last executing test programs: 1m46.446175137s ago: executing program 0 (id=466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x20080000) 1m46.288375239s ago: executing program 0 (id=471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000197, 0x0) fsopen(0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000700)={'icmp\x00'}, &(0x7f00000006c0)=0x1e) exit(0x100000000000035) socket$inet6_tcp(0xa, 0x1, 0x0) tkill(0x0, 0x12) fchdir(0xffffffffffffffff) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x0) r5 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000280)={0xe1, 0x6, 0x1, "0b93292c5b11847cc808506ed51be5ba2195c1e899aa65c0352e9b34448cc506", 0x50313459}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0xc0c1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r7, 0x6}, 0x8) 1m44.975234504s ago: executing program 0 (id=480): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000001400)={'netdevsim0\x00', {0x2, 0x0, @remote}}) 1m43.46418068s ago: executing program 0 (id=482): syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r0, 0x0, 0x0, 0x6) 1m41.364148943s ago: executing program 0 (id=497): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 1m41.118479216s ago: executing program 0 (id=501): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10852, &(0x7f0000001f40)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES8, @ANYBLOB="d9b2de1a2f0751da7120c88a88f0955139afd5c85d409cd57977db7b7c40ade28a33a618636ff400fb97e6caf4db25c1ccd8fee922c9ca87d19e19bed2941af9fc3561a936e805795a9965b5eb669fb143b894f24dbf2cd930f3967172749732bead8f13f18ad0a6d2451810d29d7c5e9dbda0be77473bb0431e71cfa02a873d927ec49990e8ac2bb9469d53e0420e67beaa46cb9850de015b11ed84f357d67ae57d156d5a089f321ec719835c6eeb76ad4a79ca0a80f230d9110b57272d24eb8d5effb24faddf3ffcb309d9a27c57181780f56a1b34", @ANYRESDEC=0x0, @ANYRES8, @ANYRESDEC=0x0, @ANYRES8, @ANYRESOCT, @ANYRES8, @ANYRES8, @ANYRES16=0x0, @ANYRES64, @ANYRES32], 0xfe, 0x1508, &(0x7f0000000a00)="$eJzs3AvYTdX2MPAx5pyLl6Sd5D7HHIudXkySJJckuSRJcuRIbglJkiRJ5X5LckvIPck9JLeQ3O+33JMkSZKE5JbM79Hf+XRO53yd8/+f/+P5zjt+z7Oed4691phrrD3286619n72/q7dgEp1KpevxczwP4L/9aczAKQAQG8AuA4AIgAonqV4lkvrM2js/D/bifj3enjK1a5AXE3S/7RN+p+2Sf/TNul/2ib9T9uk/2mb9D9tk/4LkZZtmZrzelnS7iLv/6dlcv7/D3Ko8Kiv1hW+sf2/kCL9T9uk/2mb9D9tk/6nbdL/tE36n7ZJ/9M26b8Qadl//71j+ezgP2G52q8/IYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBpw9lwhQGAv4yvdl1CCCGEEEIIIYT49wnpr3YFQgghhBBCCCGE+N+HoECDgQjSQXpIgQyQEa6BTHAtZIbrIAHXQxa4AbLCjZANskMOyAm5IDfkAQsEDhhiyAv5IAk3QX64GVKhABSEQuChMBSBW6Ao3ArF4DYoDrdDCbgDSkIpKA1l4E4oC3dBObgbysM9UAEqQiWoDPdCFbgPqsL9UA0egOrwINSAh6Am/AlqwcNQG/4MdeARqAuPQj2oDw2gITT6b+W/BC/DK9AROkFn6AJdoRt0hx7QE3pBb3gV+kDK5eemPwyAgTAI3oDB8CYMgaEwDN6C4TACRsIoGA1jYCy8DePgHRgP78IEmAiTYDJMgakwDd6D6TADZsL7MAs+gNkwB+bCPJgPH8ICWAiL4CNYDB/DElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW+AS2wjbYDjtgJ+yC3fAp7IHPYC98Dvvgi38x/8zf5LdHQECFCg0aTIfpMAVTMCNmxEyYCTNjZkxgArNgFsyKWTEbZrs5B+bAXJgL82AeJCQAZMyLeTGJScyP+TEVU7EgFkSPHotgESyKt2IxLIbFsTiWwBJYEkthKSyDZbAslsVyWA7LY3msgBWwElbCe/FevA+rYlWshtWwOlbHGlgDD+WuibWwFtbG2lgH62BdrIv1sB42wAbYCBthY2yMTbAJNsNm2BybYwtsgS2xJbbCVtgaW2MbbINtsS22w3bYHl/EF/ElfAlfwVewE1ZQXbArdsXu2B17Yi/sha9iH3wNX8PXsR/2xwE4EAfiGzgYT+MQHIrDcBiWVSNwJI5CVmNwLI7FcTgOx+N4nIATcSJOxik4FafhNJyOM3AGvo+z8AP8AOfgHJyH83E+LsCFAy+/wnAJLsVluBxX4EpcgatxDa7Gdbge1+FG3IibcTN+gp/gNtyGO3AH7kIDgJ/iZ/gZ9sN9uA/34348gAfwIB7EQ3gID+NhPIJH8CgexWN4DI/jCTyJJ/AUnsLTeAbP4lk8j+fxAj6f65vauwqs7QfqEqOMSqfSqRSVojKqjCqTyqQyq8wqoRIqi8qisqqsKpvKpnKoHCqXyqXyqHOKFClWscqr8qqkSqr8Kr9KVamqoCqovPKqiCqiiqqiqpgqpoqr21UJdYcqqUqppr6MKqPKqma+nLpblVflVQVVUVVSlVVlVUVVUVVVVVVNVVPVVXVVQz2kaqou2BMfVpc6U0f1x7pqANZT9VUD1VC9gY+pxmowNlFNVTP1hBqKQ7CFauxbqqdVKzUSW6tn1Sh8TrVVY7CdekG1Vy+qDipSL6smvqPqpCZgF9VVTcbuqofqqXqp6VhRXepYJfW66qf6qwFqoJqHb6jB6k01RA1Vw9RbargaoUaqUWq0GqPGqrfVOPWOGq/eVRPURDVJTVZT1FQ1Tb2npqsZaqZ6X81SH6jZao6aq+ap+epDtUAtVIvUR2qx+lgtUUvVMrVcrVAr1Sq1Wq1Ra9U6tV5tUBvVJrVZbVGfqK1qm9qudqidapfarT5Ve9Rnaq/6XO1TX6j96kt1QH2lDqqv1SH1jTqsvlVH1HfqqPpeHVM/qOPqhDqpflSn1E/qtDqjzqpz6rz6WV1Qv6iLKijQqJXW2uhIp9PpdYrOoDPqa3Qmfa3OrK/TCX29zqJv0Fn1jTqbzq5z6Jw6l86t82irSTvNOtZ5dT6d1Dfp/PpmnaoL6IK6kPa6sC6ib9FF9a26mL5NF9e36xL6Dl1Sl9KldRl9py6r79Ll9N26vL5HV9AVdSVdWd+rq+j7dFV9v66mH9DV9YO6hn5I19R/0rX0w7q2/rOuox/RdfWjup6urxvohrqRfkw31o/rJrqpbqaf0M31k7qFfkq31E/rVvoZ3Vo/q9vo53Rb/bxup1/Q7fWLuoP+RV/UQXfUnXRn3UV31d10d91D99S9dG/9qu6jX9N99eu6n+6vB+iBepB+Qw/Wb+oheqgept/Sw/UIPVKP0qP1GD1Wv63H6Xf0eP2unqAn6kl6sp6ip+qel2ea+U/kv/N38vv+uvfNeov+RG/V2/R2vUPv1Lv0br1b79F79F69V+/T+/R+vV8f0Af0QX1QH9KH9GF9WB/RR/RRfVQf08f0cX1Cn9M/6lP6J31an9Fn9Dl9Xp/XFy4/B2DQKKONMZFJZ9KbFJPBZDTXmEzmWpPZXGcS5nqTxdxgspobTTaT3eQwOU0uk9vkMdaQcYZNbPKafCZpbsLLJ01T0BQy3hQ2Rcwt/0q+yW9uNqmmwF/l/1F9jUwj09g0Nk1ME9PMNDPNTXPTwrS49VIdrUwr09q0Nm1MG9PWtDXtTDvT3rQ3HUwH87J52XQ0HU1n09l0Nd1Md9PD9DS9TG/zqulj+pi+pq/pZ/qZAWaAGWQGmcFmsBlihphhZpgZboabkWakGW1Gm7FmrBlnxpnxZryZYCaYSWaSmWKmmGlmmpluppuZZqaZZWaZ2Wa2mWvmmvlmvllgFphFZpFZbBabJWapWWqWm+VmpVlpVpvVZq1Za9ab9Waj2WiWpN9itpitZqvZbrabnWan2W12mz1mj9lr9pp9Zp/Zb/abA+aAOWgOmkPmkDlsDpsj5og5ao6aY+aYOW6Om5PmpDllTpnT5rQ5a86a8+a8uWAumIvm4qXLvkhFKjKRidJF6aKUKCXKGGWMMkWZosxR5igRJaIsUZYoa3RjlC3KHuWIcka5otxRnshGFLmIozjKG+WLktFNUf7o5ig1KhAVjApFPiocFYluiYpGt0bFotui4tHtUYnojqhkVCoqHZWJ7ozKRndF5aK7o/LRPVGFqGJUKaoc3RtVie6Lqkb3R9WiB6Lq0YNRjeihqGb0p6hW9HBUO/pzVCd6JKobPRrVi+pHDaKGUaN/6/whnM7+uO9oO9nOtovtarvZ7raH7Wl72d72VdvHvmb72tdtP9vfDrAD7SD7hh1s37RD7FA7zL5lh9sRdqQdZUfbMXasfduOs+/Y8fZdO8FOtJPsZDvFTrXT7Ht2up1hZ9r37Sz7gZ1t59i5dp6dbz+0C+xCu8h+ZBfbj+0Su9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFvuJ3Wq32e12h91pd9nd9lO7x35m99rP7T77hd1vv7QH7Ff2oP3aHrLf2MP2W3vEfmeP2u/tMfuDPW5P2JP2R3vK/mRP2zP2rD1nz9uf7QX7i71ow6WL+0undzJkKB2loxRKoYyUkTJRJspMmSlBCcpCWSgrZaVslI1yUA7KRbkoD+WhS5iY8lJeSlKS8lN+SqVUKkgFyZOnIlSEilJRKkbFqDgVpxJUgkpSSSpNpelOupPuorvobrqb7qF7qCJVpMpUmapQFapKVakaVaPqVJ1qUA2qSTWpFtWi2lSb6lAdqkt1qR7VowbUgBpRI2pMjakJNaFm1IyaU3NqQS2oJbWkVtSKWlNrakNtqC21pXbUjtpTe+pAHehlepk6UkfqTJ2pK3Wl7tSdelJP6k29qQ/1ob7Ul/pRPxpAA2gQDaLBNJiG0FAaRm/RcBpBI2kUjaYxNJbG0jgaR+NpPE2gCTSJJtEUmkLTaBpNp+k0k2bSLJpFs2k2zaW5NJ/m0wJaQItoES2mxbSEltAyWkYraAWtolW0htbQOlpHG2gDbaJNtIW20FbaSttpO+2knbSbdtMe2kN7aS/to320n/bTATpAB+kgHaJDdJgO0xE6QkfpKB2jY3ScjtNJOkmn6BSdptN0ls7SefqZLtAvdJECpbgMLqO7xmVy17rM7jr3t3EOl9PlcrldHmddNpf9r2JyzqW6Aq6gK+S8K+yKuFtc6qUL3t/EJV0pV9qVcXe6su4uV+53cRV3n6vq7nfV3AOusrv3r+Lq7kFXwz3iarpHXS1X39V2DV0d94ir6x519Vx918A1dM3dk66Fe8q1dE+7Vu6Z38UL3EK3xq1169x6t8d95s66c+6I+86ddz+7jq6T6+1edX3ca66ve931c/1/Fw9zb7nhboQb6Ua50W7M7+JJbrKb4qa6ae49N93N+F08333oZrlFbrab4+a6eb/Gl2pa5D5yi93Hbolb6pa55W6FW+lWudX/t9blbqPb5Da73e5Tt9Vtc9vdDrfT7fo1vnQce93nbp/7wh1237oD7it30B11h9w3v8aXju+o+94dcz+44+6EO+l+dKfcT+60O/Pr8V869h/dL+6iCw4YWbFmwxGn4/Scwhk4I1/DmfhazszXcYKv5yx8A2flGzkbZ+ccnJNzcW7Ow5aJHTPHnJfzcZJv4vx8M6dyAS7IhdhzYS7Ct3BRvpWL8W1cnG/nEnwHl+RSXJrL8J1clu/icnw3l+d7uAJX5Epcme/lKnwfV+X7uRo/wNX5Qa7BD3FN/hPX4oe5Nv+Z6/AjXJcf5XpcnxtwQ27Ej3FjfpybcFNuxk9wc36SW/BT3JKf5lb8DLfmZ7kNP8dt+Xluxy9we36RO/BL/DK/wh25E3fmLtyVu3F37sE9uRf35le5D7/Gffl17sf9eQAP5EH8Bg/mN3kID+Vh/BYP5xE8kkfxaB7DY/ltHsfv8Hh+lyfwRJ7Ek3kKT+Vp/B5P5xk8k9/nWfwBz+Y5PJfn8Xz+kBfwQl7EH/Fi/piX8FJexst5Ba/kVbya1/BaXsfreQNv5E28mbfwJ7yVt/F23sE7eRfv5k95D3/Ge/lz3sdf8H7+kg/wV3yQv+ZD/A0f5m/5CH/HR/l7PsY/8HE+wSf5Rz7FP/FpPsNn+Ryf55/5Av/CFzkwxBirWMcmjuJ0cfo4Jc4QZ4yviTPF18aZ4+viRHx9nCW+Ic4a3xhni7PHOeKcca44d5wntjHFLuY4jvPG+eJkfFOcP745To0LxAXjQrGPC8dF4lviovGtcbH4trh4fHtcIr4jLhmXih95oEx8Z1w2visuF98dl4/viSvEFeNKceX43rhKfF9cNb4/rhY/EBeLH4xrxA/FcPn7KrXjP8d14kfiuvGjcb24ftwgbhg3ih+LG8ePx03ipnGz+Im4efxk3CJ+Km4ZPx23ip/5w/Wd4y5x17hb3C0O4X49NzkvOT/5YXJBcmFyUfKj5OLkx8klyaXJZcnlyRXJlclVydXJNcm1yXXJ9ckNyY3JTcnNyRAqpwePXnntjY98Op/ep/gMPqO/xmfy1/rM/jqf8Nf7LP4Gn9Xf6LP57D6Hz+lz+dw+j7eevPPsY5/X5/NJf5PP72/2qb6AL+gLee8L+yK+oW/kG/nG/nHfxDf1zfwT/gn/pH/SP+Wf8k/7Vv4Z39o/69v453xb/7x/3r/g2/sXfQf/kn/Zv+I7+k6+s+/su/quvrvv7nv6nr637+37+D6+r+/r+/l+foAf4Af5QX6wH+yH+CF+mB/mh/vhfqQf6Uf70X6sH+vH+XF+vB/vJ/gJfpKf5Kf4KX6an+an++l+pp/pZ6XO8rP9bD/Xz/Xz/Xy/wC/wi/wiv9gv9kv8Er/ML/Mr/Aq/yq/ya/wav86v8xv8Br/Jb/Jb/Ba/1W/12/12v9Pv9Lv9br/H7/F7/V6/z+/z+/1+f8Af8Af91/6Q/8Yf9t/6I/47f9R/74/5H/xxf8Kf9D/6U/4nf9qf8Wf9OX/e/+wv+F/8RR/82MTbiXGJdxLjE+8mJiQmJiYlJiemJKYmpiXeS0xPzEjMTLyfmJX4IDE7MScxNzEvMT/xYWJBYmFiUeKjxOLEx4kliaWJZYnliRWJlYkQcm+NQ96QLyTDTSF/uDmkhgKhYCgUfCgcioRbQtFwaygWbgvFw+2hRLgjlAylQunwaKgX6ocGoWFoFB4LjcPjoUloGpqFJ0Lz8GRoEZ4KLcPToVV4JrQOz4Y24bnQNjwf2oUXQvu/3HGFV0LH0Cl0Dl1C19AtdA89Qs/QK/QOr4Y+4bXQN7we+oX+YUAYGAaFN8Lg8GYYEoaGYeGtMDyMCCPDqDA6jAljw9thXHgnjA/vhglhYpgUJocpYWqYFt4L08OMMDO8H2aFD8LsMCfMDfPC/PBhWBAWhkXho7A4fByWhKVhWVgeVoSVYVVYHdaEtWFdWB82hI1hU9gctoRPwtawLWwPO8LOsCvsDp+GPeGzsDd8HvaFL8L+8GU4EL4KB8PX4VD4JhwO34Yj4btwNHwfjoUfwvFwIpwMP4ZT4adwOpwJZ8O5cD78HC6EX8JF+c6aEEIIIcQ/pdsfrO/ydx4zAKAuj7sCwLXbch767XoNABuy/de4h8rVPAEAT3dq9/BflgoVOnfufHnbJRqifHMAIPE3O7gcL4Vm8CS0hKZQ9O/W10O9eJ7/YP7k7QAZf5OTAlfiK/N/+Q/mf+yJYQtKxGez/D/mnwOQmu9KTga4Ei+FZl+8AgBNodg/mD974z+oP8NXYwGa/CYnE1yJr9RfBB6HZ6DlX235Nx645h+vE0IIIYQQQgjxH62HKt3mj+6fL92f5zJXctLDlfiP7s+FEEIIIYQQQghx9T33YoenHmvZsmmbf36Q/l/ZWAYykMH/j4Or/Z9JCCGEEEII8e925aL/ymMZrmZBQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFEGvSbH/3KAAD/Kz8ndrWPUQghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhLja/k8AAAD//3BjMQc=") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 1m24.495606779s ago: executing program 32 (id=501): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10852, &(0x7f0000001f40)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES8, @ANYBLOB="d9b2de1a2f0751da7120c88a88f0955139afd5c85d409cd57977db7b7c40ade28a33a618636ff400fb97e6caf4db25c1ccd8fee922c9ca87d19e19bed2941af9fc3561a936e805795a9965b5eb669fb143b894f24dbf2cd930f3967172749732bead8f13f18ad0a6d2451810d29d7c5e9dbda0be77473bb0431e71cfa02a873d927ec49990e8ac2bb9469d53e0420e67beaa46cb9850de015b11ed84f357d67ae57d156d5a089f321ec719835c6eeb76ad4a79ca0a80f230d9110b57272d24eb8d5effb24faddf3ffcb309d9a27c57181780f56a1b34", @ANYRESDEC=0x0, @ANYRES8, @ANYRESDEC=0x0, @ANYRES8, @ANYRESOCT, @ANYRES8, @ANYRES8, @ANYRES16=0x0, @ANYRES64, @ANYRES32], 0xfe, 0x1508, &(0x7f0000000a00)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020) 10.561613964s ago: executing program 5 (id=1007): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c00)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a0100000000000000937b7b22a1319130feaab952ac4703caae4be68907eb47fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e742937b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9eff0cbb4b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd131d64abc785708eb9bd24e352a984b2b1596d35ebe1d3443aa78fb40209dcfa4", 0xc8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa", 0x6c}, {&(0x7f0000002300)="27cb1547d73d51c2b9eb909bbb859214eabfa995b909a5faccc33d38140dc15d080af6eaf18b2031f0c88867e93763c3466f13a7e1c71f9b7ed9652a901d80e85e1ba265a9837970a9a20940b0208fa916a034be9eb50defe37271f579ecbb2f7e6157f8bac11e6657ddcd368291be85f6fbe3696d907770e9214e33190c4f9d0a048b2442a7dde887cf7c3f2e7fca619e0f1717850a65d661e72c55a293a7e4332309066fc4e40951535235d7a51b3c1bdfc5996f817e817caf5d035e24b79089ab10bf1a15448774f85810bb5276a5", 0xd0}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="91790da0bd1c560e30633259f42abd712cb00cd5f83f5f8fd4be4ff744c36a3b11e84fb8d6e6ca9d8831796fb98a386d3ad837a9e92affe1ba18adfbe1ea97dfdc3e665f3d20948ea7a1f32fc8b737b8dbbad63cfea88639ec022f58243597a6a8f892a5bc1680da9111e2eefeaaa73f48fd9cb40256f609234533d1860d9694bdef8fb9152b0d6387dbbf25b8dbc5daf811a32c6dabce201eecc67cc65a2b6a95c7d696bb6087d6b2f347adf0a15f0d61cc543e33b70bd51768ef036cc9fe1513dfdf4e2668bc05d99df6e75a76a3cb006d987aca0b729f67008428a161d4adc05a8065b609a0b1303258ecbcecfaee5d", 0xf1}, {&(0x7f0000000240)="7af927979425701d34b9e7f0e3522ff26a7c1ad2416d02c06a83f3ae9cef29", 0x1f}, {&(0x7f00000002c0)="88deadb29a8d529be1a943d58d6e4e86dfd54f4020e334a38ffffcec69ff4e37184205ea57d5afc9409421ba8943ccd8d1e768b8edc1ed5477a5588ff0e4fa8401d11d513c5903d3b47ddb76bddc0507c468a2ad3b8a559302e0ab980cdcd3a5704b530e20a0f979ef7fc40ff82bb6cfe1b5ea7b1d816eb60fac3eafbfc670db13128df90739db9661311bb41b61e7636ca6d148ee4474eb348f3d922ffac67751a12be7e9c85637a90aee7f9c24046c4f76f906fdab6d7039950dc94e2392b2e3ae600214d9c4ee807a724a67f07745d8df07db1d86b5e548ed099bd5430a961dfef8398b9fd1fbabea28e3b3bc", 0xee}, {0x0}, {&(0x7f0000000640)="8d0a42012e2925c6df7a30f639be6d85baef9f9fe7921d9fb712be9863c5a583a278b1207b0fc4a05636cbe0491146a62a2dfede5c783e66176ac8a0893903fbe4e2e4d3f7b27177799cf0a6f1030a0a5d3f052c86967e631e01953f913eb90113b04734991c246800cf5298a2952f82071b9ceaf587e4b0235e6d2b209772369b66f60d4c350494768e992d2165352c577276768e82dfdc4833fbc3e762179e049803f71f423a171ebd831a6a2bc4d87d26a38591a1d79962bd2bbfb3328c1c98787418fbd6823fb1c5", 0xca}, {&(0x7f0000000740)="f2b250a74a5c90f3eadd0282e7645cd0a0064316", 0x14}], 0x6}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)="d8f90e847a322f2af91cd75bf9fde9c1c69a155f7ab6a332f612d19bf03916beb67f068fdfc3df17e4508fef7acea62967adc04d", 0x34}], 0x1}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 9.294178458s ago: executing program 5 (id=1012): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0xfec00000, 0x1, 0x401, 0x7fffffff, 0x0, [{0x7, 0x10, 0xff, '\x00', 0x38}, {0x4, 0xfe, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x5, 0x7f, 0x6, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x9, 0x1, '\x00', 0x9}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb6, 0x89, '\x00', 0x80}, {0x6, 0x8, 0xa0, '\x00', 0x1}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x6, 0xc, 0x5, '\x00', 0x8}, {0xd, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x3}, {0x8, 0x2, 0x4b, '\x00', 0x5}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x1, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0xcc, '\x00', 0xf7}, {0x6, 0x6, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0x85, 0x4, '\x00', 0xff}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 9.12080016s ago: executing program 4 (id=1014): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r2, 0x0, 0x80) 8.19583073s ago: executing program 5 (id=1015): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006", 0x15}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa0}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd"], 0x66) 8.086404371s ago: executing program 4 (id=1018): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 7.858485323s ago: executing program 4 (id=1021): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x80000007, 0x2, 0x180, 0x4, 0x2000014, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x9, 0x0, 0xd77, 0x0, 0xbda], 0x4}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x8, 0x43, 0x2000011, 0x10000000000000, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x206}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x0, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0xa, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0xc, 0x87}, {0xa000, 0x25000, 0x1, 0x1, 0x3, 0x4, 0x0, 0x9, 0x1, 0x0, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x40, 0xb, 0xff, 0x8, 0x7, 0xe, 0x89}, {0xeeee0000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x6, 0x9, 0x9, 0xf7, 0x97}, {0x2000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0xa, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0xb000, 0x26000, 0xc, 0x2, 0x80, 0x5, 0x7, 0x3, 0x8, 0x89, 0x40, 0x70}, {0x2000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x4000, 0x30}, {0x8080000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x400000000000003, 0x400004, 0x48d, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.487159628s ago: executing program 4 (id=1024): r0 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) unshare(0x6e000000) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) r3 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) 6.682469957s ago: executing program 1 (id=1025): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000240)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 6.048157264s ago: executing program 3 (id=1026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 3.759940359s ago: executing program 1 (id=1027): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0xe000) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb03000500000000"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0x7582) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r5, 0x6, 0x3, &(0x7f0000001340)=""/4123, &(0x7f00000000c0)=0x101b) syz_clone(0xc1003000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.62685703s ago: executing program 5 (id=1029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 2.789958979s ago: executing program 3 (id=1030): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40800) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x11}, 0x0) 2.78870581s ago: executing program 1 (id=1031): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) accept(r1, 0x0, 0x0) 2.656047331s ago: executing program 2 (id=1032): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, &(0x7f0000000040)) getdents(r2, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0xf15, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) sendmsg$nl_generic(r3, 0x0, 0x24000080) 2.609637771s ago: executing program 3 (id=1033): r0 = inotify_init() r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x10000006, @remote}}}, 0x108) 1.889099959s ago: executing program 3 (id=1034): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.78817745s ago: executing program 5 (id=1035): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0"], 0x57) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000380)={0x40000, 0x0, {[0x7d, 0x8, 0x2, 0xbdf1, 0x6, 0x6, 0x0, 0x1]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.510191324s ago: executing program 2 (id=1036): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000800)={0x2, 0x80, 0x300, &(0x7f0000000400)=[0x8, 0x8, 0x0, 0x2, 0x5, 0x4, 0x81, 0xffff, 0xa5d, 0x9, 0x8000, 0x2c1e, 0x1, 0x43, 0x4, 0x3, 0x5, 0x8000000000000000, 0x6, 0x1000, 0x8, 0x8, 0x8000, 0xba, 0x8, 0x4e4, 0x9, 0x7, 0x3, 0x8, 0x5, 0xe, 0x8, 0x0, 0x4, 0x4, 0x8, 0x5de1, 0x6, 0x5, 0x1699e000, 0x92, 0x7, 0x491, 0x1000, 0x4, 0x8, 0x618, 0x9, 0x7, 0xffff, 0x1, 0xfffffffffffffffb, 0x7, 0x100000001, 0xd424, 0x3, 0x5b8, 0x5, 0xfffffffffffffffc, 0x1, 0x5a, 0x3, 0x2, 0x81, 0x5, 0x17, 0x1, 0x2, 0x7f, 0x100, 0x1, 0x2, 0x0, 0x15, 0x0, 0x5cd, 0x8, 0x5dea, 0x5, 0x6136, 0x0, 0x3, 0x9, 0x3ed5, 0xf, 0x3, 0x2, 0x4, 0x100000001, 0x5, 0xfffffffffffff801, 0xfffffffffffffff2, 0xb, 0x1, 0x26, 0x6, 0x2, 0x2dc7, 0x600000000000, 0x800, 0x1, 0x3, 0x1, 0x3, 0x4, 0x40, 0x9, 0x7fffffffffffffff, 0x9, 0x3, 0x8, 0xffff, 0x8, 0x4e3e8786, 0x10000, 0x5, 0xbd8c, 0x80, 0x5, 0x8, 0xfa, 0x200000000, 0x9, 0x8, 0x4, 0x6, 0x9]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x34, 0x1, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.454400874s ago: executing program 1 (id=1037): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002ffffff8100000081"], 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x16) 1.332113806s ago: executing program 3 (id=1038): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x840, &(0x7f0000000c80)={[{@test_dummy_encryption_v1}, {@nojournal_checksum}, {@dioread_nolock}], [{@uid_gt={'uid>', 0xee00}}, {@pcr={'pcr', 0x3d, 0x3d}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80cf50, &(0x7f00000002c0)={[{@resgid}, {@mblk_io_submit}, {@grpid}, {@oldalloc}, {@init_itable_val}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@dioread_lock}, {@noauto_da_alloc}]}, 0xf7, 0x485, &(0x7f0000001040)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x41, 0xb2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) 1.331841376s ago: executing program 4 (id=1039): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0xe000) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r3, 0x6, 0x3, &(0x7f0000001340)=""/4123, &(0x7f00000000c0)=0x101b) syz_clone(0xc1003000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.218545016s ago: executing program 1 (id=1040): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) close_range(r1, r3, 0x0) 906.15519ms ago: executing program 5 (id=1041): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) 748.065492ms ago: executing program 2 (id=1042): setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap$usbmon(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000000, 0x16010, 0xffffffffffffffff, 0xf0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000080)={[0x5]}, 0x8) 567.207794ms ago: executing program 2 (id=1043): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 509.662895ms ago: executing program 3 (id=1044): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x799, &(0x7f0000000800)="$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") chdir(&(0x7f0000000240)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) 328.816877ms ago: executing program 2 (id=1045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 223.983798ms ago: executing program 4 (id=1046): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x45) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0xe000) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_tgsigqueueinfo(0x0, r1, 0x27, &(0x7f0000000340)={0x3d, 0x3f78, 0x3}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb03000500000000"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0x7582) getsockopt$bt_hci(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000001340)=""/4123, &(0x7f00000000c0)=0x101b) syz_clone(0xc1003000, 0x0, 0x0, 0x0, 0x0, 0x0) 185.823178ms ago: executing program 1 (id=1047): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=1048): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x1010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f00000003c0)=ANY=[@ANYBLOB='volume=00000000000000001062,gid=', @ANYRESDEC=0x0, @ANYBLOB=',noadinicb,rootdir=00000000000000000004,gid=forget,unhide,noadinicb,iocharset=cp861,longad,\x00'], 0x1, 0xc32, &(0x7f0000000e00)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000200)='./file0\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): nk becomes ready [ 74.245448][ T4274] device veth0_vlan entered promiscuous mode [ 74.270636][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.280049][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.289613][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.299709][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.319856][ T4274] device veth1_vlan entered promiscuous mode [ 74.331368][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.344650][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.374159][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.389293][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.426602][ T4276] device veth0_vlan entered promiscuous mode [ 74.456585][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.465905][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.479751][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.512485][ T4276] device veth1_vlan entered promiscuous mode [ 74.533393][ T4274] device veth0_macvtap entered promiscuous mode [ 74.543224][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.562717][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.578672][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.589242][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.603580][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.628472][ T4274] device veth1_macvtap entered promiscuous mode [ 74.651627][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.660893][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.669701][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.700414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.709028][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.723322][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.733596][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.746367][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.758235][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.767822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.778618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.795563][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.807395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.816109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.824391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.831911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.841001][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.849856][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.865223][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.876266][ T4275] device veth0_vlan entered promiscuous mode [ 74.890971][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.900178][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.909117][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.918052][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.929940][ T4276] device veth0_macvtap entered promiscuous mode [ 74.937886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.949256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.972327][ T4275] device veth1_vlan entered promiscuous mode [ 74.990777][ T4276] device veth1_macvtap entered promiscuous mode [ 74.999932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.011710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.021642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.030846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.108002][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.118150][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.133303][ T4282] device veth0_vlan entered promiscuous mode [ 75.141615][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.156523][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.168681][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.190285][ T4284] device veth0_vlan entered promiscuous mode [ 75.204341][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.214206][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.223102][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.232718][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.245256][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.253925][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.267667][ T4282] device veth1_vlan entered promiscuous mode [ 75.284369][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.297624][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.309796][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.330097][ T4284] device veth1_vlan entered promiscuous mode [ 75.341047][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.349754][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.358016][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.367291][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.375307][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.382973][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.391601][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.400481][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.432449][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.443086][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.453292][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.462164][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.487609][ T4275] device veth0_macvtap entered promiscuous mode [ 75.495117][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.503223][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.514571][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.523050][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.524039][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 75.531387][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 75.537068][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 75.542917][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 75.580023][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.588302][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.602628][ T4284] device veth0_macvtap entered promiscuous mode [ 75.609398][ T4292] Bluetooth: hci4: command 0x040f tx timeout [ 75.615302][ T4275] device veth1_macvtap entered promiscuous mode [ 75.622664][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.631512][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.639925][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.647985][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.656742][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.665820][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.674686][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.691707][ T4282] device veth0_macvtap entered promiscuous mode [ 75.707378][ T4284] device veth1_macvtap entered promiscuous mode [ 75.722172][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.734160][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.742594][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.762679][ T4282] device veth1_macvtap entered promiscuous mode [ 75.820723][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.822428][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.839837][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.845528][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.857131][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.870287][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.881938][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.891278][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.899548][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.909091][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.918059][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.937250][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.947991][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.959465][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.970346][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.980686][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.991176][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.006058][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.019809][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.031494][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.041583][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.052435][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.063570][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.082202][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.099697][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.109880][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.120636][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.130619][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.141098][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.151160][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.161748][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.175865][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.183288][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.194146][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.203117][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.212749][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.223125][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.236101][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.246782][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.257673][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.268043][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.278975][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.288883][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.299443][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.310784][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.329152][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.344481][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.353209][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.363020][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.390847][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.401687][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.412339][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.424659][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.435120][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.445819][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.455728][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.466349][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.478065][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.491679][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.502187][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.535260][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.544651][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.556099][ T4284] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.566713][ T4284] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.576241][ T4284] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.589449][ T4284] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.614012][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.621874][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.624581][ T4282] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.641497][ T4282] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.650745][ T4282] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.659615][ T4282] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.670813][ T4360] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 76.707760][ T4360] 8021q: VLANs not supported on gre0 [ 76.713516][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.852373][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.867557][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.880236][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.880982][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.940989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.950249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.968166][ T4365] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.042985][ T4363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.066160][ T4363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.082799][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.091373][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.144891][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.165387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.199366][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.222108][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.239242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.263007][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.289149][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.455962][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.464427][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.484219][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.533751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 77.593772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 77.613782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.623744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.633742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.643741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.653743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.663741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.673740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.683743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 77.831224][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 77.837330][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 77.843371][ T4292] Bluetooth: hci4: command 0x0419 tx timeout [ 77.854187][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 78.114728][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.355834][ T4379] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 81.403115][ T4474] loop3: detected capacity change from 0 to 512 [ 81.429545][ T4474] EXT4-fs: Ignoring removed orlov option [ 81.436579][ T4463] netlink: 'syz.0.11': attribute type 1 has an invalid length. [ 81.563166][ T4474] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 82.991699][ T4463] bridge0: port 3(geneve2) entered blocking state [ 83.038801][ T4474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 83.060395][ T4463] bridge0: port 3(geneve2) entered disabled state [ 83.093915][ T4485] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4276] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4485] [ 83.503956][ T4463] device geneve2 entered promiscuous mode [ 83.568608][ T4474] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.10: corrupted in-inode xattr [ 83.620066][ T4474] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.10: couldn't read orphan inode 15 (err -117) [ 83.661493][ T4474] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 83.859933][ T4491] EXT4-fs error (device loop3): ext4_check_dx_root:2266: inode #2: comm syz.3.10: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 86.120447][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 86.718825][ T125] cfg80211: failed to load regulatory.db [ 89.237217][ T4512] syz.4.19 (4512) used greatest stack depth: 17232 bytes left [ 89.513503][ T4526] device syzkaller0 entered promiscuous mode [ 89.779117][ T4534] loop2: detected capacity change from 0 to 512 [ 89.804932][ T4534] EXT4-fs: inline encryption not supported [ 89.908800][ T4534] EXT4-fs (loop2): 1 truncate cleaned up [ 89.951052][ T4534] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.997107][ T4537] device pim6reg1 entered promiscuous mode [ 92.450655][ T4561] 9pnet_fd: Insufficient options for proto=fd [ 94.099746][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 94.145417][ T4568] d [ 94.159185][ T4573] loop3: detected capacity change from 0 to 512 [ 94.174681][ T4573] ======================================================= [ 94.174681][ T4573] WARNING: The mand mount option has been deprecated and [ 94.174681][ T4573] and is ignored by this kernel. Remove the mand [ 94.174681][ T4573] option from the mount to silence this warning. [ 94.174681][ T4573] ======================================================= [ 94.282922][ T4573] EXT4-fs: Ignoring removed i_version option [ 94.300344][ T4573] EXT4-fs: Ignoring removed oldalloc option [ 94.344456][ T4573] EXT4-fs (loop3): Test dummy encryption mode enabled [ 94.402425][ T4573] EXT4-fs (loop3): 1 truncate cleaned up [ 94.456702][ T4573] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 100.153332][ T26] audit: type=1800 audit(1777993957.594:2): pid=4593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.34" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 100.465684][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 100.713101][ T4599] netlink: 'syz.3.42': attribute type 4 has an invalid length. [ 101.084878][ T4610] random: crng reseeded on system resumption [ 104.456793][ T4635] loop4: detected capacity change from 0 to 128 [ 104.593855][ T4635] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 104.676735][ T4635] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.817640][ T4645] input: syz1 as /devices/virtual/input/input5 [ 105.790360][ T4648] loop2: detected capacity change from 0 to 256 [ 108.407569][ T4662] loop3: detected capacity change from 0 to 128 [ 110.566263][ T4662] syz.3.57: attempt to access beyond end of device [ 110.566263][ T4662] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 110.788835][ T4675] syz.3.57: attempt to access beyond end of device [ 110.788835][ T4675] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 111.011670][ T4682] No source specified [ 117.113481][ T4713] loop0: detected capacity change from 0 to 128 [ 117.182161][ T4714] loop1: detected capacity change from 0 to 2048 [ 117.209851][ T4713] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 117.261562][ T4713] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.322526][ T4714] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 117.367059][ T4714] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.242725][ T4725] loop4: detected capacity change from 0 to 16 [ 118.257955][ T4725] erofs: (device loop4): mounted with root inode @ nid 36. [ 118.307731][ T4286] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 118.341162][ T4725] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 120.843384][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 121.282153][ T4747] random: crng reseeded on system resumption [ 123.657928][ T4755] loop2: detected capacity change from 0 to 4096 [ 123.747875][ T4321] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 123.972742][ T4321] usb 5-1: config 0 has no interfaces? [ 124.576547][ T4321] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 125.495097][ T26] audit: type=1804 audit(1777994242.887:3): pid=4762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.82" name="/newroot/16/bus/file0" dev="loop2" ino=34 res=1 errno=0 [ 125.520522][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.759719][ T4765] loop3: detected capacity change from 0 to 32768 [ 125.809254][ T4321] usb 5-1: config 0 descriptor?? [ 125.844360][ T4284] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 125.875049][ T4284] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 125.897287][ T4765] XFS (loop3): Mounting V5 Filesystem [ 126.019138][ T4765] XFS (loop3): Ending clean mount [ 126.032949][ T4765] XFS (loop3): Quotacheck needed: Please wait. [ 126.138471][ T4765] XFS (loop3): Quotacheck: Done. [ 126.301521][ T14] usb 5-1: USB disconnect, device number 2 [ 126.755915][ T26] audit: type=1800 audit(1777994243.857:4): pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.84" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 126.895766][ T4282] XFS (loop3): Unmounting Filesystem [ 127.243217][ T4783] device syzkaller0 entered promiscuous mode [ 127.638664][ T4796] loop3: detected capacity change from 0 to 128 [ 127.661011][ T4796] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 127.697059][ T4796] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.753469][ T4813] device syzkaller0 entered promiscuous mode [ 130.774319][ T4816] loop2: detected capacity change from 0 to 8 [ 131.996892][ T4816] SQUASHFS error: lzo decompression failed, data probably corrupt [ 132.065890][ T4816] SQUASHFS error: Failed to read block 0x91: -5 [ 132.072207][ T4816] SQUASHFS error: Unable to read metadata cache entry [8f] [ 132.121536][ T4816] SQUASHFS error: Unable to read inode 0x11f [ 132.250116][ T4816] loop2: detected capacity change from 0 to 8 [ 132.330628][ T4816] SQUASHFS error: lzo decompression failed, data probably corrupt [ 132.357787][ T4816] SQUASHFS error: Failed to read block 0x0: -5 [ 132.414050][ T4816] SQUASHFS error: lzo decompression failed, data probably corrupt [ 132.421962][ T4816] SQUASHFS error: Failed to read block 0x0: -5 [ 132.493488][ T26] audit: type=1800 audit(1777994249.917:5): pid=4816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.96" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 132.650157][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.660034][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.712639][ T4821] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 135.417645][ T4853] loop4: detected capacity change from 0 to 512 [ 138.310877][ T4862] process 'syz.4.106' launched './file0' with NULL argv: empty string added [ 140.951277][ T4879] loop3: detected capacity change from 0 to 2048 [ 141.032422][ T4879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.207355][ T4882] xt_time: unknown flags 0xc [ 141.257684][ T4882] loop4: detected capacity change from 0 to 2048 [ 141.350036][ T4882] Alternate GPT is invalid, using primary GPT. [ 141.357050][ T4882] loop4: p1 p2 p3 [ 142.330492][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 142.343522][ T4266] udevd[4266]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 142.367224][ T4679] udevd[4679]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 143.106810][ T4894] loop1: detected capacity change from 0 to 1024 [ 143.643767][ T26] audit: type=1107 audit(1777994260.487:6): pid=4891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 147.784050][ T4910] loop0: detected capacity change from 0 to 32768 [ 147.794492][ T4910] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.113 (4910) [ 147.825823][ T4910] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.836289][ T4910] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 147.845092][ T4910] BTRFS info (device loop0): turning on sync discard [ 147.852353][ T4910] BTRFS info (device loop0): enabling disk space caching [ 147.859419][ T4910] BTRFS info (device loop0): turning off barriers [ 147.866016][ T4910] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 147.876644][ T4910] BTRFS info (device loop0): trying to use backup root at mount time [ 147.884762][ T4910] BTRFS info (device loop0): enabling auto defrag [ 147.891214][ T4910] BTRFS info (device loop0): max_inline at 0 [ 147.897458][ T4910] BTRFS error (device loop0): cannot disable free space tree [ 147.908147][ T4910] BTRFS error (device loop0): open_ctree failed: -22 [ 148.552290][ T4267] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4267) [ 149.243716][ C0] sched: RT throttling activated [ 149.681661][ T4926] tipc: Started in network mode [ 149.687866][ T4926] tipc: Node identity 0a251316c0b4, cluster identity 4711 [ 149.705794][ T4926] tipc: Enabled bearer , priority 0 [ 149.719065][ T4926] device syzkaller0 entered promiscuous mode [ 149.869096][ T4926] tipc: Resetting bearer [ 150.646489][ T4925] tipc: Resetting bearer [ 150.695628][ T4925] tipc: Disabling bearer [ 156.362042][ T4970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.131'. [ 157.028822][ T4977] loop1: detected capacity change from 0 to 2048 [ 157.155987][ T4977] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 157.218724][ T4267] udevd[4267]: incorrect nilfs2 checksum on /dev/loop1 [ 157.405983][ T4267] udevd[4267]: incorrect nilfs2 checksum on /dev/loop1 [ 157.546671][ T4985] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.051289][ T4990] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 158.090494][ T4990] Remounting filesystem read-only [ 158.610126][ T4275] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 158.788356][ T4994] Zero length message leads to an empty skb [ 159.701884][ T4994] loop3: detected capacity change from 0 to 2048 [ 159.923987][ T5001] loop2: detected capacity change from 0 to 4096 [ 159.950939][ T5001] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 159.962841][ T5001] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 159.977822][ T5001] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 159.989402][ T5001] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 160.002656][ T5001] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 160.020308][ T5001] ntfs: volume version 3.1. [ 161.148786][ T5001] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 161.160672][ T5001] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 161.172715][ T5001] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 161.194907][ T5001] ntfs: (device loop2): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 161.205076][ T5001] ntfs: (device loop2): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 161.649047][ T5000] loop1: detected capacity change from 0 to 4096 [ 162.845604][ T5002] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.036657][ T4994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.857687][ T5029] loop1: detected capacity change from 0 to 512 [ 168.173227][ T4267] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.515766][ T5037] loop4: detected capacity change from 0 to 256 [ 170.625765][ T5037] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.480313][ T5061] loop1: detected capacity change from 0 to 2048 [ 173.508465][ T5061] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.005908][ T5084] loop5: detected capacity change from 0 to 7 [ 176.108564][ T5085] binder: 5070:5085 ioctl c0285840 200000000000 returned -22 [ 176.204306][ T5084] Dev loop5: unable to read RDB block 7 [ 176.210148][ T5084] loop5: unable to read partition table [ 176.217021][ T5084] loop5: partition table beyond EOD, truncated [ 176.223404][ T5084] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 178.758995][ T5104] loop1: detected capacity change from 0 to 128 [ 178.831895][ T5104] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 178.863339][ T5104] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.895200][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.935445][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 181.484896][ T5130] loop3: detected capacity change from 0 to 512 [ 182.514571][ T5137] securityfs: Unknown parameter '' [ 183.115340][ T5130] fscrypt: Error allocating hmac(sha512): -2 [ 184.944224][ T5152] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 185.598853][ T5157] loop3: detected capacity change from 0 to 2048 [ 186.058723][ T5157] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.181576][ T5161] mmap: syz.3.175 (5161) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 188.875837][ T5188] loop3: detected capacity change from 0 to 2048 [ 189.265814][ T5188] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.908086][ T5199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 191.109975][ T5204] futex_wake_op: syz.2.186 tries to shift op by 144; fix this program [ 194.813813][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.820162][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.328960][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 196.409146][ T5228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 196.459977][ T5229] sctp: [Deprecated]: syz.3.192 (pid 5229) Use of int in max_burst socket option. [ 196.459977][ T5229] Use struct sctp_assoc_value instead [ 196.531262][ T5232] xt_TPROXY: Can be used only with -p tcp or -p udp [ 196.781723][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 196.825898][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 196.911292][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 196.911341][ T4291] Bluetooth: hci1: command 0x0406 tx timeout [ 199.523360][ T5255] syz.2.198 uses obsolete (PF_INET,SOCK_PACKET) [ 200.747710][ T5261] loop3: detected capacity change from 0 to 1024 [ 201.030209][ T5261] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 201.271799][ T5261] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.571093][ T5282] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.199: bg 0: block 112: padding at end of block bitmap is not set [ 203.576834][ T5282] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 203.578373][ T5283] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.199: lblock 0 mapped to illegal pblock 0 (length 1) [ 203.589879][ T5282] EXT4-fs (loop3): This should not happen!! Data will be lost [ 203.589879][ T5282] [ 203.613551][ T5282] EXT4-fs (loop3): Total free blocks count 0 [ 203.619569][ T5282] EXT4-fs (loop3): Free/Dirty block details [ 203.625564][ T5282] EXT4-fs (loop3): free_blocks=0 [ 203.630566][ T5282] EXT4-fs (loop3): dirty_blocks=64 [ 203.635759][ T5282] EXT4-fs (loop3): Block reservation details [ 203.641756][ T5282] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 203.707502][ T5283] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 210.834539][ T5326] tmpfs: Unknown parameter 'quota' [ 212.085792][ T5323] syz.3.213 (5323): drop_caches: 2 [ 217.639448][ T5351] loop3: detected capacity change from 0 to 512 [ 219.547171][ T5351] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 219.547790][ T5351] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.989224][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 220.647696][ T4286] Bluetooth: Wrong link type (-22) [ 225.927462][ T5402] loop3: detected capacity change from 0 to 512 [ 225.964140][ T5402] ext4: Unknown parameter 'dont_measure' [ 227.981142][ T4286] Bluetooth: hci3: unknown advertising packet type: 0x70 [ 227.981198][ T4286] Bluetooth: hci3: unknown advertising packet type: 0x31 [ 227.988526][ T4286] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 227.995885][ T4286] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 228.003835][ T4286] Bluetooth: hci3: unknown advertising packet type: 0x35 [ 228.014935][ T4286] Bluetooth: hci3: unknown advertising packet type: 0x36 [ 228.022123][ T4286] Bluetooth: hci3: unknown advertising packet type: 0x39 [ 235.163509][ T5457] xt_TPROXY: Can be used only with -p tcp or -p udp [ 237.749920][ T5489] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 237.759508][ T5489] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 240.207987][ T5504] futex_wake_op: syz.4.253 tries to shift op by 144; fix this program [ 242.070374][ T5519] loop3: detected capacity change from 0 to 64 [ 243.479330][ T5519] netlink: 'syz.3.254': attribute type 10 has an invalid length. [ 244.125760][ T5519] device veth0_vlan left promiscuous mode [ 247.472923][ T5519] device veth0_vlan entered promiscuous mode [ 247.611148][ T5519] team0: Device veth0_vlan failed to register rx_handler [ 249.250455][ T5556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.264'. [ 249.350983][ T5556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.264'. [ 252.915401][ T128] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 253.470974][ T128] usb 1-1: Using ep0 maxpacket: 8 [ 253.480759][ T128] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.709059][ T128] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 253.809331][ T128] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 253.848608][ T128] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 253.860278][ T128] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 253.869682][ T128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.900150][ T128] hub 1-1:1.0: bad descriptor, ignoring hub [ 253.907486][ T128] hub: probe of 1-1:1.0 failed with error -5 [ 253.932202][ T128] cdc_wdm 1-1:1.0: skipping garbage [ 253.937962][ T128] cdc_wdm 1-1:1.0: skipping garbage [ 253.968249][ T128] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 253.974472][ T128] cdc_wdm 1-1:1.0: Unknown control protocol [ 254.486897][ T5645] sctp: [Deprecated]: syz.4.270 (pid 5645) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.486897][ T5645] Use struct sctp_sack_info instead [ 255.119125][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 255.119139][ T26] audit: type=1326 audit(1777994368.794:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ec59cdd9 code=0x7ffc0000 [ 255.236699][ T4699] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 255.861137][ T26] audit: type=1326 audit(1777994368.887:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc6ec59cdd9 code=0x7ffc0000 [ 255.989942][ T26] audit: type=1326 audit(1777994368.887:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ec59cdd9 code=0x7ffc0000 [ 256.118168][ T26] audit: type=1326 audit(1777994368.887:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ec59cdd9 code=0x7ffc0000 [ 256.317049][ T26] audit: type=1326 audit(1777994368.887:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6ec59cdd9 code=0x7ffc0000 [ 257.083322][ T26] audit: type=1326 audit(1777994368.887:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ec59cdd9 code=0x7ffc0000 [ 257.227908][ T26] audit: type=1326 audit(1777994368.887:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ec59cdd9 code=0x7ffc0000 [ 257.252051][ T26] audit: type=1326 audit(1777994368.887:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc6ec59cdd9 code=0x7ffc0000 [ 257.276452][ T26] audit: type=1326 audit(1777994368.887:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ec59cdd9 code=0x7ffc0000 [ 257.344299][ T4699] usb 1-1: USB disconnect, device number 2 [ 257.351243][ T26] audit: type=1326 audit(1777994368.887:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5649 comm="syz.4.272" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ec59cdd9 code=0x7ffc0000 [ 257.898792][ T5669] netlink: 64 bytes leftover after parsing attributes in process `syz.0.274'. [ 259.575787][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.582615][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.825648][ T5681] loop3: detected capacity change from 0 to 512 [ 261.739745][ T5685] loop2: detected capacity change from 0 to 32768 [ 261.827312][ T5681] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.279: corrupted in-inode xattr [ 261.844090][ T5681] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.279: couldn't read orphan inode 15 (err -117) [ 261.857715][ T5681] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 261.880100][ T5685] XFS (loop2): Mounting V5 Filesystem [ 262.099884][ T5685] XFS (loop2): Ending clean mount [ 262.885217][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 264.564861][ T5724] loop3: detected capacity change from 0 to 512 [ 264.620704][ T5724] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 264.638873][ T4284] XFS (loop2): Unmounting Filesystem [ 264.851698][ T5724] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 264.861594][ T5724] EXT4-fs (loop3): invalid inodes per group: 1 [ 264.861594][ T5724] [ 264.933006][ T5728] overlayfs: failed to clone lowerpath [ 266.211069][ T4286] Bluetooth: hci2: unexpected cc 0x0402 length: 61 > 1 [ 266.271339][ T5736] sctp: failed to load transform for md5: -2 [ 266.584598][ T5750] loop3: detected capacity change from 0 to 128 [ 266.826620][ T5750] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 266.852341][ T5750] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 269.731016][ T5779] netlink: 56 bytes leftover after parsing attributes in process `syz.1.296'. [ 270.255633][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 270.459755][ T5789] loop2: detected capacity change from 0 to 512 [ 270.530757][ T5789] EXT4-fs: Ignoring removed orlov option [ 270.614793][ T5789] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 270.692026][ T5789] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #16: comm syz.2.302: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 270.757218][ T5789] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.302: couldn't read orphan inode 16 (err -117) [ 270.820120][ T5789] EXT4-fs (loop2): 1 orphan inode deleted [ 270.830906][ T5789] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 271.014979][ T5807] ip_tunnel: non-ECT from 10.1.1.0 with TOS=0x3 [ 271.059861][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 271.334323][ T4286] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 271.700847][ T5827] loop3: detected capacity change from 0 to 1024 [ 272.970860][ T5829] loop2: detected capacity change from 0 to 16 [ 273.144776][ T5829] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 273.221310][ T5829] cramfs: wrong endianness [ 273.344775][ T5838] loop3: detected capacity change from 0 to 8 [ 273.410691][ T5838] SQUASHFS error: zlib decompression failed, data probably corrupt [ 273.491231][ T5838] SQUASHFS error: Failed to read block 0x9b: -5 [ 273.517846][ T5838] SQUASHFS error: Unable to read metadata cache entry [99] [ 273.525234][ T5838] SQUASHFS error: Unable to read inode 0x127 [ 273.553823][ T5842] loop2: detected capacity change from 0 to 128 [ 274.249587][ T5842] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 274.319914][ T5842] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.311512][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 275.752587][ T5860] loop2: detected capacity change from 0 to 512 [ 275.837710][ T5860] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 276.035737][ T4286] Bluetooth: hci0: Malformed LE Event: 0x1d [ 276.468057][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 278.027626][ T4286] Bluetooth: hci0: Invalid connection link type handle 0x00c8 [ 281.019307][ T5928] overlayfs: unrecognized mount option "context=sysadm_u" or missing value [ 281.088989][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 281.089303][ T26] audit: type=1400 audit(1777994393.087:50): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5924 comm="syz.3.351" [ 284.800644][ T5960] loop2: detected capacity change from 0 to 1024 [ 285.131162][ T5966] loop2: detected capacity change from 0 to 8 [ 285.395574][ T5973] loop2: detected capacity change from 0 to 128 [ 285.452791][ T5973] omfs: sysblock number (f784317bf884317b) is out of range [ 289.950231][ T6013] loop3: detected capacity change from 0 to 512 [ 290.053710][ T6015] comedi comedi3: das16m1: a I/O base address must be specified [ 290.077123][ T6013] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 290.227251][ T6013] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 290.248393][ T6013] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #11: comm syz.3.376: corrupted inode contents [ 290.266834][ T6013] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #11: comm syz.3.376: mark_inode_dirty error [ 290.287172][ T6013] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.376: invalid indirect mapped block 1 (level 1) [ 290.322182][ T6013] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #11: comm syz.3.376: corrupted inode contents [ 290.364153][ T6013] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 290.384696][ T6013] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #11: comm syz.3.376: corrupted inode contents [ 290.420283][ T6013] EXT4-fs error (device loop3): ext4_truncate:4325: inode #11: comm syz.3.376: mark_inode_dirty error [ 290.468504][ T6013] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 290.508706][ T6013] EXT4-fs (loop3): 1 truncate cleaned up [ 290.534820][ T6013] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 290.689557][ T6013] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.376: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 291.027245][ T6036] xt_TPROXY: Can be used only with -p tcp or -p udp [ 291.173298][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 292.726294][ T26] audit: type=1326 audit(1777994403.980:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.3.398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f94d9cdd9 code=0x7ffc0000 [ 292.805300][ T26] audit: type=1326 audit(1777994403.980:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.3.398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f94d9cdd9 code=0x7ffc0000 [ 292.868287][ T26] audit: type=1326 audit(1777994403.980:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.3.398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f94d9cdd9 code=0x7ffc0000 [ 292.950435][ T26] audit: type=1326 audit(1777994404.008:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.3.398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f2f94d9cdd9 code=0x7ffc0000 [ 293.052491][ T26] audit: type=1326 audit(1777994404.008:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.3.398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f94d9cdd9 code=0x7ffc0000 [ 293.114661][ T26] audit: type=1326 audit(1777994404.008:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.3.398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f94d9cdd9 code=0x7ffc0000 [ 293.169285][ T26] audit: type=1326 audit(1777994404.008:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.3.398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2f94d9cdd9 code=0x7ffc0000 [ 293.419181][ T6083] xt_TPROXY: Can be used only with -p tcp or -p udp [ 293.502714][ T26] audit: type=1326 audit(1777994404.008:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.3.398" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2f94d9cdd9 code=0x7ffc0000 [ 293.875149][ T26] audit: type=1326 audit(1777994405.037:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.2.406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47b39cdd9 code=0x7ffc0000 [ 293.913142][ T6090] netlink: 'syz.1.408': attribute type 21 has an invalid length. [ 293.927495][ T6090] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.936717][ T6090] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.945544][ T6090] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.954297][ T6090] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.118906][ T26] audit: type=1326 audit(1777994405.047:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.2.406" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fb47b39cdd9 code=0x7ffc0000 [ 294.906908][ T6093] loop3: detected capacity change from 0 to 40427 [ 294.925791][ T6093] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 294.933984][ T6093] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 294.946925][ T6093] F2FS-fs (loop3): invalid crc value [ 295.147034][ T6096] loop2: detected capacity change from 0 to 4096 [ 295.202706][ T6093] F2FS-fs (loop3): Found nat_bits in checkpoint [ 295.959710][ T6093] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 295.966858][ T6093] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 296.696764][ T6096] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 297.872927][ T6096] ntfs3: loop2: Failed to load $Extend. [ 298.031853][ T4323] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 298.384561][ T4323] usb 4-1: Using ep0 maxpacket: 8 [ 299.090711][ T4323] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 299.098374][ T4323] usb 4-1: can't read configurations, error -71 [ 299.143359][ T6141] loop2: detected capacity change from 0 to 512 [ 299.150524][ T6141] EXT4-fs: inline encryption not supported [ 299.171694][ T6141] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 299.224103][ T6141] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 299.232204][ T6141] System zones: 1-12 [ 299.272890][ T6141] EXT4-fs (loop2): 1 truncate cleaned up [ 299.278596][ T6141] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 299.660720][ T6151] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 300.065664][ T6163] netlink: 'syz.3.420': attribute type 10 has an invalid length. [ 300.104901][ T6163] netlink: 55 bytes leftover after parsing attributes in process `syz.3.420'. [ 300.505872][ T4279] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 300.810278][ T4279] usb 1-1: Using ep0 maxpacket: 32 [ 300.827129][ T4279] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 301.030341][ T4279] usb 1-1: config 0 has no interface number 0 [ 301.047546][ T4279] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 301.066632][ T4279] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.088001][ T4279] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 301.098103][ T4279] usb 1-1: config 0 interface 196 has no altsetting 0 [ 301.137153][ T4279] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 301.151819][ T4279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.172157][ T4279] usb 1-1: Product: syz [ 301.181799][ T4279] usb 1-1: Manufacturer: syz [ 301.200156][ T4279] usb 1-1: SerialNumber: syz [ 301.229500][ T4279] usb 1-1: config 0 descriptor?? [ 301.235460][ T6171] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 301.437768][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 301.475856][ T4279] ipheth 1-1:0.196: Unable to find endpoints [ 301.523757][ T4279] usb 1-1: USB disconnect, device number 4 [ 303.319310][ T6205] loop3: detected capacity change from 0 to 4096 [ 303.367781][ T6205] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 303.537120][ T6205] ntfs3: loop3: Failed to load root. [ 303.806097][ T6223] loop2: detected capacity change from 0 to 16 [ 303.862001][ T6223] erofs: (device loop2): mounted with root inode @ nid 36. [ 303.907576][ T4286] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 8524 in[4096, 0] out[9000] [ 303.971387][ T6223] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 8524 in[4096, 0] out[9000] [ 304.016174][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 304.016187][ T26] audit: type=1800 audit(1777994414.554:63): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.449" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 304.217957][ T6205] loop3: detected capacity change from 0 to 32768 [ 304.264040][ T6205] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.443 (6205) [ 304.462433][ T6205] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 304.486312][ T6205] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 304.495737][ T6205] BTRFS info (device loop3): using free space tree [ 305.506018][ T6258] input: syz0 as /devices/virtual/input/input6 [ 305.575579][ T6258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.454'. [ 305.641013][ T6258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.454'. [ 306.185463][ T6261] usb usb7: usbfs: process 6261 (syz.2.458) did not claim interface 0 before use [ 306.294675][ T6205] BTRFS error (device loop3): open_ctree failed: -12 [ 307.807084][ T6292] Bluetooth: MGMT ver 1.22 [ 308.159820][ T6304] loop2: detected capacity change from 0 to 64 [ 308.427016][ T6304] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 308.926685][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 309.006436][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 309.015306][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 309.081415][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 309.105486][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 309.120681][ T6315] loop3: detected capacity change from 0 to 128 [ 309.137846][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 309.152904][ T6315] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 309.184085][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 309.204280][ T6315] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.359783][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 310.778421][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 310.884208][ T6343] loop3: detected capacity change from 0 to 256 [ 310.913246][ T6343] exfat: Deprecated parameter 'namecase' [ 310.981302][ T6343] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 311.015527][ T6264] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 311.384231][ T6264] usb 1-1: Using ep0 maxpacket: 8 [ 311.397887][ T6264] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 311.407351][ T6264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.417661][ T6264] usb 1-1: Product: syz [ 311.422127][ T6264] usb 1-1: Manufacturer: syz [ 311.427778][ T6264] usb 1-1: SerialNumber: syz [ 311.460783][ T6264] usb 1-1: config 0 descriptor?? [ 311.592383][ T6264] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 311.664513][ T6264] pctv452e: pctv452e_power_ctrl: 1 [ 311.664513][ T6264] [ 312.028688][ T6264] usb 1-1: selecting invalid altsetting 3 [ 312.150329][ T6264] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 312.150329][ T6264] [ 312.162475][ T6264] dvb-usb: bulk message failed: -22 (5/0) [ 312.186678][ T6264] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 312.198500][ T6264] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 312.207488][ T6264] usb 1-1: media controller created [ 312.214486][ T6264] dvb-usb: bulk message failed: -22 (8/0) [ 312.220557][ T6264] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 312.228916][ T6264] dvb-usb: MAC address reading failed. [ 312.260979][ T6264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.522549][ T6264] DVB: Unable to find symbol stb0899_attach() [ 312.528698][ T6264] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 312.654937][ T6367] loop2: detected capacity change from 0 to 1024 [ 312.661628][ T6264] rc_core: IR keymap rc-tt-1500 not found [ 312.667384][ T6264] Registered IR keymap rc-empty [ 312.685960][ T6264] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 312.696216][ T4279] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 312.728832][ T6264] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input7 [ 312.749502][ T6264] dvb-usb: schedule remote query interval to 100 msecs. [ 312.756650][ T6264] pctv452e: pctv452e_power_ctrl: 0 [ 312.756650][ T6264] [ 312.764513][ T6264] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 312.840657][ T6264] usb 1-1: USB disconnect, device number 5 [ 312.917203][ T6264] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 312.929530][ T4279] usb 4-1: Using ep0 maxpacket: 16 [ 312.937639][ T4279] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 312.966146][ T4279] usb 4-1: config 0 has no interface number 0 [ 312.975387][ T4279] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 312.995547][ T4279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.009247][ T4279] usb 4-1: Product: syz [ 313.015251][ T4279] usb 4-1: Manufacturer: syz [ 313.023382][ T4279] usb 4-1: SerialNumber: syz [ 313.028210][ T6377] __nla_validate_parse: 47 callbacks suppressed [ 313.028224][ T6377] netlink: 56 bytes leftover after parsing attributes in process `syz.2.500'. [ 313.061072][ T4279] usb 4-1: config 0 descriptor?? [ 313.075182][ T4279] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 314.263613][ T4279] gspca_spca1528: reg_w err -71 [ 314.313767][ T4279] spca1528: probe of 4-1:0.1 failed with error -71 [ 314.339062][ T4279] usb 4-1: USB disconnect, device number 4 [ 315.643447][ T6401] loop3: detected capacity change from 0 to 512 [ 315.712546][ T6401] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.510: ea_inode with extended attributes [ 315.881862][ T6401] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.510: error while reading EA inode 11 err=-117 [ 315.916561][ T6401] EXT4-fs (loop3): 1 orphan inode deleted [ 315.937640][ T6401] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 316.079175][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 316.211883][ T6407] loop3: detected capacity change from 0 to 256 [ 316.390047][ T6413] loop2: detected capacity change from 0 to 128 [ 316.470077][ T6413] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 316.573161][ T6413] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.535851][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 317.731511][ T6427] loop2: detected capacity change from 0 to 1764 [ 317.918558][ T4323] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 318.030997][ T6433] loop2: detected capacity change from 0 to 256 [ 318.121688][ T4323] usb 4-1: Using ep0 maxpacket: 8 [ 318.164956][ T6433] FAT-fs (loop2): Directory bread(block 64) failed [ 318.172147][ T6433] FAT-fs (loop2): Directory bread(block 65) failed [ 318.196635][ T6433] FAT-fs (loop2): Directory bread(block 66) failed [ 318.201356][ T4323] usb 4-1: unable to get BOS descriptor or descriptor too short [ 318.220962][ T6433] FAT-fs (loop2): Directory bread(block 67) failed [ 318.227624][ T6433] FAT-fs (loop2): Directory bread(block 68) failed [ 318.240153][ T4323] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 318.258614][ T4323] usb 4-1: can't read configurations, error -71 [ 318.287163][ T6433] FAT-fs (loop2): Directory bread(block 69) failed [ 318.319398][ T6433] FAT-fs (loop2): Directory bread(block 70) failed [ 318.329999][ T6433] FAT-fs (loop2): Directory bread(block 71) failed [ 318.378328][ T6433] FAT-fs (loop2): Directory bread(block 72) failed [ 318.385878][ T6433] FAT-fs (loop2): Directory bread(block 73) failed [ 319.216963][ T6453] overlayfs: unrecognized mount option "context=sysadm_u" or missing value [ 320.902417][ T6455] overlayfs: failed to clone upperpath [ 321.946819][ T6459] loop2: detected capacity change from 0 to 64 [ 322.202228][ T6462] loop3: detected capacity change from 0 to 1024 [ 322.373009][ T6465] loop2: detected capacity change from 0 to 256 [ 322.419420][ T4475] hfsplus: b-tree write err: -5, ino 25 [ 322.425621][ T4475] hfsplus: b-tree write err: -5, ino 4 [ 322.462395][ T4475] hfsplus: b-tree write err: -5, ino 2 [ 322.467027][ T6465] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 323.134009][ T6471] loop3: detected capacity change from 0 to 128 [ 323.513934][ T6481] loop3: detected capacity change from 0 to 256 [ 323.552443][ T6481] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 323.574989][ T6481] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 323.619377][ T6481] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 323.817274][ T6264] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 324.029561][ T6264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 324.050852][ T6264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 324.082067][ T6264] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 324.110036][ T6264] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 324.130791][ T6264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.153468][ T6264] usb 3-1: config 0 descriptor?? [ 324.159395][ T6482] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 324.639125][ T6264] uclogic 0003:5543:0004.0001: ignoring exceeding usage max [ 324.681523][ T6264] uclogic 0003:5543:0004.0001: unknown main item tag 0x0 [ 324.721681][ T6264] uclogic 0003:5543:0004.0001: unknown main item tag 0x0 [ 324.746219][ T6264] uclogic 0003:5543:0004.0001: unknown main item tag 0x0 [ 324.772971][ T6264] uclogic 0003:5543:0004.0001: unknown main item tag 0x0 [ 324.789846][ T6264] uclogic 0003:5543:0004.0001: unknown main item tag 0x0 [ 324.800586][ T6264] uclogic 0003:5543:0004.0001: unknown main item tag 0x0 [ 324.807714][ T6264] uclogic 0003:5543:0004.0001: unknown main item tag 0x0 [ 324.825544][ T6264] uclogic 0003:5543:0004.0001: unknown main item tag 0x0 [ 324.855869][ T6264] uclogic 0003:5543:0004.0001: No inputs registered, leaving [ 324.897619][ T6264] uclogic 0003:5543:0004.0001: hidraw0: USB HID v0.08 Device [HID 5543:0004] on usb-dummy_hcd.2-1/input0 [ 324.993306][ T6264] usb 3-1: USB disconnect, device number 2 [ 325.020534][ T6501] loop3: detected capacity change from 0 to 64 [ 325.140484][ T6497] fido_id[6497]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 325.232706][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.239111][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.615345][ T6511] loop2: detected capacity change from 0 to 256 [ 325.641645][ T6511] exfat: Deprecated parameter 'utf8' [ 325.691882][ T6511] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 326.975255][ T6528] loop3: detected capacity change from 0 to 65536 [ 326.982469][ T6528] XFS: ikeep mount option is deprecated. [ 327.411250][ T6528] XFS (loop3): Mounting V5 Filesystem [ 327.710690][ T6264] XFS (loop3): Metadata corruption detected at xfs_buf_ioend+0x27a/0x780, xfs_inode block 0x20 xfs_inode_buf_verify [ 327.777599][ T6264] XFS (loop3): Unmount and run xfs_repair [ 327.838249][ T6264] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 327.888799][ T6264] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 327.926722][ T6264] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 327.975846][ T6264] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 328.017423][ T6264] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 328.048459][ T6264] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 328.080992][ T6264] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 328.089924][ T6264] 00000060: ff ff ff 7f 00 ef 6f a0 00 00 00 00 00 00 00 00 ......o......... [ 328.161029][ T6264] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 328.197015][ T6528] XFS (loop3): metadata I/O error in "xfs_imap_to_bp+0x10e/0x180" at daddr 0x20 len 32 error 117 [ 328.209387][ T6528] XFS (loop3): Failed to read root inode 0x20, error 117 [ 330.617598][ T6546] loop2: detected capacity change from 0 to 32768 [ 330.792450][ T6546] XFS (loop2): Mounting V5 Filesystem [ 330.908933][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 330.920197][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 330.928960][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 330.937062][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 330.944604][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 330.958305][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.023703][ T6546] XFS (loop2): Ending clean mount [ 332.224858][ T4284] XFS (loop2): Unmounting Filesystem [ 332.286028][ T6581] loop3: detected capacity change from 0 to 512 [ 332.342380][ T6581] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 332.456613][ T6581] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 332.545102][ T6581] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 3: comm syz.3.578: lblock 8 mapped to illegal pblock 3 (length 26) [ 332.568696][ T6572] chnl_net:caif_netlink_parms(): no params data found [ 332.801243][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 332.918554][ T6572] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.961512][ T6572] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.991120][ T6572] device bridge_slave_0 entered promiscuous mode [ 333.027610][ T6572] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.045048][ T6603] loop3: detected capacity change from 0 to 64 [ 333.055116][ T6572] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.078052][ T6572] device bridge_slave_1 entered promiscuous mode [ 333.178502][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 333.254668][ T6572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.298669][ T6572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.391991][ T4321] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 333.620197][ T32] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.792596][ T4321] usb 3-1: unable to get BOS descriptor or descriptor too short [ 333.818932][ T6572] team0: Port device team_slave_0 added [ 334.002279][ T6572] team0: Port device team_slave_1 added [ 334.307152][ T32] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.329773][ T4321] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 334.342344][ T4321] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 334.352977][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.361109][ T4321] usb 3-1: Product: syz [ 334.365421][ T4321] usb 3-1: Manufacturer: syz [ 334.370674][ T4321] usb 3-1: SerialNumber: syz [ 334.434174][ T6572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.446318][ T6572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.473619][ T6572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.502168][ T32] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.522180][ T6572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.529515][ T6572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.582929][ T6572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.682420][ T32] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.756010][ T6572] device hsr_slave_0 entered promiscuous mode [ 334.777600][ T6572] device hsr_slave_1 entered promiscuous mode [ 334.804638][ T6572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.812267][ T6572] Cannot create hsr debugfs directory [ 335.358632][ T4321] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 335.401142][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 335.551880][ T6572] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 335.603750][ T6572] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 335.621840][ T6646] netlink: 'syz.1.597': attribute type 10 has an invalid length. [ 335.632801][ T6646] netlink: 55 bytes leftover after parsing attributes in process `syz.1.597'. [ 335.684055][ T4321] usb 3-1: device firmware changed [ 335.705698][ T4321] usb 3-1: USB disconnect, device number 3 [ 336.923297][ T4321] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 337.523398][ T6572] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 337.613138][ T6572] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 337.624042][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 337.650380][ T6660] loop2: detected capacity change from 0 to 32768 [ 338.092447][ T6660] JBD2: Ignoring recovery information on journal [ 338.852175][ T6680] loop3: detected capacity change from 0 to 128 [ 338.913399][ T6660] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 339.018778][ T6680] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 339.085520][ T6680] hpfs: filesystem error: improperly stopped [ 339.104353][ T6680] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 339.151601][ T6680] hpfs: You really don't want any checks? You are crazy... [ 339.163532][ T6680] hpfs: hpfs_map_sector(): read error [ 339.168984][ T6680] hpfs: code page support is disabled [ 339.218929][ T6680] hpfs: hpfs_map_4sectors(): unaligned read [ 339.237751][ T6572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.252285][ T6680] hpfs: hpfs_map_4sectors(): unaligned read [ 339.322950][ T6680] hpfs: filesystem error: unable to find root dir [ 339.365427][ T6572] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.492805][ T6680] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 339.740713][ T6572] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 339.825751][ T6572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.997302][ T4284] ocfs2: Unmounting device (7,2) on (node local) [ 340.231891][ T6692] loop3: detected capacity change from 0 to 2048 [ 340.253576][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 340.413773][ T6692] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 340.656484][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 340.759430][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 340.812565][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.855122][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 340.887923][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.918644][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.925854][ T4480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.966594][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.982522][ T6707] loop2: detected capacity change from 0 to 8192 [ 341.022157][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.060754][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.068088][ T4480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.087569][ T6707] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 341.166796][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.176022][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.184442][ T6707] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 341.185227][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.208552][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.218716][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.245098][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.253391][ T6707] REISERFS (device loop2): using ordered data mode [ 341.278325][ T6707] reiserfs: using flush barriers [ 341.285194][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.298442][ T6707] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 341.316251][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.335761][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 341.353935][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.371712][ T6707] REISERFS (device loop2): checking transaction log (loop2) [ 341.462154][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 341.477199][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 341.525006][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 341.692105][ T6731] loop3: detected capacity change from 0 to 1024 [ 341.764843][ T6731] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 341.785134][ T6707] REISERFS (device loop2): Using tea hash to sort names [ 341.821391][ T6707] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 341.947360][ T6707] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 342.062975][ T32] device hsr_slave_0 left promiscuous mode [ 342.102052][ T32] device hsr_slave_1 left promiscuous mode [ 342.110741][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.138638][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.160460][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.180730][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.210443][ T32] device geneve2 left promiscuous mode [ 342.234179][ T32] bridge0: port 3(geneve2) entered disabled state [ 342.289382][ T32] device bridge_slave_1 left promiscuous mode [ 342.305598][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.341979][ T32] device bridge_slave_0 left promiscuous mode [ 342.352634][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.483129][ T6740] loop3: detected capacity change from 0 to 256 [ 342.491957][ T32] device veth1_macvtap left promiscuous mode [ 342.512105][ T32] device veth0_macvtap left promiscuous mode [ 342.526129][ T6740] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xa05bf55d, utbl_chksum : 0xe619d30d) [ 342.553966][ T32] device veth1_vlan left promiscuous mode [ 342.566399][ T32] device veth0_vlan left promiscuous mode [ 342.813669][ T6744] loop2: detected capacity change from 0 to 4096 [ 342.865511][ T6744] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 342.908846][ T6744] ntfs3: loop2: ntfs_evict_inode r=6 failed, -22. [ 342.922027][ T6744] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 343.894648][ T6769] loop2: detected capacity change from 0 to 1024 [ 343.983767][ T6769] hfsplus: bad catalog entry type [ 344.074099][ T11] hfsplus: b-tree write err: -5, ino 25 [ 344.081351][ T11] hfsplus: b-tree write err: -5, ino 4 [ 344.101168][ T11] hfsplus: b-tree write err: -5, ino 2 [ 344.214463][ T6775] loop2: detected capacity change from 0 to 256 [ 344.975005][ T32] team0 (unregistering): Port device team_slave_1 removed [ 345.101255][ T32] team0 (unregistering): Port device team_slave_0 removed [ 345.209835][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.365355][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.821869][ T32] bond0 (unregistering): Released all slaves [ 345.960112][ T6765] netlink: 44 bytes leftover after parsing attributes in process `syz.3.632'. [ 345.970011][ T6765] netem: unknown loss type 12 [ 345.975303][ T6765] netem: change failed [ 346.046869][ T6572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.054499][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 346.069063][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 346.604636][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 346.619373][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 346.644003][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 346.653111][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 346.664905][ T6572] device veth0_vlan entered promiscuous mode [ 346.675785][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 346.684178][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 346.695675][ T6572] device veth1_vlan entered promiscuous mode [ 346.726549][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 346.736100][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 346.750526][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.759315][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.775879][ T6572] device veth0_macvtap entered promiscuous mode [ 346.791300][ T6572] device veth1_macvtap entered promiscuous mode [ 346.812038][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.822905][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.832825][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.844160][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.854064][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.864619][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.874540][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.885062][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.896293][ T6572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.922915][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.933593][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.944122][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.955107][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.965228][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.975709][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.985654][ T6572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.996301][ T6572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.007227][ T6572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.014592][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 347.026217][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 347.036763][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 347.045670][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 347.054718][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 347.064719][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 347.083653][ T6572] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.095599][ T6572] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.104642][ T6572] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.124669][ T6572] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.201704][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.218221][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.239648][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.272699][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.281946][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.291252][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 347.447271][ T6837] loop5: detected capacity change from 0 to 128 [ 347.453727][ T6838] loop3: detected capacity change from 0 to 256 [ 347.571202][ T6837] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 347.592693][ T6837] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.610515][ T6838] FAT-fs (loop3): Directory bread(block 64) failed [ 347.658006][ T6838] FAT-fs (loop3): Directory bread(block 65) failed [ 347.697149][ T6838] FAT-fs (loop3): Directory bread(block 66) failed [ 347.729087][ T6838] FAT-fs (loop3): Directory bread(block 67) failed [ 347.761479][ T6838] FAT-fs (loop3): Directory bread(block 68) failed [ 347.813123][ T6838] FAT-fs (loop3): Directory bread(block 69) failed [ 347.829694][ T6838] FAT-fs (loop3): Directory bread(block 70) failed [ 348.313720][ T6838] FAT-fs (loop3): Directory bread(block 71) failed [ 348.391607][ T6838] FAT-fs (loop3): Directory bread(block 72) failed [ 348.466246][ T6838] FAT-fs (loop3): Directory bread(block 73) failed [ 348.598083][ T6572] EXT4-fs (loop5): unmounting filesystem. [ 348.851479][ T6858] securityfs: Unknown parameter '' [ 351.165743][ T6869] loop5: detected capacity change from 0 to 256 [ 351.262922][ T6869] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xa05bf55d, utbl_chksum : 0xe619d30d) [ 351.372647][ T6877] loop3: detected capacity change from 0 to 256 [ 351.706782][ T6886] loop3: detected capacity change from 0 to 128 [ 351.804165][ T6886] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 351.860684][ T6886] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.941066][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 353.322539][ T6911] 9pnet_fd: Insufficient options for proto=fd [ 353.534552][ T6920] Bluetooth: MGMT ver 1.22 [ 353.829840][ T6929] loop5: detected capacity change from 0 to 512 [ 353.939265][ T6929] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 353.968911][ T6929] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.084981][ T6906] loop3: detected capacity change from 0 to 40427 [ 354.107584][ T6936] securityfs: Unknown parameter '' [ 354.135522][ T6906] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 354.143603][ T6906] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 354.198750][ T6906] F2FS-fs (loop3): invalid crc value [ 354.239367][ T6914] loop2: detected capacity change from 0 to 32768 [ 354.280764][ T6906] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 354.372835][ T6572] EXT4-fs (loop5): unmounting filesystem. [ 354.574953][ T6906] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 354.582065][ T6906] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 354.634678][ T6950] loop5: detected capacity change from 0 to 1024 [ 354.730326][ T6950] EXT4-fs: Ignoring removed oldalloc option [ 354.753835][ T6950] EXT4-fs: Ignoring removed bh option [ 354.800364][ T6950] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 354.835387][ T26] audit: type=1800 audit(1777994462.076:64): pid=6906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.671" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 354.862114][ T6950] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 354.862114][ T6950] [ 354.963700][ T6906] syz.3.671: attempt to access beyond end of device [ 354.963700][ T6906] loop3: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 355.101521][ T4282] syz-executor: attempt to access beyond end of device [ 355.101521][ T4282] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 355.213014][ T4318] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 355.428605][ T4318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 355.458690][ T4318] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 355.505779][ T4318] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 355.544161][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 355.572482][ T4318] usb 3-1: SerialNumber: syz [ 355.601031][ T6958] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 355.732713][ T6973] 9pnet_fd: Insufficient options for proto=fd [ 355.740072][ T6982] sctp: [Deprecated]: syz.1.697 (pid 6982) Use of int in max_burst socket option deprecated. [ 355.740072][ T6982] Use struct sctp_assoc_value instead [ 355.768204][ T6981] loop3: detected capacity change from 0 to 1024 [ 355.807322][ T6981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.837208][ T6958] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 356.319528][ T4318] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 356.789858][ T6992] loop5: detected capacity change from 0 to 32768 [ 356.921293][ T6992] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 356.965497][ T6992] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 356.974287][ T6992] BTRFS info (device loop5): enabling auto defrag [ 357.576355][ T6992] BTRFS info (device loop5): force clearing of disk cache [ 357.608638][ T6992] BTRFS info (device loop5): turning on sync discard [ 357.656233][ T6992] BTRFS info (device loop5): enabling disk space caching [ 357.697521][ T6992] BTRFS info (device loop5): setting nodatacow, compression disabled [ 358.010416][ T6992] BTRFS info (device loop5): disk space caching is enabled [ 358.075508][ T6998] loop3: detected capacity change from 0 to 32768 [ 358.211306][ T4318] usb 3-1: USB disconnect, device number 5 [ 358.259229][ T4318] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 358.326858][ T6998] XFS (loop3): Mounting V5 Filesystem [ 358.511517][ T6998] XFS (loop3): Ending clean mount [ 358.553775][ T6998] XFS (loop3): Quotacheck needed: Please wait. [ 358.632512][ T6992] BTRFS info (device loop5): enabling ssd optimizations [ 358.682015][ T6992] BTRFS info (device loop5): rebuilding free space tree [ 358.724954][ T6998] XFS (loop3): Quotacheck: Done. [ 358.955763][ T6992] BTRFS info (device loop5): disabling free space tree [ 358.962893][ T6992] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 359.003693][ T4282] XFS (loop3): Unmounting Filesystem [ 359.018126][ T6992] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 359.530101][ T4323] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 359.692893][ T6572] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 359.743917][ T4323] usb 3-1: Using ep0 maxpacket: 32 [ 359.752090][ T4323] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 359.785544][ T4323] usb 3-1: config 0 has no interface number 0 [ 359.826703][ T4323] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 359.905275][ T4323] usb 3-1: config 0 interface 85 has no altsetting 0 [ 359.963401][ T4323] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 360.003253][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.047558][ T4323] usb 3-1: Product: syz [ 360.051794][ T4323] usb 3-1: Manufacturer: syz [ 360.082272][ T4323] usb 3-1: SerialNumber: syz [ 360.115369][ T4323] usb 3-1: config 0 descriptor?? [ 360.569455][ T4323] appletouch 3-1:0.85: Geyser mode initialized. [ 360.577063][ T4323] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input9 [ 360.905722][ T7107] loop3: detected capacity change from 0 to 512 [ 360.952495][ T7107] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 360.999177][ T7107] EXT4-fs (loop3): orphan cleanup on readonly fs [ 361.006558][ T4318] usb 3-1: USB disconnect, device number 6 [ 361.026160][ T7107] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.723: Invalid inode bitmap blk 4 in block_group 0 [ 361.048321][ T7107] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 361.075575][ T4318] appletouch 3-1:0.85: input: appletouch disconnected [ 361.277378][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 361.351799][ T7094] loop5: detected capacity change from 0 to 40427 [ 361.432306][ T7094] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 361.438989][ T7094] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 361.516872][ T7094] F2FS-fs (loop5): Found nat_bits in checkpoint [ 361.724944][ T7094] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 361.764405][ T7094] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 362.544069][ T6572] syz-executor: attempt to access beyond end of device [ 362.544069][ T6572] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 362.854761][ T7167] loop3: detected capacity change from 0 to 4096 [ 362.880753][ T7167] EXT4-fs: inline encryption not supported [ 363.301311][ T7178] 9pnet_fd: Insufficient options for proto=fd [ 363.314145][ T7167] EXT4-fs: Ignoring removed bh option [ 363.334858][ T7167] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 363.357213][ T7167] EXT4-fs (loop3): Test dummy encryption mode enabled [ 363.405024][ T7167] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 363.430587][ T7167] System zones: 0-5 [ 363.485282][ T7167] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 363.980419][ T7172] loop2: detected capacity change from 0 to 32768 [ 364.041586][ T7172] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.744 (7172) [ 364.127911][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 364.203611][ T7172] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 364.248343][ T7172] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 364.300765][ T7172] BTRFS info (device loop2): using free space tree [ 364.344341][ T7206] input: syz1 as /devices/virtual/input/input10 [ 364.614868][ T7172] BTRFS info (device loop2): enabling ssd optimizations [ 364.761755][ T26] audit: type=1800 audit(1777994471.368:65): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.744" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 364.902382][ T4284] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 366.238429][ T6129] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (6129) [ 366.491686][ T7235] loop5: detected capacity change from 0 to 32768 [ 367.319167][ T7235] XFS (loop5): Mounting V5 Filesystem [ 367.449403][ T7235] XFS (loop5): Ending clean mount [ 367.809857][ T6572] XFS (loop5): Unmounting Filesystem [ 368.573803][ T7330] loop5: detected capacity change from 0 to 1024 [ 368.624532][ T7330] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 368.658065][ T7330] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.801131][ T7330] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 3: comm syz.5.775: lblock 3 mapped to illegal pblock 3 (length 3) [ 368.828274][ T7338] loop2: detected capacity change from 0 to 512 [ 368.830125][ T7330] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 368.854374][ T7330] EXT4-fs (loop5): This should not happen!! Data will be lost [ 368.854374][ T7330] [ 368.868068][ T7339] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: block 8: comm syz.5.775: lblock 8 mapped to illegal pblock 8 (length 8) [ 368.893886][ T7338] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 369.019398][ T7339] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 369.040202][ T7339] EXT4-fs (loop5): This should not happen!! Data will be lost [ 369.040202][ T7339] [ 369.125728][ T7338] EXT4-fs (loop2): 1 orphan inode deleted [ 369.165737][ T7338] EXT4-fs (loop2): 1 truncate cleaned up [ 369.173271][ T7338] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 369.196256][ T6572] EXT4-fs (loop5): unmounting filesystem. [ 369.490108][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 370.505147][ T7367] loop5: detected capacity change from 0 to 32768 [ 370.589577][ T7395] fuse: Bad value for 'fd' [ 371.471409][ T34] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 371.639603][ T7422] loop3: detected capacity change from 0 to 2048 [ 371.669493][ T34] usb 3-1: Using ep0 maxpacket: 8 [ 371.689575][ T34] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 371.707942][ T7422] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.710902][ T34] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.770215][ T34] usb 3-1: Product: syz [ 371.774449][ T34] usb 3-1: Manufacturer: syz [ 371.797618][ T34] usb 3-1: SerialNumber: syz [ 372.341934][ T7427] loop3: detected capacity change from 0 to 40427 [ 372.352106][ T7427] F2FS-fs (loop3): invalid crc value [ 372.373221][ T7427] F2FS-fs (loop3): Found nat_bits in checkpoint [ 372.449761][ T7427] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 372.488134][ T34] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 372.507279][ T34] usb 3-1: clock source 0 is not valid, cannot use [ 372.532970][ T7427] F2FS-fs (loop3): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 372.966055][ T34] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 372.996816][ T34] usb 3-1: clock source 0 is not valid, cannot use [ 373.023325][ T34] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 373.033761][ T34] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 373.190170][ T34] usb 3-1: USB disconnect, device number 7 [ 373.543440][ T7449] udevd[7449]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.614426][ T7419] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 373.978788][ T7479] fuse: Bad value for 'fd' [ 374.101159][ T7485] netlink: 'syz.3.821': attribute type 1 has an invalid length. [ 374.144797][ T7485] device bond1 entered promiscuous mode [ 374.156582][ T7485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.255131][ T7490] bond1: (slave veth3): making interface the new active one [ 374.316560][ T7490] device veth3 entered promiscuous mode [ 374.330632][ T7490] bond1: (slave veth3): Enslaving as an active interface with an up link [ 374.387305][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 374.698082][ T7501] loop5: detected capacity change from 0 to 32768 [ 374.767393][ T7501] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 374.776037][ T7501] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 374.819548][ T7501] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 374.852741][ T4318] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 374.884662][ T4318] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 375.087398][ T4318] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 189ms [ 375.170960][ T4318] gfs2: fsid=syz:syz.0: jid=0: Done [ 375.206702][ T7501] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 375.375113][ T7501] gfs2: fsid=syz:syz.0: found 1 quota changes [ 375.447739][ T7512] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 375.447739][ T7512] inode = 11 2339 [ 375.447739][ T7512] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 375.633825][ T7512] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 375.654625][ T7512] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:7512 [gfs2_quotad] gfs2_quota_sync+0x32c/0x700 [ 375.718776][ T7512] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 375.859669][ T7512] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 375.923095][ T7523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.930944][ T7523] IPv6: NLM_F_CREATE should be set when creating new route [ 375.938410][ T7523] IPv6: NLM_F_CREATE should be set when creating new route [ 376.029528][ T7529] Illegal XDP return value 4294967274 on prog (id 53) dev syz_tun, expect packet loss! [ 376.538931][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'. [ 378.487477][ T7538] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 378.626921][ T7626] netlink: 'syz.4.857': attribute type 1 has an invalid length. [ 378.666572][ T7626] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 378.686659][ T7626] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 378.729839][ T7626] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 378.743836][ T7626] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 378.790277][ T7626] bond1: (slave geneve2): making interface the new active one [ 378.836912][ T7626] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 379.197573][ T7649] loop3: detected capacity change from 0 to 128 [ 379.348300][ T7649] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 379.371065][ T7649] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.366696][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 381.896316][ T7512] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 382.045534][ T7512] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 382.135175][ T7512] gfs2: fsid=syz:syz.0: File system withdrawn [ 382.157694][ T7512] CPU: 1 PID: 7512 Comm: gfs2_quotad Not tainted syzkaller #0 [ 382.165239][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 382.175335][ T7512] Call Trace: [ 382.178639][ T7512] [ 382.181581][ T7512] dump_stack_lvl+0x188/0x24e [ 382.186297][ T7512] ? kobject_uevent_env+0x35f/0x8a0 [ 382.191548][ T7512] ? show_regs_print_info+0x12/0x12 [ 382.196786][ T7512] ? load_image+0x400/0x400 [ 382.201322][ T7512] ? kobject_uevent_env+0x35f/0x8a0 [ 382.206557][ T7512] gfs2_withdraw+0xde6/0x15d0 [ 382.211369][ T7512] ? gfs2_lm+0x240/0x240 [ 382.215648][ T7512] ? wake_bit_function+0x200/0x200 [ 382.220807][ T7512] ? gfs2_consist_inode_i+0xf1/0x110 [ 382.226128][ T7512] gfs2_inode_refresh+0xb64/0xfd0 [ 382.231198][ T7512] ? gfs2_inode_metasync+0xf0/0xf0 [ 382.236347][ T7512] ? gfs2_glock_nq+0xcf0/0x14e0 [ 382.241236][ T7512] gfs2_instantiate+0x15e/0x210 [ 382.246119][ T7512] gfs2_glock_wait+0x1d0/0x2a0 [ 382.250925][ T7512] do_sync+0x4bf/0xc40 [ 382.255040][ T7512] ? gfs2_quota_sync+0x32c/0x700 [ 382.260101][ T7512] ? slot_put+0x1e0/0x1e0 [ 382.264431][ T7512] ? __lock_acquire+0x7d10/0x7d10 [ 382.269448][ T7512] ? do_raw_spin_lock+0x128/0x2f0 [ 382.274479][ T7512] ? gfs2_quota_sync+0x32c/0x700 [ 382.279423][ T7512] ? do_raw_spin_unlock+0x11d/0x230 [ 382.284623][ T7512] gfs2_quota_sync+0x32c/0x700 [ 382.289396][ T7512] gfs2_quotad+0x420/0x680 [ 382.293832][ T7512] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 382.298943][ T7512] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 382.304843][ T7512] ? wake_bit_function+0x200/0x200 [ 382.309967][ T7512] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 382.315863][ T7512] ? __kthread_parkme+0x162/0x1c0 [ 382.320915][ T7512] kthread+0x29d/0x330 [ 382.324979][ T7512] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 382.330089][ T7512] ? kthread_blkcg+0xd0/0xd0 [ 382.334679][ T7512] ret_from_fork+0x1f/0x30 [ 382.339106][ T7512] [ 382.662637][ T7716] netlink: 32 bytes leftover after parsing attributes in process `syz.1.874'. [ 382.675743][ T7717] loop3: detected capacity change from 0 to 128 [ 382.716699][ T6572] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 382.732865][ T6572] CPU: 0 PID: 6572 Comm: syz-executor Not tainted syzkaller #0 [ 382.740484][ T6572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 382.750568][ T6572] Call Trace: [ 382.753878][ T6572] [ 382.756839][ T6572] dump_stack_lvl+0x188/0x24e [ 382.761560][ T6572] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 382.766703][ T6572] ? show_regs_print_info+0x12/0x12 [ 382.771946][ T6572] ? load_image+0x400/0x400 [ 382.776490][ T6572] ? do_raw_spin_unlock+0x11d/0x230 [ 382.781725][ T6572] gfs2_assert_warn_i+0x18f/0x2c0 [ 382.786786][ T6572] gfs2_quota_cleanup+0x4b4/0x6a0 [ 382.791849][ T6572] gfs2_put_super+0x22f/0x8c0 [ 382.796560][ T6572] ? gfs2_evict_inode+0x11d0/0x11d0 [ 382.801768][ T6572] generic_shutdown_super+0x130/0x340 [ 382.807171][ T6572] kill_block_super+0x7c/0xe0 [ 382.811874][ T6572] deactivate_locked_super+0x93/0xf0 [ 382.817169][ T6572] cleanup_mnt+0x42c/0x4b0 [ 382.821594][ T6572] ? lockdep_hardirqs_on+0x94/0x140 [ 382.826802][ T6572] task_work_run+0x1d0/0x260 [ 382.831429][ T6572] ? task_work_cancel+0x220/0x220 [ 382.836485][ T6572] ? exit_to_user_mode_loop+0x3b/0x110 [ 382.841969][ T6572] exit_to_user_mode_loop+0xe6/0x110 [ 382.847281][ T6572] exit_to_user_mode_prepare+0xee/0x180 [ 382.852843][ T6572] syscall_exit_to_user_mode+0x16/0x40 [ 382.858306][ T6572] do_syscall_64+0x58/0xa0 [ 382.862734][ T6572] ? clear_bhb_loop+0x60/0xb0 [ 382.867449][ T6572] ? clear_bhb_loop+0x60/0xb0 [ 382.872142][ T6572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.878044][ T6572] RIP: 0033:0x7f16e499e017 [ 382.882477][ T6572] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 382.902104][ T6572] RSP: 002b:00007ffd8aceeee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 382.910536][ T6572] RAX: 0000000000000000 RBX: 00007f16e4a32120 RCX: 00007f16e499e017 [ 382.918516][ T6572] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8aceefa0 [ 382.926491][ T6572] RBP: 00007ffd8aceefa0 R08: 00007ffd8aceffa0 R09: 00000000ffffffff [ 382.934485][ T6572] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8acf0030 [ 382.942472][ T6572] R13: 00007f16e4a32120 R14: 0000000000058def R15: 00007ffd8acf0070 [ 382.950460][ T6572] [ 383.649635][ T7717] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 383.688485][ T7717] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.560666][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 384.801799][ T7746] loop5: detected capacity change from 0 to 512 [ 384.904741][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.5.831'. [ 387.965142][ T7822] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 388.022188][ T7822] netlink: 'syz.3.903': attribute type 4 has an invalid length. [ 388.067299][ T7822] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.903'. [ 388.109354][ T7826] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 388.144560][ T7826] netlink: 'syz.3.903': attribute type 4 has an invalid length. [ 388.188391][ T7826] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.903'. [ 388.303440][ T7810] loop2: detected capacity change from 0 to 32768 [ 388.390820][ T7810] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.901 (7810) [ 388.540303][ T7810] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 388.585713][ T7810] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 388.624787][ T7810] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 388.671201][ T7810] BTRFS info (device loop2): trying to use backup root at mount time [ 388.708006][ T7810] BTRFS info (device loop2): setting nodatasum [ 388.730605][ T7810] BTRFS info (device loop2): enabling ssd optimizations [ 388.756440][ T7810] BTRFS info (device loop2): using spread ssd allocation scheme [ 388.764189][ T7810] BTRFS info (device loop2): turning on flush-on-commit [ 388.813828][ T7810] BTRFS info (device loop2): force zlib compression, level 3 [ 388.826480][ T7810] BTRFS info (device loop2): using free space tree [ 388.855707][ T7843] loop5: detected capacity change from 0 to 1024 [ 388.961380][ T7843] EXT4-fs: Ignoring removed i_version option [ 389.022583][ T7843] EXT4-fs: Ignoring removed bh option [ 389.257028][ T7843] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 389.398958][ T7810] BTRFS info (device loop2): scrub: started on devid 1 [ 389.481704][ T7810] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [ 389.624559][ T6572] EXT4-fs (loop5): unmounting filesystem. [ 389.901236][ T7897] loop5: detected capacity change from 0 to 8 [ 390.123827][ T7897] SQUASHFS error: Failed to read block 0x4de: -5 [ 390.194899][ T7897] SQUASHFS error: Failed to read block 0x4de: -5 [ 390.235240][ T26] audit: type=1800 audit(1777994495.203:66): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.916" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 390.324592][ T4284] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 390.438055][ T14] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 390.649922][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.669406][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.698276][ T14] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 390.718221][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.739063][ T14] usb 4-1: config 0 descriptor?? [ 390.885723][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 390.892432][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.206363][ T14] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 391.286724][ T14] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 391.396049][ T14] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected [ 392.356371][ T7922] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 392.614141][ T7922] usb 6-1: Using ep0 maxpacket: 32 [ 392.643717][ T7922] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 392.656954][ T7922] usb 6-1: config 0 has no interface number 0 [ 392.663120][ T7922] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 392.719288][ T7922] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 392.739584][ T7922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.758866][ T7922] usb 6-1: Product: syz [ 392.763213][ T7922] usb 6-1: Manufacturer: syz [ 392.768239][ T7922] usb 6-1: SerialNumber: syz [ 392.795184][ T7922] usb 6-1: config 0 descriptor?? [ 392.802137][ T7927] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 393.047852][ T7927] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 393.518043][ T7955] loop2: detected capacity change from 0 to 128 [ 393.528754][ T4354] usb 4-1: USB disconnect, device number 7 [ 393.587079][ T7955] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 393.607050][ T7955] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.616775][ T4354] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected [ 394.569404][ T7922] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 394.583815][ T7922] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 394.596329][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 394.634247][ T7922] asix: probe of 6-1:0.188 failed with error -71 [ 394.650756][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.939'. [ 394.653092][ T7922] usb 6-1: USB disconnect, device number 2 [ 394.763145][ T4354] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 394.779059][ T7978] device bond0 entered promiscuous mode [ 394.785170][ T7978] device bond_slave_0 entered promiscuous mode [ 394.794154][ T7978] device bond_slave_1 entered promiscuous mode [ 394.816047][ T7978] device batadv0 entered promiscuous mode [ 394.838774][ T7978] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 394.849957][ T7978] device bond0 left promiscuous mode [ 394.855277][ T7978] device bond_slave_0 left promiscuous mode [ 394.862059][ T7978] device bond_slave_1 left promiscuous mode [ 394.873544][ T7978] device batadv0 left promiscuous mode [ 394.975860][ T4354] usb 4-1: Using ep0 maxpacket: 8 [ 395.003017][ T4354] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.017287][ T4354] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 395.033691][ T4354] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 395.046047][ T4354] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 395.061817][ T4354] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 395.070906][ T4354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.129086][ T4354] hub 4-1:1.0: bad descriptor, ignoring hub [ 395.139889][ T4354] hub: probe of 4-1:1.0 failed with error -5 [ 395.149141][ T4354] cdc_wdm 4-1:1.0: skipping garbage [ 395.154402][ T4354] cdc_wdm 4-1:1.0: skipping garbage [ 395.188553][ T4354] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 395.201109][ T4354] cdc_wdm 4-1:1.0: Unknown control protocol [ 395.260790][ T7984] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 395.270389][ T7984] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 395.634214][ T7957] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 395.775369][ T8001] device macvlan2 entered promiscuous mode [ 395.791009][ T8001] bond2: (slave macvlan2): Opening slave failed [ 395.899375][ T7957] usb 4-1: device firmware changed [ 395.935245][ T7922] usb 4-1: USB disconnect, device number 8 [ 395.943038][ T7957] cdc_wdm 4-1:1.0: Error autopm - -16 [ 396.129801][ T7922] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 396.334299][ T7922] usb 4-1: Using ep0 maxpacket: 8 [ 396.342386][ T7922] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.366503][ T7922] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 396.651935][ T7922] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 396.934306][ T7922] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 396.953603][ T7922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.994691][ T7922] usb 4-1: can't set config #1, error -71 [ 397.022237][ T7922] usb 4-1: USB disconnect, device number 9 [ 397.123820][ T4289] Bluetooth: hci5: command 0x1003 tx timeout [ 397.132658][ T4286] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 398.207577][ T8060] loop3: detected capacity change from 0 to 128 [ 398.322844][ T8060] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 398.371164][ T8060] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.174481][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 400.003385][ T34] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 400.041145][ T7922] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 400.236698][ T34] usb 3-1: Using ep0 maxpacket: 8 [ 400.251296][ T34] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 400.282599][ T34] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.308483][ T34] usb 3-1: Product: syz [ 400.312714][ T34] usb 3-1: Manufacturer: syz [ 400.329528][ T7091] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 400.343028][ T34] usb 3-1: SerialNumber: syz [ 400.367952][ T34] usb 3-1: config 0 descriptor?? [ 400.383904][ T7922] usb 4-1: Using ep0 maxpacket: 32 [ 400.390955][ T7922] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 400.399291][ T7922] usb 4-1: config 0 has no interface number 0 [ 400.405829][ T7922] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 400.494879][ T7922] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 400.504178][ T7922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.512403][ T7922] usb 4-1: Product: syz [ 400.521900][ T7922] usb 4-1: Manufacturer: syz [ 400.526589][ T7922] usb 4-1: SerialNumber: syz [ 400.534329][ T7091] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 400.548431][ T7091] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 400.551833][ T7922] usb 4-1: config 0 descriptor?? [ 400.565922][ T7091] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 400.567675][ T8096] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 400.584408][ T7091] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 400.605500][ T7091] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 400.605726][ T34] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 400.629809][ T7091] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 400.643595][ T7091] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 400.651916][ T7091] usb 6-1: Product: syz [ 400.656198][ T7091] usb 6-1: Manufacturer: syz [ 400.697726][ T7091] cdc_wdm 6-1:1.0: skipping garbage [ 400.704753][ T7091] cdc_wdm 6-1:1.0: skipping garbage [ 400.721433][ T7091] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 400.727913][ T7091] cdc_wdm 6-1:1.0: Unknown control protocol [ 400.818783][ T8096] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 400.994009][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 400.996425][ T7921] usb 6-1: USB disconnect, device number 3 [ 401.000982][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 401.012653][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 401.689219][ T8133] device batadv0 entered promiscuous mode [ 401.695713][ T8133] device macsec1 entered promiscuous mode [ 401.703954][ T8133] device batadv0 left promiscuous mode [ 402.634304][ T7922] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 402.652807][ T7922] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 402.667618][ T7922] asix: probe of 4-1:0.188 failed with error -71 [ 402.686205][ T7922] usb 4-1: USB disconnect, device number 10 [ 402.982467][ T34] usb write operation failed. (-71) [ 402.997870][ T34] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 403.008669][ T34] dvbdev: DVB: registering new adapter (Terratec H7) [ 403.016184][ T34] usb 3-1: media controller created [ 403.033001][ T34] usb read operation failed. (-71) [ 403.050363][ T34] usb write operation failed. (-71) [ 403.123232][ T34] dvb_usb_az6007: probe of 3-1:0.0 failed with error -5 [ 403.136277][ T34] usb 3-1: USB disconnect, device number 8 [ 406.067212][ T8196] overlayfs: failed to clone upperpath [ 406.146035][ T8199] loop2: detected capacity change from 0 to 128 [ 406.301951][ T8199] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 406.453842][ T8199] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.513034][ T8169] loop3: detected capacity change from 0 to 40427 [ 406.586876][ T8169] F2FS-fs (loop3): invalid crc value [ 406.765619][ T8169] F2FS-fs (loop3): Found nat_bits in checkpoint [ 406.909442][ T8169] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 406.931162][ T8169] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 407.181785][ T8220] syz.3.1009: attempt to access beyond end of device [ 407.181785][ T8220] loop3: rw=2049, sector=53248, nr_sectors = 32 limit=40427 [ 408.023030][ T4282] syz-executor: attempt to access beyond end of device [ 408.023030][ T4282] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 410.161666][ T8222] device wlan0 entered promiscuous mode [ 410.178511][ T8222] device wlan0 left promiscuous mode [ 410.440677][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 412.760692][ T8267] loop3: detected capacity change from 0 to 128 [ 412.769036][ T8267] ext4: Unknown parameter 'uid>00000000000000060928' [ 412.978287][ T6129] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 413.002774][ T8267] loop3: detected capacity change from 0 to 512 [ 413.010438][ T6129] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 413.035336][ T6129] Buffer I/O error on dev loop3, logical block 0, async page read [ 413.050279][ T8267] EXT4-fs: Ignoring removed mblk_io_submit option [ 413.068430][ T8267] EXT4-fs: Ignoring removed oldalloc option [ 413.097157][ T8267] EXT4-fs: quotafile must be on filesystem root [ 413.227145][ T8277] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 413.262467][ T8277] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 413.650584][ T8289] loop3: detected capacity change from 0 to 2048 [ 413.867950][ T8289] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 414.139433][ T8299] EXT4-fs (loop3): shut down requested (1) [ 414.868959][ T7512] INFO: trying to register non-static key. [ 414.874833][ T7512] The code is fine but needs lockdep annotation, or maybe [ 414.881951][ T7512] you didn't initialize this object before use? [ 414.888284][ T7512] turning off the locking correctness validator. [ 414.894601][ T7512] CPU: 1 PID: 7512 Comm: gfs2_quotad Not tainted syzkaller #0 [ 414.902078][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 414.912144][ T7512] Call Trace: [ 414.915425][ T7512] [ 414.918364][ T7512] dump_stack_lvl+0x188/0x24e [ 414.923075][ T7512] ? show_regs_print_info+0x12/0x12 [ 414.928315][ T7512] ? load_image+0x400/0x400 [ 414.931106][ T8307] loop2: detected capacity change from 0 to 2048 [ 414.932826][ T7512] ? _find_next_bit+0x11e/0x130 [ 414.944016][ T7512] ? __is_module_percpu_address+0x279/0x3b0 [ 414.949936][ T7512] ? is_kernel_percpu_address+0x18f/0x1b0 [ 414.950910][ T8307] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 414.955684][ T7512] assign_lock_key+0x201/0x230 [ 414.969247][ T7512] ? SOFTIRQ_verbose+0x10/0x10 [ 414.974048][ T7512] ? mark_lock+0x94/0x320 [ 414.978410][ T7512] ? __lock_acquire+0x13cf/0x7d10 [ 414.983465][ T7512] register_lock_class+0x21d/0x870 [ 414.988615][ T7512] ? is_dynamic_key+0x260/0x260 [ 414.993486][ T7512] __lock_acquire+0x16f/0x7d10 [ 414.998280][ T7512] ? verify_lock_unused+0x140/0x140 [ 415.003522][ T7512] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 415.009535][ T7512] ? lock_chain_count+0x20/0x20 [ 415.014409][ T7512] ? __free_object+0x218/0xa70 [ 415.019196][ T7512] ? lockdep_hardirqs_on+0x94/0x140 [ 415.024407][ T7512] ? verify_lock_unused+0x140/0x140 [ 415.029612][ T7512] ? alloc_object+0x640/0x640 [ 415.034284][ T7512] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 415.040285][ T7512] ? lock_chain_count+0x20/0x20 [ 415.045157][ T7512] lock_acquire+0x1bb/0x4a0 [ 415.049671][ T7512] ? finish_wait+0xb8/0x1d0 [ 415.054180][ T7512] ? timer_delete_sync+0x20/0x20 [ 415.059112][ T7512] ? __mod_timer+0x91e/0xd00 [ 415.063692][ T7512] ? read_lock_is_recursive+0x10/0x10 [ 415.069064][ T7512] _raw_spin_lock_irqsave+0xb0/0x100 [ 415.074360][ T7512] ? finish_wait+0xb8/0x1d0 [ 415.078860][ T7512] ? _raw_spin_lock+0x40/0x40 [ 415.083530][ T7512] ? update_process_times+0x1b0/0x1b0 [ 415.088899][ T7512] finish_wait+0xb8/0x1d0 [ 415.093231][ T7512] gfs2_quotad+0x4f3/0x680 [ 415.097651][ T7512] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 415.102758][ T7512] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 415.108649][ T7512] ? wake_bit_function+0x200/0x200 [ 415.113758][ T7512] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 415.119648][ T7512] ? __kthread_parkme+0x162/0x1c0 [ 415.124676][ T7512] kthread+0x29d/0x330 [ 415.128739][ T7512] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 415.133869][ T7512] ? kthread_blkcg+0xd0/0xd0 [ 415.138476][ T7512] ret_from_fork+0x1f/0x30 [ 415.142903][ T7512] [ 415.145918][ T7512] list_del corruption. prev->next should be ffffc9000d5ffe58, but was 0000000000000000. (prev=ffff888040ed8bd8) [ 415.158014][ T7512] ------------[ cut here ]------------ [ 415.163463][ T7512] kernel BUG at lib/list_debug.c:61! [ 415.168763][ T7512] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 415.174821][ T7512] CPU: 1 PID: 7512 Comm: gfs2_quotad Not tainted syzkaller #0 [ 415.182271][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 415.192322][ T7512] RIP: 0010:__list_del_entry_valid+0x10a/0x120 [ 415.198478][ T7512] Code: e8 9b 03 0d 06 0f 0b 48 c7 c7 60 17 df 8a 48 89 de e8 8a 03 0d 06 0f 0b 48 c7 c7 c0 17 df 8a 48 89 de 4c 89 f9 e8 76 03 0d 06 <0f> 0b 48 c7 c7 40 18 df 8a 48 89 de 4c 89 f1 e8 62 03 0d 06 0f 0b [ 415.218076][ T7512] RSP: 0018:ffffc9000d5ffd30 EFLAGS: 00010046 [ 415.224139][ T7512] RAX: 000000000000006d RBX: ffffc9000d5ffe58 RCX: 16213bd0ee7e4000 [ 415.232103][ T7512] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 415.240066][ T7512] RBP: dffffc0000000000 R08: ffffc9000d5ff9a7 R09: 1ffff92001abff34 [ 415.248029][ T7512] R10: dffffc0000000000 R11: fffff52001abff35 R12: dffffc0000000000 [ 415.255993][ T7512] R13: ffff888040ed8b98 R14: ffff888040ed8bd8 R15: ffff888040ed8bd8 [ 415.263959][ T7512] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 415.272879][ T7512] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.279457][ T7512] CR2: 0000001b2ed15ff8 CR3: 000000007e61d000 CR4: 00000000003526e0 [ 415.287429][ T7512] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 415.295399][ T7512] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 415.303364][ T7512] Call Trace: [ 415.306639][ T7512] [ 415.309566][ T7512] finish_wait+0xc3/0x1d0 [ 415.313900][ T7512] gfs2_quotad+0x4f3/0x680 [ 415.318320][ T7512] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 415.323429][ T7512] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 415.329322][ T7512] ? wake_bit_function+0x200/0x200 [ 415.334441][ T7512] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 415.340333][ T7512] ? __kthread_parkme+0x162/0x1c0 [ 415.345362][ T7512] kthread+0x29d/0x330 [ 415.349426][ T7512] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 415.354540][ T7512] ? kthread_blkcg+0xd0/0xd0 [ 415.359133][ T7512] ret_from_fork+0x1f/0x30 [ 415.363813][ T7512] [ 415.366835][ T7512] Modules linked in: [ 415.370734][ T7512] ---[ end trace 0000000000000000 ]--- [ 415.376182][ T7512] RIP: 0010:__list_del_entry_valid+0x10a/0x120 [ 415.382339][ T7512] Code: e8 9b 03 0d 06 0f 0b 48 c7 c7 60 17 df 8a 48 89 de e8 8a 03 0d 06 0f 0b 48 c7 c7 c0 17 df 8a 48 89 de 4c 89 f9 e8 76 03 0d 06 <0f> 0b 48 c7 c7 40 18 df 8a 48 89 de 4c 89 f1 e8 62 03 0d 06 0f 0b [ 415.401944][ T7512] RSP: 0018:ffffc9000d5ffd30 EFLAGS: 00010046 [ 415.408008][ T7512] RAX: 000000000000006d RBX: ffffc9000d5ffe58 RCX: 16213bd0ee7e4000 [ 415.415981][ T7512] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 415.423948][ T7512] RBP: dffffc0000000000 R08: ffffc9000d5ff9a7 R09: 1ffff92001abff34 [ 415.431913][ T7512] R10: dffffc0000000000 R11: fffff52001abff35 R12: dffffc0000000000 [ 415.439879][ T7512] R13: ffff888040ed8b98 R14: ffff888040ed8bd8 R15: ffff888040ed8bd8 [ 415.447846][ T7512] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 415.456770][ T7512] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.463441][ T7512] CR2: 0000001b2ed15ff8 CR3: 000000007e61d000 CR4: 00000000003526e0 [ 415.471437][ T7512] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 415.479405][ T7512] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 415.487377][ T7512] Kernel panic - not syncing: Fatal exception [ 415.493777][ T7512] Kernel Offset: disabled [ 415.498118][ T7512] Rebooting in 86400 seconds..