087][ T24] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 549.796830][ T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 549.835717][ T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 549.867348][ T24] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 549.942606][ T24] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 549.980723][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.100895][T16648] loop2: detected capacity change from 0 to 4096 [ 550.147990][T16648] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 550.241395][ T24] usb 10-1: GET_CAPABILITIES returned 0 [ 550.247081][ T24] usbtmc 10-1:16.0: can't read capabilities [ 550.314275][T16648] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 550.446075][ T24] usb 10-1: USB disconnect, device number 11 [ 550.657359][ T5828] ocfs2: Unmounting device (7,5) on (node local) [ 551.120703][T16653] loop8: detected capacity change from 0 to 32768 [ 551.139522][T16653] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3689 (16653) [ 551.289045][T16653] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 551.347412][T16653] BTRFS info (device loop8): using blake2b checksum algorithm [ 551.418275][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 551.448750][T16671] loop9: detected capacity change from 0 to 512 [ 551.489055][T16671] EXT4-fs: Ignoring removed oldalloc option [ 551.504761][T16671] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 551.550242][T16671] EXT4-fs (loop9): 1 truncate cleaned up [ 551.564462][T16671] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.615923][ T24] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 551.637775][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 551.649894][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 551.661724][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 551.674078][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 551.687176][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 551.696436][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.707792][ T24] usb 6-1: config 0 descriptor?? [ 551.713632][T16664] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 551.713925][T16653] BTRFS info (device loop8): enabling ssd optimizations [ 551.789208][T16653] BTRFS info (device loop8): turning on async discard [ 551.826677][T16653] BTRFS info (device loop8): enabling free space tree [ 551.859572][T16653] BTRFS info (device loop8): use zstd compression, level 3 [ 551.942892][T16671] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3696'. [ 551.965780][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 551.965805][ T31] audit: type=1800 audit(1771364464.205:306): pid=16653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3689" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 552.095987][T13709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.244323][ T24] plantronics 0003:047F:FFFF.001F: reserved main item tag 0xd [ 552.310151][ T24] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 552.339136][T16688] lo speed is unknown, defaulting to 1000 [ 552.492129][T11118] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 552.685487][T16708] input: syz1 as /devices/virtual/input/input33 [ 552.746712][ T5930] usb 6-1: USB disconnect, device number 25 [ 553.556133][T16719] loop8: detected capacity change from 0 to 4096 [ 553.598975][T16717] loop2: detected capacity change from 0 to 8192 [ 553.800883][T16719] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 553.852202][T16719] ntfs3(loop8): ino=1a, mi_enum_attr [ 553.893713][T16719] ntfs3(loop8): ino=1a, mi_enum_attr [ 553.916094][T16719] ntfs3(loop8): Failed to initialize $Extend/$Reparse. [ 554.041819][T16718] ntfs3(loop8): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size [ 554.068152][T16422] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 554.139051][T16422] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 554.154816][T16422] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 554.180073][T16422] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 554.303367][T16735] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 554.488411][T16748] loop9: detected capacity change from 0 to 8 [ 554.525568][T16748] unable to read inode lookup table [ 554.831071][T16759] xt_hashlimit: size too large, truncated to 1048576 [ 554.907824][T16422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.000068][T16422] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.071345][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.078613][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.136683][T16768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3716'. [ 555.174002][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.181260][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.277026][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3717'. [ 555.881049][T16799] Invalid argument reading file caps for ./file0 [ 555.897460][T16796] overlayfs: workdir and upperdir must reside under the same mount [ 556.591547][T16422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.762960][T16817] loop5: detected capacity change from 0 to 4096 [ 556.799092][T16422] veth0_vlan: entered promiscuous mode [ 556.852580][T16422] veth1_vlan: entered promiscuous mode [ 556.909495][T16825] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 557.058489][T16422] veth0_macvtap: entered promiscuous mode [ 557.118664][T16422] veth1_macvtap: entered promiscuous mode [ 557.197724][T16422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.240138][T16422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.551208][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.598905][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.712724][T16815] loop9: detected capacity change from 0 to 32768 [ 557.806859][T16815] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 557.850707][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.866397][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.010354][ T78] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.160221][T16815] XFS (loop9): Ending clean mount [ 558.196646][T16815] XFS (loop9): Quotacheck needed: Please wait. [ 558.259118][T16832] loop5: detected capacity change from 0 to 32768 [ 558.291047][T16832] JBD2: Ignoring recovery information on journal [ 558.407369][T16815] XFS (loop9): Quotacheck: Done. [ 558.461256][ T78] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.527657][T16832] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 558.699049][ T78] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.785405][T13709] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 558.962131][ T78] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.979610][ T5828] ocfs2: Unmounting device (7,5) on (node local) [ 559.218676][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 559.241711][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 559.269006][ T5946] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 559.291211][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 559.317029][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 559.326788][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 559.328535][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.412716][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.469264][ T5946] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 559.525211][ T5946] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 559.564400][ T5946] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 559.600224][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.610560][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.610819][T16872] lo speed is unknown, defaulting to 1000 [ 559.649800][ T5946] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 559.706597][ T5946] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 559.754940][ T5946] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 559.767039][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 559.797441][ T5946] usb 1-1: Product: syz [ 559.815922][ T5946] usb 1-1: Manufacturer: syz [ 559.891296][ T5946] cdc_wdm 1-1:1.0: skipping garbage [ 559.897513][ T5946] cdc_wdm 1-1:1.0: skipping garbage [ 559.898318][T16886] loop5: detected capacity change from 0 to 128 [ 559.967423][T16886] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 559.983759][ T5946] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 559.998665][ T5946] cdc_wdm 1-1:1.0: Unknown control protocol [ 560.014939][T16886] hpfs: filesystem error: improperly stopped [ 560.042934][T16886] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 560.060467][T16886] hpfs: You really don't want any checks? You are crazy... [ 560.076713][T16886] hpfs: hpfs_map_sector(): read error [ 560.082231][T16886] hpfs: code page support is disabled [ 560.168872][T16886] hpfs: hpfs_map_4sectors(): unaligned read [ 560.223485][T16886] hpfs: hpfs_map_4sectors(): unaligned read [ 560.229439][T16886] hpfs: filesystem error: unable to find root dir [ 560.543549][ T78] bridge_slave_1: left allmulticast mode [ 560.557438][ T78] bridge_slave_1: left promiscuous mode [ 560.577781][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.594386][T16899] loop1: detected capacity change from 0 to 512 [ 560.638777][ T78] bridge_slave_0: left allmulticast mode [ 560.663929][ T78] bridge_slave_0: left promiscuous mode [ 560.671539][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.701251][T16899] EXT4-fs (loop1): orphan cleanup on readonly fs [ 560.738171][T16899] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3750: bg 0: block 63: padding at end of block bitmap is not set [ 560.863137][T16899] loop1: lost filesystem error report for type 5 error -117 [ 560.873336][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 560.887170][ C1] EXT4-fs (loop1): initial error at time 1771364473: ext4_validate_block_bitmap:441 [ 560.896644][ C1] EXT4-fs (loop1): last error at time 1771364473: ext4_validate_block_bitmap:441 [ 560.975830][T16899] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.3750: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 561.020292][T16899] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 561.037104][T16899] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.3750: ea_inode dec ref err=-117 [ 561.072936][ T29] usb 1-1: USB disconnect, device number 23 [ 561.109909][T16914] loop5: detected capacity change from 0 to 1024 [ 561.110279][T16899] EXT4-fs (loop1): 1 orphan inode deleted [ 561.229885][T16899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 561.433860][ T5825] Bluetooth: hci2: command tx timeout [ 561.571243][T16422] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 561.686868][T16422] EXT4-fs error (device loop1): ext4_lookup:1785: inode #11: comm syz-executor: unexpected EA_INODE flag [ 561.760154][T16422] EXT4-fs error (device loop1): ext4_lookup:1785: inode #11: comm syz-executor: unexpected EA_INODE flag [ 561.901620][ T31] audit: type=1326 audit(1771364474.130:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16929 comm="syz.0.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5c79c629 code=0x7ffc0000 [ 562.044587][ T31] audit: type=1326 audit(1771364474.130:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16929 comm="syz.0.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5c79c629 code=0x7ffc0000 [ 562.149766][ T31] audit: type=1326 audit(1771364474.140:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16929 comm="syz.0.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9c5c79c629 code=0x7ffc0000 [ 562.179584][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.180132][ T31] audit: type=1326 audit(1771364474.140:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16929 comm="syz.0.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5c79c629 code=0x7ffc0000 [ 562.186833][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.296369][ T31] audit: type=1326 audit(1771364474.140:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16929 comm="syz.0.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c5c79c629 code=0x7ffc0000 [ 562.331436][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.354516][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.376569][ T78] bond0 (unregistering): Released all slaves [ 562.386842][ T31] audit: type=1326 audit(1771364474.180:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16929 comm="syz.0.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9c5c79c629 code=0x7ffc0000 [ 562.418167][ T31] audit: type=1326 audit(1771364474.180:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16929 comm="syz.0.3759" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c5c79c629 code=0x0 [ 562.788133][T16940] netlink: 'syz.8.3763': attribute type 34 has an invalid length. [ 562.877310][T16422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.002344][ T29] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 563.196125][ T29] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 563.231932][ T29] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 563.267774][ T29] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 563.299682][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.313675][T16872] chnl_net:caif_netlink_parms(): no params data found [ 563.331248][ T29] usb 10-1: Product: syz [ 563.335940][ T29] usb 10-1: Manufacturer: syz [ 563.367195][ T29] usb 10-1: SerialNumber: syz [ 563.408754][ T29] usb 10-1: config 0 descriptor?? [ 563.441553][T16947] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 563.451867][T16947] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 563.514562][ T5825] Bluetooth: hci2: command tx timeout [ 563.525069][ T78] hsr_slave_0: left promiscuous mode [ 563.534768][ T78] hsr_slave_1: left promiscuous mode [ 563.547344][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.565108][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.589463][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.613410][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.666835][ T78] veth1_macvtap: left promiscuous mode [ 563.683238][ T78] veth0_macvtap: left promiscuous mode [ 563.699703][T16947] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 563.731910][T16947] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 564.136704][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 564.187473][T16964] loop5: detected capacity change from 0 to 32768 [ 564.195129][ T29] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 564.222072][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 564.236311][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 564.262987][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 564.278769][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 564.297321][T16964] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 564.363033][T16964] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 564.523018][ T78] team0 (unregistering): Port device team_slave_1 removed [ 564.593773][ T78] team0 (unregistering): Port device team_slave_0 removed [ 564.602035][ T29] dm9601 10-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 564.630878][T16964] XFS (loop5): Ending clean mount [ 564.644968][ T29] usb 10-1: USB disconnect, device number 12 [ 564.673629][T16964] XFS (loop5): Quotacheck needed: Please wait. [ 564.836805][T16964] XFS (loop5): Quotacheck: Done. [ 564.998514][ T5828] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 565.486125][T16978] lo speed is unknown, defaulting to 1000 [ 565.580964][ T24] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 565.598987][ T5826] Bluetooth: hci2: command tx timeout [ 565.803640][T16872] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.806063][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 565.830044][T16872] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.837245][ T24] usb 10-1: config 1 has no interface number 0 [ 565.837990][T16872] bridge_slave_0: entered allmulticast mode [ 565.854438][ T24] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.896095][ T24] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 565.906176][T16872] bridge_slave_0: entered promiscuous mode [ 565.932395][T16872] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.939827][ T24] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 565.960210][T16872] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.961906][ T24] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 566.002989][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.014765][T16872] bridge_slave_1: entered allmulticast mode [ 566.051183][T16872] bridge_slave_1: entered promiscuous mode [ 566.055319][ T24] usb 10-1: Product: syz [ 566.085083][ T24] usb 10-1: Manufacturer: syz [ 566.090004][ T24] usb 10-1: SerialNumber: syz [ 566.259768][T16872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.279211][T17030] loop8: detected capacity change from 0 to 256 [ 566.343934][T17030] FAT-fs (loop8): count of clusters too big (178174) [ 566.382635][T17030] FAT-fs (loop8): Can't find a valid FAT filesystem [ 566.397637][ T5826] Bluetooth: hci4: command tx timeout [ 566.474656][T14107] kernel read not supported for file /691/stack (pid: 14107 comm: kworker/0:2) [ 566.561066][T16872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.805518][T17042] loop5: detected capacity change from 0 to 128 [ 566.958663][T16872] team0: Port device team_slave_0 added [ 567.017475][T16872] team0: Port device team_slave_1 added [ 567.176667][ T24] cdc_ncm 10-1:1.1: bind() failure [ 567.467062][T17055] loop5: detected capacity change from 0 to 256 [ 567.469802][T14107] usb 10-1: USB disconnect, device number 13 [ 567.540755][T17055] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 567.572868][T16872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.606806][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.674038][ T5826] Bluetooth: hci2: command tx timeout [ 567.699675][T16872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.721923][T16872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.728899][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.803176][T16872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.903246][T16978] chnl_net:caif_netlink_parms(): no params data found [ 568.213118][ T78] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.470230][ T5826] Bluetooth: hci4: command tx timeout [ 568.631823][T16872] hsr_slave_0: entered promiscuous mode [ 568.670358][T16872] hsr_slave_1: entered promiscuous mode [ 568.713334][T16872] debugfs: 'hsr0' already exists in 'hsr' [ 568.769023][T16872] Cannot create hsr debugfs directory [ 568.897628][ T78] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.939730][T14107] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 569.003887][T17068] loop9: detected capacity change from 0 to 32768 [ 569.095017][T17068] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 569.120479][T14107] usb 1-1: Using ep0 maxpacket: 16 [ 569.133142][T14107] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 569.237840][T14107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 569.298901][T17068] XFS (loop9): Ending clean mount [ 569.315516][T14107] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 569.337413][T17068] XFS (loop9): Quotacheck needed: Please wait. [ 569.345884][T16978] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.353237][T14107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.372311][T16978] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.388270][T14107] usb 1-1: Product: syz [ 569.393900][T16978] bridge_slave_0: entered allmulticast mode [ 569.399999][T14107] usb 1-1: Manufacturer: syz [ 569.406765][T14107] usb 1-1: SerialNumber: syz [ 569.415127][T16978] bridge_slave_0: entered promiscuous mode [ 569.447984][T14107] usb 1-1: config 0 descriptor?? [ 569.504842][T14107] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 569.515776][T17068] XFS (loop9): Quotacheck: Done. [ 569.558044][T14107] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 569.701248][ T78] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.742779][T16978] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.771742][T16978] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.808808][T16978] bridge_slave_1: entered allmulticast mode [ 569.838132][T16978] bridge_slave_1: entered promiscuous mode [ 569.842223][T13709] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 570.023330][T16978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.169138][T14107] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 570.177176][ T78] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.298464][T14107] em28xx 1-1:0.0: Config register raw data: 0x1d [ 570.473659][T16978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.519020][T14107] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 570.549759][T14107] em28xx 1-1:0.0: No AC97 audio processor [ 570.555644][ T5826] Bluetooth: hci4: command tx timeout [ 570.618432][T14107] usb 1-1: USB disconnect, device number 24 [ 570.660731][T14107] em28xx 1-1:0.0: Disconnecting em28xx [ 570.722745][T14107] em28xx 1-1:0.0: Freeing device [ 570.825291][T16978] team0: Port device team_slave_0 added [ 570.864789][T16978] team0: Port device team_slave_1 added [ 570.900663][T17139] loop5: detected capacity change from 0 to 4096 [ 570.931499][T17139] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 571.008493][T17139] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 571.068812][T17144] loop9: detected capacity change from 0 to 2048 [ 571.098872][T17147] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 571.204046][T17144] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.256698][T17139] overlayfs: upper fs does not support tmpfile. [ 571.320915][T17144] EXT4-fs (loop9): shut down requested (2) [ 571.326855][T17139] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 571.326934][T17139] overlayfs: failed to set xattr on upper [ 571.326946][T17139] overlayfs: ...falling back to redirect_dir=nofollow. [ 571.326957][T17139] overlayfs: ...falling back to index=off. [ 571.326969][T17139] overlayfs: ...falling back to uuid=null. [ 571.614034][ T5828] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 571.650666][ T5828] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12) [ 571.670806][T13709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.781682][ T5828] Remounting filesystem read-only [ 571.786771][ T5828] NILFS (loop5): error -5 truncating bmap (ino=12) [ 571.963235][ T5828] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 572.022930][T16978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.065788][T16978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.169746][T16978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.220012][T16978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.247466][T16978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.276362][T17181] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.3822'. [ 572.327281][T16978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.349755][T17178] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3818'. [ 572.628575][ T5826] Bluetooth: hci4: command tx timeout [ 572.649061][T16978] hsr_slave_0: entered promiscuous mode [ 572.656592][T16978] hsr_slave_1: entered promiscuous mode [ 572.748293][T16978] debugfs: 'hsr0' already exists in 'hsr' [ 572.754107][T16978] Cannot create hsr debugfs directory [ 572.779973][T17186] loop9: detected capacity change from 0 to 4096 [ 572.847202][T17186] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 572.906444][T17190] bridge1: entered promiscuous mode [ 572.947038][T17190] bridge1: entered allmulticast mode [ 572.976376][T17190] team0: Port device bridge1 added [ 573.078670][T17191] bridge0: port 3(team0) entered blocking state [ 573.085594][T17191] bridge0: port 3(team0) entered disabled state [ 573.177121][T17191] team0: entered allmulticast mode [ 573.197541][T17191] team_slave_0: entered allmulticast mode [ 573.246878][T17191] team_slave_1: entered allmulticast mode [ 573.263100][T17191] team0: entered promiscuous mode [ 573.331603][T17191] team_slave_0: entered promiscuous mode [ 573.392930][T17191] team_slave_1: entered promiscuous mode [ 573.422916][T17191] bridge0: port 3(team0) entered blocking state [ 573.429956][T17191] bridge0: port 3(team0) entered forwarding state [ 573.640040][T17216] loop5: detected capacity change from 0 to 512 [ 573.696359][T17216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.906517][ T29] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 573.957049][ T78] bridge_slave_1: left allmulticast mode [ 573.962730][ T78] bridge_slave_1: left promiscuous mode [ 573.972946][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.990278][ T78] bridge_slave_0: left allmulticast mode [ 573.995920][ T78] bridge_slave_0: left promiscuous mode [ 574.006578][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.414609][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.426095][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 574.434915][ T29] usb 10-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 574.446610][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.454737][ T29] usb 10-1: Product: syz [ 574.459093][ T29] usb 10-1: Manufacturer: syz [ 574.463773][ T29] usb 10-1: SerialNumber: syz [ 574.473736][ T29] usb 10-1: config 0 descriptor?? [ 574.474933][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.487995][ T29] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 574.518446][ T78] bond0 (unregistering): Released all slaves [ 574.779679][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.584490][ T78] hsr_slave_0: left promiscuous mode [ 575.612804][T17232] loop8: detected capacity change from 0 to 32768 [ 575.617809][T14107] usb 10-1: USB disconnect, device number 14 [ 575.645910][ T78] hsr_slave_1: left promiscuous mode [ 575.657903][T17232] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 575.669168][T17232] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 575.681037][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.716862][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.731633][T17232] XFS (loop8): Ending clean mount [ 575.743774][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.763229][T17232] XFS (loop8): Quotacheck needed: Please wait. [ 575.765498][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.863068][ T78] veth1_macvtap: left promiscuous mode [ 575.877081][ T78] veth0_macvtap: left promiscuous mode [ 575.889423][ T78] veth1_vlan: left promiscuous mode [ 575.901952][ T78] veth0_vlan: left promiscuous mode [ 575.909636][T17264] netlink: 67 bytes leftover after parsing attributes in process `syz.5.3846'. [ 575.947469][T17232] XFS (loop8): Quotacheck: Done. [ 576.088479][T11118] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 576.824505][T17277] sctp: [Deprecated]: syz.9.3850 (pid 17277) Use of int in maxseg socket option. [ 576.824505][T17277] Use struct sctp_assoc_value instead [ 576.843947][T17274] loop8: detected capacity change from 0 to 4096 [ 576.888604][T17274] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 576.906981][T17274] ntfs3(loop8): ino=3, mi_enum_attr [ 577.384584][T17287] input: syz0 as /devices/virtual/input/input34 [ 577.415750][ T78] team0 (unregistering): Port device team_slave_1 removed [ 577.527431][ T78] team0 (unregistering): Port device team_slave_0 removed [ 577.548942][T17296] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3855'. [ 577.934214][T17310] loop8: detected capacity change from 0 to 256 [ 577.962762][T17310] FAT-fs (loop8): Directory bread(block 64) failed [ 577.973003][T17310] FAT-fs (loop8): Directory bread(block 65) failed [ 577.990845][T17310] FAT-fs (loop8): Directory bread(block 66) failed [ 577.997791][T17310] FAT-fs (loop8): Directory bread(block 67) failed [ 578.005012][T17310] FAT-fs (loop8): Directory bread(block 68) failed [ 578.011559][T17310] FAT-fs (loop8): Directory bread(block 69) failed [ 578.018820][T17310] FAT-fs (loop8): Directory bread(block 70) failed [ 578.028500][T17310] FAT-fs (loop8): Directory bread(block 71) failed [ 578.044700][T17310] FAT-fs (loop8): Directory bread(block 72) failed [ 578.061587][T17310] FAT-fs (loop8): Directory bread(block 73) failed [ 578.861059][T16872] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 579.223970][T14107] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 579.351826][T16872] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 579.394247][T17318] loop9: detected capacity change from 0 to 32768 [ 579.418487][T16872] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 579.437709][T14107] usb 9-1: not running at top speed; connect to a high speed hub [ 579.461911][T17320] loop5: detected capacity change from 0 to 32768 [ 579.473473][T17318] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 579.487164][T14107] usb 9-1: config 95 has an invalid interface number: 1 but max is 0 [ 579.531556][T17320] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3864 (17320) [ 579.544822][T14107] usb 9-1: config 95 has no interface number 0 [ 579.551034][T14107] usb 9-1: config 95 interface 1 has no altsetting 0 [ 579.598303][T14107] usb 9-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 579.609459][T14107] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.623261][T14107] usb 9-1: Product: syz [ 579.625993][T17320] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 579.629773][T14107] usb 9-1: Manufacturer: syz [ 579.643429][T14107] usb 9-1: SerialNumber: syz [ 579.664176][T17320] BTRFS info (device loop5): using crc32c checksum algorithm [ 579.818697][T17318] XFS (loop9): Ending clean mount [ 579.856539][T16872] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 579.875335][T17318] XFS (loop9): Quotacheck needed: Please wait. [ 579.977968][T17334] loop8: detected capacity change from 0 to 1024 [ 579.978254][T17320] BTRFS info (device loop5): enabling ssd optimizations [ 580.045499][T17320] BTRFS info (device loop5): turning on async discard [ 580.091805][T17320] BTRFS info (device loop5): enabling free space tree [ 580.166150][T17334] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.167764][T17318] XFS (loop9): Quotacheck: Done. [ 580.446433][T13709] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 580.589063][ T5828] BTRFS info (device loop5): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 580.659578][T14107] usb 9-1: USB disconnect, device number 16 [ 581.138314][T11118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.835974][T16872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.838950][T17401] loop5: detected capacity change from 0 to 256 [ 581.885653][ T24] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 581.896836][T17401] exfat: Deprecated parameter 'namecase' [ 581.970382][T16872] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.985549][T17401] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 582.052487][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 582.063300][ T24] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 582.096299][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.162589][ T24] usb 10-1: Product: syz [ 582.166944][ T24] usb 10-1: Manufacturer: syz [ 582.171650][ T24] usb 10-1: SerialNumber: syz [ 582.440820][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.448135][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.519355][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.526601][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.564906][ T24] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 582.632509][ T24] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 582.642947][T16978] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 582.702491][T16978] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 582.708771][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 582.729376][ T24] usb 10-1: media controller created [ 582.800144][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 582.837807][T17413] sp0: Synchronizing with TNC [ 582.840816][T16978] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 582.896274][T16978] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 582.932227][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 583.134968][ T24] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 583.186362][ T24] usb 10-1: USB disconnect, device number 15 [ 583.438897][T17436] loop9: detected capacity change from 0 to 512 [ 583.455026][T17434] loop5: detected capacity change from 0 to 2048 [ 583.507699][T17436] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 583.579669][T17434] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 583.596875][T17436] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.3886: inode has both inline data and extents flags [ 583.749748][T17436] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 583.751097][T17436] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3886: couldn't read orphan inode 15 (err -117) [ 583.760397][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 583.760424][ C0] EXT4-fs (loop9): initial error at time 1771364496: ext4_orphan_get:1391: inode 15 [ 583.760465][ C0] EXT4-fs (loop9): last error at time 1771364496: ext4_orphan_get:1391: inode 15 [ 583.837309][T16978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.866680][T16978] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.881449][T17436] loop9: lost filesystem error report for type 5 error -117 [ 583.894707][T17436] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.940315][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.947562][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.991317][ T5826] Bluetooth: hci1: Malformed LE Event: 0x0b [ 584.053650][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.060894][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.257701][T13709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.269911][T16978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 584.501765][T14107] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 584.629101][T16872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.671884][T14107] usb 6-1: Using ep0 maxpacket: 8 [ 584.700511][T14107] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 584.722765][T17462] loop8: detected capacity change from 0 to 1024 [ 584.749209][T14107] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 584.766119][T17462] EXT4-fs (loop8): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 584.797111][T14107] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 584.809114][T14107] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.829321][T14107] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 584.839938][T14107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.869898][T17462] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.099310][T14107] usb 6-1: usb_control_msg returned -32 [ 585.138082][T14107] usbtmc 6-1:16.0: can't read capabilities [ 585.336004][T11118] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.511292][T16978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.547467][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 585.579486][T17484] usbtmc 6-1:16.0: Unable to send data, error -71 [ 586.413384][T17488] loop9: detected capacity change from 0 to 32768 [ 586.422738][T17488] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3896 (17488) [ 586.729441][T16978] veth0_vlan: entered promiscuous mode [ 586.788430][T17488] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 586.805887][T17491] loop8: detected capacity change from 0 to 131072 [ 586.836879][T17488] BTRFS info (device loop9): using crc32c checksum algorithm [ 586.863329][T17491] F2FS-fs (loop8): invalid crc value [ 586.883417][T16978] veth1_vlan: entered promiscuous mode [ 586.962924][T17491] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 586.979359][T17491] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 587.047470][T16978] veth0_macvtap: entered promiscuous mode [ 587.061806][ T31] audit: type=1800 audit(1771364499.313:314): pid=17491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3894" name="file1" dev="loop8" ino=7 res=0 errno=0 [ 587.116882][T16978] veth1_macvtap: entered promiscuous mode [ 587.149450][T17488] BTRFS info (device loop9): allowing degraded mounts [ 587.194455][T17488] BTRFS info (device loop9): enabling ssd optimizations [ 587.272924][T16872] veth0_vlan: entered promiscuous mode [ 587.280021][T17488] BTRFS info (device loop9): turning on async discard [ 587.286831][T17488] BTRFS info (device loop9): enabling free space tree [ 587.331396][T17488] BTRFS info (device loop9): enabling auto defrag [ 587.333418][T16978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.385106][ T5884] usb 6-1: USB disconnect, device number 26 [ 587.465077][T16872] veth1_vlan: entered promiscuous mode [ 587.520275][T16978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.561305][T17525] loop5: detected capacity change from 0 to 128 [ 587.607086][T17525] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 587.634419][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.688836][T17525] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 587.761180][T13709] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 587.934686][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.973455][T12456] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 588.003498][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.223876][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.552746][T16872] veth0_macvtap: entered promiscuous mode [ 588.614090][T16872] veth1_macvtap: entered promiscuous mode [ 588.740411][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.784114][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.853210][T16872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.024636][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.142221][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.161138][T16872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.312643][ T78] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.342223][ T78] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.544886][ T78] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.591480][ T78] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.082488][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.116080][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.176080][T17577] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3915'. [ 590.227221][T17577] netlink: 'syz.9.3915': attribute type 30 has an invalid length. [ 590.379409][ T150] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.410592][ T150] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.509823][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.522480][ T150] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.532507][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.558899][ T150] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.715632][T17584] loop9: detected capacity change from 0 to 2048 [ 590.796533][T17584] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 590.868364][T17584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 591.002129][ T31] audit: type=1800 audit(1771364503.255:315): pid=17584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3917" name="file1" dev="loop9" ino=1346 res=0 errno=0 [ 592.166383][T17623] loop4: detected capacity change from 0 to 1024 [ 592.292150][T17623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.539216][T17642] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 592.646009][T17642] EXT4-fs (loop4): Remounting filesystem read-only [ 592.925611][T16872] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.223954][T17664] loop4: detected capacity change from 0 to 512 [ 593.270473][T17664] EXT4-fs: Ignoring removed nobh option [ 593.296640][T17664] EXT4-fs: Ignoring removed oldalloc option [ 593.308105][ T24] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 593.354938][T17664] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 593.397168][T17664] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3942: invalid indirect mapped block 256 (level 1) [ 593.434443][T17664] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 593.435158][T17664] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3942: invalid indirect mapped block 2683928664 (level 1) [ 593.444449][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 593.444480][ C0] EXT4-fs (loop4): initial error at time 1771364505: ext4_free_branches:1023: inode 13 [ 593.444522][ C0] EXT4-fs (loop4): last error at time 1771364505: ext4_free_branches:1023: inode 13 [ 593.489045][T17664] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 593.490041][T17664] EXT4-fs (loop4): 1 truncate cleaned up [ 593.507784][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 593.531260][T17664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.574943][T17671] loop3: detected capacity change from 0 to 16 [ 593.586045][ T24] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 593.615652][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.668609][T17671] erofs (device loop3): mounted with root inode @ nid 36. [ 593.692611][ T24] usb 9-1: config 0 descriptor?? [ 593.729725][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 593.851919][T17676] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 594.289107][ T31] audit: type=1326 audit(1771364506.556:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17685 comm="syz.0.3953" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c5c79c629 code=0x0 [ 594.346709][T17673] loop9: detected capacity change from 0 to 65536 [ 594.464078][T16872] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.507200][T17673] XFS (loop9): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 594.689661][T17673] XFS (loop9): Ending clean mount [ 594.697801][T17673] XFS (loop9): Quotacheck needed: Please wait. [ 594.867898][T17673] XFS (loop9): Quotacheck: Done. [ 594.970000][ T5930] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 595.056629][T17651] loop5: detected capacity change from 0 to 32768 [ 595.167940][ T5930] usb 5-1: config 4 has an invalid interface number: 28 but max is 0 [ 595.184226][T13709] XFS (loop9): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 595.226752][ T5930] usb 5-1: config 4 has no interface number 0 [ 595.275258][T17651] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 595.320345][ T5930] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 595.395870][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.468933][ T5930] usb 5-1: Product: syz [ 595.473164][ T5930] usb 5-1: Manufacturer: syz [ 595.532540][T17651] XFS (loop5): Ending clean mount [ 595.560761][ T5930] usb 5-1: SerialNumber: syz [ 595.694563][ T5930] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.28/input/input35 [ 595.709403][ T24] gspca_sonixj: reg_w1 err -71 [ 595.725677][ T24] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 595.736071][ T24] usb 9-1: USB disconnect, device number 17 [ 595.801473][T17707] loop3: detected capacity change from 0 to 131072 [ 595.837220][T17707] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 595.843988][T17707] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 595.853140][T17707] F2FS-fs (loop3): invalid crc value [ 596.016046][T17707] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 596.099443][T17707] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 596.106683][T17707] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 596.295797][T17707] F2FS-fs (loop3): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:100678662] [ 596.326479][T17707] F2FS-fs (loop3): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:100678662] [ 596.368268][ T5828] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 597.220967][T17744] loop3: detected capacity change from 0 to 512 [ 597.419555][T17744] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3963: iget: bad i_size value: 38620345925642 [ 597.481513][T17744] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 597.482081][T17744] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3963: couldn't read orphan inode 15 (err -117) [ 597.491379][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 597.491405][ C1] EXT4-fs (loop3): initial error at time 1771364509: ext4_orphan_get:1391: inode 15 [ 597.491446][ C1] EXT4-fs (loop3): last error at time 1771364509: ext4_orphan_get:1391: inode 15 [ 597.859548][T17744] loop3: lost filesystem error report for type 5 error -117 [ 597.879862][T17744] EXT4-fs (loop3): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.184472][ T29] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 598.373708][ T29] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.408731][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 598.480304][ T29] usb 10-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 598.571912][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.661991][ T29] usb 10-1: Product: syz [ 598.677564][ T29] usb 10-1: Manufacturer: syz [ 598.692204][T16978] EXT4-fs (loop3): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 598.724637][ T29] usb 10-1: SerialNumber: syz [ 598.777143][ T29] usb 10-1: config 0 descriptor?? [ 598.891230][ T29] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 598.993170][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 599.103473][ T29] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 599.219992][ T29] usb 10-1: media controller created [ 599.305464][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 599.610003][ T29] DVB: Unable to find symbol tda10046_attach() [ 599.639357][ T29] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 599.643744][T17786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3977'. [ 599.689573][ T29] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 600.251086][ T29] dvb_usb_m920x 10-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 600.320355][ T29] usb 10-1: USB disconnect, device number 16 [ 600.423275][T14107] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 600.654339][T14107] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 600.676764][T14107] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 600.722330][T14107] usb 6-1: Product: syz [ 600.749160][T14107] usb 6-1: Manufacturer: syz [ 600.761270][T14107] usb 6-1: SerialNumber: syz [ 600.775806][T17806] sctp: [Deprecated]: syz.3.3983 (pid 17806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 600.775806][T17806] Use struct sctp_sack_info instead [ 600.784712][T14107] usb 6-1: config 0 descriptor?? [ 600.842076][T14107] ch341 6-1:0.0: ch341-uart converter detected [ 600.936040][ T5172] bcm5974 5-1:4.28: could not read from device [ 601.007705][ T5930] bcm5974 5-1:4.28: could not read from device [ 601.076789][ T5172] bcm5974 5-1:4.28: could not read from device [ 601.161860][ T5930] input: failed to attach handler mousedev to device input35, error: -5 [ 601.259190][ T5172] bcm5974 5-1:4.28: could not read from device [ 601.264313][ T5930] usb 5-1: USB disconnect, device number 8 [ 601.319583][T17819] netlink: 'syz.4.3987': attribute type 2 has an invalid length. [ 601.686920][T17830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3991'. [ 602.047546][T17833] loop3: detected capacity change from 0 to 32768 [ 602.055929][T14107] usb 6-1: failed to send control message: -71 [ 602.062365][T14107] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 602.071914][T17833] (syz.3.3992,17833,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 602.086287][T17833] (syz.3.3992,17833,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 602.104194][ T5946] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 602.143553][T14107] usb 6-1: USB disconnect, device number 27 [ 602.153201][T14107] ch341 6-1:0.0: device disconnected [ 602.179201][T17833] (syz.3.3992,17833,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 602.193651][T17833] (syz.3.3992,17833,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 602.208892][T17833] JBD2: Ignoring recovery information on journal [ 602.290180][T17833] (syz.3.3992,17833,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 602.306025][T17833] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 602.316295][T17833] (syz.3.3992,17833,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 602.344025][T17833] (syz.3.3992,17833,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 602.379878][ T5946] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.423598][ T5946] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 602.495819][ T5946] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 602.509445][T17846] loop9: detected capacity change from 0 to 256 [ 602.542451][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.571500][T17846] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 602.592135][ T5946] usb 1-1: Product: syz [ 602.608505][ T5946] usb 1-1: Manufacturer: syz [ 602.651461][ T5946] usb 1-1: SerialNumber: syz [ 602.658264][ T31] audit: type=1800 audit(1771364514.921:317): pid=17846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3995" name="file1" dev="loop9" ino=1048755 res=0 errno=0 [ 602.663334][T17850] hsr0: entered promiscuous mode [ 602.726531][T17853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3997'. [ 602.758297][T17854] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 602.772637][ T31] audit: type=1800 audit(1771364514.961:318): pid=17846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3995" name="file1" dev="loop9" ino=1048755 res=0 errno=0 [ 602.852294][T17854] FAT-fs (loop9): Filesystem has been set read-only [ 602.893648][T17853] hsr_slave_0: left promiscuous mode [ 602.912179][T17854] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 602.959108][T16978] ocfs2: Unmounting device (7,3) on (node local) [ 603.010007][T17853] hsr_slave_1: left promiscuous mode [ 603.027123][ T5946] usb 1-1: 0:2 : does not exist [ 603.083732][T17853] hsr0 (unregistering): left promiscuous mode [ 603.121975][ T5946] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 603.298047][ T5946] usb 1-1: USB disconnect, device number 25 [ 603.570994][ T6551] udevd[6551]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 603.609346][T17846] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 603.648875][T17846] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 603.681602][T17846] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 603.735740][T17846] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 603.752035][T17846] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 603.803159][T17846] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 603.835361][T17846] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 604.417393][T17859] loop4: detected capacity change from 0 to 256 [ 604.468088][T17859] exfat: Deprecated parameter 'utf8' [ 604.511166][T17859] exfat: Deprecated parameter 'utf8' [ 604.577815][T17859] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 605.719054][T17935] loop3: detected capacity change from 0 to 164 [ 605.889850][T17935] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 606.453007][ T5837] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 606.620519][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 606.701427][ T5837] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 606.772593][T17932] loop5: detected capacity change from 0 to 131072 [ 606.781263][T17932] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 606.787994][T17932] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 606.806325][ T5837] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 606.852802][T17932] F2FS-fs (loop5): invalid crc value [ 606.860840][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 606.896136][ T5837] usb 4-1: Product: syz [ 606.918217][ T5837] usb 4-1: Manufacturer: syz [ 606.938542][ T5837] usb 4-1: SerialNumber: syz [ 606.962014][ T5837] usb 4-1: config 0 descriptor?? [ 606.966246][T17932] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 607.008454][T17932] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 607.017595][T17932] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 607.035005][T17939] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 607.194115][T17952] loop4: detected capacity change from 0 to 4096 [ 607.195168][ T31] audit: type=1800 audit(1771364519.383:319): pid=17932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4023" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 607.384943][T17914] loop9: detected capacity change from 0 to 32768 [ 607.506180][T17914] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 607.889134][T17914] XFS (loop9): Ending clean mount [ 607.966996][T17914] XFS (loop9): Quotacheck needed: Please wait. [ 608.220149][T17976] loop4: detected capacity change from 0 to 4096 [ 608.248345][T17914] XFS (loop9): Quotacheck: Done. [ 608.325249][T17976] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 608.483528][T13709] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 608.559321][ T5837] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 608.622206][T17989] ntfs3(loop4): ino=1d, mi_enum_attr [ 608.633134][T17989] ntfs3(loop4): ino=1d, mi_enum_attr [ 608.664534][T17989] ntfs3(loop4): ino=1d, "file1" mi_enum_attr [ 608.791922][ T5837] usb 1-1: config 2 descriptor has 1 excess byte, ignoring [ 608.830393][ T5837] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 608.909290][ T5837] usb 1-1: config 2 interface 0 has no altsetting 0 [ 608.949206][ T5837] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 609.029364][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.074741][ T5837] usb 1-1: Product: syz [ 609.088432][ T5837] usb 1-1: Manufacturer: syz [ 609.125323][ T5837] usb 1-1: SerialNumber: syz [ 609.404296][ T5884] usb 4-1: USB disconnect, device number 21 [ 609.590076][ T5837] ims_pcu 1-1:2.0: Missing CDC union descriptor [ 609.596450][ T5837] ims_pcu 1-1:2.0: probe with driver ims_pcu failed with error -22 [ 609.729608][ T5837] usb 1-1: USB disconnect, device number 26 [ 609.840913][ T31] audit: type=1326 audit(1771364522.114:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17986 comm="syz.8.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffa19c629 code=0x7ffc0000 [ 609.992963][ T31] audit: type=1326 audit(1771364522.144:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17986 comm="syz.8.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ffa19c629 code=0x7ffc0000 [ 610.498197][ T5898] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 610.520761][T18023] loop4: detected capacity change from 0 to 2048 [ 610.616781][T18023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 610.688900][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 610.733495][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.782184][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.825571][ T5898] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 610.868006][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.898096][ T5930] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 610.915907][ T5898] usb 4-1: config 0 descriptor?? [ 611.500827][ T5898] savu 0003:1E7D:2D5A.0020: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 612.481454][ T5930] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 612.519656][ T5898] usb 4-1: USB disconnect, device number 22 [ 612.545028][ T5930] usb 10-1: config 0 has no interface number 0 [ 612.670561][ T5930] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 612.757233][ T5930] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.864908][ T5930] usb 10-1: Product: syz [ 612.935636][ T5930] usb 10-1: Manufacturer: syz [ 612.963818][ T5930] usb 10-1: SerialNumber: syz [ 613.107094][ T5930] usb 10-1: config 0 descriptor?? [ 613.169211][T18050] fido_id[18050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 613.269065][T18054] loop8: detected capacity change from 0 to 256 [ 613.454005][ T5930] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 613.640925][T18045] loop4: detected capacity change from 0 to 262144 [ 613.666252][ T5930] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 613.683503][T18045] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4058 (18045) [ 613.737534][T18045] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 613.747933][T18045] BTRFS info (device loop4): using xxhash64 checksum algorithm [ 613.785064][ T5930] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 613.831523][ T5930] usb 10-1: media controller created [ 613.892238][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 613.897940][T18069] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 614.002273][T18045] BTRFS info (device loop4): deleted orphan free space tree entries [ 614.014941][T18045] BTRFS info (device loop4): checking UUID tree [ 614.026553][T18045] BTRFS info (device loop4): setting nodatasum [ 614.032791][T18045] BTRFS info (device loop4): enabling ssd optimizations [ 614.039960][T18045] BTRFS info (device loop4): turning on async discard [ 614.046935][T18045] BTRFS info (device loop4): enabling free space tree [ 614.140139][T18083] veth0: entered promiscuous mode [ 614.169631][T18083] veth0: left promiscuous mode [ 614.362351][ T5930] usb 10-1: USB disconnect, device number 17 [ 614.394929][T16872] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 614.473018][T18094] Invalid argument reading file caps for ./file0 [ 615.632803][T18121] loop4: detected capacity change from 0 to 164 [ 615.773773][T18121] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 616.543401][T18143] hugetlbfs: syz.4.4088 (18143): Using mlock ulimits for SHM_HUGETLB is obsolete [ 616.637335][ T31] audit: type=1326 audit(1771364528.918:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18146 comm="syz.9.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed739c629 code=0x7ffc0000 [ 616.788121][ T31] audit: type=1326 audit(1771364528.918:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18146 comm="syz.9.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed739c629 code=0x7ffc0000 [ 616.817084][T18106] loop3: detected capacity change from 0 to 40427 [ 616.882059][T18106] F2FS-fs (loop3): invalid crc value [ 616.942247][ T31] audit: type=1326 audit(1771364528.918:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18146 comm="syz.9.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f8ed739c629 code=0x7ffc0000 [ 617.074520][ T31] audit: type=1326 audit(1771364528.918:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18146 comm="syz.9.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed739c629 code=0x7ffc0000 [ 617.184926][ T5946] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 617.251462][ T31] audit: type=1326 audit(1771364528.918:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18146 comm="syz.9.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed739c629 code=0x7ffc0000 [ 617.341507][ T31] audit: type=1326 audit(1771364528.928:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18146 comm="syz.9.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f8ed739c629 code=0x7ffc0000 [ 617.390482][T18106] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 617.446165][ T5946] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 617.451671][T18106] F2FS-fs (loop3): Start checkpoint disabled! [ 617.487144][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.495842][ T31] audit: type=1326 audit(1771364528.928:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18146 comm="syz.9.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed739c629 code=0x7ffc0000 [ 617.535734][T18106] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 617.551533][ T5946] usb 5-1: config 0 descriptor?? [ 617.576573][T18106] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 617.606003][ T5946] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 617.614660][ T31] audit: type=1326 audit(1771364528.928:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18146 comm="syz.9.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed739c629 code=0x7ffc0000 [ 617.769395][ T31] audit: type=1326 audit(1771364528.928:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18146 comm="syz.9.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f8ed739c629 code=0x7ffc0000 [ 617.792406][T18106] F2FS-fs (loop3): disabling checkpoint not compatible with read-only [ 617.807665][T18106] syz.3.4073: attempt to access beyond end of device [ 617.807665][T18106] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 617.921592][T18106] syz.3.4073: attempt to access beyond end of device [ 617.921592][T18106] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 617.969911][ T31] audit: type=1326 audit(1771364528.928:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18146 comm="syz.9.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed739c629 code=0x7ffc0000 [ 618.064139][ T5946] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 618.170541][T12456] kworker/u8:8: attempt to access beyond end of device [ 618.170541][T12456] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 618.257691][T12456] CPU: 1 UID: 0 PID: 12456 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.257733][T12456] Tainted: [L]=SOFTLOCKUP [ 618.257742][T12456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 618.257761][T12456] Workqueue: writeback wb_workfn (flush-7:3) [ 618.257814][T12456] Call Trace: [ 618.257825][T12456] [ 618.257837][T12456] dump_stack_lvl+0xe8/0x150 [ 618.257876][T12456] f2fs_handle_critical_error+0x37c/0x540 [ 618.257927][T12456] f2fs_write_end_io+0xcdb/0xff0 [ 618.257981][T12456] __submit_merged_bio+0x256/0x700 [ 618.258030][T12456] __submit_merged_write_cond+0x3c9/0x4e0 [ 618.258083][T12456] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 618.258144][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.258191][T12456] f2fs_write_data_pages+0x2975/0x35e0 [ 618.258273][T12456] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 618.258322][T12456] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 618.258405][T12456] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 618.258479][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.258537][T12456] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 618.258577][T12456] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 618.258608][T12456] do_writepages+0x32e/0x550 [ 618.258660][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.258692][T12456] ? reacquire_held_locks+0x104/0x190 [ 618.258731][T12456] ? writeback_sb_inodes+0x43d/0x19a0 [ 618.258773][T12456] __writeback_single_inode+0x133/0x11a0 [ 618.258809][T12456] ? do_raw_spin_unlock+0xf5/0x210 [ 618.258843][T12456] writeback_sb_inodes+0x944/0x19a0 [ 618.258883][T12456] ? ret_from_fork_asm+0x1a/0x30 [ 618.258941][T12456] ? __lock_acquire+0x6b5/0x2cf0 [ 618.258985][T12456] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 618.259015][T12456] ? do_raw_spin_lock+0x12b/0x2f0 [ 618.259101][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.259133][T12456] ? rcu_is_watching+0x15/0xb0 [ 618.259170][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.259214][T12456] wb_writeback+0x456/0xb70 [ 618.259251][T12456] ? queue_io+0x261/0x4a0 [ 618.259296][T12456] ? __pfx_wb_writeback+0x10/0x10 [ 618.259324][T12456] ? do_raw_spin_lock+0x12b/0x2f0 [ 618.259375][T12456] wb_workfn+0x414/0xf50 [ 618.259423][T12456] ? look_up_lock_class+0x57/0x110 [ 618.259480][T12456] ? __pfx_wb_workfn+0x10/0x10 [ 618.259527][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.259558][T12456] ? do_raw_spin_lock+0x12b/0x2f0 [ 618.259590][T12456] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 618.259616][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.259665][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.259701][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.259734][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.259770][T12456] ? process_scheduled_works+0xa25/0x1830 [ 618.259803][T12456] ? process_scheduled_works+0xa25/0x1830 [ 618.259840][T12456] process_scheduled_works+0xb02/0x1830 [ 618.259916][T12456] ? __pfx_process_scheduled_works+0x10/0x10 [ 618.259960][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.259991][T12456] ? assign_work+0x3d5/0x5e0 [ 618.260033][T12456] worker_thread+0xa50/0xfc0 [ 618.260071][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.260128][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.260172][T12456] kthread+0x388/0x470 [ 618.260199][T12456] ? __pfx_worker_thread+0x10/0x10 [ 618.260232][T12456] ? __pfx_kthread+0x10/0x10 [ 618.260261][T12456] ret_from_fork+0x51e/0xb90 [ 618.260302][T12456] ? __pfx_ret_from_fork+0x10/0x10 [ 618.260334][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 618.260364][T12456] ? __switch_to+0xc7d/0x1450 [ 618.260401][T12456] ? __pfx_kthread+0x10/0x10 [ 618.260428][T12456] ret_from_fork_asm+0x1a/0x30 [ 618.260492][T12456] [ 618.473365][ T5946] gspca_cpia1: usb_control_msg 02, error -32 [ 618.654353][T12456] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 618.736845][ T5946] gspca_cpia1: usb_control_msg 02, error -71 [ 618.742901][ T5946] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 618.785762][ T5946] usb 5-1: USB disconnect, device number 9 [ 619.064075][ T5884] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 619.234220][ T5884] usb 9-1: Using ep0 maxpacket: 16 [ 619.263646][ T5884] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 619.272852][ T5884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.327108][ T5884] usb 9-1: Product: syz [ 619.331327][ T5884] usb 9-1: Manufacturer: syz [ 619.389113][ T5884] usb 9-1: SerialNumber: syz [ 619.464815][ T5884] usb 9-1: config 0 descriptor?? [ 619.881316][ T5884] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 619.958627][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 620.014119][ T5884] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 620.039935][ T5884] usb 9-1: media controller created [ 620.076360][T18201] loop4: detected capacity change from 0 to 4096 [ 620.125600][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 620.144953][T18201] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 620.352065][ T5884] zl10353_read_register: readreg error (reg=127, ret==0) [ 620.395393][ T5884] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 620.433376][ T5884] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 620.522414][ T5884] usb 9-1: USB disconnect, device number 18 [ 620.647319][T18215] loop3: detected capacity change from 0 to 64 [ 620.716773][ T5884] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 620.982637][T16978] hfs: node 4:3 still has 1 user(s)! [ 621.208683][T18226] loop8: detected capacity change from 0 to 4096 [ 621.353057][T18232] block nbd3: Device being setup by another task [ 621.390829][T18231] block nbd3: NBD_DISCONNECT [ 621.429367][T18230] block nbd3: Disconnected due to user request. [ 621.457057][T18230] block nbd3: shutting down sockets [ 621.779433][T18209] loop9: detected capacity change from 0 to 40427 [ 621.810286][T18209] F2FS-fs: heap/no_heap options were deprecated [ 621.860185][T18209] F2FS-fs: heap/no_heap options were deprecated [ 621.899673][T18209] F2FS-fs (loop9): Image doesn't support compression [ 621.936099][T18244] loop4: detected capacity change from 0 to 4096 [ 621.943426][T18209] F2FS-fs (loop9): invalid crc value [ 621.987182][T18244] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 622.016916][T18252] loop8: detected capacity change from 0 to 256 [ 622.036404][T18255] loop5: detected capacity change from 0 to 256 [ 622.100729][T18255] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 622.148938][T18252] FAT-fs (loop8): Directory bread(block 64) failed [ 622.172870][T18252] FAT-fs (loop8): Directory bread(block 65) failed [ 622.180245][T18255] exFAT-fs (loop5): valid_size(562949953421322) is greater than size(10) [ 622.191688][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 622.191709][ T31] audit: type=1800 audit(1771364534.470:337): pid=18255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4132" name="file1" dev="loop5" ino=1048761 res=0 errno=0 [ 622.267965][T18252] FAT-fs (loop8): Directory bread(block 66) failed [ 622.280550][T18252] FAT-fs (loop8): Directory bread(block 67) failed [ 622.283354][T18257] pim6reg1: entered promiscuous mode [ 622.296139][T18252] FAT-fs (loop8): Directory bread(block 68) failed [ 622.303946][T18252] FAT-fs (loop8): Directory bread(block 69) failed [ 622.340370][T18257] pim6reg1: entered allmulticast mode [ 622.381935][T18209] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 622.382411][T18252] FAT-fs (loop8): Directory bread(block 70) failed [ 622.433852][T18209] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 622.459594][T18252] FAT-fs (loop8): Directory bread(block 71) failed [ 622.537214][T18252] FAT-fs (loop8): Directory bread(block 72) failed [ 622.572500][T18252] FAT-fs (loop8): Directory bread(block 73) failed [ 622.797568][T13709] syz-executor: attempt to access beyond end of device [ 622.797568][T13709] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 622.880182][T13709] CPU: 1 UID: 0 PID: 13709 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 622.880225][T13709] Tainted: [L]=SOFTLOCKUP [ 622.880235][T13709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 622.880251][T13709] Call Trace: [ 622.880262][T13709] [ 622.880273][T13709] dump_stack_lvl+0xe8/0x150 [ 622.880316][T13709] f2fs_handle_critical_error+0x37c/0x540 [ 622.880365][T13709] f2fs_write_end_io+0xcdb/0xff0 [ 622.880415][T13709] __submit_merged_bio+0x256/0x700 [ 622.880462][T13709] __submit_merged_write_cond+0x3c9/0x4e0 [ 622.880512][T13709] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 622.880567][T13709] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.880609][T13709] f2fs_write_data_pages+0x2975/0x35e0 [ 622.880688][T13709] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 622.880731][T13709] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.880760][T13709] ? css_rstat_updated+0x23a/0x530 [ 622.880817][T13709] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.880846][T13709] ? rcu_is_watching+0x15/0xb0 [ 622.880882][T13709] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.880912][T13709] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 622.880950][T13709] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.880980][T13709] ? lru_gen_update_size+0x7c9/0xd10 [ 622.881024][T13709] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.881059][T13709] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.881089][T13709] ? __lock_acquire+0x6b5/0x2cf0 [ 622.881128][T13709] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.881172][T13709] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.881207][T13709] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 622.881235][T13709] do_writepages+0x32e/0x550 [ 622.881271][T13709] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.881303][T13709] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.881338][T13709] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.881368][T13709] ? do_raw_spin_unlock+0xf5/0x210 [ 622.881400][T13709] filemap_fdatawrite+0x1e9/0x2f0 [ 622.881440][T13709] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 622.881518][T13709] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.881551][T13709] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.881587][T13709] ? do_raw_spin_unlock+0xf5/0x210 [ 622.881625][T13709] f2fs_sync_dirty_inodes+0x30e/0x860 [ 622.881672][T13709] f2fs_write_checkpoint+0x9df/0x26a0 [ 622.881740][T13709] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 622.881815][T13709] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.881845][T13709] ? kfree+0x1c1/0x630 [ 622.881884][T13709] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 622.881926][T13709] kill_f2fs_super+0x314/0x720 [ 622.881962][T13709] ? __pfx_kill_f2fs_super+0x10/0x10 [ 622.882005][T13709] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.882035][T13709] ? lockdep_hardirqs_on+0x7a/0x110 [ 622.882070][T13709] ? srso_alias_return_thunk+0x5/0xfbef5 [ 622.882116][T13709] deactivate_locked_super+0xbc/0x130 [ 622.882156][T13709] cleanup_mnt+0x437/0x4d0 [ 622.882195][T13709] ? _raw_spin_unlock_irq+0x23/0x50 [ 622.882232][T13709] task_work_run+0x1d9/0x270 [ 622.882263][T13709] ? __pfx_task_work_run+0x10/0x10 [ 622.882307][T13709] exit_to_user_mode_loop+0xed/0x480 [ 622.882337][T13709] ? rcu_is_watching+0x15/0xb0 [ 622.882376][T13709] do_syscall_64+0x32d/0xf80 [ 622.882409][T13709] ? trace_irq_disable+0x3b/0x150 [ 622.882442][T13709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.882475][T13709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.882502][T13709] RIP: 0033:0x7f8ed739d897 [ 622.882526][T13709] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 622.882547][T13709] RSP: 002b:00007ffc25afbfb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 622.882573][T13709] RAX: 0000000000000000 RBX: 00007f8ed7431ef0 RCX: 00007f8ed739d897 [ 622.882591][T13709] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc25afc070 [ 622.882607][T13709] RBP: 00007ffc25afc070 R08: 00007ffc25afd070 R09: 00000000ffffffff [ 622.882635][T13709] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc25afd100 [ 622.882652][T13709] R13: 00007f8ed7431ef0 R14: 00000000000980a4 R15: 00007ffc25afd140 [ 622.882690][T13709] [ 623.511434][T18266] loop4: detected capacity change from 0 to 32768 [ 623.534113][T13709] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 623.578413][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.589615][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.712367][ T5884] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 624.903574][ T5884] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 624.943802][ T5884] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 624.993432][ T5884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 625.015279][ T5884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 625.047311][ T5884] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 625.121223][ T5884] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 625.144243][ T5884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.175328][ T5884] usb 9-1: Product: syz [ 625.189717][ T5884] usb 9-1: Manufacturer: syz [ 625.210120][ T5884] usb 9-1: SerialNumber: syz [ 625.222578][ T31] audit: type=1326 audit(1771364537.502:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.3.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7059c629 code=0x7ffc0000 [ 625.229737][T18328] netlink: 'syz.0.4158': attribute type 7 has an invalid length. [ 625.259099][ T5884] usb 9-1: config 0 descriptor?? [ 625.282326][T18301] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 625.286490][T18328] netlink: 'syz.0.4158': attribute type 8 has an invalid length. [ 625.304031][ T5884] input: KB Gear Tablet as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input36 [ 625.326073][ T31] audit: type=1326 audit(1771364537.502:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.3.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7059c629 code=0x7ffc0000 [ 625.326876][T18328] netlink: 'syz.0.4158': attribute type 7 has an invalid length. [ 625.438216][T18328] netlink: 208804 bytes leftover after parsing attributes in process `syz.0.4158'. [ 625.475000][T18333] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4161'. [ 625.488081][T18334] loop5: detected capacity change from 0 to 64 [ 625.498768][ C1] kbtab 9-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 625.510112][ T31] audit: type=1326 audit(1771364537.502:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.3.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7059c629 code=0x7ffc0000 [ 625.629564][ T31] audit: type=1326 audit(1771364537.502:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.3.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f7059c629 code=0x7ffc0000 [ 625.632186][ T5884] usb 9-1: USB disconnect, device number 19 [ 625.750236][ T31] audit: type=1326 audit(1771364537.502:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.3.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7059c629 code=0x7ffc0000 [ 625.885293][ T31] audit: type=1326 audit(1771364537.502:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.3.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7059c629 code=0x7ffc0000 [ 626.018591][ T31] audit: type=1326 audit(1771364537.502:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.3.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7059c629 code=0x7ffc0000 [ 626.064480][T18344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4164'. [ 626.120921][T18347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4164'. [ 626.154388][ T31] audit: type=1326 audit(1771364537.532:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.3.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7059c629 code=0x7ffc0000 [ 626.257651][ T31] audit: type=1326 audit(1771364537.532:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18324 comm="syz.3.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f7059c629 code=0x7ffc0000 [ 626.384730][T18357] kernel read not supported for file /eth0 (pid: 18357 comm: syz.8.4170) [ 626.441510][ T29] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 626.488058][ T5930] kernel read not supported for file /eth0 (pid: 5930 comm: kworker/0:6) [ 626.606527][ T29] usb 10-1: Using ep0 maxpacket: 32 [ 626.635224][ T29] usb 10-1: config 0 has no interfaces? [ 626.652701][ T29] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 626.678221][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.727923][ T29] usb 10-1: config 0 descriptor?? [ 626.943556][T18379] binder: 18378:18379 ioctl c018620c 200000000000 returned -22 [ 626.967110][ T29] usb 10-1: USB disconnect, device number 18 [ 627.208942][T18391] xt_hashlimit: size too large, truncated to 1048576 [ 627.229223][T18394] loop5: detected capacity change from 0 to 256 [ 627.291539][T18394] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x459e1815, utbl_chksum : 0xe619d30d) [ 627.326239][T18394] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 627.344897][T18394] exFAT-fs (loop5): failed to load alloc-bitmap [ 627.384647][T18394] exFAT-fs (loop5): failed to recognize exfat type [ 628.241435][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4193'. [ 628.319818][T18419] loop9: detected capacity change from 0 to 512 [ 628.382164][T18422] bond1: Invalid ad_actor_system MAC address. [ 628.388312][T18422] bond1: option ad_actor_system: invalid value (1) [ 628.417938][T18429] loop4: detected capacity change from 0 to 128 [ 628.437548][T18422] bond1 (unregistering): Released all slaves [ 628.899217][T18388] loop3: detected capacity change from 0 to 32768 [ 629.081828][T18388] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 629.137276][T18435] loop9: detected capacity change from 0 to 4096 [ 629.233997][T18435] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 629.310636][T18388] XFS (loop3): Ending clean mount [ 629.587020][T18459] netlink: 'syz.4.4203': attribute type 11 has an invalid length. [ 629.709757][T18459] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4203'. [ 629.979080][T16978] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 630.381522][T18474] loop9: detected capacity change from 0 to 8 [ 630.478023][T18474] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 630.531277][T18474] unable to read xattr id index table [ 630.695175][T18482] tipc: Started in network mode [ 630.760784][T18482] tipc: Node identity ac1414aa, cluster identity 4711 [ 630.803888][T18482] tipc: Enabled bearer , priority 10 [ 631.182856][T18492] netlink: 'syz.4.4217': attribute type 1 has an invalid length. [ 631.237797][T18492] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4217'. [ 631.246813][T18492] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4217'. [ 631.334292][T18492] netlink: 'syz.4.4217': attribute type 2 has an invalid length. [ 631.736851][T18509] team_slave_0: entered promiscuous mode [ 631.744406][T18509] team_slave_1: entered promiscuous mode [ 631.820310][T18509] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 632.047836][T18511] loop5: detected capacity change from 0 to 2048 [ 632.052254][T18510] loop8: detected capacity change from 0 to 32768 [ 632.082997][T18510] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4222 (18510) [ 632.102286][T18510] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 632.112585][T18510] BTRFS info (device loop8): using crc32c checksum algorithm [ 632.121179][T18510] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 632.195651][T18512] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 632.196450][T18511] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 632.337253][ T5898] tipc: Node number set to 2886997162 [ 632.619968][T18510] BTRFS info (device loop8): rebuilding free space tree [ 632.669339][T18510] BTRFS info (device loop8): disabling free space tree [ 632.676340][T18510] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 632.686822][T18510] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 632.711115][T18510] BTRFS info (device loop8): setting nodatasum [ 632.717458][T18510] BTRFS info (device loop8): setting nodatacow [ 632.723668][T18510] BTRFS info (device loop8): enabling ssd optimizations [ 632.730782][T18510] BTRFS info (device loop8): using spread ssd allocation scheme [ 632.739132][T18510] BTRFS info (device loop8): turning on async discard [ 632.745909][T18510] BTRFS info (device loop8): enabling disk space caching [ 632.752990][T18510] BTRFS info (device loop8): force clearing of disk cache [ 633.435690][T18510] BTRFS warning (device loop8 state M): remount supports changing free space tree only from RO to RW [ 633.450654][T18510] BTRFS info (device loop8 state M): turning off barriers [ 633.462236][T18510] BTRFS info (device loop8 state M): turning on flush-on-commit [ 633.473455][T18510] BTRFS info (device loop8 state M): turning on sync discard [ 633.480924][T18510] BTRFS info (device loop8 state M): force clearing of disk cache [ 633.488770][T18510] BTRFS info (device loop8 state M): enabling auto defrag [ 633.495982][T18510] BTRFS info (device loop8 state M): not using ssd optimizations [ 633.504082][T18510] BTRFS info (device loop8 state M): not using spread ssd allocation scheme [ 633.570435][T11118] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 634.934126][T18582] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 634.975585][T18582] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 635.356875][T18590] loop5: detected capacity change from 0 to 1024 [ 635.488154][T18590] hfsplus: invalid file type 0177777 for inode 2 [ 635.494793][T18590] hfsplus: failed to load root directory [ 635.691858][T18595] loop9: detected capacity change from 0 to 2048 [ 635.813101][T18595] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 637.741146][T18614] loop3: detected capacity change from 0 to 131072 [ 637.781815][T18614] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 637.790108][T18614] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 637.852834][T18614] F2FS-fs (loop3): invalid crc value [ 637.969563][T18614] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 638.010777][T18614] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 638.022362][T18614] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 638.685705][T18611] loop5: detected capacity change from 0 to 32768 [ 639.005096][T18611] JBD2: Ignoring recovery information on journal [ 639.073491][T18650] loop8: detected capacity change from 0 to 256 [ 639.284117][T18611] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 640.173123][ T5828] ocfs2: Unmounting device (7,5) on (node local) [ 640.805727][T18671] sctp: [Deprecated]: syz.8.4271 (pid 18671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 640.805727][T18671] Use struct sctp_sack_info instead [ 641.214497][T16852] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 641.403304][T16852] usb 5-1: Using ep0 maxpacket: 32 [ 641.431435][T16852] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 641.465086][T16852] usb 5-1: config 0 has no interface number 0 [ 641.479228][T16852] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 641.522796][T16852] usb 5-1: config 0 interface 85 has no altsetting 0 [ 641.554084][T16852] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 641.581280][T16852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.598946][T16852] usb 5-1: Product: syz [ 641.609597][T16852] usb 5-1: Manufacturer: syz [ 641.623822][T16852] usb 5-1: SerialNumber: syz [ 641.691041][T16852] usb 5-1: config 0 descriptor?? [ 642.043087][ T5884] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 642.259236][ T5884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.299128][ T5884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.341044][ T5884] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 642.385141][T16852] appletouch 5-1:0.85: Geyser mode initialized. [ 642.409804][T16852] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input37 [ 642.430731][ T5884] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 642.464727][ T5884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.528199][ T5884] usb 9-1: config 0 descriptor?? [ 642.678925][ T24] usb 5-1: USB disconnect, device number 10 [ 642.684983][ C1] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 642.718444][T18721] loop9: detected capacity change from 0 to 256 [ 642.908193][ T24] appletouch 5-1:0.85: input: appletouch disconnected [ 643.044804][ T5884] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 643.330820][T18739] loop5: detected capacity change from 0 to 1024 [ 643.539567][T18741] hfsplus: failed to extend attributes file [ 644.234872][ T5930] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 644.312148][T18750] loop3: detected capacity change from 0 to 128 [ 644.354950][T18750] EXT4-fs: Ignoring removed nomblk_io_submit option [ 644.412787][T18750] EXT4-fs (loop3): Test dummy encryption mode enabled [ 644.485871][T18750] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 644.501147][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 644.532917][ T5930] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 644.551846][T18750] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 644.563208][ T5930] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 644.573362][ T5884] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 644.589120][ T5930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 644.669883][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 644.669908][ T31] audit: type=1800 audit(1771364556.952:359): pid=18750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4296" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 644.701756][ T5930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 644.763146][ T5930] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.791394][ T5884] usb 10-1: Using ep0 maxpacket: 32 [ 644.854234][ T5884] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 644.881794][ T5930] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 644.892381][ T31] audit: type=1800 audit(1771364557.012:360): pid=18750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4296" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 644.917684][ T5884] usb 10-1: config 0 has no interface number 0 [ 644.940923][ T5884] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 644.956504][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.000458][ T5884] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 645.020956][ T5884] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.043009][ T5884] usb 10-1: Product: syz [ 645.047365][ T5884] usb 10-1: Manufacturer: syz [ 645.069858][ T5884] usb 10-1: SerialNumber: syz [ 645.115016][T16978] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 645.132568][ T5884] usb 10-1: config 0 descriptor?? [ 645.162868][T18749] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 645.251348][ T5930] usb 5-1: usb_control_msg returned -32 [ 645.271009][ T5930] usbtmc 5-1:16.0: can't read capabilities [ 645.458962][T18749] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 645.474684][T16852] usb 9-1: USB disconnect, device number 20 [ 646.091266][T18785] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 646.115324][ T5884] asix 10-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 646.134095][T18785] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 646.317376][ T5884] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 646.398112][ T5884] asix 10-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 646.433707][ T5884] asix 10-1:0.188: probe with driver asix failed with error -71 [ 646.522687][ T5884] usb 10-1: USB disconnect, device number 19 [ 646.599779][T18798] loop5: detected capacity change from 0 to 4096 [ 646.722120][T18798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.830625][T18810] netlink: 'syz.3.4313': attribute type 3 has an invalid length. [ 646.838711][T18810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4313'. [ 646.851495][T18810] netlink: 'syz.3.4313': attribute type 3 has an invalid length. [ 646.860684][T18810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4313'. [ 647.052221][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.140844][ T29] usb 5-1: USB disconnect, device number 11 [ 647.895316][ T5884] hid-generic 0005:04F3:1012.0022: item fetching failed at offset 0/1 [ 647.918380][ T5884] hid-generic 0005:04F3:1012.0022: probe with driver hid-generic failed with error -22 [ 648.176443][T18857] loop3: detected capacity change from 0 to 512 [ 648.224980][T18857] EXT4-fs: Ignoring removed mblk_io_submit option [ 648.282440][T18857] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.4329: corrupted in-inode xattr: e_value size too large [ 648.324508][T18857] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 648.329197][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 648.344945][ C1] EXT4-fs (loop3): initial error at time 1771364560: ext4_iget_extra_inode:5025: inode 15 [ 648.354999][ C1] EXT4-fs (loop3): last error at time 1771364560: ext4_iget_extra_inode:5025: inode 15 [ 648.370463][T18857] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4329: couldn't read orphan inode 15 (err -117) [ 648.388359][T18857] loop3: lost filesystem error report for type 5 error -117 [ 648.399398][T18857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.595452][ T5884] kernel read not supported for file /comedi3 (pid: 5884 comm: kworker/0:4) [ 648.786023][T16978] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.842289][ T5884] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 649.069175][ T5884] usb 9-1: Using ep0 maxpacket: 32 [ 649.096743][ T5884] usb 9-1: config 0 interface 0 has no altsetting 0 [ 649.125150][ T5884] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 649.162541][ T5884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.209827][ T5884] usb 9-1: Product: syz [ 649.227708][ T5884] usb 9-1: Manufacturer: syz [ 649.260388][ T5884] usb 9-1: SerialNumber: syz [ 649.281919][ T5884] usb 9-1: config 0 descriptor?? [ 649.354570][T18892] loop3: detected capacity change from 0 to 64 [ 649.371589][T18893] veth1_macvtap: left promiscuous mode [ 649.377165][T18893] macsec0: entered allmulticast mode [ 649.418406][T18893] veth1_macvtap: entered promiscuous mode [ 649.424957][T18893] veth1_macvtap: entered allmulticast mode [ 649.431060][T18893] macsec0: left allmulticast mode [ 649.436106][T18893] veth1_macvtap: left allmulticast mode [ 649.745757][T18903] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4347'. [ 649.746419][ T5884] gs_usb 9-1:0.0: Configuring for 242 interfaces [ 649.785186][T18905] loop3: detected capacity change from 0 to 512 [ 649.817121][T18902] team0 (unregistering): Port device team_slave_0 removed [ 649.867591][T18905] ext2: block size(16384) > page size(4096) not supported by filesystem [ 649.896846][T18902] team0 (unregistering): Port device team_slave_1 removed [ 649.901754][T18905] EXT4-fs (loop3): bad block size 16384 [ 650.222238][T18917] loop5: detected capacity change from 0 to 1024 [ 650.262001][T18917] EXT4-fs: Ignoring removed orlov option [ 650.329721][T18917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.365998][ T5884] gs_usb 9-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 650.398314][ T5837] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 650.604538][ T5837] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 650.641748][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.679941][ T5837] usb 1-1: config 0 descriptor?? [ 650.692103][ T5837] cp210x 1-1:0.0: cp210x converter detected [ 650.758137][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 650.784081][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.806168][ T5884] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -71 [ 650.863649][ T5884] usb 9-1: USB disconnect, device number 21 [ 651.104506][T18942] loop4: detected capacity change from 0 to 1024 [ 651.143475][ T5837] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 651.153416][T18942] EXT4-fs: Ignoring removed bh option [ 651.185765][T18942] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 651.236894][T18943] loop3: detected capacity change from 0 to 4096 [ 651.248779][ T5837] usb 1-1: cp210x converter now attached to ttyUSB0 [ 651.344193][T18942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 651.432079][T18943] ntfs3(loop3): failed to convert "0080" to maciceland [ 651.447776][ T5884] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 651.450316][ T5837] usb 1-1: USB disconnect, device number 27 [ 651.551405][ T5837] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 651.609257][ T5837] cp210x 1-1:0.0: device disconnected [ 651.630752][T16872] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.679418][ T5884] usb 10-1: Using ep0 maxpacket: 16 [ 651.702658][ T5884] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.747578][ T5884] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 651.785925][ T5884] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.821108][T18961] loop3: detected capacity change from 0 to 512 [ 651.833775][ T5884] usb 10-1: config 0 descriptor?? [ 651.863405][T18961] EXT4-fs: Ignoring removed oldalloc option [ 651.944242][T18961] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.4365: corrupted in-inode xattr: invalid ea_ino [ 651.987506][T18961] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 651.989401][T18961] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4365: couldn't read orphan inode 15 (err -117) [ 651.998741][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 651.998781][ C1] EXT4-fs (loop3): initial error at time 1771364564: ext4_iget_extra_inode:5025: inode 15 [ 651.998826][ C1] EXT4-fs (loop3): last error at time 1771364564: ext4_iget_extra_inode:5025: inode 15 [ 652.038812][T18961] loop3: lost filesystem error report for type 5 error -117 [ 652.045612][T18961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.307083][ T5884] mcp2221 0003:04D8:00DD.0023: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 652.345348][T18974] loop4: detected capacity change from 0 to 1024 [ 652.411047][T16978] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.720191][ T59] hfsplus: b-tree write err: -5, ino 25 [ 652.726432][ T59] hfsplus: b-tree write err: -5, ino 4 [ 652.768108][ T59] hfsplus: b-tree write err: -5, ino 2 [ 652.797703][ T5884] usb 10-1: USB disconnect, device number 20 [ 652.906633][T18988] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4373'. [ 652.917155][T16852] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 652.955942][T18988] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4373'. [ 653.001853][T18988] netlink: 'syz.0.4373': attribute type 5 has an invalid length. [ 653.049175][T18988] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4373'. [ 653.108445][T16852] usb 6-1: Using ep0 maxpacket: 8 [ 653.164058][T16852] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 653.198168][T16852] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 653.226751][T16852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.286724][T16852] usb 6-1: config 0 descriptor?? [ 653.763917][T16852] corsair 0003:1B1C:1B09.0024: unknown main item tag 0x0 [ 653.792227][T16852] corsair 0003:1B1C:1B09.0024: unknown main item tag 0x0 [ 653.822832][T16852] corsair 0003:1B1C:1B09.0024: unknown main item tag 0x0 [ 653.838493][T16852] corsair 0003:1B1C:1B09.0024: unknown main item tag 0x0 [ 653.886484][T16852] corsair 0003:1B1C:1B09.0024: unknown main item tag 0x0 [ 653.929379][T16852] corsair 0003:1B1C:1B09.0024: unknown main item tag 0x0 [ 653.971567][T16852] corsair 0003:1B1C:1B09.0024: unknown main item tag 0x0 [ 654.016614][T16852] corsair 0003:1B1C:1B09.0024: unknown main item tag 0x0 [ 654.041988][T16852] corsair 0003:1B1C:1B09.0024: unknown main item tag 0x0 [ 654.076416][T16852] corsair 0003:1B1C:1B09.0024: unknown main item tag 0x0 [ 654.117319][T16852] corsair 0003:1B1C:1B09.0024: hidraw0: USB HID v0.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.5-1/input0 [ 654.235976][T16852] usb 6-1: USB disconnect, device number 28 [ 654.335567][T19040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4391'. [ 654.359830][T19040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.456644][T19034] fido_id[19034]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 654.479760][T19040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.862761][T19057] loop3: detected capacity change from 0 to 1024 [ 655.100446][ T59] hfsplus: b-tree write err: -5, ino 3 [ 655.111614][T19066] loop5: detected capacity change from 0 to 2048 [ 655.236812][T19066] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 655.246863][T19066] UDF-fs: Scanning with blocksize 512 failed [ 655.280072][T19076] loop3: detected capacity change from 0 to 512 [ 655.324116][T19078] loop4: detected capacity change from 0 to 256 [ 655.382975][T19066] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 655.475541][T19076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 655.558157][T19078] FAT-fs (loop4): Directory bread(block 64) failed [ 655.628619][T19078] FAT-fs (loop4): Directory bread(block 65) failed [ 655.635304][T19078] FAT-fs (loop4): Directory bread(block 66) failed [ 655.649609][T19076] ext4 filesystem being mounted at /82/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.717223][T19078] FAT-fs (loop4): Directory bread(block 67) failed [ 655.723952][T19078] FAT-fs (loop4): Directory bread(block 68) failed [ 655.825882][T19078] FAT-fs (loop4): Directory bread(block 69) failed [ 655.853539][T19078] FAT-fs (loop4): Directory bread(block 70) failed [ 655.895807][T19078] FAT-fs (loop4): Directory bread(block 71) failed [ 655.933429][T19078] FAT-fs (loop4): Directory bread(block 72) failed [ 655.984857][T19078] FAT-fs (loop4): Directory bread(block 73) failed [ 656.045629][T19096] loop8: detected capacity change from 0 to 256 [ 656.100401][T16978] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 656.642909][T19112] loop4: detected capacity change from 0 to 512 [ 656.741690][T19112] EXT4-fs (loop4): 1 orphan inode deleted [ 656.761003][ T59] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 656.839776][ T59] EXT4-fs error (device loop4): ext4_release_dquot:7039: comm kworker/u8:4: Failed to release dquot type 1 [ 656.893505][T19112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.910184][ T59] loop4: lost filesystem error report for type 5 error -117 [ 656.920829][T19123] loop3: detected capacity change from 0 to 1024 [ 656.957044][T19112] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.021030][T19123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.120395][ T150] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 657.223761][ T150] EXT4-fs error (device loop4): ext4_release_dquot:7039: comm kworker/u8:6: Failed to release dquot type 1 [ 657.282717][T16872] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.312344][T19134] loop5: detected capacity change from 0 to 1024 [ 657.425428][T16978] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.506921][T19134] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.759085][T19137] loop8: detected capacity change from 0 to 8192 [ 657.865088][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.288834][T19163] overlayfs: upper fs does not support file handles, falling back to index=off. [ 658.554694][T19171] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4435'. [ 658.607396][T19171] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4435'. [ 659.033953][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 659.196142][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 659.222730][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 659.268480][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 659.292791][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.333813][T16852] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 659.337740][T19189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 659.367893][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 659.554284][T16852] usb 9-1: Using ep0 maxpacket: 8 [ 659.592128][T16852] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 659.649691][T16852] usb 9-1: config 0 has no interface number 0 [ 659.679530][T16852] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 659.773312][T16852] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 659.830104][T16852] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.850333][ T24] usb 4-1: USB disconnect, device number 23 [ 659.965971][T16852] usb 9-1: config 0 descriptor?? [ 660.054213][T16852] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 660.087496][T12456] [ 660.089878][T12456] ============================================ [ 660.096023][T12456] WARNING: possible recursive locking detected [ 660.102174][T12456] syzkaller #0 Tainted: G L [ 660.108155][T12456] -------------------------------------------- [ 660.114295][T12456] kworker/u8:8/12456 is trying to acquire lock: [ 660.120699][T12456] ffff88805729aa20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 660.130043][T12456] [ 660.130043][T12456] but task is already holding lock: [ 660.137422][T12456] ffff88805729aa20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 660.147008][T12456] [ 660.147008][T12456] other info that might help us debug this: [ 660.155055][T12456] Possible unsafe locking scenario: [ 660.155055][T12456] [ 660.162488][T12456] CPU0 [ 660.165763][T12456] ---- [ 660.169023][T12456] lock(k-sk_lock-AF_INET6); [ 660.173695][T12456] lock(k-sk_lock-AF_INET6); [ 660.178363][T12456] [ 660.178363][T12456] *** DEADLOCK *** [ 660.178363][T12456] [ 660.186483][T12456] May be due to missing lock nesting notation [ 660.186483][T12456] [ 660.194783][T12456] 4 locks held by kworker/u8:8/12456: [ 660.200138][T12456] #0: ffff88807eb32948 ((wq_completion)krds_cp_wq#4/0){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 660.211826][T12456] #1: ffffc9000f33fc40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 660.224646][T12456] #2: ffff88805729aa20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 660.234690][T12456] #3: ffff88805729abc8 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x9a0 [ 660.244810][T12456] [ 660.244810][T12456] stack backtrace: [ 660.250692][T12456] CPU: 0 UID: 0 PID: 12456 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 660.250723][T12456] Tainted: [L]=SOFTLOCKUP [ 660.250732][T12456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 660.250751][T12456] Workqueue: krds_cp_wq#4/0 rds_send_worker [ 660.250788][T12456] Call Trace: [ 660.250801][T12456] [ 660.250812][T12456] dump_stack_lvl+0xe8/0x150 [ 660.250847][T12456] print_deadlock_bug+0x279/0x290 [ 660.250885][T12456] __lock_acquire+0x253f/0x2cf0 [ 660.250923][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.250955][T12456] ? unwind_next_frame+0xa5/0x23c0 [ 660.250993][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.251020][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.251050][T12456] lock_acquire+0xf0/0x2e0 [ 660.251076][T12456] ? inet6_getname+0x15d/0x650 [ 660.251124][T12456] lock_sock_nested+0x48/0x100 [ 660.251146][T12456] ? inet6_getname+0x15d/0x650 [ 660.251182][T12456] inet6_getname+0x15d/0x650 [ 660.251217][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.251248][T12456] rds_tcp_conn_slots_available+0x288/0x470 [ 660.251293][T12456] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 660.251339][T12456] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 660.251368][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.251394][T12456] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 660.251432][T12456] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 660.251457][T12456] ? rds_send_worker+0x7d/0x2e0 [ 660.251484][T12456] ? process_scheduled_works+0xb02/0x1830 [ 660.251512][T12456] ? worker_thread+0xa50/0xfc0 [ 660.251547][T12456] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 660.251580][T12456] rds_recv_incoming+0x9f6/0x12d0 [ 660.251609][T12456] ? __pfx_rds_recv_incoming+0x10/0x10 [ 660.251634][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.251660][T12456] ? skb_copy_bits+0x7e5/0x8f0 [ 660.251693][T12456] rds_tcp_data_recv+0x7f1/0xa40 [ 660.251727][T12456] __tcp_read_sock+0x196/0x970 [ 660.251770][T12456] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 660.251795][T12456] rds_tcp_data_ready+0x369/0x9a0 [ 660.251817][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.251843][T12456] ? __pfx_sock_def_readable+0x10/0x10 [ 660.251881][T12456] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 660.251908][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.251935][T12456] ? tcp_grow_window+0x27f/0xc50 [ 660.251957][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.251989][T12456] tcp_data_queue+0x1e2e/0x5e50 [ 660.252035][T12456] ? tcp_urg+0x106/0x410 [ 660.252065][T12456] ? __pfx_tcp_data_queue+0x10/0x10 [ 660.252097][T12456] ? __pfx_tcp_urg+0x10/0x10 [ 660.252126][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.252152][T12456] ? seqcount_lockdep_reader_access+0x10/0x100 [ 660.252175][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.252201][T12456] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 660.252236][T12456] tcp_rcv_established+0xf45/0x2740 [ 660.252276][T12456] ? __pfx_tcp_rcv_established+0x10/0x10 [ 660.252307][T12456] ? ip6_dst_check+0xe0/0x7e0 [ 660.252333][T12456] ? ip6_dst_check+0xe2/0x7e0 [ 660.252355][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.252382][T12456] ? ip6_dst_check+0x5e3/0x7e0 [ 660.252405][T12456] ? __pfx_ip6_dst_check+0x10/0x10 [ 660.252430][T12456] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 660.252476][T12456] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 660.252508][T12456] __release_sock+0x1b8/0x3a0 [ 660.252545][T12456] release_sock+0x5f/0x1f0 [ 660.252567][T12456] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 660.252593][T12456] rds_send_xmit+0x207e/0x28d0 [ 660.252640][T12456] ? __pfx_rds_send_xmit+0x10/0x10 [ 660.252666][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.252693][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.252721][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.252750][T12456] rds_send_worker+0x7d/0x2e0 [ 660.252778][T12456] ? process_scheduled_works+0xa25/0x1830 [ 660.252807][T12456] process_scheduled_works+0xb02/0x1830 [ 660.252851][T12456] ? __pfx_process_scheduled_works+0x10/0x10 [ 660.252883][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.252914][T12456] ? assign_work+0x3d5/0x5e0 [ 660.252944][T12456] worker_thread+0xa50/0xfc0 [ 660.252974][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.253009][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.253040][T12456] kthread+0x388/0x470 [ 660.253062][T12456] ? __pfx_worker_thread+0x10/0x10 [ 660.253090][T12456] ? __pfx_kthread+0x10/0x10 [ 660.253111][T12456] ret_from_fork+0x51e/0xb90 [ 660.253144][T12456] ? __pfx_ret_from_fork+0x10/0x10 [ 660.253172][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.253199][T12456] ? __switch_to+0xc7d/0x1450 [ 660.253228][T12456] ? __pfx_kthread+0x10/0x10 [ 660.253251][T12456] ret_from_fork_asm+0x1a/0x30 [ 660.253297][T12456] [ 660.708372][T12456] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 660.717170][T12456] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12456, name: kworker/u8:8 [ 660.726498][T12456] preempt_count: 201, expected: 0 [ 660.731703][T12456] RCU nest depth: 0, expected: 0 [ 660.736690][T12456] INFO: lockdep is turned off. [ 660.741450][T12456] Preemption disabled at: [ 660.741467][T12456] [<0000000000000000>] 0x0 [ 660.750249][T12456] CPU: 0 UID: 0 PID: 12456 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 660.750289][T12456] Tainted: [L]=SOFTLOCKUP [ 660.750300][T12456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 660.750321][T12456] Workqueue: krds_cp_wq#4/0 rds_send_worker [ 660.750367][T12456] Call Trace: [ 660.750379][T12456] [ 660.750389][T12456] dump_stack_lvl+0xe8/0x150 [ 660.750432][T12456] __might_resched+0x378/0x4d0 [ 660.750476][T12456] lock_sock_nested+0x5d/0x100 [ 660.750506][T12456] inet6_getname+0x15d/0x650 [ 660.750553][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.750592][T12456] rds_tcp_conn_slots_available+0x288/0x470 [ 660.750644][T12456] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 660.750697][T12456] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 660.750730][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.750760][T12456] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 660.750804][T12456] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 660.750831][T12456] ? rds_send_worker+0x7d/0x2e0 [ 660.750865][T12456] ? process_scheduled_works+0xb02/0x1830 [ 660.750903][T12456] ? worker_thread+0xa50/0xfc0 [ 660.750944][T12456] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 660.750981][T12456] rds_recv_incoming+0x9f6/0x12d0 [ 660.751015][T12456] ? __pfx_rds_recv_incoming+0x10/0x10 [ 660.751044][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.751074][T12456] ? skb_copy_bits+0x7e5/0x8f0 [ 660.751112][T12456] rds_tcp_data_recv+0x7f1/0xa40 [ 660.751151][T12456] __tcp_read_sock+0x196/0x970 [ 660.751198][T12456] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 660.751227][T12456] rds_tcp_data_ready+0x369/0x9a0 [ 660.751253][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.751283][T12456] ? __pfx_sock_def_readable+0x10/0x10 [ 660.751328][T12456] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 660.751354][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.751383][T12456] ? tcp_grow_window+0x27f/0xc50 [ 660.751410][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.751445][T12456] tcp_data_queue+0x1e2e/0x5e50 [ 660.751497][T12456] ? tcp_urg+0x106/0x410 [ 660.751531][T12456] ? __pfx_tcp_data_queue+0x10/0x10 [ 660.751567][T12456] ? __pfx_tcp_urg+0x10/0x10 [ 660.751600][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.751629][T12456] ? seqcount_lockdep_reader_access+0x10/0x100 [ 660.751654][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.751684][T12456] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 660.751724][T12456] tcp_rcv_established+0xf45/0x2740 [ 660.751769][T12456] ? __pfx_tcp_rcv_established+0x10/0x10 [ 660.751803][T12456] ? ip6_dst_check+0xe0/0x7e0 [ 660.751833][T12456] ? ip6_dst_check+0xe2/0x7e0 [ 660.751858][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.751892][T12456] ? ip6_dst_check+0x5e3/0x7e0 [ 660.751918][T12456] ? __pfx_ip6_dst_check+0x10/0x10 [ 660.751945][T12456] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 660.751994][T12456] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 660.752031][T12456] __release_sock+0x1b8/0x3a0 [ 660.752073][T12456] release_sock+0x5f/0x1f0 [ 660.752098][T12456] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 660.752126][T12456] rds_send_xmit+0x207e/0x28d0 [ 660.752180][T12456] ? __pfx_rds_send_xmit+0x10/0x10 [ 660.752208][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.752240][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.752270][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.752303][T12456] rds_send_worker+0x7d/0x2e0 [ 660.752335][T12456] ? process_scheduled_works+0xa25/0x1830 [ 660.752371][T12456] process_scheduled_works+0xb02/0x1830 [ 660.752422][T12456] ? __pfx_process_scheduled_works+0x10/0x10 [ 660.752458][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.752488][T12456] ? assign_work+0x3d5/0x5e0 [ 660.752523][T12456] worker_thread+0xa50/0xfc0 [ 660.752559][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.752599][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.752634][T12456] kthread+0x388/0x470 [ 660.752658][T12456] ? __pfx_worker_thread+0x10/0x10 [ 660.752690][T12456] ? __pfx_kthread+0x10/0x10 [ 660.752714][T12456] ret_from_fork+0x51e/0xb90 [ 660.752751][T12456] ? __pfx_ret_from_fork+0x10/0x10 [ 660.752782][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 660.752813][T12456] ? __switch_to+0xc7d/0x1450 [ 660.752845][T12456] ? __pfx_kthread+0x10/0x10 [ 660.752869][T12456] ret_from_fork_asm+0x1a/0x30 [ 660.752924][T12456] [ 661.167306][T12456] BUG: scheduling while atomic: kworker/u8:8/12456/0x00000202 [ 661.174827][T12456] INFO: lockdep is turned off. [ 661.179589][T12456] Modules linked in: [ 661.183516][T12456] Preemption disabled at: [ 661.183530][T12456] [<0000000000000000>] 0x0 [ 661.192292][T12456] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 661.201063][T12456] CPU: 0 UID: 0 PID: 12456 Comm: kworker/u8:8 Tainted: G W L syzkaller #0 PREEMPT(full) [ 661.212190][T12456] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 661.217474][T12456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 661.227631][T12456] Workqueue: krds_cp_wq#4/0 rds_send_worker [ 661.233561][T12456] Call Trace: [ 661.236855][T12456] [ 661.239806][T12456] vpanic+0x56c/0xa60 [ 661.243843][T12456] ? __pfx_vpanic+0x10/0x10 [ 661.248364][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.254004][T12456] ? rcu_is_watching+0x15/0xb0 [ 661.258783][T12456] panic+0xc5/0xd0 [ 661.262507][T12456] ? __pfx_panic+0x10/0x10 [ 661.266928][T12456] ? __pfx__printk+0x10/0x10 [ 661.271598][T12456] ? vprintk_emit+0x4eb/0x560 [ 661.276287][T12456] ? __pfx_vprintk_emit+0x10/0x10 [ 661.281333][T12456] check_panic_on_warn+0x89/0xb0 [ 661.286360][T12456] __schedule_bug+0xf6/0x150 [ 661.290950][T12456] __schedule+0x16a9/0x5340 [ 661.295462][T12456] ? __wake_up_klogd+0xe6/0x120 [ 661.300316][T12456] ? vprintk_emit+0x4eb/0x560 [ 661.305004][T12456] ? rcu_is_watching+0x15/0xb0 [ 661.309820][T12456] ? __pfx_vprintk_emit+0x10/0x10 [ 661.315200][T12456] ? unwind_next_frame+0xa5/0x23c0 [ 661.320316][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.325956][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.331588][T12456] ? do_raw_spin_lock+0x12b/0x2f0 [ 661.336609][T12456] ? __pfx___schedule+0x10/0x10 [ 661.341463][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.347099][T12456] ? rcu_is_watching+0x15/0xb0 [ 661.351872][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.357512][T12456] ? rcu_is_watching+0x15/0xb0 [ 661.362277][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.367925][T12456] ? lock_release+0x4b/0x3d0 [ 661.372539][T12456] ? schedule+0x90/0x360 [ 661.376790][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.382428][T12456] ? wq_worker_sleeping+0x63/0x250 [ 661.387549][T12456] schedule+0x164/0x360 [ 661.391718][T12456] __lock_sock+0x161/0x2c0 [ 661.396148][T12456] ? __pfx___lock_sock+0x10/0x10 [ 661.401093][T12456] ? do_raw_spin_lock+0x12b/0x2f0 [ 661.406118][T12456] ? __pfx_autoremove_wake_function+0x10/0x10 [ 661.412184][T12456] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 661.417549][T12456] ? lock_acquire+0x57/0x2e0 [ 661.422150][T12456] ? dump_stack_lvl+0x135/0x150 [ 661.427005][T12456] ? lock_sock_nested+0x6a/0x100 [ 661.431979][T12456] lock_sock_nested+0x9f/0x100 [ 661.436921][T12456] inet6_getname+0x15d/0x650 [ 661.441959][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.447596][T12456] rds_tcp_conn_slots_available+0x288/0x470 [ 661.453518][T12456] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 661.459954][T12456] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 661.465764][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.471405][T12456] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 661.477935][T12456] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 661.483051][T12456] ? rds_send_worker+0x7d/0x2e0 [ 661.487901][T12456] ? process_scheduled_works+0xb02/0x1830 [ 661.493621][T12456] ? worker_thread+0xa50/0xfc0 [ 661.498402][T12456] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 661.504044][T12456] rds_recv_incoming+0x9f6/0x12d0 [ 661.509073][T12456] ? __pfx_rds_recv_incoming+0x10/0x10 [ 661.514523][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.520159][T12456] ? skb_copy_bits+0x7e5/0x8f0 [ 661.524931][T12456] rds_tcp_data_recv+0x7f1/0xa40 [ 661.529877][T12456] __tcp_read_sock+0x196/0x970 [ 661.534671][T12456] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 661.540134][T12456] rds_tcp_data_ready+0x369/0x9a0 [ 661.545155][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.550792][T12456] ? __pfx_sock_def_readable+0x10/0x10 [ 661.556264][T12456] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 661.561806][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.567432][T12456] ? tcp_grow_window+0x27f/0xc50 [ 661.572365][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.577999][T12456] tcp_data_queue+0x1e2e/0x5e50 [ 661.582872][T12456] ? tcp_urg+0x106/0x410 [ 661.587117][T12456] ? __pfx_tcp_data_queue+0x10/0x10 [ 661.592321][T12456] ? __pfx_tcp_urg+0x10/0x10 [ 661.596909][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.602541][T12456] ? seqcount_lockdep_reader_access+0x10/0x100 [ 661.608700][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.614339][T12456] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 661.620167][T12456] tcp_rcv_established+0xf45/0x2740 [ 661.625378][T12456] ? __pfx_tcp_rcv_established+0x10/0x10 [ 661.631011][T12456] ? ip6_dst_check+0xe0/0x7e0 [ 661.635687][T12456] ? ip6_dst_check+0xe2/0x7e0 [ 661.640362][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.645997][T12456] ? ip6_dst_check+0x5e3/0x7e0 [ 661.650770][T12456] ? __pfx_ip6_dst_check+0x10/0x10 [ 661.655895][T12456] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 661.660598][T12456] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 661.665723][T12456] __release_sock+0x1b8/0x3a0 [ 661.670421][T12456] release_sock+0x5f/0x1f0 [ 661.674838][T12456] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 661.681085][T12456] rds_send_xmit+0x207e/0x28d0 [ 661.685882][T12456] ? __pfx_rds_send_xmit+0x10/0x10 [ 661.691019][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.696677][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.702315][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.707953][T12456] rds_send_worker+0x7d/0x2e0 [ 661.712635][T12456] ? process_scheduled_works+0xa25/0x1830 [ 661.718620][T12456] process_scheduled_works+0xb02/0x1830 [ 661.724188][T12456] ? __pfx_process_scheduled_works+0x10/0x10 [ 661.730177][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.735807][T12456] ? assign_work+0x3d5/0x5e0 [ 661.740397][T12456] worker_thread+0xa50/0xfc0 [ 661.744986][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.750625][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.756272][T12456] kthread+0x388/0x470 [ 661.760334][T12456] ? __pfx_worker_thread+0x10/0x10 [ 661.765452][T12456] ? __pfx_kthread+0x10/0x10 [ 661.770031][T12456] ret_from_fork+0x51e/0xb90 [ 661.774625][T12456] ? __pfx_ret_from_fork+0x10/0x10 [ 661.779753][T12456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 661.785380][T12456] ? __switch_to+0xc7d/0x1450 [ 661.790054][T12456] ? __pfx_kthread+0x10/0x10 [ 661.794656][T12456] ret_from_fork_asm+0x1a/0x30 [ 661.799445][T12456] [ 661.802787][T12456] Kernel Offset: disabled [ 661.807105][T12456] Rebooting in 86400 seconds..