last executing test programs: 3m31.684633241s ago: executing program 2 (id=47): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001c40)={@cgroup, 0xffffffffffffffff, 0x19, 0x1c, 0x4}, 0x20) 3m31.577732124s ago: executing program 2 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) readv(r2, &(0x7f0000000400)=[{0x0}], 0x1) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') pread64(r3, &(0x7f0000000580)=""/253, 0xfd, 0x1) 3m31.307645001s ago: executing program 2 (id=53): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4c2000, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f00000004c0)={0x6e37, {{0x2, 0x4e23, @remote}}}, 0x88) semctl$IPC_RMID(0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file3\x00', 0x64042, 0x49) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0x1c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x6549bfc8e202b0dd, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 3m30.10424685s ago: executing program 2 (id=59): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000010) openat(0xffffffffffffffff, 0x0, 0x440, 0xab42a38ae4807252) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x945f0d78363c9637, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='tmpfs\x00', 0x810085, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001a00)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001a40)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001a80)='./dev\x00', &(0x7f0000001ac0)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000001b00)='.\x00', &(0x7f0000001b40)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000001bc0)='\x00', 0x89901) move_mount(r0, &(0x7f0000001c00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001c40)='./file0\x00', 0x152) 3m29.809479037s ago: executing program 2 (id=60): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in6={{0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e20, 0x9, @loopback, 0x3fc}}, 0x0, 0x0, 0x37, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 3m29.407101427s ago: executing program 2 (id=61): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ppoll(&(0x7f0000000580)=[{r0, 0x66e5e4004bc959de}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000480)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 3m29.228162832s ago: executing program 32 (id=61): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ppoll(&(0x7f0000000580)=[{r0, 0x66e5e4004bc959de}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000480)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 6.895571082s ago: executing program 3 (id=1032): socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./tracing\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000204000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000280)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x123080) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000300)=0x1) ppoll(&(0x7f0000000340)=[{r2, 0x80a0}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000380)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000003c0)={0x0, 0x9dc8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) lseek(r1, 0x0, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000180)}}], 0x1, 0x2000c090) close(r3) sendmmsg$inet(r1, &(0x7f0000000540)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x18}}], 0x2, 0x804) 6.775492494s ago: executing program 1 (id=1035): r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x50, 0x0, &(0x7f0000000580)=0x600) 6.682451727s ago: executing program 1 (id=1037): syz_open_procfs(0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0), 0x0) socket$netlink(0x10, 0x3, 0x0) 5.780309029s ago: executing program 0 (id=1041): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18c880914717c2650f0000000900000073112d00010000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x10008, &(0x7f0000000440)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000640)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000b40)='./file1\x00', 0x400, &(0x7f0000000b80), 0x2, 0x786, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000001380)) prlimit64(0x0, 0xe, &(0x7f00000013c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000014c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001540), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000015c0)=0x6) openat(0xffffffffffffff9c, &(0x7f0000001700)='./file1\x00', 0x8042, 0x81) r4 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./file1\x00', 0x143042, 0xc) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000001780)={0x17c04, 0xffffffffffffffff, 0x0, 0x973f, 0x83, 0x3}) 5.755638299s ago: executing program 1 (id=1042): openat(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000780)='.\x00', 0x45000008) prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x7, 0x100}, 0x0) r0 = getpid() close(0x3) sched_setscheduler(r0, 0x1, &(0x7f0000000900)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x90412000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000009c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000a80), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000800)='.\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file1\x00') inotify_init1(0x80800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mount$nfs(&(0x7f0000000100)='(\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x240000, &(0x7f00000003c0)=ANY=[@ANYBLOB="c126252d2a402c5b2c68617368002c2e215e7b2e852a7d7d40262c67686173682d67656e65726963002c29c65b2c67686173682d67656e65726963002c242c67686173682d67656e65726963002c27284029245b233a2e2c5e25267b26277d2b282c686173682c6673757569643d32393533266164352d373764652d656636652d366462312d66336364643632382c6673636f6e746578743d73746166665f752c6f626a5f726f6c653d756e636f6e66696e65645f752c66756e633d46494c455f4d4d41502c636f6e746578743d73797374656d5f752c7569643d", @ANYRESDEC, @ANYBLOB]) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107ff09058ac42a3861fa00090581"], 0x0) 4.757441684s ago: executing program 4 (id=1046): socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r3 = syz_clone(0x8d249a00, 0x0, 0xffffffffffffff17, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x8c0) ptrace(0x10, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000981cb99795bb5b877c0a000000000000000000000000850000002e000000850000002a000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) setsockopt$inet6_IPV6_ADDRFORM(r9, 0x29, 0x1, &(0x7f0000000300), 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0x9ffc) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00'], 0x1, 0x605, &(0x7f00000012c0)="$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") 3.810082766s ago: executing program 4 (id=1047): syz_clone3(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1fe) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bridge0/brif/bridge_slave_0/multicast_router\x00', 0x82041, 0x102) write(r0, &(0x7f0000000540)='3', 0x4e) 3.755139338s ago: executing program 3 (id=1048): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="0000000000000000ac95db74841b", 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.754783688s ago: executing program 4 (id=1049): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$revoke(0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6, 0x9, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) clock_settime(0xfffffffb, 0x0) 3.754641898s ago: executing program 3 (id=1050): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000340)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000004a0007072bbd7000feffffff0a000000", @ANYBLOB='V'], 0x1c}, 0x1, 0x0, 0x0, 0x20080080}, 0x0) 3.574616463s ago: executing program 3 (id=1052): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4c2000, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f00000004c0)={0x6e37, {{0x2, 0x4e23, @remote}}}, 0x88) semctl$IPC_RMID(0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file3\x00', 0x64042, 0x49) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0x1c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADLINK(r4, 0x0, 0x0) 3.542745033s ago: executing program 5 (id=1053): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18c880914717c2650f0000000900000073112d00010000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x10008, &(0x7f0000000440)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000640)="$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") syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000b40)='./file1\x00', 0x400, &(0x7f0000000b80), 0x2, 0x786, &(0x7f0000000bc0)="$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") pipe(&(0x7f0000001380)) prlimit64(0x0, 0xe, &(0x7f00000013c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000014c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001540), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000015c0)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000069cc124b621100000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000200000000095000000000000000000faffffffffffffff00000000000000000000000000ffffffff0000000009000000000000000a00000000000800"/198]) openat(0xffffffffffffff9c, &(0x7f0000001700)='./file1\x00', 0x8042, 0x81) r4 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./file1\x00', 0x143042, 0xc) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000001780)={0x17c04, 0xffffffffffffffff, 0x0, 0x973f, 0x83, 0x3}) write$P9_RXATTRCREATE(r4, &(0x7f00000017c0)={0x7, 0x21, 0x1}, 0x7) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) 2.571129157s ago: executing program 4 (id=1054): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000023c0)={0x1, &(0x7f0000002400)=[{0x6, 0x9, 0xb, 0x7ffc0001}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(0x0, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000200)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2) 2.527637718s ago: executing program 1 (id=1055): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) mkdir(&(0x7f0000000bc0)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys_mount\x00', &(0x7f0000000c40)='sysfs\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000cc0), 0xa40, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000d00)=@echo=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000d40)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000d80)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000dc0), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000e00)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) sendmmsg(r2, &(0x7f0000000e40), 0x800001d, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r4, &(0x7f0000000ec0)='bfq', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r5, &(0x7f0000000f40)='1\n', 0x2) pread64(r0, &(0x7f0000000f80), 0x8, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c00000007060500000000e1ffffff000100000505000100070000022884"], 0x1c}, 0x1, 0x0, 0x0, 0x4000814}, 0x48810) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001080)={0x1, &(0x7f00000010c0)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) close_range(r7, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/7, 0x7, 0x9) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x14, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001280)={r8}, 0xc) 2.527357618s ago: executing program 5 (id=1056): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x4e20, @loopback}, 0x10) 2.523954268s ago: executing program 3 (id=1057): socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r3 = syz_clone(0x8d249a00, 0x0, 0xffffffffffffff17, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x8c0) ptrace(0x10, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000981cb99795bb5b877c0a000000000000000000000000850000002e000000850000002a000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) setsockopt$inet6_IPV6_ADDRFORM(r9, 0x29, 0x1, &(0x7f0000000300), 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0x9ffc) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00'], 0x1, 0x605, &(0x7f00000012c0)="$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") 2.383598702s ago: executing program 5 (id=1058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd9}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x40000) 2.365275412s ago: executing program 4 (id=1059): ftruncate(0xffffffffffffffff, 0x8008976) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/18, 0x12}], 0x1) read$char_usb(r0, &(0x7f00000004c0)=""/142, 0x8e) timer_settime(0x0, 0x0, &(0x7f0000002480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 1.335836427s ago: executing program 5 (id=1060): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r1, &(0x7f0000000400)='PASV', 0x4) 1.334846258s ago: executing program 0 (id=1061): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x10, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="a9050000004074640001000000", 0x20}, {&(0x7f0000000100)="f38b350cb3f762fd25ed0e0522dd4396dad7a8450c9310", 0x17}], 0x2}}], 0x1, 0x800) 1.171151091s ago: executing program 4 (id=1062): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89fe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043506020000"], 0x9) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43, 0x0, 0xfffffffd, {0x7, 0x0, 0x0, r3, 0x0, 0x100}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.147063052s ago: executing program 1 (id=1063): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d", 0x8) 1.141815462s ago: executing program 0 (id=1064): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$revoke(0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6, 0x9, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) clock_settime(0xfffffffb, 0x0) 1.119474093s ago: executing program 3 (id=1065): openat(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000780)='.\x00', 0x45000008) prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x7, 0x100}, 0x0) r0 = getpid() close(0x3) sched_setscheduler(r0, 0x1, &(0x7f0000000900)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x90412000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000009c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000a80), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000800)='.\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file1\x00') inotify_init1(0x80800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mount$nfs(&(0x7f0000000100)='(\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x240000, &(0x7f00000003c0)=ANY=[@ANYBLOB="c126252d2a402c5b2c68617368002c2e215e7b2e852a7d7d40262c67686173682d67656e65726963002c29c65b2c67686173682d67656e65726963002c242c67686173682d67656e65726963002c27284029245b233a2e2c5e25267b26277d2b282c686173682c6673757569643d32393533266164352d373764652d656636652d366462312d66336364643632382c6673636f6e746578743d73746166665f752c6f626a5f726f6c653d756e636f6e66696e65645f752c66756e633d46494c455f4d4d41502c636f6e746578743d73797374656d5f752c7569643d", @ANYRESDEC, @ANYBLOB]) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107ff09058ac42a3861fa00090581"], 0x0) 1.063046834s ago: executing program 5 (id=1066): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0x302}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) 387.931661ms ago: executing program 5 (id=1067): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4c2000, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f00000004c0)={0x6e37, {{0x2, 0x4e23, @remote}}}, 0x88) semctl$IPC_RMID(0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file3\x00', 0x64042, 0x49) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0x1c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADLINK(r4, 0x0, 0x0) 362.156661ms ago: executing program 1 (id=1068): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000500)={0x1, [0x0]}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000580)={r1}, &(0x7f00000005c0)=0x8) 39.310239ms ago: executing program 0 (id=1069): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000071, 0x0, 0x5}]}) 20.14386ms ago: executing program 0 (id=1070): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 0s ago: executing program 0 (id=1071): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x2ea5, &(0x7f0000000000)={0x0, 0xfffffffd, 0x1403, 0x40, 0x121}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/devices/0000:00:01.0\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000680)={0xa0000, 0x0, {[0x100000000, 0x2, 0x8, 0xd12, 0x8, 0x9b, 0x100, 0x80]}}) r3 = openat(r1, &(0x7f00000005c0)='driver/unbind\x00', 0x1, 0x0) r4 = epoll_create(0x537) fgetxattr(r4, &(0x7f0000000700)=@known='security.apparmor\x00', 0x0, 0x0) write(r3, &(0x7f0000000440)='0000:00:01.0\x00', 0xd) r5 = openat(r1, &(0x7f0000000480)='driver_override\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='i915\x00', 0x5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/i915\x00', 0x0, 0x0) r7 = openat(r6, &(0x7f0000000540)='bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='0000:00:01.0\x00', 0xd) sendmsg$nl_crypto(r7, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000180)=0xe) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1c, 0x8, 0x10001, 0x2, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r9, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010427bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="935f0100ef000f00240012800bb617006d616373656300001400028005000c000000000005000a00a684c5584747552c24810100000008000500a2700b04919e8686d4a4397e896d1327e70acf8bfa3a61b2b9f1d20753ca5277c792fc1cd0d206fa11bc81661de12eb2c11b489dc28e8acdd521edf25f9d", @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) kernel console output (not intermixed with test programs): rcing a failure. [ 70.348956][ T4451] name failslab, interval 1, probability 0, space 0, times 0 [ 70.361936][ T4451] CPU: 0 PID: 4451 Comm: syz.0.68 Not tainted syzkaller #0 [ 70.369153][ T4451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 70.379257][ T4451] Call Trace: [ 70.382554][ T4451] [ 70.385492][ T4451] dump_stack_lvl+0x188/0x250 [ 70.390192][ T4451] ? show_regs_print_info+0x20/0x20 [ 70.395403][ T4451] ? load_image+0x410/0x410 [ 70.399924][ T4451] ? __lock_acquire+0x7d40/0x7d40 [ 70.404969][ T4451] should_fail+0x383/0x4b0 [ 70.409405][ T4451] should_failslab+0x5/0x20 [ 70.413918][ T4451] slab_pre_alloc_hook+0x51/0xc0 [ 70.418859][ T4451] ? __alloc_file+0x25/0x240 [ 70.423454][ T4451] kmem_cache_alloc+0x3d/0x280 [ 70.428237][ T4451] __alloc_file+0x25/0x240 [ 70.432671][ T4451] alloc_empty_file+0x90/0x180 [ 70.437445][ T4451] alloc_file+0x5c/0x510 [ 70.441709][ T4451] ? do_raw_spin_unlock+0x11d/0x230 [ 70.446925][ T4451] alloc_file_pseudo+0x180/0x200 [ 70.451880][ T4451] ? alloc_empty_file_noaccount+0x80/0x80 [ 70.457612][ T4451] ? alloc_anon_inode+0x22e/0x300 [ 70.462653][ T4451] ? memcpy+0x3c/0x60 [ 70.466645][ T4451] ? bpf_lsm_inode_init_security_anon+0x5/0x10 [ 70.472813][ T4451] ? security_inode_init_security_anon+0x7e/0xa0 [ 70.479162][ T4451] __anon_inode_getfd+0x26b/0x3d0 [ 70.484212][ T4451] ? anon_inode_getfd+0x40/0x40 [ 70.489082][ T4451] ? __se_sys_userfaultfd+0xc2/0x380 [ 70.494384][ T4451] ? kmem_cache_alloc+0x189/0x280 [ 70.499437][ T4451] __se_sys_userfaultfd+0x21c/0x380 [ 70.504651][ T4451] do_syscall_64+0x4c/0xa0 [ 70.509080][ T4451] ? clear_bhb_loop+0x30/0x80 [ 70.513767][ T4451] ? clear_bhb_loop+0x30/0x80 [ 70.518457][ T4451] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.524374][ T4451] RIP: 0033:0x7f782ec892d9 [ 70.528804][ T4451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.548424][ T4451] RSP: 002b:00007f782cee1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 70.556853][ T4451] RAX: ffffffffffffffda RBX: 00007f782ef10fa0 RCX: 00007f782ec892d9 [ 70.564844][ T4451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000801 [ 70.572827][ T4451] RBP: 00007f782ed20888 R08: 0000000000000000 R09: 0000000000000000 [ 70.580813][ T4451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.588801][ T4451] R13: 00007f782ef11038 R14: 00007f782ef10fa0 R15: 00007ffed4f71538 [ 70.596800][ T4451] [ 70.738406][ T4459] loop0: detected capacity change from 0 to 512 [ 70.784516][ T4444] chnl_net:caif_netlink_parms(): no params data found [ 70.821170][ T4459] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 70.874104][ T4459] EXT4-fs (loop0): 1 truncate cleaned up [ 70.880336][ T4459] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 71.509150][ T4468] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.545697][ T25] audit: type=1800 audit(1791955402.515:3): pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.70" name="file3" dev="loop0" ino=16 res=0 errno=0 [ 71.583773][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.590785][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.640660][ T4472] loop3: detected capacity change from 0 to 16 [ 71.689951][ T4472] erofs: (device loop3): mounted with root inode @ nid 36. [ 71.764399][ T4444] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.771763][ T4444] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.783840][ T4444] device bridge_slave_0 entered promiscuous mode [ 71.793267][ T4444] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.801153][ T4444] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.810111][ T4444] device bridge_slave_1 entered promiscuous mode [ 71.834284][ T4444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.858651][ T4444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.883122][ T4475] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.021989][ T4444] team0: Port device team_slave_0 added [ 72.034795][ T4186] attempt to access beyond end of device [ 72.034795][ T4186] loop3: rw=0, want=34359214088, limit=16 [ 72.048335][ T4186] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 72.063724][ T4186] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 72.088756][ T4444] team0: Port device team_slave_1 added [ 72.098013][ T4186] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 72.247701][ T4444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.274312][ T4444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.332164][ T26] Bluetooth: hci3: command 0x0409 tx timeout [ 72.338337][ T4444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.410671][ T4444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.435933][ T4444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.520163][ T4444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.559595][ T4509] loop1: detected capacity change from 0 to 1024 [ 72.579258][ T4444] device hsr_slave_0 entered promiscuous mode [ 72.595527][ T4444] device hsr_slave_1 entered promiscuous mode [ 72.603227][ T4444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.720636][ T4509] EXT4-fs (loop1): Ignoring removed nobh option [ 72.738045][ T4509] EXT4-fs (loop1): Ignoring removed bh option [ 72.773881][ T4444] Cannot create hsr debugfs directory [ 72.781243][ T4509] EXT4-fs (loop1): Ignoring removed nobh option [ 73.107874][ T4509] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000011,bh,nombcache,mb_optimize_scan=0x0000000000000001,nobh,. Quota mode: none. [ 73.439971][ T4509] EXT4-fs (loop1): shut down requested (2) [ 73.741747][ T4227] sony 0005:054C:03D5.0001: UNIQ does not contain a MAC address; duplicate check skipped [ 73.834564][ T4227] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0001/input/input5 [ 73.856132][ T4444] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.921683][ T4227] sony 0005:054C:03D5.0001: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 73.926931][ T4541] loop3: detected capacity change from 0 to 4096 [ 73.964116][ T4444] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.027616][ T4541] EXT4-fs (loop3): inline encryption not supported [ 74.034179][ T4444] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.053918][ T4444] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.113370][ T4541] EXT4-fs (loop3): error: could not find journal device path: error -2 [ 74.125902][ T4545] fido_id[4545]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 74.412266][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 74.517745][ T4444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.578456][ T4558] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.602150][ T622] device hsr_slave_0 left promiscuous mode [ 74.622440][ T622] device hsr_slave_1 left promiscuous mode [ 74.643558][ T622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.671365][ T622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.683310][ T622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.718059][ T622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.750640][ T622] device bridge_slave_1 left promiscuous mode [ 74.788588][ T622] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.832115][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 74.842118][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.852097][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.862092][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 74.882102][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.892108][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.902101][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.912090][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.922095][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 74.932096][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 75.923388][ T622] device bridge_slave_0 left promiscuous mode [ 75.929619][ T622] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.090932][ T4574] ip_tables: iptables: counters copy to user failed while replacing table [ 76.107152][ T4574] ip_tables: iptables: counters copy to user failed while replacing table [ 76.376404][ T622] device veth1_macvtap left promiscuous mode [ 76.406991][ T622] device veth0_macvtap left promiscuous mode [ 76.450255][ T622] device veth1_vlan left promiscuous mode [ 76.483389][ T622] device veth0_vlan left promiscuous mode [ 76.542131][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 78.258762][ T4233] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 78.522992][ T622] team0 (unregistering): Port device team_slave_1 removed [ 78.582230][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 78.590025][ T622] team0 (unregistering): Port device team_slave_0 removed [ 78.623228][ T622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.762545][ T4233] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.849986][ T622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.860674][ T4233] usb 1-1: not running at top speed; connect to a high speed hub [ 78.993278][ T4233] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.034280][ T4233] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.181543][ T622] bond0 (unregistering): Released all slaves [ 79.230703][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.241111][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.272946][ T4444] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.321670][ T4444] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.334352][ T4444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.359619][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.372926][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.384071][ T4390] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.391177][ T4390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.399518][ T4233] usb 1-1: string descriptor 0 read error: -22 [ 79.406641][ T4233] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.416203][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.425045][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.441197][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.459871][ T4390] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.467025][ T4390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.489491][ T4233] usb 1-1: 0:2 : does not exist [ 79.492589][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.511866][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.527828][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.538472][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.553220][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.570709][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.580670][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.597476][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.608095][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.622428][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.656533][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.697405][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.715582][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.865574][ T7] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 80.877612][ T7] Bluetooth: hci2: Injecting HCI hardware error event [ 80.886392][ T4196] Bluetooth: hci2: hardware error 0x00 [ 80.958725][ T4629] loop3: detected capacity change from 0 to 512 [ 81.045521][ T4629] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.085276][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.102969][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.136931][ T4629] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0002] [ 81.153739][ T4444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.173140][ T4629] System zones: 0-2, 18-18, 34-34 [ 81.234511][ T4629] EXT4-fs (loop3): 1 orphan inode deleted [ 81.244637][ T4629] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,debug,user_xattr,dioread_nolock,stripe=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 81.265645][ T4629] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.535841][ T1323] cfg80211: failed to load regulatory.db [ 81.709776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.749895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.758894][ T4233] usb 1-1: Warning! Unlikely big volume range (=6566), cval->res is probably wrong. [ 81.782292][ T4233] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = -28324/-21758/1 [ 81.812367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.828150][ T4655] loop1: detected capacity change from 0 to 512 [ 81.832590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.850985][ T4444] device veth0_vlan entered promiscuous mode [ 81.866577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.876438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.889441][ T4444] device veth1_vlan entered promiscuous mode [ 83.064342][ T4233] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 83.141825][ T4444] device veth0_macvtap entered promiscuous mode [ 83.189721][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.212783][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.241729][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.270839][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.298097][ T4444] device veth1_macvtap entered promiscuous mode [ 83.333772][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.341762][ T4233] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 83.358623][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.382358][ T4626] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.401339][ T4233] usb 1-1: USB disconnect, device number 2 [ 83.430982][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.467121][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.496828][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.517422][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.539409][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.560940][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.571944][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.584646][ T4444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.603302][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.633626][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.643463][ T4626] usb 2-1: Using ep0 maxpacket: 8 [ 83.658624][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.747373][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.762439][ T4626] usb 2-1: config 131 has an invalid interface number: 79 but max is 0 [ 83.780959][ T4626] usb 2-1: config 131 has no interface number 0 [ 83.791080][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.822458][ T4626] usb 2-1: config 131 interface 79 has no altsetting 0 [ 83.828868][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.849757][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.873824][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.042533][ T4626] usb 2-1: New USB device found, idVendor=13b1, idProduct=0039, bcdDevice=a7.41 [ 84.073778][ T4626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.127722][ T4626] usb 2-1: Product: syz [ 84.155506][ T4626] usb 2-1: Manufacturer: syz [ 84.186377][ T4626] usb 2-1: SerialNumber: syz [ 84.569396][ T4444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.613299][ T4444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.631487][ T4681] loop0: detected capacity change from 0 to 512 [ 84.650005][ T4444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.666725][ T4444] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.675732][ T4444] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.685142][ T4444] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.694283][ T4444] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.439326][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.467302][ T4626] usb 2-1: USB disconnect, device number 2 [ 85.482883][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.511488][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.528083][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.637213][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.654587][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.679056][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.730494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.842236][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.192152][ T4229] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.200874][ T4704] ip_tables: iptables: counters copy to user failed while replacing table [ 86.284514][ T26] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 86.328553][ T26] usb 5-1: config 1 has no interface number 0 [ 86.342761][ T26] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 86.372023][ T4711] loop5: detected capacity change from 0 to 512 [ 86.378709][ T26] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 86.403605][ T26] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 110, changing to 7 [ 86.442299][ T4229] usb 4-1: Using ep0 maxpacket: 8 [ 86.481936][ T4711] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 86.582354][ T26] usb 5-1: New USB device found, idVendor=0582, idProduct=015b, bcdDevice= 0.40 [ 86.597857][ T4711] EXT4-fs (loop5): 1 truncate cleaned up [ 86.608029][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.609257][ T4711] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 86.822178][ T26] usb 5-1: Product: syz [ 86.826383][ T26] usb 5-1: Manufacturer: syz [ 86.831073][ T26] usb 5-1: SerialNumber: syz [ 86.999229][ T25] audit: type=1800 audit(1791955418.285:4): pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.122" name="file3" dev="loop5" ino=16 res=0 errno=0 [ 87.412266][ T4229] usb 4-1: unable to get BOS descriptor or descriptor too short [ 87.482285][ T4229] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 87.489892][ T4229] usb 4-1: can't read configurations, error -71 [ 87.707925][ T4732] loop5: detected capacity change from 0 to 8 [ 87.807189][ T4732] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 88.535543][ T4764] loop5: detected capacity change from 0 to 512 [ 88.711706][ T4764] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.723002][ T4764] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.732782][ T26] usb 5-1: 1:0 : does not exist [ 88.751430][ T26] usb 5-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 88.852308][ T26] usb 5-1: 1:3 : does not exist [ 88.857277][ T26] usb 5-1: incorrect wMaxPacketSize 0x210 for BADD profile [ 89.499503][ T4776] netlink: 88 bytes leftover after parsing attributes in process `syz.0.133'. [ 90.113746][ T26] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 90.149635][ T4780] loop4: detected capacity change from 0 to 512 [ 90.172555][ T26] usb 5-1: USB disconnect, device number 2 [ 90.269206][ T4780] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 90.328744][ T4780] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.135: invalid indirect mapped block 256 (level 1) [ 90.395881][ T4785] loop5: detected capacity change from 0 to 512 [ 90.403794][ T4780] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.135: invalid indirect mapped block 2683928664 (level 1) [ 90.449054][ T4635] udevd[4635]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.471137][ T4780] EXT4-fs (loop4): 1 truncate cleaned up [ 90.478591][ T4785] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 90.486982][ T4780] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 90.543100][ T4785] EXT4-fs (loop5): 1 truncate cleaned up [ 90.552808][ T4785] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 90.894666][ T25] audit: type=1800 audit(1791955422.185:5): pid=4792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.136" name="file3" dev="loop5" ino=16 res=0 errno=0 [ 91.382552][ T4782] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 91.653249][ T4804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 92.308094][ T4828] loop3: detected capacity change from 0 to 512 [ 92.437927][ T4832] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4184] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4832] [ 92.643221][ T4828] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.141: iget: bad i_size value: 38620345925642 [ 92.885885][ T4828] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.141: couldn't read orphan inode 15 (err -117) [ 93.040523][ T4828] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 93.353993][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.383596][ T25] audit: type=1326 audit(1791955424.725:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4854 comm="syz.3.150" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68146112d9 code=0x0 [ 93.454988][ T4844] loop5: detected capacity change from 0 to 8192 [ 93.527492][ T4844] loop5: p1 p2 p3 [ 93.527543][ T4844] loop5: partition table partially beyond EOD, truncated [ 93.537479][ T4229] Bluetooth: hci3: command 0x0405 tx timeout [ 93.538236][ T4844] loop5: p1 start 51379968 is beyond EOD, truncated [ 93.542576][ T4844] loop5: p3 size 100663552 extends beyond EOD, truncated [ 93.843262][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 93.856385][ T26] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 93.975390][ T4588] udevd[4588]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 93.997687][ T4635] udevd[4635]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 94.022575][ T26] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 94.033231][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.045141][ T4876] loop5: detected capacity change from 0 to 1024 [ 94.095066][ T26] usb 1-1: Product: syz [ 94.117491][ T26] usb 1-1: Manufacturer: syz [ 94.122175][ T4876] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 2: comm syz.5.154: lblock 2 mapped to illegal pblock 2 (length 1) [ 94.123275][ T4876] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 94.146008][ T26] usb 1-1: SerialNumber: syz [ 94.172396][ T4876] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 48: comm syz.5.154: lblock 0 mapped to illegal pblock 48 (length 1) [ 94.191600][ T4841] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 94.225289][ T4841] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 94.235470][ T4876] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 94.245699][ T4876] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.154: Failed to acquire dquot type 0 [ 94.258422][ T4876] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 94.272365][ T4876] EXT4-fs error (device loop5): ext4_evict_inode:284: inode #11: comm syz.5.154: mark_inode_dirty error [ 94.274113][ T26] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 94.302900][ T4876] EXT4-fs warning (device loop5): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 94.329599][ T4876] EXT4-fs (loop5): 1 orphan inode deleted [ 94.351612][ T4876] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,noauto_da_alloc,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 94.480584][ T26] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 94.491871][ T26] usbserial_generic 1-1:1.0: generic converter detected [ 94.504367][ T26] usb 1-1: generic converter now attached to ttyUSB0 [ 94.542791][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 94.553647][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 94.563280][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 94.572832][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 94.582736][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 94.592208][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 94.603340][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 94.612810][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 94.622440][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 94.631895][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 94.654109][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 94.663644][ C1] generic ttyUSB0: usb_serial_generic_write_start - error submitting urb: -1 [ 94.682974][ T9] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 94.714720][ T4231] usb 1-1: USB disconnect, device number 3 [ 94.759829][ T9] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 94.761872][ T4231] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 94.792259][ T9] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:0: Failed to release dquot type 0 [ 94.800452][ T4231] usbserial_generic 1-1:1.0: device disconnected [ 94.833799][ T4444] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 94.877833][ T4444] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 94.920144][ T4444] EXT4-fs error (device loop5): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 94.994242][ T4898] loop0: detected capacity change from 0 to 1024 [ 95.076884][ T4902] loop1: detected capacity change from 0 to 512 [ 95.096689][ T25] audit: type=1326 audit(1791955426.445:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4903 comm="syz.5.156" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26c852d9 code=0x7ffc0000 [ 95.163592][ T25] audit: type=1326 audit(1791955426.475:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4903 comm="syz.5.156" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26c852d9 code=0x7ffc0000 [ 95.189990][ T25] audit: type=1326 audit(1791955426.475:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4903 comm="syz.5.156" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26c852d9 code=0x7ffc0000 [ 95.216775][ T25] audit: type=1326 audit(1791955426.475:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4903 comm="syz.5.156" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fbb26c852d9 code=0x7ffc0000 [ 95.260133][ T4902] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 95.276847][ T4908] loop3: detected capacity change from 0 to 512 [ 95.282155][ T25] audit: type=1326 audit(1791955426.475:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4903 comm="syz.5.156" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26c852d9 code=0x7ffc0000 [ 95.296954][ T4902] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.162: invalid indirect mapped block 256 (level 1) [ 95.326708][ T4388] hfsplus: b-tree write err: -5, ino 25 [ 95.333293][ T4902] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.162: invalid indirect mapped block 2683928664 (level 1) [ 95.385599][ T4388] hfsplus: b-tree write err: -5, ino 4 [ 95.391364][ T4388] hfsplus: b-tree write err: -5, ino 2 [ 95.425313][ T4908] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.163: iget: bad i_size value: 38620345925642 [ 95.435423][ T25] audit: type=1326 audit(1791955426.475:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4903 comm="syz.5.156" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26c852d9 code=0x7ffc0000 [ 95.472773][ T4908] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.163: couldn't read orphan inode 15 (err -117) [ 95.485177][ T4902] EXT4-fs (loop1): 1 truncate cleaned up [ 95.490848][ T4902] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 95.559933][ T4908] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 95.647967][ T4908] process 'syz.3.163' launched './file0' with NULL argv: empty string added [ 96.560479][ T4924] loop4: detected capacity change from 0 to 512 [ 96.638776][ T4931] loop3: detected capacity change from 0 to 8 [ 97.273230][ T4924] EXT4-fs (loop4): Test dummy encryption mode enabled [ 97.280043][ T4924] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.336343][ T4924] EXT4-fs (loop4): 1 truncate cleaned up [ 97.358437][ T4924] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,init_itable,test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 97.392162][ T1323] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 97.622525][ T1323] usb 4-1: device descriptor read/64, error -71 [ 98.013436][ T1323] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 98.832167][ T1323] usb 4-1: device descriptor read/64, error -71 [ 98.891868][ T4991] loop4: detected capacity change from 0 to 512 [ 98.928931][ T4991] EXT4-fs (loop4): Ignoring removed bh option [ 98.952323][ T1323] usb usb4-port1: attempt power cycle [ 98.955104][ T4991] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.972458][ T4835] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 99.040776][ T4991] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 99.052183][ T4679] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 99.078406][ T4991] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.425099][ T5001] loop0: detected capacity change from 0 to 512 [ 99.453899][ T4679] usb 6-1: config 0 has no interfaces? [ 99.459398][ T4679] usb 6-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 99.604246][ T4679] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.885292][ T4679] usb 6-1: config 0 descriptor?? [ 100.102114][ T1323] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.207787][ T5001] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,sysvgroups,nolazytime,. Quota mode: writeback. [ 100.235146][ T5001] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.405177][ T5023] loop3: detected capacity change from 0 to 512 [ 100.422278][ T1323] usb 4-1: device not accepting address 6, error -71 [ 100.587974][ T5023] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 100.623247][ T5023] EXT4-fs (loop3): 1 truncate cleaned up [ 100.629154][ T5023] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 100.664308][ T5032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 100.686602][ T5032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 100.764761][ T5036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.195'. [ 100.827454][ T4679] usb 6-1: USB disconnect, device number 2 [ 100.932728][ T5041] loop5: detected capacity change from 0 to 512 [ 100.974387][ T5041] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 100.985508][ T5041] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.198: invalid indirect mapped block 256 (level 1) [ 101.000849][ T5041] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.198: invalid indirect mapped block 2683928664 (level 1) [ 101.016006][ T5041] EXT4-fs (loop5): 1 truncate cleaned up [ 101.021766][ T5041] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 101.162293][ T25] kauditd_printk_skb: 131 callbacks suppressed [ 101.162310][ T25] audit: type=1800 audit(1791955432.455:144): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.193" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 102.039013][ T5060] loop0: detected capacity change from 0 to 512 [ 102.068016][ T5058] loop5: detected capacity change from 0 to 1024 [ 102.108060][ T5060] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.202: missing EA_INODE flag [ 102.121512][ T5060] EXT4-fs (loop0): Remounting filesystem read-only [ 102.150977][ T5060] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.202: error while reading EA inode 2 err=-117 [ 102.189500][ T5067] loop1: detected capacity change from 0 to 2048 [ 102.319116][ T5060] EXT4-fs (loop0): Remounting filesystem read-only [ 102.362419][ T5060] EXT4-fs (loop0): 1 orphan inode deleted [ 102.371064][ T5060] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,errors=remount-ro,. Quota mode: writeback. [ 104.093575][ T5088] FAULT_INJECTION: forcing a failure. [ 104.093575][ T5088] name fail_futex, interval 1, probability 0, space 0, times 1 [ 104.106888][ T5088] CPU: 1 PID: 5088 Comm: syz.0.208 Not tainted syzkaller #0 [ 104.114201][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.124273][ T5088] Call Trace: [ 104.127569][ T5088] [ 104.130513][ T5088] dump_stack_lvl+0x188/0x250 [ 104.135207][ T5088] ? rcu_lock_release+0x5/0x20 [ 104.139984][ T5088] ? show_regs_print_info+0x20/0x20 [ 104.145188][ T5088] ? load_image+0x410/0x410 [ 104.149709][ T5088] should_fail+0x383/0x4b0 [ 104.154137][ T5088] futex_lock_pi_atomic+0x415/0x10f0 [ 104.159435][ T5088] ? __rwlock_init+0x140/0x140 [ 104.164224][ T5088] futex_lock_pi+0x37b/0xbf0 [ 104.168835][ T5088] ? futex_requeue+0x1920/0x1920 [ 104.173792][ T5088] ? __lock_acquire+0x13b3/0x7d40 [ 104.178842][ T5088] ? futex_wait+0x680/0x680 [ 104.183353][ T5088] ? verify_lock_unused+0x140/0x140 [ 104.188559][ T5088] ? verify_lock_unused+0x140/0x140 [ 104.193792][ T5088] do_futex+0xdda/0x12b0 [ 104.198052][ T5088] ? vfs_write+0xaa6/0xd70 [ 104.202491][ T5088] ? futex_exit_release+0x1c0/0x1c0 [ 104.207706][ T5088] ? __context_tracking_exit+0x4c/0x80 [ 104.213178][ T5088] __se_sys_futex+0x389/0x420 [ 104.217866][ T5088] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 104.223859][ T5088] ? __x64_sys_futex+0xf0/0xf0 [ 104.228646][ T5088] ? __x64_sys_futex+0x1d/0xf0 [ 104.234079][ T5088] do_syscall_64+0x4c/0xa0 [ 104.238524][ T5088] ? clear_bhb_loop+0x30/0x80 [ 104.243208][ T5088] ? clear_bhb_loop+0x30/0x80 [ 104.247902][ T5088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.253804][ T5088] RIP: 0033:0x7f782ec892d9 [ 104.258232][ T5088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.277848][ T5088] RSP: 002b:00007f782cee1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 104.286281][ T5088] RAX: ffffffffffffffda RBX: 00007f782ef10fa0 RCX: 00007f782ec892d9 [ 104.294263][ T5088] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000 [ 104.302244][ T5088] RBP: 00007f782ed20888 R08: 0000000000000000 R09: 0000000034fffffd [ 104.310226][ T5088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.318293][ T5088] R13: 00007f782ef11038 R14: 00007f782ef10fa0 R15: 00007ffed4f71538 [ 104.326290][ T5088] [ 104.626018][ T5097] loop5: detected capacity change from 0 to 1024 [ 104.665162][ T5097] EXT4-fs (loop5): Ignoring removed nobh option [ 104.682293][ T5097] EXT4-fs (loop5): Ignoring removed bh option [ 104.688447][ T5097] EXT4-fs (loop5): Ignoring removed nobh option [ 104.759060][ T5097] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,resuid=0x0000000000000000,lazytime,errors=remount-ro,stripe=0x0000000000000011,bh,nombcache,mb_optimize_scan=0x0000000000000001,nobh,. Quota mode: none. [ 104.803315][ T5097] EXT4-fs (loop5): shut down requested (2) [ 105.239120][ T5115] loop1: detected capacity change from 0 to 8 [ 105.662443][ T4230] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.952565][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 106.115972][ T4626] Bluetooth: hci0: command 0x2016 tx timeout [ 106.173895][ T4230] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.185440][ T4230] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 106.228538][ T5134] loop3: detected capacity change from 0 to 512 [ 106.242851][ T5132] loop5: detected capacity change from 0 to 512 [ 106.314544][ T5134] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.218: corrupted in-inode xattr [ 106.952594][ T4230] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 106.961667][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.970337][ T5134] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.218: couldn't read orphan inode 15 (err -117) [ 107.013115][ T5134] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 107.032114][ T4230] usb 1-1: Product: syz [ 107.036311][ T4230] usb 1-1: Manufacturer: syz [ 107.040915][ T4230] usb 1-1: SerialNumber: syz [ 107.071669][ T5134] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 3: comm syz.3.218: lblock 0 mapped to illegal pblock 3 (length 1) [ 107.094233][ T5132] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 107.118919][ T5134] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.218: error -117 reading directory block [ 107.142832][ T5132] EXT4-fs (loop5): 1 truncate cleaned up [ 107.148526][ T5132] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 107.532550][ T4230] usb 1-1: Can't get UAC3 power state for id 10 [ 107.612329][ T4230] usb 1-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 107.621929][ T4230] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 107.769213][ T4230] usb 1-1: USB disconnect, device number 4 [ 107.993401][ T25] audit: type=1800 audit(1791955439.345:145): pid=5177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.219" name="file3" dev="loop5" ino=16 res=0 errno=0 [ 108.237610][ T25] audit: type=1326 audit(1791955439.585:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5188 comm="syz.0.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 108.327680][ T25] audit: type=1326 audit(1791955439.625:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5188 comm="syz.0.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 108.408119][ T5195] loop0: detected capacity change from 0 to 2048 [ 108.415354][ T25] audit: type=1326 audit(1791955439.625:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5188 comm="syz.0.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 108.495882][ T5195] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.520206][ T25] audit: type=1326 audit(1791955439.625:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5188 comm="syz.0.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 108.561752][ T25] audit: type=1326 audit(1791955439.625:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5188 comm="syz.0.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 108.764351][ T25] audit: type=1326 audit(1791955439.625:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5188 comm="syz.0.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 108.855363][ T5207] netlink: 'syz.4.234': attribute type 4 has an invalid length. [ 108.883724][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 109.399799][ T25] audit: type=1326 audit(1791955439.625:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5188 comm="syz.0.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 109.403856][ T5207] syz.4.234 (5207) used greatest stack depth: 21040 bytes left [ 109.447103][ T25] audit: type=1326 audit(1791955439.625:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5188 comm="syz.0.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 109.608854][ T25] audit: type=1326 audit(1791955439.625:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5188 comm="syz.0.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 109.689017][ T5224] loop3: detected capacity change from 0 to 512 [ 110.448782][ T5224] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 110.469135][ T5237] netlink: 272 bytes leftover after parsing attributes in process `syz.0.244'. [ 110.510105][ T5224] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.239: invalid indirect mapped block 256 (level 1) [ 110.574241][ T5240] loop0: detected capacity change from 0 to 128 [ 110.625162][ T5224] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.239: invalid indirect mapped block 2683928664 (level 1) [ 110.672630][ T5224] EXT4-fs (loop3): 1 truncate cleaned up [ 110.678310][ T5224] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 111.292280][ T5235] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 112.064929][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.078305][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.087758][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.118218][ T5282] device bridge_slave_0 left promiscuous mode [ 112.134541][ T5282] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.174225][ T5282] device bridge_slave_1 left promiscuous mode [ 112.190768][ T5282] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.214675][ T5282] bond0: (slave bond_slave_0): Releasing backup interface [ 112.260776][ T5282] bond0: (slave bond_slave_1): Releasing backup interface [ 112.376713][ T5282] team0: Port device team_slave_0 removed [ 112.444509][ T5282] team0: Port device team_slave_1 removed [ 112.461496][ T5282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.562270][ T5282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.585562][ T5282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.606919][ T5282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.464314][ T5308] attempt to access beyond end of device [ 113.464314][ T5308] loop0: rw=1, want=553, limit=128 [ 113.638762][ T5329] loop0: detected capacity change from 0 to 4096 [ 113.910309][ T1323] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 113.929332][ T5329] EXT4-fs (loop0): Ignoring removed nobh option [ 113.965516][ T5329] EXT4-fs (loop0): Test dummy encryption mode enabled [ 113.982150][ T5329] EXT4-fs (loop0): Ignoring removed bh option [ 114.001618][ T5329] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback. [ 114.060752][ T5329] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 114.108330][ T5329] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 114.312432][ T1323] usb 4-1: config 0 interface 0 has no altsetting 0 [ 114.321440][ T1323] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 114.337381][ T1323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.381476][ T1323] usb 4-1: config 0 descriptor?? [ 114.606636][ T5351] netlink: 'syz.4.275': attribute type 4 has an invalid length. [ 114.628944][ T25] kauditd_printk_skb: 6 callbacks suppressed [ 114.628957][ T25] audit: type=1326 audit(1791955445.975:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.1.274" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66dd4a2d9 code=0x7ffc0000 [ 114.707341][ T25] audit: type=1326 audit(1791955446.015:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.1.274" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66dd4a2d9 code=0x7ffc0000 [ 114.768980][ T25] audit: type=1326 audit(1791955446.015:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.1.274" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66dd4a2d9 code=0x7ffc0000 [ 114.799184][ T25] audit: type=1326 audit(1791955446.015:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.1.274" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb66dd4a2d9 code=0x7ffc0000 [ 114.810278][ T5357] device bridge1 entered promiscuous mode [ 114.899832][ T5360] netlink: 'syz.0.273': attribute type 4 has an invalid length. [ 114.923729][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 115.276941][ T1323] betop 0003:11C0:5506.0002: hidraw0: USB HID v10.01 Device [HID 11c0:5506] on usb-dummy_hcd.3-1/input0 [ 115.434347][ T25] audit: type=1326 audit(1791955446.015:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.1.274" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66dd4a2d9 code=0x7ffc0000 [ 115.450254][ T1323] betop 0003:11C0:5506.0002: no inputs found [ 115.469711][ T25] audit: type=1326 audit(1791955446.015:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.1.274" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb66dd4a2d9 code=0x7ffc0000 [ 115.495679][ T1323] usb 4-1: USB disconnect, device number 8 [ 115.694630][ T5364] fido_id[5364]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 115.799339][ T25] audit: type=1326 audit(1791955446.015:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5349 comm="syz.1.274" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb66dd4a2d9 code=0x7ffc0000 [ 116.337516][ T5378] loop3: detected capacity change from 0 to 8 [ 118.316064][ T5403] loop5: detected capacity change from 0 to 512 [ 118.407231][ T5403] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.416850][ T5403] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 118.433266][ T5403] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 118.446111][ T5403] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 118.454286][ T5403] System zones: 0-2, 18-18, 34-35 [ 118.462540][ T5403] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.112184][ T4229] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 119.492315][ T4229] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.509611][ T4229] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 119.521916][ T4229] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.542998][ T4229] usb 6-1: config 0 interface 0 has no altsetting 0 [ 119.556882][ T4229] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 119.574480][ T4229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.602536][ T4229] usb 6-1: config 0 descriptor?? [ 119.628171][ T5419] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 119.732896][ T5434] loop3: detected capacity change from 0 to 512 [ 119.765637][ T5434] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 119.798185][ T5434] EXT4-fs (loop3): 1 truncate cleaned up [ 119.810889][ T5434] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 119.893315][ T5445] loop0: detected capacity change from 0 to 1024 [ 119.926625][ T5445] EXT4-fs (loop0): Ignoring removed orlov option [ 120.524497][ T4229] dragonrise 0003:0079:0006.0003: unbalanced collection at end of report description [ 120.544478][ T4229] dragonrise 0003:0079:0006.0003: parse failed [ 120.551388][ T4229] dragonrise: probe of 0003:0079:0006.0003 failed with error -22 [ 120.638109][ T5445] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 120.680312][ T5454] netlink: 220 bytes leftover after parsing attributes in process `syz.4.313'. [ 120.739973][ T1323] usb 6-1: USB disconnect, device number 3 [ 121.025996][ T25] audit: type=1800 audit(1791955452.335:168): pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.305" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 121.250462][ T4200] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 121.602483][ T5485] loop5: detected capacity change from 0 to 128 [ 121.638613][ T5485] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 121.673577][ T5485] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512) [ 121.682710][ T5485] FAT-fs (loop5): Filesystem has been set read-only [ 121.765391][ T5485] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 122.603716][ T5508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.334'. [ 122.619822][ T5511] ip_tables: iptables: counters copy to user failed while replacing table [ 122.727126][ T5516] FAULT_INJECTION: forcing a failure. [ 122.727126][ T5516] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 122.751322][ T5516] CPU: 0 PID: 5516 Comm: syz.3.338 Not tainted syzkaller #0 [ 122.758651][ T5516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.768722][ T5516] Call Trace: [ 122.772012][ T5516] [ 122.774956][ T5516] dump_stack_lvl+0x188/0x250 [ 122.779652][ T5516] ? show_regs_print_info+0x20/0x20 [ 122.784871][ T5516] ? load_image+0x410/0x410 [ 122.789390][ T5516] ? __lock_acquire+0x7d40/0x7d40 [ 122.794435][ T5516] ? drain_obj_stock+0x360/0x360 [ 122.799393][ T5516] should_fail+0x383/0x4b0 [ 122.803837][ T5516] prepare_alloc_pages+0x1e3/0x5b0 [ 122.808974][ T5516] __alloc_pages+0x11b/0x480 [ 122.813588][ T5516] ? zone_statistics+0x170/0x170 [ 122.818545][ T5516] ? free_zapped_rcu+0x1f0/0x1f0 [ 122.823498][ T5516] ? alloc_pages+0x452/0x560 [ 122.828112][ T5516] __get_free_pages+0x8/0x30 [ 122.832728][ T5516] pgd_alloc+0x1e/0x1d0 [ 122.836896][ T5516] mm_init+0x4ea/0x840 [ 122.840980][ T5516] alloc_bprm+0x1a9/0x690 [ 122.845326][ T5516] ? strncpy_from_user+0x1f4/0x350 [ 122.850452][ T5516] do_execveat_common+0x18d/0x6b0 [ 122.855497][ T5516] __x64_sys_execveat+0xc0/0xe0 [ 122.860363][ T5516] do_syscall_64+0x4c/0xa0 [ 122.864788][ T5516] ? clear_bhb_loop+0x30/0x80 [ 122.869477][ T5516] ? clear_bhb_loop+0x30/0x80 [ 122.874170][ T5516] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.880070][ T5516] RIP: 0033:0x7f68146112d9 [ 122.884499][ T5516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.904113][ T5516] RSP: 002b:00007f6812869028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 122.912550][ T5516] RAX: ffffffffffffffda RBX: 00007f6814898fa0 RCX: 00007f68146112d9 [ 122.920537][ T5516] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 122.928515][ T5516] RBP: 00007f68146a8888 R08: 0000000000000800 R09: 0000000000000000 [ 122.936502][ T5516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.944486][ T5516] R13: 00007f6814899038 R14: 00007f6814898fa0 R15: 00007ffeb550c558 [ 122.952487][ T5516] [ 123.169254][ T5532] loop3: detected capacity change from 0 to 512 [ 123.291887][ T5532] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.344: bad orphan inode 13 [ 123.328964][ T5532] ext4_test_bit(bit=12, block=4) = 1 [ 123.345776][ T5532] is_bad_inode(inode)=0 [ 123.350085][ T5532] NEXT_ORPHAN(inode)=0 [ 123.356879][ T5532] max_ino=32 [ 123.360345][ T5532] i_nlink=1 [ 123.369250][ T5532] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.358207][ T5571] loop0: detected capacity change from 0 to 2048 [ 124.370433][ T5577] netlink: 260 bytes leftover after parsing attributes in process `syz.4.360'. [ 124.620121][ T5581] ip_tables: iptables: counters copy to user failed while replacing table [ 124.685915][ T5581] ip_tables: iptables: counters copy to user failed while replacing table [ 124.902168][ T25] audit: type=1326 audit(1791955456.225:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5589 comm="syz.0.366" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 125.001013][ T25] audit: type=1326 audit(1791955456.245:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5589 comm="syz.0.366" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 125.175366][ T25] audit: type=1326 audit(1791955456.245:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5589 comm="syz.0.366" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 125.200125][ T25] audit: type=1326 audit(1791955456.245:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5589 comm="syz.0.366" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 125.204471][ T5592] loop3: detected capacity change from 0 to 1764 [ 126.105396][ T5623] loop3: detected capacity change from 0 to 128 [ 126.159980][ T5587] ip_tables: iptables: counters copy to user failed while replacing table [ 126.217360][ T5628] loop0: detected capacity change from 0 to 8 [ 126.217754][ T5623] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 126.405655][ T5618] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 127.013549][ T5636] loop0: detected capacity change from 0 to 1024 [ 127.084177][ T5618] FAT-fs (loop3): Filesystem has been set read-only [ 127.101926][ T5636] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.382: lblock 2 mapped to illegal pblock 2 (length 1) [ 127.147470][ T5618] attempt to access beyond end of device [ 127.147470][ T5618] loop3: rw=524288, want=2073, limit=128 [ 127.191360][ T5636] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 127.230605][ T5618] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 127.246602][ T5636] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.382: lblock 0 mapped to illegal pblock 48 (length 1) [ 127.290398][ T5618] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 127.329749][ T5636] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 127.382270][ T25] audit: type=1800 audit(1791955458.675:173): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.374" name="file2" dev="loop3" ino=1048643 res=0 errno=0 [ 127.447128][ T5618] syz.3.374 (5618) used greatest stack depth: 20208 bytes left [ 127.563445][ T5636] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.382: Failed to acquire dquot type 0 [ 127.719896][ T5636] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 127.773079][ T5636] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.382: mark_inode_dirty error [ 127.794566][ T5649] loop3: detected capacity change from 0 to 1024 [ 127.801417][ T5636] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 127.835355][ T5649] EXT4-fs (loop3): Ignoring removed bh option [ 127.845360][ T5636] EXT4-fs (loop0): 1 orphan inode deleted [ 127.851130][ T5636] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 127.888143][ T4388] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.932827][ T4388] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 127.941332][ T4388] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0 [ 127.963337][ T5649] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,nodioread_nolock,barrier=0x0000000000000004,nolazytime,journal_ioprio=0x0000000000000000,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 128.256539][ T4184] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 128.354110][ T5662] netlink: 'syz.5.383': attribute type 4 has an invalid length. [ 128.375119][ T5662] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 128.589548][ T4184] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 128.875428][ T4184] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 129.029124][ T5669] loop3: detected capacity change from 0 to 256 [ 129.139463][ T5669] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 129.253665][ T5669] attempt to access beyond end of device [ 129.253665][ T5669] loop3: rw=524288, want=408, limit=256 [ 129.289401][ T5686] syz.5.394 (5686): attempted to duplicate a private mapping with mremap. This is not supported. [ 129.321392][ T5669] attempt to access beyond end of device [ 129.321392][ T5669] loop3: rw=524288, want=664, limit=256 [ 129.372321][ T5669] attempt to access beyond end of device [ 129.372321][ T5669] loop3: rw=0, want=288, limit=256 [ 129.400344][ T25] audit: type=1800 audit(1791955460.745:174): pid=5669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.390" name="file1" dev="loop3" ino=1048644 res=0 errno=0 [ 129.481769][ T25] audit: type=1800 audit(1791955460.765:175): pid=5685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.390" name="file1" dev="loop3" ino=1048644 res=0 errno=0 [ 130.593675][ T25] audit: type=1326 audit(1791955461.945:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5710 comm="syz.1.407" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66dd4a2d9 code=0x7ffc0000 [ 130.704761][ T25] audit: type=1326 audit(1791955461.945:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5710 comm="syz.1.407" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66dd4a2d9 code=0x7ffc0000 [ 130.729167][ T1323] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 131.441553][ T25] audit: type=1326 audit(1791955461.945:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5710 comm="syz.1.407" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66dd4a2d9 code=0x7ffc0000 [ 131.512328][ T1323] usb 4-1: Using ep0 maxpacket: 16 [ 131.565283][ T25] audit: type=1326 audit(1791955461.945:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5710 comm="syz.1.407" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb66dd4a2d9 code=0x7ffc0000 [ 131.632500][ T1323] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.655973][ T1323] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.681620][ T1323] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.707170][ T1323] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 131.739199][ T1323] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.750938][ T1323] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 131.780322][ T1323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.817065][ T1323] usb 4-1: config 0 descriptor?? [ 131.991098][ T5744] netlink: 36 bytes leftover after parsing attributes in process `syz.1.421'. [ 132.338733][ T1323] logitech-djreceiver 0003:046D:C53A.0004: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 132.604905][ T1323] usb 4-1: USB disconnect, device number 9 [ 133.340658][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.347022][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.812188][ T5765] loop3: detected capacity change from 0 to 512 [ 133.929903][ T5765] attempt to access beyond end of device [ 133.929903][ T5765] loop3: rw=524288, want=17179852722, limit=512 [ 133.953157][ T5765] attempt to access beyond end of device [ 133.953157][ T5765] loop3: rw=0, want=17179852714, limit=512 [ 133.971486][ T25] kauditd_printk_skb: 7 callbacks suppressed [ 133.971499][ T25] audit: type=1800 audit(1791955465.315:187): pid=5765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.428" name="file2" dev="loop3" ino=1048645 res=0 errno=0 [ 134.140678][ T5773] netlink: 'syz.4.425': attribute type 4 has an invalid length. [ 135.562797][ T5791] loop3: detected capacity change from 0 to 512 [ 136.196973][ T5791] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 136.207455][ T5791] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.324026][ T5791] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,barrier=0x0000000000000009,nodelalloc,acl,mb_optimize_scan=0x0000000000000001,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 137.346789][ T5791] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.433444][ T5790] netlink: 72 bytes leftover after parsing attributes in process `syz.3.433'. [ 138.408004][ T5824] loop3: detected capacity change from 0 to 512 [ 138.849470][ T5840] netlink: 124 bytes leftover after parsing attributes in process `syz.5.454'. [ 140.859262][ T5850] sched: RT throttling activated [ 144.056375][ T5897] loop3: detected capacity change from 0 to 1024 [ 144.501403][ T5897] hfsplus: failed to load catalog file [ 144.943706][ T5902] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.178683][ T5916] loop0: detected capacity change from 0 to 128 [ 145.226055][ T5916] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 145.276643][ T5916] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.544895][ T5928] netlink: 'syz.1.486': attribute type 4 has an invalid length. [ 145.566720][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 146.104454][ T5929] loop3: detected capacity change from 0 to 512 [ 147.759439][ T5952] netlink: 'syz.3.494': attribute type 4 has an invalid length. [ 147.893542][ T5952] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 148.100811][ T5959] netlink: 'syz.5.497': attribute type 4 has an invalid length. [ 149.650861][ T5973] loop3: detected capacity change from 0 to 256 [ 149.771339][ T5977] loop0: detected capacity change from 0 to 512 [ 149.774419][ T5973] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 150.098975][ T5977] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 150.486338][ T5977] EXT4-fs (loop0): 1 truncate cleaned up [ 150.588973][ T5977] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 150.955489][ T5987] loop3: detected capacity change from 0 to 256 [ 151.046059][ T25] audit: type=1800 audit(1791955482.385:188): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.504" name="file3" dev="loop0" ino=16 res=0 errno=0 [ 151.123832][ T5991] fuse: Unknown parameter 'user_i00000000000000000000' [ 151.154190][ T5987] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 151.604941][ T25] audit: type=1800 audit(1791955482.955:189): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.512" name="protocol" dev="configfs" ino=37527 res=0 errno=0 [ 151.647405][ T25] audit: type=1800 audit(1791955482.955:190): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.512" name="report_length" dev="configfs" ino=37531 res=0 errno=0 [ 151.686294][ T6007] capability: warning: `syz.3.515' uses 32-bit capabilities (legacy support in use) [ 151.746045][ T6009] loop3: detected capacity change from 0 to 1024 [ 151.819743][ T6009] EXT4-fs (loop3): Ignoring removed oldalloc option [ 151.842157][ T6009] EXT4-fs (loop3): Ignoring removed oldalloc option [ 151.848879][ T6009] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.901659][ T6009] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 152.731551][ T6027] loop3: detected capacity change from 0 to 512 [ 152.750559][ T6027] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 152.814204][ T6027] EXT4-fs (loop3): 1 truncate cleaned up [ 152.820199][ T6027] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 153.444453][ T25] audit: type=1800 audit(1791955484.405:191): pid=6032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.522" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 154.308061][ T6042] loop3: detected capacity change from 0 to 1024 [ 154.560929][ T6042] EXT4-fs (loop3): Ignoring removed oldalloc option [ 154.697866][ T6042] EXT4-fs (loop3): Ignoring removed oldalloc option [ 154.704586][ T6042] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.799593][ T6042] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 154.839350][ T25] audit: type=1326 audit(1791955486.185:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 154.855846][ T6050] device bridge_slave_1 entered promiscuous mode [ 154.885406][ T25] audit: type=1326 audit(1791955486.185:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 154.920127][ T25] audit: type=1326 audit(1791955486.215:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 155.031950][ T25] audit: type=1326 audit(1791955486.215:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 156.140430][ T25] audit: type=1326 audit(1791955486.215:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 156.195075][ T25] audit: type=1326 audit(1791955486.225:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 156.250310][ T25] audit: type=1326 audit(1791955486.225:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 156.303464][ T25] audit: type=1326 audit(1791955486.235:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 156.362704][ T6070] ip_tables: iptables: counters copy to user failed while replacing table [ 156.373018][ T25] audit: type=1326 audit(1791955486.235:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 156.705181][ T25] audit: type=1326 audit(1791955486.235:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 156.796675][ T25] audit: type=1326 audit(1791955486.235:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 156.899206][ T6082] loop0: detected capacity change from 0 to 1024 [ 156.991287][ T25] audit: type=1326 audit(1791955486.235:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 157.072189][ T25] audit: type=1326 audit(1791955486.235:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 157.145973][ T25] audit: type=1326 audit(1791955486.235:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6047 comm="syz.0.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f782ec892d9 code=0x7ffc0000 [ 161.181312][ T6137] loop3: detected capacity change from 0 to 512 [ 161.722550][ T6143] input: syz1 as /devices/virtual/input/input6 [ 161.955266][ T6147] loop3: detected capacity change from 0 to 512 [ 162.044657][ T6147] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 162.933098][ T6147] EXT4-fs (loop3): 1 truncate cleaned up [ 162.961645][ T6147] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 165.637885][ T6181] loop0: detected capacity change from 0 to 8 [ 167.996849][ T6205] 9pnet: p9_fd_create_tcp (6205): problem connecting socket to 127.0.0.1 [ 168.100732][ T6208] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 173.876380][ T6276] loop3: detected capacity change from 0 to 512 [ 173.915928][ T6284] ip_tables: iptables: counters copy to user failed while replacing table [ 173.992854][ T6285] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 174.070585][ T6276] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.596: iget: bad i_size value: 38620345925642 [ 174.093151][ T6276] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.596: couldn't read orphan inode 15 (err -117) [ 174.122840][ T6276] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.990616][ T6276] loop3: detected capacity change from 0 to 512 [ 176.207210][ T6276] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 176.224731][ T6276] System zones: 1-12 [ 176.560395][ T6276] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.596: missing EA_INODE flag [ 176.885448][ T6276] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.596: error while reading EA inode 12 err=-117 [ 176.919680][ T6276] EXT4-fs (loop3): 1 orphan inode deleted [ 176.939639][ T6276] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 177.924123][ T6333] futex_wake_op: syz.1.616 tries to shift op by 32; fix this program [ 178.883609][ T6342] loop3: detected capacity change from 0 to 1024 [ 179.089193][ T6342] hfsplus: invalid length 32517 has been corrected to 255 [ 179.127684][ T6349] loop0: detected capacity change from 0 to 512 [ 179.226619][ T6342] hfsplus: invalid length 32517 has been corrected to 255 [ 179.242753][ T6342] hfsplus: invalid length 32517 has been corrected to 255 [ 179.274138][ T6342] hfsplus: invalid length 32517 has been corrected to 255 [ 179.304571][ T6342] hfsplus: invalid length 32517 has been corrected to 255 [ 179.309501][ T6349] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.622: iget: bad i_size value: 38620345925642 [ 179.424187][ T6342] hfsplus: invalid length 32517 has been corrected to 255 [ 179.464918][ T6349] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.622: couldn't read orphan inode 15 (err -117) [ 179.510887][ T6349] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.565022][ T4386] hfsplus: b-tree write err: -5, ino 25 [ 179.581225][ T4386] hfsplus: b-tree write err: -5, ino 4 [ 179.592426][ T4386] hfsplus: b-tree write err: -5, ino 2 [ 179.736191][ T6349] loop0: detected capacity change from 0 to 512 [ 179.918921][ T6349] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 179.962386][ T6349] System zones: 1-12 [ 180.001416][ T6349] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.622: missing EA_INODE flag [ 180.112533][ T6349] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.622: error while reading EA inode 12 err=-117 [ 180.319304][ T6349] EXT4-fs (loop0): 1 orphan inode deleted [ 180.345615][ T6349] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 180.374563][ T6355] loop3: detected capacity change from 0 to 8 [ 180.793872][ T6349] loop0: detected capacity change from 0 to 2048 [ 180.892283][ T4228] Bluetooth: hci1: command 0x0406 tx timeout [ 181.185708][ T4228] Bluetooth: hci4: command 0x0406 tx timeout [ 181.453981][ T6371] usb usb8: usbfs: process 6371 (syz.3.627) did not claim interface 0 before use [ 181.568513][ T6349] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 181.584194][ T6374] loop3: detected capacity change from 0 to 512 [ 181.836418][ T6382] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 182.162495][ T6374] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 182.196257][ T6374] EXT4-fs (loop3): 1 truncate cleaned up [ 182.210838][ T6374] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 182.967754][ T25] kauditd_printk_skb: 5 callbacks suppressed [ 182.967769][ T25] audit: type=1800 audit(1791955514.315:211): pid=6389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.629" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 186.210839][ T6413] loop3: detected capacity change from 0 to 512 [ 186.319152][ T6416] 9pnet: Insufficient options for proto=fd [ 186.333657][ T6413] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.644: iget: bad i_size value: 38620345925642 [ 186.425487][ T6413] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.644: couldn't read orphan inode 15 (err -117) [ 186.428555][ T6420] loop0: detected capacity change from 0 to 512 [ 186.462225][ T6420] EXT4-fs (loop0): Ignoring removed oldalloc option [ 186.516126][ T6413] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.724063][ T6420] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,grpquota,barrier=0x0000000000000101,,errors=continue. Quota mode: writeback. [ 186.752350][ T6420] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.830151][ T6413] loop3: detected capacity change from 0 to 512 [ 186.919923][ T6413] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 186.933414][ T6413] System zones: 1-12 [ 186.997673][ T6413] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.644: missing EA_INODE flag [ 187.014631][ T6413] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.644: error while reading EA inode 12 err=-117 [ 187.038333][ T6413] EXT4-fs (loop3): 1 orphan inode deleted [ 187.054442][ T6413] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 187.826162][ T6439] loop3: detected capacity change from 0 to 512 [ 188.417447][ T6439] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 188.478517][ T6442] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 3391 (only 1 groups) [ 188.492997][ T6439] EXT4-fs (loop3): 1 truncate cleaned up [ 188.498828][ T6439] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 188.678294][ T25] audit: type=1800 audit(1791955520.025:212): pid=6444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.648" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 189.100197][ T6451] ip_tables: iptables: counters copy to user failed while replacing table [ 190.820170][ T6469] 9pnet: Insufficient options for proto=fd [ 190.847858][ T6472] loop0: detected capacity change from 0 to 512 [ 191.935613][ T6472] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 192.002829][ T6472] EXT4-fs (loop0): 1 truncate cleaned up [ 192.008596][ T6472] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 192.351264][ T25] audit: type=1800 audit(1791955523.695:213): pid=6491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.660" name="file3" dev="loop0" ino=16 res=0 errno=0 [ 194.046890][ T6511] syz.0.669 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 194.265762][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.286276][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.796385][ T6518] loop0: detected capacity change from 0 to 512 [ 194.914938][ T6518] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.674: iget: bad i_size value: 38620345925642 [ 194.988389][ T6518] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.674: couldn't read orphan inode 15 (err -117) [ 195.007832][ T6518] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 195.168159][ T6518] loop0: detected capacity change from 0 to 512 [ 195.207493][ T6518] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 195.215688][ T6518] System zones: 1-12 [ 195.237685][ T6518] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.674: missing EA_INODE flag [ 195.259938][ T6518] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.674: error while reading EA inode 12 err=-117 [ 195.282461][ T6518] EXT4-fs (loop0): 1 orphan inode deleted [ 195.288218][ T6518] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 195.446423][ T6518] loop0: detected capacity change from 0 to 2048 [ 195.706305][ T6518] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.301243][ T6546] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 197.184176][ T6556] loop3: detected capacity change from 0 to 512 [ 197.230317][ T6556] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.685: iget: bad i_size value: 38620345925642 [ 197.267001][ T6556] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.685: couldn't read orphan inode 15 (err -117) [ 197.292045][ T6556] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 198.126622][ T6556] loop3: detected capacity change from 0 to 512 [ 198.164446][ T6556] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 198.180111][ T6556] System zones: 1-12 [ 198.186621][ T6556] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.685: missing EA_INODE flag [ 198.214393][ T6556] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.685: error while reading EA inode 12 err=-117 [ 198.237704][ T6556] EXT4-fs (loop3): 1 orphan inode deleted [ 198.246280][ T6556] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 198.310753][ T6580] loop0: detected capacity change from 0 to 1024 [ 200.167957][ T6580] hfsplus: failed to load catalog file [ 200.868370][ T6608] ip_tables: iptables: counters copy to user failed while replacing table [ 200.884864][ T6608] ip_tables: iptables: counters copy to user failed while replacing table [ 202.081518][ T1323] Bluetooth: hci3: command 0x0406 tx timeout [ 202.125581][ T6619] loop0: detected capacity change from 0 to 512 [ 202.321056][ T6631] loop3: detected capacity change from 0 to 1024 [ 202.557588][ T6619] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.708: iget: bad i_size value: 38620345925642 [ 202.879362][ T6619] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.708: couldn't read orphan inode 15 (err -117) [ 202.901746][ T6619] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 202.915941][ T6631] hfsplus: failed to load catalog file [ 203.018914][ T6619] loop0: detected capacity change from 0 to 512 [ 203.111131][ T6619] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 203.136375][ T6619] System zones: 1-12 [ 203.141477][ T6619] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.708: missing EA_INODE flag [ 203.203194][ T6619] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.708: error while reading EA inode 12 err=-117 [ 203.277771][ T6619] EXT4-fs (loop0): 1 orphan inode deleted [ 203.284818][ T6619] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 204.093223][ T6619] loop0: detected capacity change from 0 to 2048 [ 204.324240][ T6619] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 204.882171][ T4200] Bluetooth: min 0 < 6 [ 205.467639][ T6698] loop3: detected capacity change from 0 to 512 [ 205.655927][ T6698] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 205.672949][ T6698] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.737: invalid indirect mapped block 256 (level 1) [ 205.910684][ T6698] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.737: invalid indirect mapped block 2683928664 (level 1) [ 206.185696][ T6698] EXT4-fs (loop3): 1 truncate cleaned up [ 206.232097][ T6698] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 207.177595][ T4626] Bluetooth: hci4: command 0x2021 tx timeout [ 207.262825][ T6735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.751'. [ 208.450753][ T4195] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 208.472327][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.479771][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.547339][ T6735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.596779][ T6735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.320356][ T6735] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.342208][ T6735] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.351946][ T6735] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.365049][ T6735] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.681348][ T6735] syz.0.751 (6735) used greatest stack depth: 19920 bytes left [ 211.411179][ T6789] netlink: 'syz.0.764': attribute type 4 has an invalid length. [ 211.813506][ T6797] loop3: detected capacity change from 0 to 512 [ 211.951331][ T6805] loop0: detected capacity change from 0 to 512 [ 211.998223][ T6805] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 212.012946][ T6797] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.769: iget: bad i_size value: 38620345925642 [ 212.026372][ T6797] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.769: couldn't read orphan inode 15 (err -117) [ 212.040947][ T6797] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 212.059519][ T6805] EXT4-fs (loop0): 1 truncate cleaned up [ 212.084840][ T6805] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 212.293869][ T6797] loop3: detected capacity change from 0 to 512 [ 212.321683][ T6797] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 212.333201][ T6797] System zones: 1-12 [ 213.123393][ T6797] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.769: missing EA_INODE flag [ 213.373229][ T6797] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.769: error while reading EA inode 12 err=-117 [ 213.446740][ T6797] EXT4-fs (loop3): 1 orphan inode deleted [ 213.478194][ T6797] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 213.718481][ T6797] loop3: detected capacity change from 0 to 2048 [ 213.741832][ T6835] 9pnet_virtio: no channels available for device syz [ 213.865646][ T6836] netlink: 'syz.5.779': attribute type 4 has an invalid length. [ 214.388452][ T6797] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 214.710770][ T6845] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 216.798091][ T6869] IPVS: Error connecting to the multicast addr [ 216.802121][ T6870] loop3: detected capacity change from 0 to 512 [ 216.874028][ T6870] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 216.974376][ T6870] EXT4-fs (loop3): 1 truncate cleaned up [ 216.980070][ T6870] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 217.929525][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.795'. [ 218.897660][ T6916] loop3: detected capacity change from 0 to 512 [ 218.929349][ T6907] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 218.997009][ T6916] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.805: iget: bad i_size value: 38620345925642 [ 219.025155][ T6916] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.805: couldn't read orphan inode 15 (err -117) [ 219.091030][ T6916] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 219.882382][ T6916] loop3: detected capacity change from 0 to 512 [ 220.021542][ T6916] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 220.062210][ T6916] System zones: 1-12 [ 220.091902][ T6916] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.805: missing EA_INODE flag [ 220.170007][ T6916] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.805: error while reading EA inode 12 err=-117 [ 220.237613][ T6916] EXT4-fs (loop3): 1 orphan inode deleted [ 220.259689][ T6916] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 221.097167][ T6956] netlink: 'syz.0.818': attribute type 4 has an invalid length. [ 221.730700][ T6916] loop3: detected capacity change from 0 to 2048 [ 222.523681][ T6973] loop0: detected capacity change from 0 to 1024 [ 222.809130][ T6916] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3. [ 222.951274][ T6973] hfsplus: failed to load catalog file [ 224.643909][ T6998] loop3: detected capacity change from 0 to 1024 [ 224.838585][ T6998] hfsplus: failed to load catalog file [ 225.255929][ T7016] jffs2: notice: (7016) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 225.325322][ T7026] syz.4.837 uses obsolete (PF_INET,SOCK_PACKET) [ 225.339379][ T7025] loop0: detected capacity change from 0 to 512 [ 225.463508][ T7031] loop3: detected capacity change from 0 to 1024 [ 225.598398][ T7031] hfsplus: failed to load catalog file [ 225.899884][ T7025] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.839: iget: bad i_size value: 38620345925642 [ 226.059209][ T7025] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.839: couldn't read orphan inode 15 (err -117) [ 226.071589][ T7025] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 226.268787][ T7025] loop0: detected capacity change from 0 to 512 [ 226.327632][ T7025] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 226.357445][ T7025] System zones: 1-12 [ 226.369440][ T7025] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.839: missing EA_INODE flag [ 226.536866][ T7025] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.839: error while reading EA inode 12 err=-117 [ 226.586456][ T7025] EXT4-fs (loop0): 1 orphan inode deleted [ 226.592617][ T7025] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 227.500465][ T7025] loop0: detected capacity change from 0 to 2048 [ 227.611259][ T7065] device syzkaller1 entered promiscuous mode [ 227.685278][ T7070] netlink: 'syz.5.847': attribute type 4 has an invalid length. [ 227.848042][ T7025] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 228.556133][ T7080] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 229.852259][ T4230] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 229.913151][ T7092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.854'. [ 230.024427][ T7094] Invalid ELF header magic: != ELF [ 230.069890][ T7094] overlayfs: overlapping lowerdir path [ 230.092273][ T4230] usb 4-1: Using ep0 maxpacket: 8 [ 230.212352][ T4230] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.242168][ T4230] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.282156][ T4230] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 230.312202][ T4230] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.359025][ T4230] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 230.397065][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.483208][ T4230] usbtmc 4-1:16.0: bulk endpoints not found [ 231.375564][ T7113] overlayfs: failed to clone upperpath [ 231.400506][ T7113] overlayfs: unrecognized mount option "verity=require" or missing value [ 231.409981][ T7117] UBIFS error (pid: 7117): cannot open "ubi:0", error -19 [ 231.458602][ T7113] 9pnet_virtio: no channels available for device syz [ 231.851923][ T7135] loop0: detected capacity change from 0 to 1024 [ 232.055973][ T7135] hfsplus: failed to load catalog file [ 232.448264][ T4228] usb 4-1: USB disconnect, device number 10 [ 233.360462][ T7170] loop0: detected capacity change from 0 to 512 [ 233.454086][ T7170] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.883: iget: bad i_size value: 38620345925642 [ 233.702063][ C1] hrtimer: interrupt took 41145 ns [ 233.836976][ T7170] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.883: couldn't read orphan inode 15 (err -117) [ 234.050268][ T7170] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 234.136934][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.884'. [ 234.396909][ T7170] loop0: detected capacity change from 0 to 512 [ 234.500981][ T7170] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 234.535094][ T7170] System zones: 1-12 [ 234.573438][ T7170] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.883: missing EA_INODE flag [ 234.622553][ T7170] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.883: error while reading EA inode 12 err=-117 [ 234.644024][ T7170] EXT4-fs (loop0): 1 orphan inode deleted [ 234.652395][ T7170] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 234.837866][ T7170] loop0: detected capacity change from 0 to 2048 [ 235.152246][ T25] audit: type=1326 audit(1791955566.455:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.3.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68146112d9 code=0x7ffc0000 [ 235.367542][ T7170] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 235.766210][ T25] audit: type=1326 audit(1791955566.455:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.3.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68146112d9 code=0x7ffc0000 [ 235.794737][ T25] audit: type=1326 audit(1791955566.465:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.3.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f68146112d9 code=0x7ffc0000 [ 235.883459][ T25] audit: type=1326 audit(1791955566.465:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.3.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68146112d9 code=0x7ffc0000 [ 236.006432][ T7205] jffs2: notice: (7205) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 236.078010][ T25] audit: type=1326 audit(1791955566.465:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.3.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68146112d9 code=0x7ffc0000 [ 236.164914][ T7213] netlink: 'syz.4.892': attribute type 8 has an invalid length. [ 236.223381][ T7215] netlink: 'syz.3.894': attribute type 39 has an invalid length. [ 236.248207][ T25] audit: type=1326 audit(1791955566.465:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.3.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f68146112d9 code=0x7ffc0000 [ 236.371747][ T25] audit: type=1326 audit(1791955566.465:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.3.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68146112d9 code=0x7ffc0000 [ 236.605347][ T25] audit: type=1326 audit(1791955566.465:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.3.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68146112d9 code=0x7ffc0000 [ 237.894717][ T25] audit: type=1326 audit(1791955566.465:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.3.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f68146112d9 code=0x7ffc0000 [ 238.098525][ T25] audit: type=1326 audit(1791955566.465:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.3.889" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68146112d9 code=0x7ffc0000 [ 238.313743][ T7233] loop0: detected capacity change from 0 to 512 [ 238.473227][ T7233] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.899: iget: bad i_size value: 38620345925642 [ 238.549826][ T7233] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.899: couldn't read orphan inode 15 (err -117) [ 238.593164][ T7233] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 238.648755][ T7237] netlink: 'syz.5.901': attribute type 1 has an invalid length. [ 238.656636][ T7237] netlink: 'syz.5.901': attribute type 2 has an invalid length. [ 238.764934][ T7233] loop0: detected capacity change from 0 to 512 [ 238.859623][ T7233] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 238.891698][ T7233] System zones: 1-12 [ 238.939024][ T7233] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.899: missing EA_INODE flag [ 239.006053][ T7233] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.899: error while reading EA inode 12 err=-117 [ 239.058100][ T7233] EXT4-fs (loop0): 1 orphan inode deleted [ 239.080180][ T7233] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 240.095833][ T7263] UBIFS error (pid: 7263): cannot open "ubi:0", error -19 [ 240.360789][ T7233] loop0: detected capacity change from 0 to 2048 [ 240.535025][ T7268] TCP: TCP_TX_DELAY enabled [ 241.204956][ T7233] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 242.613106][ T7310] netlink: 76 bytes leftover after parsing attributes in process `syz.5.919'. [ 242.680212][ T7299] tipc: Enabling of bearer rejected, failed to enable media [ 243.428999][ T7318] loop3: detected capacity change from 0 to 512 [ 243.652960][ T7318] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.925: iget: bad i_size value: 38620345925642 [ 243.684606][ T7318] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.925: couldn't read orphan inode 15 (err -117) [ 244.044117][ T7318] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 244.463856][ T4195] Bluetooth: unknown link type 128 [ 245.547416][ T4195] Bluetooth: Wrong link type (-22) [ 245.551397][ T7318] loop3: detected capacity change from 0 to 512 [ 245.613914][ T7318] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 245.622170][ T7318] System zones: 1-12 [ 245.628120][ T7318] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.925: missing EA_INODE flag [ 245.646760][ T7318] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.925: error while reading EA inode 12 err=-117 [ 245.660840][ T7318] EXT4-fs (loop3): 1 orphan inode deleted [ 245.672985][ T7318] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 246.522493][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 246.557840][ T7318] loop3: detected capacity change from 0 to 2048 [ 246.673049][ T7318] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.701696][ T7363] jffs2: notice: (7363) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 247.314522][ T7374] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 248.624569][ T7396] loop3: detected capacity change from 0 to 8 [ 248.999259][ T7393] loop0: detected capacity change from 0 to 1024 [ 250.565940][ T7393] hfsplus: failed to load catalog file [ 250.805942][ T7394] SQUASHFS error: zlib decompression failed, data probably corrupt [ 250.814378][ T7394] SQUASHFS error: Failed to read block 0x4de: -5 [ 250.821072][ T7394] SQUASHFS error: Failed to read block 0x4e2: -5 [ 250.827557][ T7394] SQUASHFS error: Failed to read block 0x9ca: -5 [ 250.833988][ T7394] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 250.840512][ T7394] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 250.847614][ T7394] SQUASHFS error: Failed to read block 0x535f2: -5 [ 250.927447][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 250.927465][ T25] audit: type=1800 audit(1791955582.255:225): pid=7394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.944" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 251.961015][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 252.066201][ T7425] netlink: 'syz.1.953': attribute type 4 has an invalid length. [ 254.526903][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.961'. [ 255.624601][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.833237][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.056360][ T7462] netlink: 'syz.4.968': attribute type 4 has an invalid length. [ 257.853081][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 258.217054][ T7489] loop3: detected capacity change from 0 to 512 [ 258.279052][ T7489] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 258.296588][ T7489] EXT4-fs (loop3): 1 truncate cleaned up [ 258.316238][ T7489] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 258.546827][ T25] audit: type=1800 audit(1791955589.895:226): pid=7494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.976" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 258.606651][ T7497] loop0: detected capacity change from 0 to 512 [ 258.690524][ T7497] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.977: iget: bad i_size value: 38620345925642 [ 258.896512][ T7497] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.977: couldn't read orphan inode 15 (err -117) [ 258.945811][ T7497] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 259.786650][ T7497] loop0: detected capacity change from 0 to 512 [ 259.855100][ T7497] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 259.873528][ T7497] System zones: 1-12 [ 259.901753][ T7497] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.977: missing EA_INODE flag [ 260.005161][ T7497] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.977: error while reading EA inode 12 err=-117 [ 260.062544][ T7497] EXT4-fs (loop0): 1 orphan inode deleted [ 260.079303][ T7514] netlink: 9 bytes leftover after parsing attributes in process `syz.3.983'. [ 260.085585][ T7497] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 260.102329][ T7514] device gretap0 entered promiscuous mode [ 260.203019][ T7514] netlink: 5 bytes leftover after parsing attributes in process `syz.3.983'. [ 260.222418][ T7514] 0ªî{X¹¦: renamed from gretap0 [ 260.244129][ T7514] device 30ªî{X¹¦ left promiscuous mode [ 260.269328][ T7514] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 261.045443][ T7497] loop0: detected capacity change from 0 to 2048 [ 265.264661][ T2855] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 265.344230][ T7567] loop0: detected capacity change from 0 to 512 [ 265.552978][ T7567] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 265.618163][ T7567] EXT4-fs (loop0): 1 truncate cleaned up [ 265.632150][ T7567] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 265.943058][ T25] audit: type=1800 audit(1791955597.295:227): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1003" name="file3" dev="loop0" ino=16 res=0 errno=0 [ 266.052878][ T2855] usb 4-1: Using ep0 maxpacket: 32 [ 266.172847][ T2855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.259314][ T2855] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 266.296796][ T2855] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 266.317065][ T2855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.338700][ T2855] usb 4-1: config 0 descriptor?? [ 266.359015][ T7581] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1000'. [ 266.385353][ T2855] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 266.901290][ T4626] usb 4-1: USB disconnect, device number 11 [ 267.270845][ T7594] FAULT_INJECTION: forcing a failure. [ 267.270845][ T7594] name failslab, interval 1, probability 0, space 0, times 0 [ 267.288108][ T7592] tipc: Started in network mode [ 267.303854][ T7592] tipc: Node identity 4, cluster identity 4711 [ 267.361482][ T7592] tipc: Node number set to 4 [ 267.372488][ T7594] CPU: 0 PID: 7594 Comm: syz.3.1010 Not tainted syzkaller #0 [ 267.379890][ T7594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 267.389971][ T7594] Call Trace: [ 267.393270][ T7594] [ 267.396204][ T7594] dump_stack_lvl+0x188/0x250 [ 267.400916][ T7594] ? show_regs_print_info+0x20/0x20 [ 267.406154][ T7594] ? load_image+0x410/0x410 [ 267.410685][ T7594] ? __might_sleep+0xf0/0xf0 [ 267.415289][ T7594] ? __lock_acquire+0x7d40/0x7d40 [ 267.420340][ T7594] should_fail+0x383/0x4b0 [ 267.424773][ T7594] should_failslab+0x5/0x20 [ 267.429429][ T7594] slab_pre_alloc_hook+0x51/0xc0 [ 267.434388][ T7594] __kmalloc_node+0x6d/0x3a0 [ 267.438993][ T7594] ? blk_mq_alloc_tag_set+0x4d9/0xf30 [ 267.444513][ T7594] blk_mq_alloc_tag_set+0x4d9/0xf30 [ 267.449735][ T7594] loop_add+0x257/0x890 [ 267.453911][ T7594] loop_control_ioctl+0x124/0x550 [ 267.458958][ T7594] ? xor_init+0x60/0x60 [ 267.463129][ T7594] ? bpf_lsm_file_ioctl+0x5/0x10 [ 267.468077][ T7594] ? security_file_ioctl+0x7c/0xa0 [ 267.473207][ T7594] ? xor_init+0x60/0x60 [ 267.477374][ T7594] __se_sys_ioctl+0xfa/0x170 [ 267.481979][ T7594] do_syscall_64+0x4c/0xa0 [ 267.486408][ T7594] ? clear_bhb_loop+0x30/0x80 [ 267.491096][ T7594] ? clear_bhb_loop+0x30/0x80 [ 267.495786][ T7594] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.501703][ T7594] RIP: 0033:0x7f68146112d9 [ 267.506131][ T7594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.525764][ T7594] RSP: 002b:00007f6812869028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.534204][ T7594] RAX: ffffffffffffffda RBX: 00007f6814898fa0 RCX: 00007f68146112d9 [ 267.542189][ T7594] RDX: 0000000087000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 267.550171][ T7594] RBP: 00007f68146a8888 R08: 0000000000000000 R09: 0000000000000000 [ 267.558158][ T7594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.566140][ T7594] R13: 00007f6814899038 R14: 00007f6814898fa0 R15: 00007ffeb550c558 [ 267.574141][ T7594] [ 268.582229][ T7608] ip_tables: iptables: counters copy to user failed while replacing table [ 268.599346][ T7608] ip_tables: iptables: counters copy to user failed while replacing table [ 268.967893][ T7614] loop0: detected capacity change from 0 to 512 [ 269.183041][ T7614] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 269.753913][ T7614] EXT4-fs (loop0): 1 truncate cleaned up [ 269.780786][ T7614] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 269.982942][ T2855] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 270.043661][ T25] audit: type=1800 audit(1791955601.385:228): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1016" name="file3" dev="loop0" ino=16 res=0 errno=0 [ 271.135928][ T2855] usb 4-1: Using ep0 maxpacket: 16 [ 271.240368][ T7658] Invalid ELF header magic: != ELF [ 271.782475][ T2855] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 271.901055][ T2855] usb 4-1: config 0 has no interface number 0 [ 272.208702][ T2855] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x8A has invalid maxpacket 14378, setting to 64 [ 272.272951][ T2855] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.362261][ T2855] usb 4-1: string descriptor 0 read error: -71 [ 272.368562][ T2855] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 272.405951][ T2855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.445635][ T7674] loop0: detected capacity change from 0 to 512 [ 272.451273][ T2855] usb 4-1: config 0 descriptor?? [ 272.483228][ T2855] usb 4-1: can't set config #0, error -71 [ 272.496965][ T2855] usb 4-1: USB disconnect, device number 12 [ 272.581885][ T7674] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 272.612700][ T7674] EXT4-fs (loop0): 1 truncate cleaned up [ 272.634265][ T7674] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 273.044307][ T25] audit: type=1800 audit(1791955604.315:229): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1036" name="file3" dev="loop0" ino=16 res=0 errno=0 [ 273.564050][ T7696] loop0: detected capacity change from 0 to 512 [ 274.258528][ T7696] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.1041: iget: bad i_size value: 38620345925642 [ 274.271977][ T7696] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1041: couldn't read orphan inode 15 (err -117) [ 274.288244][ T7696] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 275.094413][ T7696] loop0: detected capacity change from 0 to 512 [ 275.374576][ T7696] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 275.400702][ T7696] System zones: 1-12 [ 275.426223][ T7696] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.1041: missing EA_INODE flag [ 275.460588][ T7696] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1041: error while reading EA inode 12 err=-117 [ 275.512933][ T7696] EXT4-fs (loop0): 1 orphan inode deleted [ 275.518800][ T7696] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 275.565472][ T7721] loop3: detected capacity change from 0 to 512 [ 275.598274][ T7721] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 275.628902][ T7721] EXT4-fs (loop3): 1 truncate cleaned up [ 275.648825][ T7721] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 275.846345][ T7696] loop0: detected capacity change from 0 to 2048 [ 275.942457][ T25] audit: type=1800 audit(1791955607.265:230): pid=7725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1052" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 276.108453][ T7696] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 276.672148][ T25] audit: type=1326 audit(1791955608.005:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.1054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455885c2d9 code=0x7ffc0000 [ 276.755957][ T25] audit: type=1326 audit(1791955608.005:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.1054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455885c2d9 code=0x7ffc0000 [ 276.810788][ T7735] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 277.243479][ T7746] loop3: detected capacity change from 0 to 1024 [ 277.780181][ T25] audit: type=1326 audit(1791955608.005:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.1054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455885c2d9 code=0x7ffc0000 [ 277.805660][ T25] audit: type=1326 audit(1791955608.005:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.1054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f455885c2d9 code=0x7ffc0000 [ 277.809558][ T7746] hfsplus: failed to load catalog file [ 277.830041][ T25] audit: type=1326 audit(1791955608.005:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.1054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455885c2d9 code=0x7ffc0000 [ 278.098347][ T25] audit: type=1326 audit(1791955608.005:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.1054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455885c2d9 code=0x7ffc0000 [ 278.124556][ T25] audit: type=1326 audit(1791955608.005:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.1054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455885c2d9 code=0x7ffc0000 [ 278.701513][ T25] audit: type=1326 audit(1791955608.005:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.1054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f455885db47 code=0x7ffc0000 [ 278.726889][ T25] audit: type=1326 audit(1791955608.005:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.1054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455885c2d9 code=0x7ffc0000 [ 278.758025][ T25] audit: type=1326 audit(1791955608.005:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.1054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455885c2d9 code=0x7ffc0000 [ 278.789033][ T25] audit: type=1326 audit(1791955608.005:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.1054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455885c2d9 code=0x7ffc0000 [ 278.819861][ T25] audit: type=1326 audit(1791955608.005:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.1054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f455885c2d9 code=0x7ffc0000 [ 278.849928][ T25] audit: type=1326 audit(1791955608.015:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.1054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455885c2d9 code=0x7ffc0000 [ 278.881013][ T25] audit: type=1326 audit(1791955608.015:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.1054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455885c2d9 code=0x7ffc0000 [ 278.938267][ T25] audit: type=1326 audit(1791955608.015:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.4.1054" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455885c2d9 code=0x7ffc0000 [ 279.032877][ T4228] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 279.149352][ T7] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 279.161111][ T7] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 279.169514][ T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted syzkaller #0 [ 279.176722][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 279.186766][ T7] Workqueue: events work_for_cpu_fn [ 279.191962][ T7] RIP: 0010:i915_pci_probe+0xa1/0x450 [ 279.197329][ T7] Code: fc fc 49 8d 5e 18 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 6d e9 41 fd 48 8b 1b 48 83 c3 28 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 e0 02 00 00 0f b7 1b 89 de 83 e6 04 31 [ 279.216924][ T7] RSP: 0018:ffffc90000cc7ae0 EFLAGS: 00010206 [ 279.222978][ T7] RAX: 0000000000000005 RBX: 0000000000000028 RCX: ffff888017a8bb80 [ 279.230938][ T7] RDX: 0000000000000000 RSI: ffffffff8a7edd80 RDI: ffff8881421f2000 [ 279.238896][ T7] RBP: ffffc90000cc7bd0 R08: ffffffff91015117 R09: 1ffffffff2202a22 [ 279.246863][ T7] R10: dffffc0000000000 R11: fffffbfff2202a23 R12: 1ffff92000198f64 [ 279.254826][ T7] R13: ffff8881421f2000 R14: ffffffff8a7edd80 R15: dffffc0000000000 [ 279.262792][ T7] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 279.271725][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.278297][ T7] CR2: 000000110c2f69ad CR3: 00000000499d8000 CR4: 00000000003506f0 [ 279.286259][ T7] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 279.294218][ T7] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 279.302179][ T7] Call Trace: [ 279.305442][ T7] [ 279.308358][ T7] ? lockdep_hardirqs_on+0x94/0x140 [ 279.313540][ T7] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 279.319441][ T7] ? i915_unregister_pci_driver+0x20/0x20 [ 279.325145][ T7] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 279.331110][ T7] ? __lock_acquire+0x7d40/0x7d40 [ 279.336119][ T7] ? i915_unregister_pci_driver+0x20/0x20 [ 279.341846][ T7] local_pci_probe+0xc5/0x150 [ 279.346526][ T7] ? remove_id_store+0x5a0/0x5a0 [ 279.351538][ T7] work_for_cpu_fn+0x50/0x80 [ 279.356127][ T7] process_one_work+0x867/0xff0 [ 279.360974][ T7] ? worker_detach_from_pool+0x240/0x240 [ 279.366607][ T7] ? lockdep_hardirqs_off+0x70/0x100 [ 279.371881][ T7] ? _raw_spin_lock_irq+0xb7/0xf0 [ 279.376890][ T7] ? _raw_spin_lock_irqsave+0x100/0x100 [ 279.382426][ T7] ? wq_worker_running+0x97/0x170 [ 279.387436][ T7] worker_thread+0xad7/0x12a0 [ 279.392463][ T7] kthread+0x42e/0x520 [ 279.396559][ T7] ? rcu_lock_release+0x20/0x20 [ 279.401404][ T7] ? kthread_blkcg+0xd0/0xd0 [ 279.406003][ T7] ret_from_fork+0x1f/0x30 [ 279.410410][ T7] [ 279.413433][ T7] Modules linked in: [ 279.429784][ T7] ---[ end trace 43e790197a3c28c3 ]--- [ 279.429835][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'. [ 279.435421][ T7] RIP: 0010:i915_pci_probe+0xa1/0x450 [ 279.435466][ T7] Code: fc fc 49 8d 5e 18 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 6d e9 41 fd 48 8b 1b 48 83 c3 28 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 e0 02 00 00 0f b7 1b 89 de 83 e6 04 31 [ 279.435479][ T7] RSP: 0018:ffffc90000cc7ae0 EFLAGS: 00010206 [ 279.435495][ T7] RAX: 0000000000000005 RBX: 0000000000000028 RCX: ffff888017a8bb80 [ 279.435506][ T7] RDX: 0000000000000000 RSI: ffffffff8a7edd80 RDI: ffff8881421f2000 [ 279.435518][ T7] RBP: ffffc90000cc7bd0 R08: ffffffff91015117 R09: 1ffffffff2202a22 [ 279.435530][ T7] R10: dffffc0000000000 R11: fffffbfff2202a23 R12: 1ffff92000198f64 [ 279.435542][ T7] R13: ffff8881421f2000 R14: ffffffff8a7edd80 R15: dffffc0000000000 [ 279.435552][ T7] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 279.435565][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.435577][ T7] CR2: 00007f4558aaf2f8 CR3: 000000005fed7000 CR4: 00000000003506f0 [ 279.446204][ T7780] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1071'. [ 279.542175][ T4228] usb 4-1: Using ep0 maxpacket: 16 [ 279.557904][ T7] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 279.597445][ T7] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 279.605604][ T7] Kernel panic - not syncing: Fatal exception [ 279.611895][ T7] Kernel Offset: disabled [ 279.616246][ T7] Rebooting in 86400 seconds..