last executing test programs: 3m42.834397362s ago: executing program 4 (id=134): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'virt_wifi0\x00', 0x0}) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000200"], 0x80}}, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) 3m42.456128041s ago: executing program 4 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 3m42.208642853s ago: executing program 4 (id=137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r6, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 3m41.320548827s ago: executing program 4 (id=140): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4ef07ec3ad71e14dc00000000c2ab00c60e000000000000080000090100", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 3m39.508722617s ago: executing program 4 (id=144): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) msgget$private(0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000000400)=""/4096, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x1, [], [0x20000000, 0x0, 0x1000010, 0x20000], [0x0, 0x40002, 0xfffffffe], [0x0, 0x10000000000000, 0x0, 0x5]}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x9901, 0x1, 0x3, 0x1}, 0x8) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000140)={0xffffffff, "121d250b96e2e3670cec0d0d18d9666f6e4540ac3fb7569dfdb8d55b97264b442cbb8775db06507789722e4fc83ec5c0f67c8108dbde9f431d8d8e16b83ad3c25333cc14b2350b2d1fa7706f4dec931204747d64be89ab69eed943a5bbc3614a82a9329412afa9acac0f970db1701e939faed6b4225853e93063dea597751c47ac1f0ea53ca03e86696016890d8e4b3a3dd9f704a0c5d8edd4a2c8f5ed1d47a2b0266d9f83ee8ecd83a5ad90b657a54822eea50c6ec9a95406f6bd3b4e3293f7ac431ee65d8f9249945eec6149e05ffe0f94e1b4b1928829d083f81a222e1e2e68a0ef7a141a589309e370c234ebb9b094de38378d7a3f15ad8f352b5553157f"}) 3m38.597214582s ago: executing program 4 (id=147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x74}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) pipe(0x0) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000000c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x70bd25, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026ca7000fbdbdf2505000000280001800d0001007564703a73797a320000000014000280080003008a"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r7, 0x3, 0x1) 3m37.776430303s ago: executing program 32 (id=147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x74}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) pipe(0x0) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000000c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x70bd25, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026ca7000fbdbdf2505000000280001800d0001007564703a73797a320000000014000280080003008a"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r7, 0x3, 0x1) 2m35.777874505s ago: executing program 0 (id=304): mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) bind$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 2m34.494168619s ago: executing program 0 (id=306): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000100)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, r1}) 2m32.694249019s ago: executing program 0 (id=308): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e21, @loopback}}}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r2, 0x5420, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0x0) 2m31.021918632s ago: executing program 0 (id=311): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmsg$inet_sctp(r4, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m30.023295971s ago: executing program 0 (id=313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$gfs2(&(0x7f00000124c0), &(0x7f0000012500)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xff, 0x125c7, &(0x7f0000012540)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) 2m28.560070874s ago: executing program 0 (id=315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 2m12.782601318s ago: executing program 33 (id=315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 16.513419299s ago: executing program 1 (id=651): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20000080, &(0x7f0000000540)={0xc9, 0x18, 0x0, 0x1, 0xfe, 0x6, @broadcast}, 0x14) r0 = socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 15.547002367s ago: executing program 1 (id=655): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xfffffffffffffffe) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2806, r4}, 0x94) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "576b6ef53b7d29775a598a05bd75178e57e16568b009ec328b5d6764d965e1081fc3c390db93cc994509274386773707579006e9c352280cd69fe358a15ef916", 0x36}, 0x48, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r6}) 13.287275889s ago: executing program 5 (id=668): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c020001000000000000400002000000000500050000000000"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 11.46204494s ago: executing program 5 (id=673): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) r4 = syz_io_uring_setup(0x3b3, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x100847c0, 0x0, 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10.408420852s ago: executing program 5 (id=677): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./bus\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x2, 0x6e5, &(0x7f0000002d40)="$eJzs3c1vHGcdB/DvrNeON1TBaRMaoSBMIhWkiMSJlUK4YBBCOVSoKoeercRprGySKnFRWiFwAcEJiUP/gILkGweExD0oXLiUW68+VkLiEnGIelk0s7P27nr9lvgloZ9PNZnnmeeZZ377m2dmvOtaG+AL6+q5NB+myNVzbzwo66srs+3VldkjdXM7SVluJM3uKsWdpHiUzJXtRd+SvvUGHy1eeevTx6ufdWvNeqn6j2213wgj+i7XS6br8aZH7jm+00Ms1+HlpSTX6vWgiZ2ONdCxTNrZeg2HrjOokc7ybnbfzXULPGd6T6ei+9zcYCo5mmSy/jkg9d2hcXAR7qlv9Aq7ussBAADAC+qTu4cdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALx4qu//b61VG91NyXSK3vf/T/S21eXn0NyOez7c1zgAAAAAAAAA4GB8/Ume5EGO9eqdovqd/5mqciKfd5Iv5b3cz0Lu5XweZD5LWcq9XEwy1TfQxIP5paV7F9f2LI3e89LIPS8d1CsGAAAAAAAAgP9Lv0pr/ff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPCiSse6qWk7U60yl0cx6W5aTfyWZOOx4d6EYtfHhwccBAAAAz2TyKfb58pM8yYMc69U7RfWe/yvV++XJvJc7WcpiltLOQq7X76HLd/2N1ZXZ9urK7O1yKeuD4/7gP7sKY6IeYayqjTryqapHKzeyWG05n2tVMNfT6B77bHKqF09fXH0+LGMqvl/bYWTNOq3lwf6w2acIe2Lwo4jGFj1b68ElaxmZqWMr9zzezUBRfVCTDGdi+OxsOFhzoDZVdRlfO9LFNNY++TmxDzk/Wq/L1/Pbfc35TvTnYi0TjVSZuNSbfeU1s3Umkm/+7c9v32zfuXXzxv1zh/uSdmFsk+3Dc2K2LxOvvtCZaO6y/0yViZNr9av5cX6ac5nOm7mXxfws81nKQjp1+3w9n8t/p7bO1NxA7c3tIpmoz0v3nO0kpun8qCrN50y177EspsjdXM9CXq/+u5SL+U4u53Ku9J3hk5vGXb226qpvDF/1vTP995HBn/1WXSjvbr9bv8vNbfWKN5ude6V77y/zerwvr91Z/3it1/G+62CmL0sv97IzPnLwp7k3Nr9aF8pj/Hqb58TBmqozUV5AvadEL7pXuploVs+ijfP8j51yv7TvdDo359/dZPzlofpr9bqcVitf2653z+hTsbfK+fJyJus7yeDsKNteWbvL9LV11udyt23wiVvud7JqK4relfqT3K0mwMYrdaL+GW7jSJeqtleH2k7X9/Cy7VRf28DPW7mbdq4fQP4AeBr/fHutOJWjE61/tz5pfdz6Tetm643JHx757pHTExn/x/j3mjNjrzVOF3/Nx/nF+vt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6d1//4Nb8+32wr3RhcbmTQOFVoa3bDfyUKGov9BnVJ9b9bcU7GrAQy5MJhnYUn3P0YGH0RoOY0Oh88vkwPPT+xLB0X1+XxaaOzrdcwNb/rJxwA+3j2csQ/NwB9fFPhYaOdiDjmX0BDisOxJwUC4s3X73wv33P/j24u35dxbeWbgzfvnylZkrl1+fvXBjsb0w0/33sKME9sP6Q/+wIwEAAAAAAAAAAAB2atQfBpx5abs/GtlQaCQZ/hsP/2chAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsCeunkvzYYpcnDk/U9ZXV2bb5dIrr/dsJmk0kuLnSfEomUt3yVTfcEX+9CidEcf5aPHKW58+Xv1sfaxmt3/SqNeb27o1yXK9ZDrJWL1+BgPjXXvm8Yr/9l5DmbDPO53O3LPFB3vjfwEAAP//qWztYw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240), 0x0, 0x2000, 0x0, 0x3) 9.625446451s ago: executing program 5 (id=680): socket(0x2000000015, 0x80005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x1510c2, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) ptrace(0x420e, r2) 9.231538071s ago: executing program 1 (id=682): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="14000200000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000100)=0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, r2}) 8.324721296s ago: executing program 1 (id=686): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.22194412s ago: executing program 3 (id=689): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) r4 = syz_io_uring_setup(0x3b3, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x100847c0, 0x0, 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.169434333s ago: executing program 5 (id=690): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000780)=[{0x0}], 0x1) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback, 0x77, r3}) read(r0, &(0x7f0000000400)=""/169, 0xa9) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f8000000160001000000000000000000e00000020000000000000000000000007f00000100000000000000000000000000000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ac1e0101000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000ffffff"], 0xf8}}, 0x20000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000540), 0x40200, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000580)={{0x8, 0x9f1}, {0x101, 0x8}, 0x200, 0x1}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x69) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000300)={0x0, 0x5}, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.100277676s ago: executing program 1 (id=692): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xfffffffffffffffe) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2806, r4}, 0x94) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "576b6ef53b7d29775a598a05bd75178e57e16568b009ec328b5d6764d965e1081fc3c390db93cc994509274386773707579006e9c352280cd69fe358a15ef916", 0x36}, 0x48, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r6}) 5.573600153s ago: executing program 3 (id=694): syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) 5.501079356s ago: executing program 2 (id=695): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1e, 0x4, 0x0) socketpair(0x80000000000025, 0x5, 0x0, 0x0) 4.483798047s ago: executing program 6 (id=696): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000080)=ANY=[@ANYBLOB="c616ab37c4e32f915733900154166a42723f532a7aed0d15f0a59de3baf827950e48cfaa863266d6cc59c790a6141d7abb62c5cd9893a51f6a36b274b17a9d35e3f817f0b3798e441337ee5f1bf5732cc001f67bb170c4e216780dffd82202adf1c5ff61b238c6fcc14581"], 0xfb, 0x6b4, &(0x7f0000000500)="$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") fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) socket(0x2, 0x3, 0xff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$mice(0xffffffffffffff9c, 0x0, 0x41) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @any, 0xd1}, 0xe) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x4, 0x0, &(0x7f0000000000)) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) write$tun(r3, &(0x7f0000000880)={@val={0x0, 0x88a8}, @void, @llc={@snap={0xaa, 0x0, "b0", "0ccff0", 0x1c, "f2ff31e2e803ebc9"}}}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 4.43093424s ago: executing program 5 (id=697): mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 4.253371498s ago: executing program 2 (id=698): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) 3.131118704s ago: executing program 6 (id=699): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 3.130925554s ago: executing program 3 (id=700): socket(0x2000000015, 0x80005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x1510c2, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ptrace(0x420e, r1) 3.02222264s ago: executing program 2 (id=701): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000640)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048080}, 0x8094) 2.733415614s ago: executing program 6 (id=702): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x1ce}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x9a1bffdda8d29b21) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x4000000) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x1, 0x0, 0x0, r4}) 2.721302315s ago: executing program 2 (id=703): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) msgget$private(0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0xa5dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000000400)=""/4096, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x1, [], [0x20000000, 0x0, 0x1000010, 0x20000], [0x0, 0x40002, 0xfffffffe], [0x0, 0x10000000000000, 0x0, 0x5]}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x9901, 0x1, 0x3, 0x1}, 0x8) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000140)={0xffffffff, "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"}) 1.713479325s ago: executing program 6 (id=704): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.676834666s ago: executing program 3 (id=705): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./bus\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x2, 0x6e5, &(0x7f0000002d40)="$eJzs3c1vHGcdB/DvrNeON1TBaRMaoSBMIhWkiMSJlUK4YBBCOVSoKoeercRprGySKnFRWiFwAcEJiUP/gILkGweExD0oXLiUW68+VkLiEnGIelk0s7P27nr9lvgloZ9PNZnnmeeZZ377m2dmvOtaG+AL6+q5NB+myNVzbzwo66srs+3VldkjdXM7SVluJM3uKsWdpHiUzJXtRd+SvvUGHy1eeevTx6ufdWvNeqn6j2213wgj+i7XS6br8aZH7jm+00Ms1+HlpSTX6vWgiZ2ONdCxTNrZeg2HrjOokc7ybnbfzXULPGd6T6ei+9zcYCo5mmSy/jkg9d2hcXAR7qlv9Aq7ussBAADAC+qTu4cdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALx4qu//b61VG91NyXSK3vf/T/S21eXn0NyOez7c1zgAAAAAAAAA4GB8/Ume5EGO9eqdovqd/5mqciKfd5Iv5b3cz0Lu5XweZD5LWcq9XEwy1TfQxIP5paV7F9f2LI3e89LIPS8d1CsGAAAAAAAAgP9Lv0pr/ff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPCiSse6qWk7U60yl0cx6W5aTfyWZOOx4d6EYtfHhwccBAAAAz2TyKfb58pM8yYMc69U7RfWe/yvV++XJvJc7WcpiltLOQq7X76HLd/2N1ZXZ9urK7O1yKeuD4/7gP7sKY6IeYayqjTryqapHKzeyWG05n2tVMNfT6B77bHKqF09fXH0+LGMqvl/bYWTNOq3lwf6w2acIe2Lwo4jGFj1b68ElaxmZqWMr9zzezUBRfVCTDGdi+OxsOFhzoDZVdRlfO9LFNNY++TmxDzk/Wq/L1/Pbfc35TvTnYi0TjVSZuNSbfeU1s3Umkm/+7c9v32zfuXXzxv1zh/uSdmFsk+3Dc2K2LxOvvtCZaO6y/0yViZNr9av5cX6ac5nOm7mXxfws81nKQjp1+3w9n8t/p7bO1NxA7c3tIpmoz0v3nO0kpun8qCrN50y177EspsjdXM9CXq/+u5SL+U4u53Ku9J3hk5vGXb226qpvDF/1vTP995HBn/1WXSjvbr9bv8vNbfWKN5ude6V77y/zerwvr91Z/3it1/G+62CmL0sv97IzPnLwp7k3Nr9aF8pj/Hqb58TBmqozUV5AvadEL7pXuploVs+ijfP8j51yv7TvdDo359/dZPzlofpr9bqcVitf2653z+hTsbfK+fJyJus7yeDsKNteWbvL9LV11udyt23wiVvud7JqK4relfqT3K0mwMYrdaL+GW7jSJeqtleH2k7X9/Cy7VRf28DPW7mbdq4fQP4AeBr/fHutOJWjE61/tz5pfdz6Tetm643JHx757pHTExn/x/j3mjNjrzVOF3/Nx/nF+vt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6d1//4Nb8+32wr3RhcbmTQOFVoa3bDfyUKGov9BnVJ9b9bcU7GrAQy5MJhnYUn3P0YGH0RoOY0Oh88vkwPPT+xLB0X1+XxaaOzrdcwNb/rJxwA+3j2csQ/NwB9fFPhYaOdiDjmX0BDisOxJwUC4s3X73wv33P/j24u35dxbeWbgzfvnylZkrl1+fvXBjsb0w0/33sKME9sP6Q/+wIwEAAAAAAAAAAAB2atQfBpx5abs/GtlQaCQZ/hsP/2chAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsCeunkvzYYpcnDk/U9ZXV2bb5dIrr/dsJmk0kuLnSfEomUt3yVTfcEX+9CidEcf5aPHKW58+Xv1sfaxmt3/SqNeb27o1yXK9ZDrJWL1+BgPjXXvm8Yr/9l5DmbDPO53O3LPFB3vjfwEAAP//qWztYw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240), 0x0, 0x2000, 0x0, 0x3) 1.321068454s ago: executing program 2 (id=706): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002e40)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r4, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 1.21739412s ago: executing program 6 (id=707): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000780)=[{0x0}], 0x1) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback, 0x77, r3}) read(r0, &(0x7f0000000400)=""/169, 0xa9) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f8000000160001000000000000000000e00000020000000000000000000000007f00000100000000000000000000000000000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ac1e0101000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000ffffff"], 0xf8}}, 0x20000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000540), 0x40200, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000580)={{0x8, 0x9f1}, {0x101, 0x8}, 0x200, 0x1}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x69) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000300)={0x0, 0x5}, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.146973313s ago: executing program 3 (id=708): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20000080, &(0x7f0000000540)={0xc9, 0x18, 0x0, 0x1, 0xfe, 0x6, @broadcast}, 0x14) r0 = socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 708.705755ms ago: executing program 2 (id=709): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1e, 0x4, 0x0) socketpair(0x80000000000025, 0x5, 0x0, 0x0) 443.987218ms ago: executing program 1 (id=710): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000080)=ANY=[@ANYBLOB="c616ab37c4e32f915733900154166a42723f532a7aed0d15f0a59de3baf827950e48cfaa863266d6cc59c790a6141d7abb62c5cd9893a51f6a36b274b17a9d35e3f817f0b3798e441337ee5f1bf5732cc001f67bb170c4e216780dffd82202adf1c5ff61b238c6fcc14581"], 0xfb, 0x6b4, &(0x7f0000000500)="$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") fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) socket(0x2, 0x3, 0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) 83.883116ms ago: executing program 6 (id=711): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=712): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="111e00000000feffffff05000000"], 0x21}}, 0xa000000) kernel console output (not intermixed with test programs): 2] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 124.203175][ T22] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 124.462930][ T22] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 259ms [ 124.471332][ T22] gfs2: fsid=syz:syz.0: jid=0: Done [ 124.477103][ T4568] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 124.493512][ T4568] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 124.665255][ T4607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.61'. [ 125.117720][ T4620] loop0: detected capacity change from 0 to 2048 [ 125.148855][ T4620] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.101565][ T4683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.78'. [ 130.231944][ T4651] loop0: detected capacity change from 0 to 32768 [ 130.646862][ T4651] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 130.802153][ T4651] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 130.905807][ T4651] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 130.977925][ T4320] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 130.986071][ T4320] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 131.000315][ T26] kauditd_printk_skb: 100 callbacks suppressed [ 131.000330][ T26] audit: type=1326 audit(1774415065.822:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4690 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 131.073138][ T4320] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 87ms [ 131.094011][ T4320] gfs2: fsid=syz:syz.0: jid=0: Done [ 131.101226][ T26] audit: type=1326 audit(1774415065.822:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4690 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 131.129969][ T4651] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 131.151386][ T4651] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 131.195064][ T26] audit: type=1326 audit(1774415065.862:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4690 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 131.264559][ T26] audit: type=1326 audit(1774415065.862:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4690 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 131.319204][ T26] audit: type=1326 audit(1774415065.862:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4690 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 131.897513][ T26] audit: type=1326 audit(1774415065.882:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4690 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 132.175499][ T26] audit: type=1326 audit(1774415065.882:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4690 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 132.287609][ T26] audit: type=1326 audit(1774415065.882:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4690 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 132.428602][ T26] audit: type=1326 audit(1774415065.882:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4690 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 132.622551][ T4711] loop2: detected capacity change from 0 to 2048 [ 132.677990][ T4711] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.426369][ T26] audit: type=1326 audit(1774415065.882:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4690 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 135.935227][ T4743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.95'. [ 137.264907][ T4762] loop4: detected capacity change from 0 to 2048 [ 137.282889][ T4762] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.342970][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.354540][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.012626][ T4781] netlink: 64 bytes leftover after parsing attributes in process `syz.3.105'. [ 140.473451][ T4785] nfs: Unknown parameter 'ÿÿÿÿ' [ 141.114730][ T4798] loop4: detected capacity change from 0 to 1024 [ 141.215877][ T4798] EXT4-fs: Ignoring removed i_version option [ 141.235998][ T26] kauditd_printk_skb: 96 callbacks suppressed [ 141.236010][ T26] audit: type=1326 audit(1774415076.052:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 141.345729][ T4798] EXT4-fs: inline encryption not supported [ 141.384478][ T26] audit: type=1326 audit(1774415076.112:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 141.482913][ T4798] EXT4-fs (loop4): Test dummy encryption mode enabled [ 141.515672][ T26] audit: type=1326 audit(1774415076.112:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 141.601214][ T4798] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 141.716125][ T26] audit: type=1326 audit(1774415076.132:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 141.758194][ T26] audit: type=1326 audit(1774415076.132:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 142.922152][ T26] audit: type=1326 audit(1774415076.132:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 143.175673][ T26] audit: type=1326 audit(1774415076.132:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 143.199487][ T26] audit: type=1326 audit(1774415076.142:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 143.273448][ T26] audit: type=1326 audit(1774415076.142:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 144.752902][ T26] audit: type=1326 audit(1774415076.142:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 144.890721][ T4835] loop3: detected capacity change from 0 to 2048 [ 145.047698][ T4835] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.205388][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 146.736995][ T4857] nfs: Unknown parameter 'ÿÿÿÿ' [ 147.931954][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 147.931970][ T26] audit: type=1326 audit(1774415082.752:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762b39c799 code=0x7ffc0000 [ 148.109630][ T26] audit: type=1326 audit(1774415082.792:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f762b39c799 code=0x7ffc0000 [ 149.159410][ T26] audit: type=1326 audit(1774415082.792:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762b39c799 code=0x7ffc0000 [ 149.187732][ T4866] netlink: 64 bytes leftover after parsing attributes in process `syz.3.125'. [ 149.319238][ T26] audit: type=1326 audit(1774415082.792:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f762b39c799 code=0x7ffc0000 [ 149.429358][ T26] audit: type=1326 audit(1774415082.792:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762b39c799 code=0x7ffc0000 [ 149.536034][ T26] audit: type=1326 audit(1774415082.792:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f762b39c799 code=0x7ffc0000 [ 149.621071][ T26] audit: type=1326 audit(1774415082.792:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762b39c799 code=0x7ffc0000 [ 149.702732][ T4874] loop1: detected capacity change from 0 to 1024 [ 150.183353][ T4874] EXT4-fs: Ignoring removed i_version option [ 150.218325][ T4874] EXT4-fs: inline encryption not supported [ 150.259889][ T4874] EXT4-fs (loop1): Test dummy encryption mode enabled [ 150.326474][ T26] audit: type=1326 audit(1774415082.792:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f762b39c799 code=0x7ffc0000 [ 150.363680][ T4874] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 150.540697][ T26] audit: type=1326 audit(1774415082.792:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762b39c799 code=0x7ffc0000 [ 150.704056][ T26] audit: type=1326 audit(1774415082.792:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4860 comm="syz.4.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f762b39c799 code=0x7ffc0000 [ 150.992032][ T4891] loop3: detected capacity change from 0 to 2048 [ 151.010729][ T4891] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.957770][ T4905] loop4: detected capacity change from 0 to 512 [ 152.038595][ T4905] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.140: inode has both inline data and extents flags [ 152.093786][ T4905] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.140: couldn't read orphan inode 15 (err -117) [ 152.239600][ T4905] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.620506][ T4905] loop4: detected capacity change from 512 to 64 [ 152.808212][ T4905] Dev loop4: unable to read RDB block 8 [ 152.866642][ T4905] loop4: unable to read partition table [ 153.428862][ T4905] loop_reread_partitions: partition scan of loop4 (ï5ŸA;¹8R÷Ö¤®mÝûÑÎ])Âî^\©) failed (rc=-5) [ 153.624118][ T4272] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 153.990421][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 154.273494][ T4925] netlink: 64 bytes leftover after parsing attributes in process `syz.3.146'. [ 154.784557][ T4422] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.011399][ T4422] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.058038][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 155.308586][ T4422] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.454673][ T4931] loop0: detected capacity change from 0 to 2048 [ 155.471031][ T4422] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.512374][ T4931] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.746643][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.756316][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.764947][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.773116][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.781012][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.789320][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.989220][ T4957] loop0: detected capacity change from 0 to 32768 [ 159.036118][ T4957] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 159.044770][ T4957] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 159.057974][ T4957] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 159.066980][ T4261] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 159.079178][ T4261] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 159.144773][ T4959] loop1: detected capacity change from 0 to 512 [ 159.160520][ T4261] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 81ms [ 159.189658][ T4261] gfs2: fsid=syz:syz.0: jid=0: Done [ 159.196569][ T4957] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 159.358051][ T4959] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.155: inode has both inline data and extents flags [ 159.555848][ T4959] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.155: couldn't read orphan inode 15 (err -117) [ 159.599241][ T4957] gfs2: fsid=syz:syz.0: found 1 quota changes [ 159.820444][ T4959] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 159.850700][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 160.079873][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 161.915172][ T26] kauditd_printk_skb: 85 callbacks suppressed [ 161.915221][ T26] audit: type=1804 audit(1774415096.732:471): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.155" name="/newroot/30/bus/bus" dev="loop1" ino=19 res=1 errno=0 [ 161.944068][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 163.300286][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 163.596207][ T26] audit: type=1326 audit(1774415098.412:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 163.689245][ T26] audit: type=1326 audit(1774415098.462:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 163.712353][ T26] audit: type=1326 audit(1774415098.462:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 163.735418][ T26] audit: type=1326 audit(1774415098.462:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 163.758416][ T26] audit: type=1326 audit(1774415098.462:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 163.784892][ T26] audit: type=1326 audit(1774415098.462:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 163.824873][ T26] audit: type=1326 audit(1774415098.462:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 163.849843][ T26] audit: type=1326 audit(1774415098.472:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 163.872677][ T26] audit: type=1326 audit(1774415098.472:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4980 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 164.009447][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 164.437572][ T4949] chnl_net:caif_netlink_parms(): no params data found [ 164.750008][ T4994] netlink: 64 bytes leftover after parsing attributes in process `syz.1.160'. [ 165.073711][ T4279] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 165.073711][ T4279] inode = 11 2339 [ 165.073711][ T4279] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 165.136979][ T4949] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.139681][ T4279] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 165.178515][ T4279] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4279 [syz-executor] gfs2_quota_sync+0x32c/0x700 [ 165.195627][ T4949] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.209772][ T4279] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 165.218102][ T4279] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 165.230447][ T4949] device bridge_slave_0 entered promiscuous mode [ 165.256933][ T4279] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 165.290583][ T4279] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 165.304334][ T4279] gfs2: fsid=syz:syz.0: File system withdrawn [ 165.316597][ T4279] CPU: 1 PID: 4279 Comm: syz-executor Not tainted syzkaller #0 [ 165.324318][ T4279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.334633][ T4279] Call Trace: [ 165.337963][ T4279] [ 165.341000][ T4279] dump_stack_lvl+0x188/0x24e [ 165.345860][ T4279] ? kobject_uevent_env+0x35f/0x8a0 [ 165.351304][ T4279] ? show_regs_print_info+0x12/0x12 [ 165.356681][ T4279] ? load_image+0x400/0x400 [ 165.361244][ T4279] ? kobject_uevent_env+0x35f/0x8a0 [ 165.366519][ T4279] gfs2_withdraw+0x1398/0x16c0 [ 165.371484][ T4279] ? gfs2_lm+0x240/0x240 [ 165.375874][ T4279] ? gfs2_consist_inode_i+0xf1/0x110 [ 165.381353][ T4279] gfs2_inode_refresh+0xb64/0xfd0 [ 165.386552][ T4279] ? gfs2_inode_metasync+0xf0/0xf0 [ 165.391837][ T4279] ? gfs2_glock_nq+0xcf0/0x14e0 [ 165.397025][ T4279] gfs2_instantiate+0x15e/0x210 [ 165.402017][ T4279] gfs2_glock_wait+0x1d0/0x2a0 [ 165.407019][ T4279] do_sync+0x4bf/0xc40 [ 165.411150][ T4279] ? gfs2_quota_sync+0x32c/0x700 [ 165.416240][ T4279] ? slot_put+0x1e0/0x1e0 [ 165.420898][ T4279] ? gfs2_quota_sync+0x32c/0x700 [ 165.426151][ T4279] ? do_raw_spin_unlock+0x11d/0x230 [ 165.431412][ T4279] gfs2_quota_sync+0x32c/0x700 [ 165.436340][ T4279] gfs2_sync_fs+0x48/0xb0 [ 165.440995][ T4279] sync_filesystem+0xe6/0x220 [ 165.445934][ T4279] generic_shutdown_super+0x6b/0x340 [ 165.451365][ T4279] kill_block_super+0x7c/0xe0 [ 165.456187][ T4279] deactivate_locked_super+0x93/0xf0 [ 165.461617][ T4279] cleanup_mnt+0x42c/0x4b0 [ 165.466172][ T4279] ? lockdep_hardirqs_on+0x94/0x140 [ 165.471548][ T4279] task_work_run+0x1d0/0x260 [ 165.476211][ T4279] ? task_work_cancel+0x220/0x220 [ 165.481330][ T4279] ? exit_to_user_mode_loop+0x3b/0x110 [ 165.486963][ T4279] exit_to_user_mode_loop+0xe6/0x110 [ 165.492440][ T4279] exit_to_user_mode_prepare+0xee/0x180 [ 165.498425][ T4279] syscall_exit_to_user_mode+0x16/0x40 [ 165.503950][ T4279] do_syscall_64+0x58/0xa0 [ 165.508614][ T4279] ? clear_bhb_loop+0x60/0xb0 [ 165.513539][ T4279] ? clear_bhb_loop+0x60/0xb0 [ 165.518556][ T4279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.524871][ T4279] RIP: 0033:0x7fdc7cf9d9d7 [ 165.529936][ T4279] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 165.550469][ T4279] RSP: 002b:00007ffceb9f9528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 165.559110][ T4279] RAX: 0000000000000000 RBX: 00007fdc7d032050 RCX: 00007fdc7cf9d9d7 [ 165.567306][ T4279] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffceb9f95e0 [ 165.575328][ T4279] RBP: 00007ffceb9f95e0 R08: 00007ffceb9fa5e0 R09: 00000000ffffffff [ 165.583436][ T4279] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffceb9fa670 [ 165.591473][ T4279] R13: 00007fdc7d032050 R14: 0000000000027070 R15: 00007ffceb9fa6b0 [ 165.599606][ T4279] [ 165.667611][ T4949] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.675256][ T4949] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.683649][ T4949] device bridge_slave_1 entered promiscuous mode [ 165.693856][ T4279] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 165.758486][ T4949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.079203][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 166.547149][ T4279] CPU: 1 PID: 4279 Comm: syz-executor Not tainted syzkaller #0 [ 166.554879][ T4279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.565546][ T4279] Call Trace: [ 166.569022][ T4279] [ 166.572000][ T4279] dump_stack_lvl+0x188/0x24e [ 166.576875][ T4279] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 166.582035][ T4279] ? show_regs_print_info+0x12/0x12 [ 166.587737][ T4279] ? load_image+0x400/0x400 [ 166.592610][ T4279] ? do_raw_spin_unlock+0x11d/0x230 [ 166.598035][ T4279] gfs2_assert_warn_i+0x18f/0x2c0 [ 166.603262][ T4279] gfs2_quota_cleanup+0x4b4/0x6a0 [ 166.608329][ T4279] gfs2_put_super+0x22f/0x8c0 [ 166.613540][ T4279] ? gfs2_evict_inode+0x11d0/0x11d0 [ 166.619137][ T4279] generic_shutdown_super+0x130/0x340 [ 166.624742][ T4279] kill_block_super+0x7c/0xe0 [ 166.629552][ T4279] deactivate_locked_super+0x93/0xf0 [ 166.634905][ T4279] cleanup_mnt+0x42c/0x4b0 [ 166.639369][ T4279] ? lockdep_hardirqs_on+0x94/0x140 [ 166.644636][ T4279] task_work_run+0x1d0/0x260 [ 166.649269][ T4279] ? task_work_cancel+0x220/0x220 [ 166.654476][ T4279] ? exit_to_user_mode_loop+0x3b/0x110 [ 166.660187][ T4279] exit_to_user_mode_loop+0xe6/0x110 [ 166.665978][ T4279] exit_to_user_mode_prepare+0xee/0x180 [ 166.671689][ T4279] syscall_exit_to_user_mode+0x16/0x40 [ 166.677457][ T4279] do_syscall_64+0x58/0xa0 [ 166.681915][ T4279] ? clear_bhb_loop+0x60/0xb0 [ 166.686704][ T4279] ? clear_bhb_loop+0x60/0xb0 [ 166.691424][ T4279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.697385][ T4279] RIP: 0033:0x7fdc7cf9d9d7 [ 166.701830][ T4279] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 166.721654][ T4279] RSP: 002b:00007ffceb9f9528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 166.730117][ T4279] RAX: 0000000000000000 RBX: 00007fdc7d032050 RCX: 00007fdc7cf9d9d7 [ 166.738151][ T4279] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffceb9f95e0 [ 166.746167][ T4279] RBP: 00007ffceb9f95e0 R08: 00007ffceb9fa5e0 R09: 00000000ffffffff [ 166.754275][ T4279] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffceb9fa670 [ 166.762453][ T4279] R13: 00007fdc7d032050 R14: 0000000000027070 R15: 00007ffceb9fa6b0 [ 166.770617][ T4279] [ 167.193993][ T4949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.076353][ T4422] device hsr_slave_0 left promiscuous mode [ 168.284965][ T4422] device hsr_slave_1 left promiscuous mode [ 168.305268][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.322883][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.344888][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.182063][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.330172][ T4422] device bridge_slave_1 left promiscuous mode [ 169.337006][ T4422] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.491390][ T4422] device bridge_slave_0 left promiscuous mode [ 169.499015][ T4422] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.543570][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 169.543586][ T26] audit: type=1326 audit(1774415104.362:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7cf9c799 code=0x7ffc0000 [ 169.659508][ T26] audit: type=1326 audit(1774415104.372:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7cf9c799 code=0x7ffc0000 [ 169.706641][ T4422] device veth1_macvtap left promiscuous mode [ 169.785464][ T4422] device veth0_macvtap left promiscuous mode [ 169.862988][ T4422] device veth1_vlan left promiscuous mode [ 169.901049][ T26] audit: type=1326 audit(1774415104.372:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc7cf9c799 code=0x7ffc0000 [ 169.963362][ T4422] device veth0_vlan left promiscuous mode [ 170.230507][ T26] audit: type=1326 audit(1774415104.372:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7cf9c799 code=0x7ffc0000 [ 170.360325][ T26] audit: type=1326 audit(1774415104.372:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7cf9c799 code=0x7ffc0000 [ 170.383080][ T26] audit: type=1326 audit(1774415104.402:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc7cf9c799 code=0x7ffc0000 [ 170.406337][ T26] audit: type=1326 audit(1774415104.402:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7cf9c799 code=0x7ffc0000 [ 170.429040][ T26] audit: type=1326 audit(1774415104.402:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7cf9c799 code=0x7ffc0000 [ 170.451679][ T26] audit: type=1326 audit(1774415104.402:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fdc7cf9c799 code=0x7ffc0000 [ 170.474705][ T26] audit: type=1326 audit(1774415104.402:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5030 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc7cf9c799 code=0x7ffc0000 [ 171.393000][ T5053] netlink: 64 bytes leftover after parsing attributes in process `syz.2.173'. [ 171.734307][ T4422] team0 (unregistering): Port device team_slave_1 removed [ 171.737740][ T5055] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 171.811135][ T4422] team0 (unregistering): Port device team_slave_0 removed [ 171.878312][ T4422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.969655][ T4422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.478459][ T4422] bond0 (unregistering): Released all slaves [ 172.670108][ T4949] team0: Port device team_slave_0 added [ 172.743008][ T4949] team0: Port device team_slave_1 added [ 172.896452][ T4949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.942452][ T4949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.076899][ T4949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.111182][ T4949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.118291][ T4949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.953897][ T5079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 174.109961][ T4949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.275615][ T4949] device hsr_slave_0 entered promiscuous mode [ 174.349646][ T4949] device hsr_slave_1 entered promiscuous mode [ 174.381448][ T4949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.422301][ T4949] Cannot create hsr debugfs directory [ 175.681895][ T5095] netlink: 64 bytes leftover after parsing attributes in process `syz.2.183'. [ 175.818872][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 175.818889][ T26] audit: type=1326 audit(1774415110.632:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 176.014781][ T26] audit: type=1326 audit(1774415110.632:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 176.094407][ T26] audit: type=1326 audit(1774415110.682:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 176.157471][ T4949] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.182244][ T26] audit: type=1326 audit(1774415110.682:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 176.208641][ T4949] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.250679][ T4949] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 176.287151][ T26] audit: type=1326 audit(1774415110.682:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 176.311781][ T4949] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 176.364645][ T26] audit: type=1326 audit(1774415110.692:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 176.562306][ T26] audit: type=1326 audit(1774415110.692:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 176.696647][ T26] audit: type=1326 audit(1774415110.692:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 176.756370][ T4949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.797978][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.811359][ T26] audit: type=1326 audit(1774415110.692:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 176.839024][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.533368][ T26] audit: type=1326 audit(1774415110.692:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 177.591436][ T4949] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.725868][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.753602][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.779623][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.787119][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.830690][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.860105][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.879138][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.886680][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.959339][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.990311][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.061787][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.091384][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.143158][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.211775][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.231105][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.256386][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.280917][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.302495][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.461692][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.495178][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.570197][ T5133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 180.790750][ T5151] loop3: detected capacity change from 0 to 1024 [ 180.827573][ T5151] hfsplus: unable to parse mount options [ 181.043967][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.869485][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.200019][ T4949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.869392][ T5174] loop3: detected capacity change from 0 to 32768 [ 182.882735][ T5174] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 182.891080][ T5174] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 183.067462][ T5174] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 183.077425][ T4317] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 183.106700][ T4317] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 183.709603][ T5182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 183.745194][ T4317] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 638ms [ 183.807453][ T4317] gfs2: fsid=syz:syz.0: jid=0: Done [ 183.844062][ T5174] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 185.204056][ T5188] syz.2.205 (5188): drop_caches: 2 [ 185.659182][ T5174] gfs2: fsid=syz:syz.0: found 1 quota changes [ 185.710281][ T4286] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 185.710281][ T4286] inode = 11 2339 [ 185.710281][ T4286] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 185.879128][ T4286] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 185.888579][ T4286] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4286 [syz-executor] gfs2_quota_sync+0x32c/0x700 [ 186.578829][ T4286] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000200 s:0 p:0 [ 186.663151][ T4286] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 186.748572][ T4286] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 186.801542][ T4286] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 186.853040][ T4286] gfs2: fsid=syz:syz.0: File system withdrawn [ 186.889290][ T4286] CPU: 0 PID: 4286 Comm: syz-executor Not tainted syzkaller #0 [ 186.897044][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.907390][ T4286] Call Trace: [ 186.910717][ T4286] [ 186.913738][ T4286] dump_stack_lvl+0x188/0x24e [ 186.919356][ T4286] ? kobject_uevent_env+0x35f/0x8a0 [ 186.924783][ T4286] ? show_regs_print_info+0x12/0x12 [ 186.930575][ T4286] ? load_image+0x400/0x400 [ 186.935148][ T4286] ? kobject_uevent_env+0x35f/0x8a0 [ 186.940429][ T4286] gfs2_withdraw+0x1398/0x16c0 [ 186.945508][ T4286] ? gfs2_lm+0x240/0x240 [ 186.950501][ T4286] ? gfs2_consist_inode_i+0xf1/0x110 [ 186.956133][ T4286] gfs2_inode_refresh+0xb64/0xfd0 [ 186.961890][ T4286] ? gfs2_inode_metasync+0xf0/0xf0 [ 186.967255][ T4286] ? gfs2_glock_nq+0xcf0/0x14e0 [ 186.972573][ T4286] gfs2_instantiate+0x15e/0x210 [ 186.977852][ T4286] gfs2_glock_wait+0x1d0/0x2a0 [ 186.982769][ T4286] do_sync+0x4bf/0xc40 [ 186.986897][ T4286] ? gfs2_quota_sync+0x32c/0x700 [ 186.992083][ T4286] ? slot_put+0x1e0/0x1e0 [ 186.996853][ T4286] ? gfs2_quota_sync+0x32c/0x700 [ 187.001960][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 187.007369][ T4286] gfs2_quota_sync+0x32c/0x700 [ 187.012205][ T4286] gfs2_sync_fs+0x48/0xb0 [ 187.016584][ T4286] sync_filesystem+0xe6/0x220 [ 187.021479][ T4286] generic_shutdown_super+0x6b/0x340 [ 187.026892][ T4286] kill_block_super+0x7c/0xe0 [ 187.031604][ T4286] deactivate_locked_super+0x93/0xf0 [ 187.037180][ T4286] cleanup_mnt+0x42c/0x4b0 [ 187.041725][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 187.047047][ T4286] task_work_run+0x1d0/0x260 [ 187.051939][ T4286] ? task_work_cancel+0x220/0x220 [ 187.057018][ T4286] ? exit_to_user_mode_loop+0x3b/0x110 [ 187.062715][ T4286] exit_to_user_mode_loop+0xe6/0x110 [ 187.068144][ T4286] exit_to_user_mode_prepare+0xee/0x180 [ 187.073989][ T4286] syscall_exit_to_user_mode+0x16/0x40 [ 187.079584][ T4286] do_syscall_64+0x58/0xa0 [ 187.084146][ T4286] ? clear_bhb_loop+0x60/0xb0 [ 187.089140][ T4286] ? clear_bhb_loop+0x60/0xb0 [ 187.094062][ T4286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.100380][ T4286] RIP: 0033:0x7faf93b9d9d7 [ 187.105100][ T4286] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 187.125097][ T4286] RSP: 002b:00007ffecc5b66b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 187.133821][ T4286] RAX: 0000000000000000 RBX: 00007faf93c32050 RCX: 00007faf93b9d9d7 [ 187.142150][ T4286] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffecc5b6770 [ 187.150801][ T4286] RBP: 00007ffecc5b6770 R08: 00007ffecc5b7770 R09: 00000000ffffffff [ 187.158927][ T4286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffecc5b7800 [ 187.167305][ T4286] R13: 00007faf93c32050 R14: 000000000002c8f7 R15: 00007ffecc5b7840 [ 187.175448][ T4286] [ 187.480692][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.493878][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.553089][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.571993][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.665571][ T4949] device veth0_vlan entered promiscuous mode [ 187.668245][ T4286] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 187.686636][ T4286] CPU: 0 PID: 4286 Comm: syz-executor Not tainted syzkaller #0 [ 187.694531][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.704641][ T4286] Call Trace: [ 187.707968][ T4286] [ 187.710953][ T4286] dump_stack_lvl+0x188/0x24e [ 187.715791][ T4286] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 187.720976][ T4286] ? show_regs_print_info+0x12/0x12 [ 187.726439][ T4286] ? load_image+0x400/0x400 [ 187.731091][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 187.736352][ T4286] gfs2_assert_warn_i+0x18f/0x2c0 [ 187.741544][ T4286] gfs2_quota_cleanup+0x4b4/0x6a0 [ 187.746619][ T4286] gfs2_put_super+0x22f/0x8c0 [ 187.751532][ T4286] ? gfs2_evict_inode+0x11d0/0x11d0 [ 187.756776][ T4286] generic_shutdown_super+0x130/0x340 [ 187.762386][ T4286] kill_block_super+0x7c/0xe0 [ 187.768246][ T4286] deactivate_locked_super+0x93/0xf0 [ 187.773601][ T4286] cleanup_mnt+0x42c/0x4b0 [ 187.778058][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 187.783299][ T4286] task_work_run+0x1d0/0x260 [ 187.788035][ T4286] ? task_work_cancel+0x220/0x220 [ 187.793153][ T4286] ? exit_to_user_mode_loop+0x3b/0x110 [ 187.798846][ T4286] exit_to_user_mode_loop+0xe6/0x110 [ 187.804681][ T4286] exit_to_user_mode_prepare+0xee/0x180 [ 187.810278][ T4286] syscall_exit_to_user_mode+0x16/0x40 [ 187.815853][ T4286] do_syscall_64+0x58/0xa0 [ 187.820417][ T4286] ? clear_bhb_loop+0x60/0xb0 [ 187.825175][ T4286] ? clear_bhb_loop+0x60/0xb0 [ 187.829911][ T4286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.835953][ T4286] RIP: 0033:0x7faf93b9d9d7 [ 187.840526][ T4286] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 187.860401][ T4286] RSP: 002b:00007ffecc5b66b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 187.868859][ T4286] RAX: 0000000000000000 RBX: 00007faf93c32050 RCX: 00007faf93b9d9d7 [ 187.877086][ T4286] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffecc5b6770 [ 187.885441][ T4286] RBP: 00007ffecc5b6770 R08: 00007ffecc5b7770 R09: 00000000ffffffff [ 187.893551][ T4286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffecc5b7800 [ 187.901739][ T4286] R13: 00007faf93c32050 R14: 000000000002c8f7 R15: 00007ffecc5b7840 [ 187.909878][ T4286] [ 187.981031][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.995078][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.029815][ T4949] device veth1_vlan entered promiscuous mode [ 188.100909][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.130233][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.152096][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.204241][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.227096][ T4949] device veth0_macvtap entered promiscuous mode [ 188.282025][ T4949] device veth1_macvtap entered promiscuous mode [ 188.378406][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.419158][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.440774][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.451715][ T26] kauditd_printk_skb: 92 callbacks suppressed [ 188.451730][ T26] audit: type=1326 audit(1774415123.262:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5220 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 188.492214][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.503973][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.515149][ T26] audit: type=1326 audit(1774415123.302:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5220 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 188.538152][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.552808][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.564447][ T26] audit: type=1326 audit(1774415123.302:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5220 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 188.598283][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.643357][ T4949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.668165][ T26] audit: type=1326 audit(1774415123.302:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5220 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 188.713458][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.745224][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.765946][ T26] audit: type=1326 audit(1774415123.312:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5220 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 188.797799][ T26] audit: type=1326 audit(1774415123.312:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5220 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 188.811995][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.933679][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.202619][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.409219][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.434055][ T26] audit: type=1326 audit(1774415123.312:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5220 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 189.603234][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.614103][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.624660][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.639118][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.654910][ T4949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.682542][ T26] audit: type=1326 audit(1774415123.312:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5220 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 189.716098][ T4949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.792038][ T26] audit: type=1326 audit(1774415123.312:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5220 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 189.856474][ T4949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.867274][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.876269][ T26] audit: type=1326 audit(1774415123.312:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5220 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 189.944214][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.007096][ T4949] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.059236][ T4949] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.068205][ T4949] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.154113][ T4949] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.306428][ T5239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 191.609519][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.666865][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.798079][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.827348][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.920753][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.959728][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.569242][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 193.569257][ T26] audit: type=1326 audit(1774415128.382:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 193.699801][ T26] audit: type=1326 audit(1774415128.462:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 194.171599][ T5284] netlink: 'syz.5.229': attribute type 10 has an invalid length. [ 194.376166][ T26] audit: type=1326 audit(1774415128.462:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 194.450599][ T26] audit: type=1326 audit(1774415128.462:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 194.487196][ T26] audit: type=1326 audit(1774415128.462:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 194.594522][ T5284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.649037][ T26] audit: type=1326 audit(1774415128.462:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 194.983173][ T5284] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 195.055497][ T26] audit: type=1326 audit(1774415128.462:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 195.322208][ T5294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.231'. [ 195.423517][ T26] audit: type=1326 audit(1774415128.462:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 195.638889][ T26] audit: type=1326 audit(1774415128.462:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 195.785036][ T5284] syz.5.229 (5284) used greatest stack depth: 19632 bytes left [ 195.889140][ T26] audit: type=1326 audit(1774415128.462:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 196.042531][ T5306] loop5: detected capacity change from 0 to 1024 [ 196.299835][ T5310] loop2: detected capacity change from 0 to 1024 [ 196.369771][ T5310] EXT4-fs: Ignoring removed i_version option [ 196.375951][ T5310] EXT4-fs: inline encryption not supported [ 196.425897][ T5310] EXT4-fs (loop2): Test dummy encryption mode enabled [ 196.528752][ T5310] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 197.338905][ T4287] EXT4-fs (loop2): unmounting filesystem. [ 199.087814][ T5349] loop5: detected capacity change from 0 to 2048 [ 199.123873][ T5349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.681929][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.690128][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.645768][ T125] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 201.813444][ T125] usb 4-1: unable to get BOS descriptor or descriptor too short [ 201.832534][ T125] usb 4-1: config 194 has an invalid interface number: 4 but max is 0 [ 201.872626][ T125] usb 4-1: config 194 has no interface number 0 [ 201.892951][ T125] usb 4-1: config 194 interface 4 has no altsetting 0 [ 201.953143][ T125] usb 4-1: string descriptor 0 read error: -22 [ 202.027981][ T125] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.85 [ 202.052334][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.731364][ T125] usb 4-1: USB disconnect, device number 2 [ 205.227332][ T5408] loop3: detected capacity change from 0 to 1024 [ 207.828986][ T5443] loop1: detected capacity change from 0 to 32768 [ 207.988629][ T5443] XFS (loop1): Mounting V5 Filesystem [ 208.083063][ T5443] XFS (loop1): Ending clean mount [ 208.099150][ T5443] XFS (loop1): Quotacheck needed: Please wait. [ 208.233359][ T5443] XFS (loop1): Quotacheck: Done. [ 209.346194][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 209.346655][ T26] audit: type=1800 audit(1774415143.592:690): pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.271" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 209.504400][ T4273] XFS (loop1): Unmounting Filesystem [ 211.864957][ T5501] loop5: detected capacity change from 0 to 128 [ 212.009595][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 212.016952][ T4280] Bluetooth: hci2: command 0x0406 tx timeout [ 212.024726][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 212.031641][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 212.459710][ T5504] netlink: 'syz.0.286': attribute type 2 has an invalid length. [ 212.481246][ T5504] netlink: 84 bytes leftover after parsing attributes in process `syz.0.286'. [ 213.412568][ T5518] process 'syz.1.290' launched './file1' with NULL argv: empty string added [ 213.488670][ T5521] device veth0_to_team entered promiscuous mode [ 213.537091][ T5523] loop5: detected capacity change from 0 to 1024 [ 213.596098][ T5523] EXT4-fs: inline encryption not supported [ 213.649506][ T5523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 213.688615][ T5523] EXT4-fs (loop5): Test dummy encryption mode enabled [ 213.867953][ T5523] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 214.091541][ T5532] loop2: detected capacity change from 0 to 32768 [ 214.131062][ T5532] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 214.140437][ T5532] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 214.163423][ T5532] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 214.172742][ T4320] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 214.214049][ T4320] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 215.296481][ T4320] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1082ms [ 215.569920][ T4320] gfs2: fsid=syz:syz.0: jid=0: Done [ 216.309972][ T5532] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 216.520521][ T4949] EXT4-fs (loop5): unmounting filesystem. [ 216.598045][ T5532] gfs2: fsid=syz:syz.0: found 1 quota changes [ 220.487116][ T4287] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 220.487116][ T4287] inode = 11 2339 [ 220.487116][ T4287] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 220.496247][ T5558] syz.1.301 (5558): drop_caches: 2 [ 220.581973][ T4287] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 220.598687][ T4287] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4287 [syz-executor] gfs2_quota_sync+0x32c/0x700 [ 220.662039][ T4287] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000201 s:0 p:0 [ 220.699107][ T4287] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 220.764328][ T4287] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 220.864692][ T4287] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 221.199124][ T4287] gfs2: fsid=syz:syz.0: File system withdrawn [ 221.205442][ T4287] CPU: 0 PID: 4287 Comm: syz-executor Not tainted syzkaller #0 [ 221.213129][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.223332][ T4287] Call Trace: [ 221.226745][ T4287] [ 221.229727][ T4287] dump_stack_lvl+0x188/0x24e [ 221.234475][ T4287] ? kobject_uevent_env+0x35f/0x8a0 [ 221.239915][ T4287] ? show_regs_print_info+0x12/0x12 [ 221.245351][ T4287] ? load_image+0x400/0x400 [ 221.249915][ T4287] ? kobject_uevent_env+0x35f/0x8a0 [ 221.255396][ T4287] gfs2_withdraw+0x1398/0x16c0 [ 221.260242][ T4287] ? gfs2_lm+0x240/0x240 [ 221.264645][ T4287] ? gfs2_consist_inode_i+0xf1/0x110 [ 221.270010][ T4287] gfs2_inode_refresh+0xb64/0xfd0 [ 221.275188][ T4287] ? gfs2_inode_metasync+0xf0/0xf0 [ 221.280471][ T4287] ? gfs2_glock_nq+0xcf0/0x14e0 [ 221.285378][ T4287] gfs2_instantiate+0x15e/0x210 [ 221.290367][ T4287] gfs2_glock_wait+0x1d0/0x2a0 [ 221.295403][ T4287] do_sync+0x4bf/0xc40 [ 221.299614][ T4287] ? gfs2_quota_sync+0x32c/0x700 [ 221.304803][ T4287] ? slot_put+0x1e0/0x1e0 [ 221.309286][ T4287] ? gfs2_quota_sync+0x32c/0x700 [ 221.314385][ T4287] ? do_raw_spin_unlock+0x11d/0x230 [ 221.319760][ T4287] gfs2_quota_sync+0x32c/0x700 [ 221.324671][ T4287] gfs2_sync_fs+0x48/0xb0 [ 221.329217][ T4287] sync_filesystem+0xe6/0x220 [ 221.334201][ T4287] generic_shutdown_super+0x6b/0x340 [ 221.339638][ T4287] kill_block_super+0x7c/0xe0 [ 221.344463][ T4287] deactivate_locked_super+0x93/0xf0 [ 221.350063][ T4287] cleanup_mnt+0x42c/0x4b0 [ 221.354537][ T4287] ? lockdep_hardirqs_on+0x94/0x140 [ 221.359958][ T4287] task_work_run+0x1d0/0x260 [ 221.364682][ T4287] ? task_work_cancel+0x220/0x220 [ 221.369839][ T4287] ? exit_to_user_mode_loop+0x3b/0x110 [ 221.375713][ T4287] exit_to_user_mode_loop+0xe6/0x110 [ 221.381317][ T4287] exit_to_user_mode_prepare+0xee/0x180 [ 221.386938][ T4287] syscall_exit_to_user_mode+0x16/0x40 [ 221.392645][ T4287] do_syscall_64+0x58/0xa0 [ 221.397161][ T4287] ? clear_bhb_loop+0x60/0xb0 [ 221.401909][ T4287] ? clear_bhb_loop+0x60/0xb0 [ 221.406850][ T4287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.412906][ T4287] RIP: 0033:0x7f7adcb9d9d7 [ 221.417625][ T4287] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 221.438044][ T4287] RSP: 002b:00007fff62cc7fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 221.446626][ T4287] RAX: 0000000000000000 RBX: 00007f7adcc32050 RCX: 00007f7adcb9d9d7 [ 221.454737][ T4287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff62cc8090 [ 221.462832][ T4287] RBP: 00007fff62cc8090 R08: 00007fff62cc9090 R09: 00000000ffffffff [ 221.470831][ T4287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff62cc9120 [ 221.478950][ T4287] R13: 00007f7adcc32050 R14: 0000000000034fbd R15: 00007fff62cc9160 [ 221.487431][ T4287] [ 221.490603][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.771226][ T4287] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 221.797868][ T5590] syz.1.309 uses obsolete (PF_INET,SOCK_PACKET) [ 221.804309][ T4287] CPU: 0 PID: 4287 Comm: syz-executor Not tainted syzkaller #0 [ 221.812012][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.822135][ T4287] Call Trace: [ 221.825545][ T4287] [ 221.828518][ T4287] dump_stack_lvl+0x188/0x24e [ 221.833259][ T4287] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 221.838490][ T4287] ? show_regs_print_info+0x12/0x12 [ 221.843954][ T4287] ? load_image+0x400/0x400 [ 221.848662][ T4287] ? do_raw_spin_unlock+0x11d/0x230 [ 221.853967][ T4287] gfs2_assert_warn_i+0x18f/0x2c0 [ 221.859115][ T4287] gfs2_quota_cleanup+0x4b4/0x6a0 [ 221.864651][ T4287] gfs2_put_super+0x22f/0x8c0 [ 221.869700][ T4287] ? gfs2_evict_inode+0x11d0/0x11d0 [ 221.875058][ T4287] generic_shutdown_super+0x130/0x340 [ 221.880526][ T4287] kill_block_super+0x7c/0xe0 [ 221.885418][ T4287] deactivate_locked_super+0x93/0xf0 [ 221.890928][ T4287] cleanup_mnt+0x42c/0x4b0 [ 221.895485][ T4287] ? lockdep_hardirqs_on+0x94/0x140 [ 221.900757][ T4287] task_work_run+0x1d0/0x260 [ 221.905390][ T4287] ? task_work_cancel+0x220/0x220 [ 221.910491][ T4287] ? exit_to_user_mode_loop+0x3b/0x110 [ 221.916017][ T4287] exit_to_user_mode_loop+0xe6/0x110 [ 221.921343][ T4287] exit_to_user_mode_prepare+0xee/0x180 [ 221.926933][ T4287] syscall_exit_to_user_mode+0x16/0x40 [ 221.932555][ T4287] do_syscall_64+0x58/0xa0 [ 221.937051][ T4287] ? clear_bhb_loop+0x60/0xb0 [ 221.941760][ T4287] ? clear_bhb_loop+0x60/0xb0 [ 221.946470][ T4287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.952422][ T4287] RIP: 0033:0x7f7adcb9d9d7 [ 221.956881][ T4287] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 221.976863][ T4287] RSP: 002b:00007fff62cc7fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 221.985402][ T4287] RAX: 0000000000000000 RBX: 00007f7adcc32050 RCX: 00007f7adcb9d9d7 [ 221.993572][ T4287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff62cc8090 [ 222.001824][ T4287] RBP: 00007fff62cc8090 R08: 00007fff62cc9090 R09: 00000000ffffffff [ 222.010015][ T4287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff62cc9120 [ 222.018112][ T4287] R13: 00007f7adcc32050 R14: 0000000000034fbd R15: 00007fff62cc9160 [ 222.026304][ T4287] [ 222.029623][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.319145][ T4275] Bluetooth: hci0: command 0x0405 tx timeout [ 223.444872][ T5601] loop0: detected capacity change from 0 to 32768 [ 223.471285][ T5601] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 223.479719][ T5601] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 223.500580][ T5601] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 223.509697][ T4316] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 223.516514][ T4316] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 223.586321][ T4316] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 69ms [ 223.606246][ T4316] gfs2: fsid=syz:syz.0: jid=0: Done [ 223.647025][ T5601] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 223.808853][ T5601] gfs2: fsid=syz:syz.0: found 1 quota changes [ 224.565605][ T26] audit: type=1326 audit(1774415159.382:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5598 comm="syz.3.312" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf93b9c799 code=0x0 [ 224.716624][ T4279] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 224.716624][ T4279] inode = 11 2339 [ 224.716624][ T4279] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 224.773439][ T4279] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 224.801032][ T4279] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4279 [syz-executor] gfs2_quota_sync+0x32c/0x700 [ 224.886458][ T4279] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 224.906711][ T4279] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 225.117727][ T5620] loop2: detected capacity change from 0 to 1024 [ 225.125245][ T5620] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.159320][ T128] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 225.307030][ T5620] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 225.525627][ T128] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 225.573598][ T128] usb 6-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 0 [ 225.661885][ T128] usb 6-1: config 0 interface 0 has no altsetting 0 [ 225.814075][ T128] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 225.833955][ T128] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 226.038470][ T128] usb 6-1: Product: syz [ 226.149623][ T128] usb 6-1: Manufacturer: syz [ 226.286375][ T128] usb 6-1: SerialNumber: syz [ 226.551715][ T128] usb 6-1: config 0 descriptor?? [ 226.634322][ T128] usb 6-1: selecting invalid altsetting 0 [ 226.807757][ T128] usb 6-1: USB disconnect, device number 2 [ 227.194530][ T5642] udevd[5642]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.412815][ T4287] EXT4-fs (loop2): unmounting filesystem. [ 227.591832][ T5637] syz.1.319 (5637): drop_caches: 2 [ 227.825830][ T5651] loop2: detected capacity change from 0 to 1024 [ 227.861995][ T5651] EXT4-fs: Ignoring removed i_version option [ 227.868133][ T5651] EXT4-fs: inline encryption not supported [ 227.875624][ T5651] EXT4-fs (loop2): Test dummy encryption mode enabled [ 227.895123][ T5651] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 231.031531][ T5689] loop5: detected capacity change from 0 to 1024 [ 231.076509][ T5689] hfsplus: unable to parse mount options [ 234.958857][ T5722] syz.5.335 uses old SIOCAX25GETINFO [ 235.197379][ T26] audit: type=1326 audit(1774415169.772:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5718 comm="syz.5.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 235.244673][ T4287] EXT4-fs (loop2): unmounting filesystem. [ 235.890836][ T26] audit: type=1326 audit(1774415169.772:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5718 comm="syz.5.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 235.924088][ T26] audit: type=1326 audit(1774415169.772:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5718 comm="syz.5.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 236.054468][ T26] audit: type=1326 audit(1774415169.772:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5718 comm="syz.5.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 236.120667][ T26] audit: type=1326 audit(1774415169.792:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5718 comm="syz.5.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 236.684574][ T26] audit: type=1326 audit(1774415169.792:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5718 comm="syz.5.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 237.113612][ T26] audit: type=1326 audit(1774415171.922:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.5.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 237.288276][ T26] audit: type=1326 audit(1774415171.922:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.5.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 237.311184][ T26] audit: type=1326 audit(1774415172.092:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.5.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 237.341416][ T26] audit: type=1326 audit(1774415172.092:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5746 comm="syz.5.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 237.506408][ T5760] loop3: detected capacity change from 0 to 1024 [ 237.541220][ T5760] hfsplus: unable to parse mount options [ 238.835743][ T5765] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 239.292668][ T5773] loop3: detected capacity change from 0 to 1024 [ 239.327937][ T5773] EXT4-fs: Ignoring removed i_version option [ 239.399355][ T5773] EXT4-fs: inline encryption not supported [ 239.481044][ T5773] EXT4-fs (loop3): Test dummy encryption mode enabled [ 239.519425][ T5773] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 241.108090][ T5796] mmap: syz.1.353 (5796) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 243.008550][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.021476][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.040454][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.048835][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.061524][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 243.069014][ T4280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.352552][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 243.442367][ T26] kauditd_printk_skb: 46 callbacks suppressed [ 243.442387][ T26] audit: type=1326 audit(1774415178.222:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 243.487510][ T5826] ax25_connect(): syz.5.358 uses autobind, please contact jreuter@yaina.de [ 244.344972][ T26] audit: type=1326 audit(1774415178.222:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 244.771958][ T26] audit: type=1326 audit(1774415178.262:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 245.070531][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.107251][ T26] audit: type=1326 audit(1774415178.262:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 245.129580][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.141536][ T4280] Bluetooth: hci5: command 0x0409 tx timeout [ 245.143989][ T5811] device bridge_slave_0 entered promiscuous mode [ 245.186963][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.194309][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.203141][ T5811] device bridge_slave_1 entered promiscuous mode [ 245.215637][ T26] audit: type=1326 audit(1774415178.262:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 245.254960][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.267255][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.309485][ T26] audit: type=1326 audit(1774415178.262:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 245.409583][ T26] audit: type=1326 audit(1774415178.262:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 245.674178][ T5811] team0: Port device team_slave_0 added [ 246.154124][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 246.167796][ T5811] team0: Port device team_slave_1 added [ 246.198471][ T26] audit: type=1326 audit(1774415178.262:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 246.369162][ T26] audit: type=1326 audit(1774415178.262:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 246.394121][ T26] audit: type=1326 audit(1774415178.262:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5823 comm="syz.2.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 246.484835][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.539395][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.824889][ T5869] loop2: detected capacity change from 0 to 1024 [ 246.834011][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.854399][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.866774][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.997726][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.199857][ T4280] Bluetooth: hci5: command 0x041b tx timeout [ 247.302365][ T5811] device hsr_slave_0 entered promiscuous mode [ 247.334753][ T5811] device hsr_slave_1 entered promiscuous mode [ 248.224068][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.263414][ T5811] Cannot create hsr debugfs directory [ 249.196914][ T5894] ax25_connect(): syz.2.373 uses autobind, please contact jreuter@yaina.de [ 249.453079][ T4275] Bluetooth: hci5: command 0x040f tx timeout [ 250.534548][ T5899] loop3: detected capacity change from 0 to 1024 [ 250.614664][ T5899] EXT4-fs: Ignoring removed i_version option [ 250.650577][ T5899] EXT4-fs: inline encryption not supported [ 250.736582][ T5899] EXT4-fs (loop3): Test dummy encryption mode enabled [ 250.772201][ T5811] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 250.825296][ T5899] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 251.123541][ T5811] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 251.381577][ T5811] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 251.619228][ T4280] Bluetooth: hci5: command 0x0419 tx timeout [ 251.808581][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 251.815134][ T5811] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 253.286329][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.423797][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.549513][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.586441][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.614668][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.648277][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.059577][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.066963][ T4388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.380737][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.585450][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.694285][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.817315][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.824543][ T4388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.118261][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.177266][ T5941] loop2: detected capacity change from 0 to 2048 [ 256.194994][ T5941] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.275880][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.030134][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 257.190981][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.241445][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.254925][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.270507][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.287573][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.300442][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.404750][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.433513][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 257.674767][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.709839][ T5811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.147072][ T5958] syz.3.391 (5958): drop_caches: 2 [ 259.389622][ T5967] loop2: detected capacity change from 0 to 1024 [ 259.430830][ T5967] EXT4-fs: Ignoring removed orlov option [ 259.553608][ T5967] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 259.563738][ T5974] netlink: 64 bytes leftover after parsing attributes in process `syz.5.392'. [ 259.745255][ T4287] EXT4-fs (loop2): unmounting filesystem. [ 260.598376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.612104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.684967][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.124442][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.132543][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.757294][ T6009] loop2: detected capacity change from 0 to 8 [ 262.818121][ T6009] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 263.790014][ T4277] udevd[4277]: incorrect cramfs checksum on /dev/loop2 [ 264.275933][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 264.275950][ T26] audit: type=1326 audit(1774415199.092:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 264.307896][ T4277] udevd[4277]: incorrect cramfs checksum on /dev/loop2 [ 264.435163][ T26] audit: type=1326 audit(1774415199.122:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 264.662361][ T26] audit: type=1326 audit(1774415199.122:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 264.686761][ T26] audit: type=1326 audit(1774415199.122:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 264.719753][ T26] audit: type=1326 audit(1774415199.122:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 265.531757][ T6028] loop3: detected capacity change from 0 to 128 [ 265.632413][ T26] audit: type=1326 audit(1774415199.122:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 265.670099][ T26] audit: type=1326 audit(1774415199.122:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 265.773819][ T26] audit: type=1326 audit(1774415199.122:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 266.374821][ T6033] syz.5.404 (6033): drop_caches: 2 [ 266.960914][ T6028] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 266.971568][ T26] audit: type=1326 audit(1774415199.122:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 267.065689][ T6028] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 267.111652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.121395][ T26] audit: type=1326 audit(1774415199.122:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 267.160841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.237511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.960382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.981660][ T5811] device veth0_vlan entered promiscuous mode [ 268.002622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.172757][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 268.192360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.248397][ T5811] device veth1_vlan entered promiscuous mode [ 268.296091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.483821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.539993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.594278][ T5811] device veth0_macvtap entered promiscuous mode [ 268.634325][ T5811] device veth1_macvtap entered promiscuous mode [ 269.164186][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.686722][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.775258][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.786330][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.039837][ T26] kauditd_printk_skb: 49 callbacks suppressed [ 270.039874][ T26] audit: type=1326 audit(1774415204.852:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.3.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 270.761010][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.803903][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.819863][ T26] audit: type=1326 audit(1774415204.852:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.3.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 270.874112][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.918232][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.928799][ T26] audit: type=1326 audit(1774415204.852:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.3.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 270.979341][ T26] audit: type=1326 audit(1774415204.862:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.3.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 271.130354][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.165071][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.218752][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.264530][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 271.282177][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 271.332222][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.354176][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.411644][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.463345][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.506450][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.523598][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.566943][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.628394][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.666399][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.703068][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.769938][ T5811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.834447][ T5811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.981925][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.722027][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.751051][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.802077][ T5811] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.829575][ T5811] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.838473][ T5811] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.888637][ T5811] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.252482][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.286786][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.488340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 276.261084][ T6098] loop1: detected capacity change from 0 to 8 [ 276.380115][ T4417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.419798][ T6098] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 276.429451][ T4417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.449340][ T4277] udevd[4277]: incorrect cramfs checksum on /dev/loop1 [ 276.463342][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 276.956418][ T6107] cramfs: Error -5 while decompressing! [ 276.962723][ T6107] cramfs: ffffffff96d8e202(26)->ffff88804412a000(4096) [ 276.970361][ T6107] cramfs: Error -3 while decompressing! [ 276.976090][ T6107] cramfs: ffffffff96d8e21c(16)->ffff88804412b000(4096) [ 276.983344][ T6107] cramfs: Error -5 while decompressing! [ 276.988935][ T6107] cramfs: ffffffff96d8e202(26)->ffff88804412a000(4096) [ 277.448889][ T26] audit: type=1800 audit(1774415211.822:879): pid=6107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.417" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 277.577040][ T6111] loop5: detected capacity change from 0 to 2048 [ 277.598292][ T6111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.973416][ T26] audit: type=1326 audit(1774415213.792:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.6.351" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f089979c799 code=0x0 [ 279.233941][ T26] audit: type=1326 audit(1774415214.052:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 279.344959][ T26] audit: type=1326 audit(1774415214.082:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 280.244496][ T26] audit: type=1326 audit(1774415214.082:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 280.357728][ T26] audit: type=1326 audit(1774415214.082:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 281.399185][ T26] audit: type=1326 audit(1774415214.112:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 282.049620][ T26] audit: type=1326 audit(1774415214.112:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 282.072635][ T26] audit: type=1326 audit(1774415214.112:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 282.289257][ T26] audit: type=1326 audit(1774415214.122:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 282.469140][ T26] audit: type=1326 audit(1774415214.122:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 282.619789][ T6166] loop2: detected capacity change from 0 to 2048 [ 282.632315][ T6166] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.681687][ T26] audit: type=1326 audit(1774415214.122:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 282.729753][ T26] audit: type=1326 audit(1774415214.122:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 282.824440][ T26] audit: type=1326 audit(1774415214.122:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 283.839198][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 283.858574][ T26] audit: type=1326 audit(1774415214.122:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 284.059307][ T26] audit: type=1326 audit(1774415214.122:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 285.102751][ T26] audit: type=1326 audit(1774415214.122:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 285.427910][ T26] audit: type=1326 audit(1774415214.122:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 286.461054][ T26] audit: type=1326 audit(1774415214.122:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 286.519334][ T26] audit: type=1326 audit(1774415214.122:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.2.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7adcb9c799 code=0x7ffc0000 [ 289.423407][ T6229] loop5: detected capacity change from 0 to 2048 [ 289.457818][ T6229] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.522462][ T26] kauditd_printk_skb: 65 callbacks suppressed [ 292.522479][ T26] audit: type=1326 audit(1774415227.342:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 292.655278][ T26] audit: type=1326 audit(1774415227.352:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 292.907376][ T26] audit: type=1326 audit(1774415227.352:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 293.629084][ T26] audit: type=1326 audit(1774415227.352:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 294.609436][ T26] audit: type=1326 audit(1774415227.362:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 294.719448][ T26] audit: type=1326 audit(1774415227.362:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 294.780160][ T26] audit: type=1326 audit(1774415227.362:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 294.961802][ T26] audit: type=1326 audit(1774415227.362:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 295.108772][ T6281] loop5: detected capacity change from 0 to 32768 [ 295.128859][ T6281] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 295.136543][ T6281] CPU: 1 PID: 6281 Comm: syz.5.458 Not tainted syzkaller #0 [ 295.144003][ T6281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.154203][ T6281] Call Trace: [ 295.157539][ T6281] [ 295.160601][ T6281] dump_stack_lvl+0x188/0x24e [ 295.165438][ T6281] ? show_regs_print_info+0x12/0x12 [ 295.170701][ T6281] ? load_image+0x400/0x400 [ 295.175380][ T6281] sysfs_create_dir_ns+0x26a/0x290 [ 295.180564][ T6281] ? sysfs_warn_dup+0xa0/0xa0 [ 295.185341][ T6281] ? do_raw_spin_unlock+0x11d/0x230 [ 295.190645][ T6281] kobject_add_internal+0x61c/0xcc0 [ 295.195997][ T6281] kobject_init_and_add+0x128/0x190 [ 295.201238][ T6281] ? lockdep_softirqs_off+0x430/0x430 [ 295.206675][ T6281] ? kobject_add+0x230/0x230 [ 295.211414][ T6281] ? __init_swait_queue_head+0xa5/0x150 [ 295.217103][ T6281] gfs2_sys_fs_add+0x24f/0x4b0 [ 295.222007][ T6281] ? gfs2_recover_set+0x240/0x240 [ 295.227159][ T6281] ? snprintf+0xe5/0x140 [ 295.231441][ T6281] ? vscnprintf+0x80/0x80 [ 295.235900][ T6281] gfs2_fill_super+0x128c/0x1fb0 [ 295.240880][ T6281] ? gfs2_reconfigure+0xd30/0xd30 [ 295.246118][ T6281] ? sb_set_blocksize+0xa5/0xe0 [ 295.251005][ T6281] get_tree_bdev+0x3f1/0x610 [ 295.255675][ T6281] ? gfs2_reconfigure+0xd30/0xd30 [ 295.260906][ T6281] gfs2_get_tree+0x4d/0x1e0 [ 295.265789][ T6281] vfs_get_tree+0x88/0x270 [ 295.270331][ T6281] do_new_mount+0x24a/0xa40 [ 295.274884][ T6281] __se_sys_mount+0x2e3/0x3d0 [ 295.279668][ T6281] ? __x64_sys_mount+0xc0/0xc0 [ 295.284643][ T6281] ? lockdep_hardirqs_on+0x94/0x140 [ 295.289893][ T6281] ? __x64_sys_mount+0x1c/0xc0 [ 295.294777][ T6281] do_syscall_64+0x4c/0xa0 [ 295.299233][ T6281] ? clear_bhb_loop+0x60/0xb0 [ 295.303939][ T6281] ? clear_bhb_loop+0x60/0xb0 [ 295.309064][ T6281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.315431][ T6281] RIP: 0033:0x7fb5bab9da0a [ 295.320078][ T6281] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.340251][ T6281] RSP: 002b:00007fb5bb9dfe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 295.348874][ T6281] RAX: ffffffffffffffda RBX: 00007fb5bb9dfee0 RCX: 00007fb5bab9da0a [ 295.356873][ T6281] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007fb5bb9dfea0 [ 295.364961][ T6281] RBP: 00002000000124c0 R08: 00007fb5bb9dfee0 R09: 0000000000000000 [ 295.373049][ T6281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 295.381055][ T6281] R13: 00007fb5bb9dfea0 R14: 00000000000125c7 R15: 0000200000000180 [ 295.389219][ T6281] [ 295.393001][ T6281] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 295.406391][ T6281] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 295.417413][ T26] audit: type=1326 audit(1774415227.362:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 295.440728][ T26] audit: type=1326 audit(1774415227.362:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6252 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 295.491577][ T6286] loop3: detected capacity change from 0 to 2048 [ 295.508764][ T6286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.562535][ T6288] loop1: detected capacity change from 0 to 1024 [ 295.603665][ T4285] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 295.818201][ T6284] loop6: detected capacity change from 0 to 1024 [ 296.159870][ T6288] hfsplus: unable to parse mount options [ 296.291344][ T6284] EXT4-fs: Ignoring removed i_version option [ 296.358493][ T6284] EXT4-fs: inline encryption not supported [ 296.584551][ T6284] EXT4-fs (loop6): Test dummy encryption mode enabled [ 297.318509][ T6284] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 298.156818][ T5811] EXT4-fs (loop6): unmounting filesystem. [ 299.499314][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 299.499330][ T26] audit: type=1326 audit(1774415234.312:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 299.587528][ T26] audit: type=1326 audit(1774415234.382:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 299.610052][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.638490][ T6328] overlayfs: overlapping lowerdir path [ 299.645452][ T26] audit: type=1326 audit(1774415234.382:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 299.715317][ T6329] overlayfs: overlapping lowerdir path [ 300.741023][ T26] audit: type=1326 audit(1774415234.382:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 300.809270][ T26] audit: type=1326 audit(1774415234.382:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 300.832063][ T26] audit: type=1326 audit(1774415234.382:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 300.854994][ T26] audit: type=1326 audit(1774415234.382:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 300.878375][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.886184][ T26] audit: type=1326 audit(1774415234.382:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 300.909197][ T26] audit: type=1326 audit(1774415234.392:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 300.967335][ T26] audit: type=1326 audit(1774415234.392:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 302.366190][ T6349] loop2: detected capacity change from 0 to 32768 [ 302.374971][ T6349] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 302.382814][ T6349] CPU: 0 PID: 6349 Comm: syz.2.473 Not tainted syzkaller #0 [ 302.390253][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 302.400379][ T6349] Call Trace: [ 302.404159][ T6349] [ 302.407250][ T6349] dump_stack_lvl+0x188/0x24e [ 302.412018][ T6349] ? show_regs_print_info+0x12/0x12 [ 302.417392][ T6349] ? load_image+0x400/0x400 [ 302.422331][ T6349] sysfs_create_dir_ns+0x26a/0x290 [ 302.427536][ T6349] ? sysfs_warn_dup+0xa0/0xa0 [ 302.432476][ T6349] ? do_raw_spin_unlock+0x11d/0x230 [ 302.437745][ T6349] kobject_add_internal+0x61c/0xcc0 [ 302.443027][ T6349] kobject_init_and_add+0x128/0x190 [ 302.448302][ T6349] ? lockdep_softirqs_off+0x430/0x430 [ 302.453906][ T6349] ? kobject_add+0x230/0x230 [ 302.458572][ T6349] ? __init_swait_queue_head+0xa5/0x150 [ 302.464175][ T6349] gfs2_sys_fs_add+0x24f/0x4b0 [ 302.468987][ T6349] ? gfs2_recover_set+0x240/0x240 [ 302.474094][ T6349] ? snprintf+0xe5/0x140 [ 302.478586][ T6349] ? vscnprintf+0x80/0x80 [ 302.483165][ T6349] gfs2_fill_super+0x128c/0x1fb0 [ 302.488338][ T6349] ? gfs2_reconfigure+0xd30/0xd30 [ 302.493418][ T6349] ? sb_set_blocksize+0xa5/0xe0 [ 302.498406][ T6349] get_tree_bdev+0x3f1/0x610 [ 302.503155][ T6349] ? gfs2_reconfigure+0xd30/0xd30 [ 302.508235][ T6349] gfs2_get_tree+0x4d/0x1e0 [ 302.512894][ T6349] vfs_get_tree+0x88/0x270 [ 302.517501][ T6349] do_new_mount+0x24a/0xa40 [ 302.522077][ T6349] __se_sys_mount+0x2e3/0x3d0 [ 302.526890][ T6349] ? __x64_sys_mount+0xc0/0xc0 [ 302.531952][ T6349] ? lockdep_hardirqs_on+0x94/0x140 [ 302.537389][ T6349] ? __x64_sys_mount+0x1c/0xc0 [ 302.542378][ T6349] do_syscall_64+0x4c/0xa0 [ 302.547113][ T6349] ? clear_bhb_loop+0x60/0xb0 [ 302.551972][ T6349] ? clear_bhb_loop+0x60/0xb0 [ 302.556866][ T6349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.562900][ T6349] RIP: 0033:0x7f7adcb9da0a [ 302.567522][ T6349] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.587703][ T6349] RSP: 002b:00007f7addb01e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 302.596522][ T6349] RAX: ffffffffffffffda RBX: 00007f7addb01ee0 RCX: 00007f7adcb9da0a [ 302.605231][ T6349] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f7addb01ea0 [ 302.613637][ T6349] RBP: 00002000000124c0 R08: 00007f7addb01ee0 R09: 0000000000000000 [ 302.621645][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 302.629909][ T6349] R13: 00007f7addb01ea0 R14: 00000000000125c7 R15: 0000200000000180 [ 302.638084][ T6349] [ 302.641776][ T6349] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 302.655099][ T6349] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 302.719909][ T4285] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 302.742379][ T6354] loop5: detected capacity change from 0 to 1024 [ 302.804261][ T6354] EXT4-fs: Ignoring removed i_version option [ 302.823449][ T6354] EXT4-fs: inline encryption not supported [ 302.919208][ T6354] EXT4-fs (loop5): Test dummy encryption mode enabled [ 303.052390][ T6354] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 304.648380][ T4949] EXT4-fs (loop5): unmounting filesystem. [ 305.509998][ T6385] binder_alloc: 6378: binder_alloc_buf, no vma [ 305.936779][ T6391] overlayfs: overlapping lowerdir path [ 305.980666][ T6395] loop6: detected capacity change from 0 to 1024 [ 306.007702][ T6395] hfsplus: unable to parse mount options [ 306.030007][ T6401] overlayfs: overlapping lowerdir path [ 308.637393][ T6422] loop2: detected capacity change from 0 to 32768 [ 308.667770][ T6422] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 308.676452][ T6422] CPU: 0 PID: 6422 Comm: syz.2.489 Not tainted syzkaller #0 [ 308.683812][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 308.694043][ T6422] Call Trace: [ 308.697375][ T6422] [ 308.700389][ T6422] dump_stack_lvl+0x188/0x24e [ 308.705143][ T6422] ? show_regs_print_info+0x12/0x12 [ 308.710406][ T6422] ? load_image+0x400/0x400 [ 308.714986][ T6422] sysfs_create_dir_ns+0x26a/0x290 [ 308.720442][ T6422] ? sysfs_warn_dup+0xa0/0xa0 [ 308.725241][ T6422] ? do_raw_spin_unlock+0x11d/0x230 [ 308.730513][ T6422] kobject_add_internal+0x61c/0xcc0 [ 308.735778][ T6422] kobject_init_and_add+0x128/0x190 [ 308.741046][ T6422] ? lockdep_softirqs_off+0x430/0x430 [ 308.746496][ T6422] ? kobject_add+0x230/0x230 [ 308.751416][ T6422] ? __init_swait_queue_head+0xa5/0x150 [ 308.757059][ T6422] gfs2_sys_fs_add+0x24f/0x4b0 [ 308.761891][ T6422] ? gfs2_recover_set+0x240/0x240 [ 308.766989][ T6422] ? snprintf+0xe5/0x140 [ 308.771345][ T6422] ? vscnprintf+0x80/0x80 [ 308.775750][ T6422] gfs2_fill_super+0x128c/0x1fb0 [ 308.780764][ T6422] ? gfs2_reconfigure+0xd30/0xd30 [ 308.786034][ T6422] ? sb_set_blocksize+0xa5/0xe0 [ 308.791054][ T6422] get_tree_bdev+0x3f1/0x610 [ 308.795853][ T6422] ? gfs2_reconfigure+0xd30/0xd30 [ 308.800909][ T6422] gfs2_get_tree+0x4d/0x1e0 [ 308.805629][ T6422] vfs_get_tree+0x88/0x270 [ 308.810120][ T6422] do_new_mount+0x24a/0xa40 [ 308.814674][ T6422] __se_sys_mount+0x2e3/0x3d0 [ 308.819580][ T6422] ? __x64_sys_mount+0xc0/0xc0 [ 308.824503][ T6422] ? lockdep_hardirqs_on+0x94/0x140 [ 308.830098][ T6422] ? __x64_sys_mount+0x1c/0xc0 [ 308.834910][ T6422] do_syscall_64+0x4c/0xa0 [ 308.839364][ T6422] ? clear_bhb_loop+0x60/0xb0 [ 308.844087][ T6422] ? clear_bhb_loop+0x60/0xb0 [ 308.848908][ T6422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.854936][ T6422] RIP: 0033:0x7f7adcb9da0a [ 308.859995][ T6422] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.879991][ T6422] RSP: 002b:00007f7addb01e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 308.888527][ T6422] RAX: ffffffffffffffda RBX: 00007f7addb01ee0 RCX: 00007f7adcb9da0a [ 308.896625][ T6422] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f7addb01ea0 [ 308.904802][ T6422] RBP: 00002000000124c0 R08: 00007f7addb01ee0 R09: 0000000000000000 [ 308.912895][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 308.920900][ T6422] R13: 00007f7addb01ea0 R14: 00000000000125c7 R15: 0000200000000180 [ 308.928918][ T6422] [ 308.932758][ T6422] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 308.946337][ T6422] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 309.139794][ T4285] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 309.162733][ T6425] loop1: detected capacity change from 0 to 2048 [ 309.762472][ T6425] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.589186][ T6429] loop3: detected capacity change from 0 to 1024 [ 310.875451][ T6429] EXT4-fs: Ignoring removed i_version option [ 311.002097][ T6429] EXT4-fs: inline encryption not supported [ 311.570174][ T6429] EXT4-fs (loop3): Test dummy encryption mode enabled [ 311.599418][ T6429] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 312.441383][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 313.870778][ T6465] syz.6.502 (6465): drop_caches: 2 [ 315.346295][ T6492] overlayfs: overlapping lowerdir path [ 315.411773][ T6495] loop5: detected capacity change from 0 to 2048 [ 315.424559][ T6495] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.434192][ T6493] overlayfs: overlapping lowerdir path [ 317.243647][ T6505] loop1: detected capacity change from 0 to 1024 [ 319.008408][ T6522] syz.2.517 (6522): drop_caches: 2 [ 319.719239][ T6526] loop1: detected capacity change from 0 to 1024 [ 319.757800][ T6526] hfsplus: unable to parse mount options [ 321.215916][ T6554] loop6: detected capacity change from 0 to 1024 [ 321.268731][ T6547] loop5: detected capacity change from 0 to 2048 [ 321.282445][ T6547] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.565082][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.572952][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.056412][ T6580] loop3: detected capacity change from 0 to 1024 [ 324.064311][ T6580] EXT4-fs: Ignoring removed i_version option [ 324.070606][ T6580] EXT4-fs: inline encryption not supported [ 324.077759][ T6580] EXT4-fs (loop3): Test dummy encryption mode enabled [ 324.134294][ T6580] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 324.212942][ T6582] loop1: detected capacity change from 0 to 1024 [ 324.330261][ T6582] hfsplus: unable to parse mount options [ 324.448402][ T4285] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 326.675507][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 327.195579][ T6596] loop1: detected capacity change from 0 to 1024 [ 327.583356][ T6601] loop3: detected capacity change from 0 to 2048 [ 327.594638][ T6601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.364560][ T6625] loop6: detected capacity change from 0 to 1024 [ 329.633638][ T6625] EXT4-fs: Ignoring removed i_version option [ 329.663867][ T6625] EXT4-fs: inline encryption not supported [ 330.082789][ T6625] EXT4-fs (loop6): Test dummy encryption mode enabled [ 330.127933][ T6625] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 330.865832][ T6648] loop3: detected capacity change from 0 to 2048 [ 330.892537][ T6648] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.081747][ T5811] EXT4-fs (loop6): unmounting filesystem. [ 333.962100][ T6686] loop3: detected capacity change from 0 to 1024 [ 335.153931][ T6696] loop1: detected capacity change from 0 to 2048 [ 335.175474][ T6696] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.298399][ T26] kauditd_printk_skb: 46 callbacks suppressed [ 337.298415][ T26] audit: type=1326 audit(1774415272.112:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.3.580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf93b9c799 code=0x0 [ 339.356399][ T6741] loop2: detected capacity change from 0 to 2048 [ 339.367330][ T6741] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.712625][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 341.155323][ T26] audit: type=1326 audit(1774415275.972:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.6.596" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f089979c799 code=0x0 [ 342.190044][ T6774] loop2: detected capacity change from 0 to 1024 [ 342.197651][ T6774] hfsplus: unable to parse mount options [ 343.287711][ T6784] loop1: detected capacity change from 0 to 2048 [ 343.298775][ T6784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 345.862440][ T26] audit: type=1326 audit(1774415280.682:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.2.615" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7adcb9c799 code=0x0 [ 347.075032][ T6831] loop2: detected capacity change from 0 to 1024 [ 347.135015][ T6831] hfsplus: unable to parse mount options [ 347.219441][ T6833] loop6: detected capacity change from 0 to 1024 [ 350.800932][ T26] audit: type=1326 audit(1774415285.622:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.3.630" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf93b9c799 code=0x0 [ 351.300350][ T6878] loop1: detected capacity change from 0 to 1024 [ 351.308370][ T6878] hfsplus: unable to parse mount options [ 351.593126][ T6880] loop3: detected capacity change from 0 to 1024 [ 353.039816][ T26] audit: type=1326 audit(1774415287.862:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 353.167062][ T26] audit: type=1326 audit(1774415287.862:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 353.196882][ T26] audit: type=1326 audit(1774415287.872:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 353.219386][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.253509][ T26] audit: type=1326 audit(1774415287.872:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 353.276799][ T26] audit: type=1326 audit(1774415287.872:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 353.299423][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.318811][ T26] audit: type=1326 audit(1774415287.872:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 353.342934][ T26] audit: type=1326 audit(1774415287.872:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 353.365898][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.409127][ T26] audit: type=1326 audit(1774415287.872:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 353.466145][ T26] audit: type=1326 audit(1774415287.872:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 353.633617][ T26] audit: type=1326 audit(1774415287.872:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.1.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc2b9c799 code=0x7ffc0000 [ 355.580587][ T6922] loop3: detected capacity change from 0 to 1024 [ 355.802696][ T6927] loop5: detected capacity change from 0 to 1024 [ 355.905345][ T6927] hfsplus: unable to parse mount options [ 357.770486][ T6949] binder: 6948:6949 ioctl 4018620d 0 returned -22 [ 357.983792][ T6955] overlayfs: missing 'lowerdir' [ 358.842990][ T26] kauditd_printk_skb: 95 callbacks suppressed [ 358.843008][ T26] audit: type=1326 audit(1774415293.662:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.3.661" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf93b9c799 code=0x0 [ 358.994292][ T6964] loop2: detected capacity change from 0 to 1024 [ 359.035196][ T6964] hfsplus: unable to parse mount options [ 359.063132][ T6968] loop6: detected capacity change from 0 to 1024 [ 361.755458][ T26] audit: type=1326 audit(1774415296.572:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 361.947753][ T26] audit: type=1326 audit(1774415296.592:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 361.972178][ T7004] overlayfs: missing 'lowerdir' [ 362.679307][ T26] audit: type=1326 audit(1774415296.682:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 362.703698][ T26] audit: type=1326 audit(1774415296.682:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 362.733415][ T26] audit: type=1326 audit(1774415296.682:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 362.979656][ T26] audit: type=1326 audit(1774415296.692:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 363.032401][ T7013] loop5: detected capacity change from 0 to 1024 [ 363.039355][ T26] audit: type=1326 audit(1774415296.692:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 363.069339][ T26] audit: type=1326 audit(1774415296.692:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 363.093586][ T26] audit: type=1326 audit(1774415296.692:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7faf93b9c799 code=0x7ffc0000 [ 363.208130][ T7012] loop2: detected capacity change from 0 to 1024 [ 363.241117][ T7012] hfsplus: unable to parse mount options [ 363.310219][ T4285] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 364.625504][ T26] kauditd_printk_skb: 50 callbacks suppressed [ 364.625521][ T26] audit: type=1326 audit(1774415299.442:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.5.680" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5bab9c799 code=0x0 [ 365.649151][ T4280] Bluetooth: hci5: command 0x0406 tx timeout [ 367.005254][ T7048] overlayfs: missing 'lowerdir' [ 367.018442][ T26] audit: type=1326 audit(1774415301.832:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 367.057864][ T7057] loop2: detected capacity change from 0 to 1024 [ 367.067575][ T26] audit: type=1326 audit(1774415301.862:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 367.260470][ T26] audit: type=1326 audit(1774415301.942:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 367.283255][ T26] audit: type=1326 audit(1774415301.952:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 367.310815][ T26] audit: type=1326 audit(1774415301.952:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 367.335137][ T26] audit: type=1326 audit(1774415301.952:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 367.357652][ T26] audit: type=1326 audit(1774415301.952:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 367.380264][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.390929][ T26] audit: type=1326 audit(1774415301.962:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 367.413324][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.508745][ T26] audit: type=1326 audit(1774415301.962:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.5.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb5bab9c799 code=0x7ffc0000 [ 368.826042][ T7077] loop6: detected capacity change from 0 to 1024 [ 368.840992][ T7077] hfsplus: unable to parse mount options [ 370.232929][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 370.232945][ T26] audit: type=1326 audit(1774415305.052:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.3.700" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf93b9c799 code=0x0 [ 370.261243][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.611822][ T7104] overlayfs: unrecognized mount option "/" or missing value [ 371.699774][ T7112] loop3: detected capacity change from 0 to 1024 [ 371.985894][ T26] audit: type=1326 audit(1774415306.802:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089979c799 code=0x7ffc0000 [ 372.008538][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.103598][ T26] audit: type=1326 audit(1774415306.842:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f089979c799 code=0x7ffc0000 [ 372.329121][ T26] audit: type=1326 audit(1774415306.852:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089979c799 code=0x7ffc0000 [ 372.380999][ T26] audit: type=1326 audit(1774415306.852:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089979c799 code=0x7ffc0000 [ 372.417127][ T26] audit: type=1326 audit(1774415306.852:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f089979c799 code=0x7ffc0000 [ 372.499101][ T26] audit: type=1326 audit(1774415306.852:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089979c799 code=0x7ffc0000 [ 372.592801][ T26] audit: type=1326 audit(1774415306.852:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089979c799 code=0x7ffc0000 [ 372.719680][ T26] audit: type=1326 audit(1774415306.852:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f089979c799 code=0x7ffc0000 [ 372.759521][ T26] audit: type=1326 audit(1774415306.852:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089979c799 code=0x7ffc0000 [ 373.119902][ T28] INFO: task syz-executor:4279 blocked for more than 143 seconds. [ 373.164451][ T28] Not tainted syzkaller #0 [ 373.289173][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.298877][ T28] task:syz-executor state:D stack:22064 pid:4279 ppid:1 flags:0x00004004 [ 373.309309][ T28] Call Trace: [ 373.313026][ T28] [ 373.316572][ T28] __schedule+0x11d1/0x40e0 [ 373.322528][ T28] ? __sched_text_start+0x8/0x8 [ 373.328192][ T28] schedule+0xb9/0x180 [ 373.333298][ T28] schedule_timeout+0xbd/0x2d0 [ 373.338717][ T28] ? console_conditional_schedule+0x40/0x40 [ 373.345829][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 373.352513][ T28] ? lock_chain_count+0x20/0x20 [ 373.358786][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 373.364450][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 373.371779][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 373.378359][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 373.384516][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 373.390764][ T28] ? wait_for_completion+0x276/0x5a0 [ 373.397132][ T28] wait_for_completion+0x2c7/0x5a0 [ 373.402921][ T28] ? io_schedule+0xd0/0xd0 [ 373.408640][ T28] ? try_to_wake_up+0x67c/0x1080 [ 373.414254][ T28] kthread_stop+0x197/0x650 [ 373.420118][ T28] gfs2_withdraw+0x607/0x16c0 [ 373.425519][ T28] ? gfs2_lm+0x240/0x240 [ 373.430901][ T28] ? gfs2_consist_inode_i+0xf1/0x110 [ 373.436692][ T28] gfs2_inode_refresh+0xb64/0xfd0 [ 373.449086][ T28] ? gfs2_inode_metasync+0xf0/0xf0 [ 373.456756][ T28] ? gfs2_glock_nq+0xcf0/0x14e0 [ 373.462007][ T28] gfs2_instantiate+0x15e/0x210 [ 373.467150][ T28] gfs2_glock_wait+0x1d0/0x2a0 [ 373.472233][ T28] do_sync+0x4bf/0xc40 [ 373.476516][ T28] ? gfs2_quota_sync+0x32c/0x700 [ 373.487712][ T7126] loop1: detected capacity change from 0 to 1024 [ 373.512600][ T28] ? slot_put+0x1e0/0x1e0 [ 373.522293][ T28] ? gfs2_quota_sync+0x32c/0x700 [ 373.532330][ T7126] hfsplus: unable to parse mount options [ 373.546811][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 373.747504][ T28] gfs2_quota_sync+0x32c/0x700 [ 373.752458][ T28] gfs2_sync_fs+0x48/0xb0 [ 373.756865][ T28] sync_filesystem+0xe6/0x220 [ 373.764327][ T28] generic_shutdown_super+0x6b/0x340 [ 373.769730][ T28] kill_block_super+0x7c/0xe0 [ 373.774877][ T28] deactivate_locked_super+0x93/0xf0 [ 373.835831][ T28] cleanup_mnt+0x42c/0x4b0 [ 373.840505][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 373.845849][ T28] task_work_run+0x1d0/0x260 [ 373.850754][ T28] ? task_work_cancel+0x220/0x220 [ 373.856004][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 373.861673][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 373.867088][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 373.872832][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 373.878419][ T28] do_syscall_64+0x58/0xa0 [ 374.229374][ T28] ? clear_bhb_loop+0x60/0xb0 [ 374.235326][ T28] ? clear_bhb_loop+0x60/0xb0 [ 374.240782][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.247585][ T28] RIP: 0033:0x7fdc7cf9d9d7 [ 374.252691][ T28] RSP: 002b:00007ffceb9f9528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 374.439070][ T28] RAX: 0000000000000000 RBX: 00007fdc7d032050 RCX: 00007fdc7cf9d9d7 [ 374.511412][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffceb9f95e0 [ 374.520200][ T28] RBP: 00007ffceb9f95e0 R08: 00007ffceb9fa5e0 R09: 00000000ffffffff [ 374.528284][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffceb9fa670 [ 374.536839][ T28] R13: 00007fdc7d032050 R14: 00000000000367d7 R15: 00007ffceb9fa6b0 [ 374.554787][ T28] [ 374.557967][ T28] INFO: task gfs2_quotad:5607 blocked for more than 144 seconds. [ 374.566304][ T28] Not tainted syzkaller #0 [ 374.571629][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.596960][ T28] task:gfs2_quotad state:D stack:28240 pid:5607 ppid:2 flags:0x00024000 [ 374.630917][ T28] Call Trace: [ 374.634364][ T28] [ 374.637559][ T28] __schedule+0x11d1/0x40e0 [ 374.651641][ T28] ? __sched_text_start+0x8/0x8 [ 374.656699][ T28] ? __mutex_trylock_common+0x86/0x260 [ 374.667413][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 374.679211][ T28] schedule+0xb9/0x180 [ 374.683562][ T28] schedule_preempt_disabled+0xf/0x20 [ 374.698734][ T28] __mutex_lock+0x562/0xaf0 [ 374.705199][ T28] ? __mutex_lock+0x3b2/0xaf0 [ 374.716520][ T28] ? gfs2_quota_sync+0x91/0x700 [ 374.723167][ T28] ? mutex_lock_nested+0x10/0x10 [ 374.728453][ T28] gfs2_quota_sync+0x91/0x700 [ 374.740272][ T28] gfs2_quotad+0x420/0x680 [ 374.744921][ T28] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 374.766239][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 374.773560][ T28] ? wake_bit_function+0x200/0x200 [ 374.778953][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 374.793336][ T28] ? __kthread_parkme+0x162/0x1c0 [ 374.798663][ T28] kthread+0x29d/0x330 [ 374.811574][ T28] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 374.818355][ T28] ? kthread_blkcg+0xd0/0xd0 [ 374.825996][ T28] ret_from_fork+0x1f/0x30 [ 374.836555][ T28] [ 374.842592][ T28] [ 374.842592][ T28] Showing all locks held in the system: [ 374.856657][ T28] 1 lock held by rcu_tasks_kthre/12: [ 374.878518][ T28] #0: ffffffff8cb2dfb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 374.920514][ T28] 1 lock held by rcu_tasks_trace/13: [ 374.926165][ T28] #0: ffffffff8cb2e7d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 374.943465][ T28] 1 lock held by khungtaskd/28: [ 374.948711][ T28] #0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 374.960522][ T28] 2 locks held by getty/4033: [ 374.965365][ T28] #0: ffff88814cfb1098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 374.984218][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 374.997534][ T28] 1 lock held by udevd/4277: [ 375.008817][ T28] #0: ffff888017889d20 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: blkdev_read_iter+0x41d/0x570 [ 375.029152][ T28] 4 locks held by syz-executor/4279: [ 375.035637][ T28] #0: ffff888075d6a0e0 (&type->s_umount_key#63){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 375.052538][ T28] #1: ffff888055368b70 (&sdp->sd_quota_sync_mutex){+.+.}-{3:3}, at: gfs2_quota_sync+0x91/0x700 [ 375.067346][ T28] #2: ffff888055ac8150 (&gfs2_quota_imutex_key){+.+.}-{3:3}, at: do_sync+0x36b/0xc40 [ 375.081159][ T28] #3: ffff888055369248 (&sdp->sd_freeze_mutex){+.+.}-{3:3}, at: gfs2_withdraw+0x594/0x16c0 [ 375.097692][ T28] 2 locks held by kworker/u4:6/4332: [ 375.105872][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 375.123651][ T28] #1: ffffc900043a7d00 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 375.141746][ T28] 2 locks held by kworker/0:9/4358: [ 375.147342][ T28] 1 lock held by gfs2_quotad/5607: [ 375.157268][ T28] #0: ffff888055368b70 (&sdp->sd_quota_sync_mutex){+.+.}-{3:3}, at: gfs2_quota_sync+0x91/0x700 [ 375.170821][ T28] 2 locks held by kworker/u4:15/6293: [ 375.176344][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 375.192567][ T28] #1: ffffc9000470fd00 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 375.207201][ T28] 2 locks held by syz.1.710/7125: [ 375.217364][ T28] #0: ffff888029922110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_release+0x705/0x800 [ 375.229749][ T28] #1: ffff8880299202c0 (&dev->mutex#2){+.+.}-{3:3}, at: input_close_device+0x48/0x1d0 [ 375.251133][ T28] 2 locks held by syz.6.711/7127: [ 375.256476][ T28] #0: ffff88807147f410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 375.273532][ T28] #1: ffffffff8cb332f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 375.390783][ T28] 1 lock held by syz.6.711/7133: [ 375.396174][ T28] [ 375.398626][ T28] ============================================= [ 375.398626][ T28] [ 375.407858][ T28] NMI backtrace for cpu 1 [ 375.412254][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 375.419587][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.429695][ T28] Call Trace: [ 375.433027][ T28] [ 375.436040][ T28] dump_stack_lvl+0x188/0x24e [ 375.440892][ T28] ? irq_work_queue+0xb8/0x140 [ 375.445732][ T28] ? show_regs_print_info+0x12/0x12 [ 375.451019][ T28] ? load_image+0x400/0x400 [ 375.455650][ T28] ? vprintk_emit+0x59f/0x6a0 [ 375.460379][ T28] ? printk_sprint+0x460/0x460 [ 375.465293][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 375.470305][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 375.476617][ T28] ? _printk+0xda/0x130 [ 375.480829][ T28] ? load_image+0x400/0x400 [ 375.485547][ T28] ? load_image+0x400/0x400 [ 375.490092][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 375.496388][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 375.502498][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 375.508533][ T28] watchdog+0xeee/0xf30 [ 375.512735][ T28] ? watchdog+0x1ed/0xf30 [ 375.517104][ T28] kthread+0x29d/0x330 [ 375.521208][ T28] ? hungtask_pm_notify+0x40/0x40 [ 375.526273][ T28] ? kthread_blkcg+0xd0/0xd0 [ 375.530995][ T28] ret_from_fork+0x1f/0x30 [ 375.535471][ T28] [ 375.538666][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.545645][ T28] Sending NMI from CPU 1 to CPUs 0: [ 375.550966][ C0] NMI backtrace for cpu 0 [ 375.550978][ C0] CPU: 0 PID: 4259 Comm: syz-executor Not tainted syzkaller #0 [ 375.550998][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.551009][ C0] RIP: 0010:__switch_to_asm+0x49/0x60 [ 375.551041][ C0] Code: 65 48 89 1c 25 28 00 00 00 49 c7 c4 10 00 00 00 e8 01 00 00 00 cc e8 01 00 00 00 cc 48 83 c4 10 49 ff cc 75 eb 0f ae e8 41 5f <41> 5e 41 5d 41 5c 5b 5d e9 da b3 2c 00 90 90 90 90 90 90 90 90 90 [ 375.551058][ C0] RSP: 0018:ffffc900033178b0 EFLAGS: 00000046 [ 375.551076][ C0] RAX: 1ffff110171c7562 RBX: d02b8c615d405100 RCX: 1ffff110171c7709 [ 375.551091][ C0] RDX: 0000000000000000 RSI: ffff88807a1d8000 RDI: ffff88802e70d940 [ 375.551105][ C0] RBP: ffffc90003d27c10 R08: ffffffff8e1fd76f R09: 1ffffffff1c3faed [ 375.551119][ C0] R10: dffffc0000000000 R11: fffffbfff1c3faee R12: 0000000000000000 [ 375.551133][ C0] R13: ffff8880b8e3b848 R14: 1ffff110171c770b R15: dffffc0000000000 [ 375.551148][ C0] FS: 000055555d74d500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 375.551166][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.551180][ C0] CR2: 00007faf93de7158 CR3: 000000007ba08000 CR4: 00000000003506f0 [ 375.551197][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 375.551209][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 375.551221][ C0] Call Trace: [ 375.695969][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.748070][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 375.755033][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 375.762386][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.772503][ T28] Call Trace: [ 375.775835][ T28] [ 375.778807][ T28] dump_stack_lvl+0x188/0x24e [ 375.783721][ T28] ? memcpy+0x3c/0x60 [ 375.787760][ T28] ? show_regs_print_info+0x12/0x12 [ 375.793033][ T28] ? load_image+0x400/0x400 [ 375.797792][ T28] panic+0x2e5/0x730 [ 375.801756][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 375.807564][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 375.812154][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 375.817773][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 375.824095][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 375.830332][ T28] watchdog+0xf2d/0xf30 [ 375.834565][ T28] ? watchdog+0x1ed/0xf30 [ 375.838972][ T28] kthread+0x29d/0x330 [ 375.843085][ T28] ? hungtask_pm_notify+0x40/0x40 [ 375.848158][ T28] ? kthread_blkcg+0xd0/0xd0 [ 375.852807][ T28] ret_from_fork+0x1f/0x30 [ 375.857365][ T28] [ 375.861012][ T28] Kernel Offset: disabled [ 375.865385][ T28] Rebooting in 86400 seconds..