last executing test programs: 1m17.915417852s ago: executing program 2 (id=72): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) connect$netlink(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)="9980", 0x2}], 0x1}}], 0x1, 0x48045) 1m17.756665707s ago: executing program 2 (id=73): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1m17.594238312s ago: executing program 2 (id=76): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x40084) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x120) 1m17.529855264s ago: executing program 2 (id=78): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 1m17.460270236s ago: executing program 2 (id=80): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r0}, 0xc) 1m17.125620986s ago: executing program 2 (id=85): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x1c0, 0xb, 0x108, 0x108, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 1m16.992451601s ago: executing program 32 (id=85): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, 0x0, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x1c0, 0xb, 0x108, 0x108, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 1m1.90544468s ago: executing program 3 (id=202): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 1m0.892908642s ago: executing program 3 (id=210): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) 1m0.769283625s ago: executing program 3 (id=212): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r2, r2, 0x0, 0x80000000) 59.866654074s ago: executing program 3 (id=216): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000380)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@test_dummy_encryption_v1}, {@noblock_validity}, {@noquota}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 59.308270171s ago: executing program 3 (id=222): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000018c0)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x1, 0x1}, {0x3, 0x0, 0x4}, {0x2, 0x6, 0x4}, 0x0, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "866782d35f42e0b45d45d988ff0000000000001000"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2f8) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x5000000d, 0x244, 0x9, '\x00=\x00'}) r1 = syz_open_pts(r0, 0x400) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 58.725705129s ago: executing program 3 (id=224): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4, 0x34014c40, 0xffff, 0xfb85, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x40) 58.576973024s ago: executing program 33 (id=224): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4, 0x34014c40, 0xffff, 0xfb85, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1d9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x40) 5.053803222s ago: executing program 6 (id=782): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x80) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)={0x14, 0x1, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4008015}, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="0100010000000000", 0x8}], 0x1}}], 0x2, 0x4000041) 4.913060856s ago: executing program 6 (id=783): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x1f6, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000440)=0x135, 0x4) recvmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)=""/19, 0x13}}], 0x1, 0x45833af92e4b39ff, 0x0) 3.83340588s ago: executing program 6 (id=794): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.694242224s ago: executing program 6 (id=795): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000000)={[{@enospc_debug}]}, 0x1, 0x50f9, &(0x7f0000005140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffffffffffff}) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x105042, 0x0) 2.316077117s ago: executing program 5 (id=802): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, 0x0, 0x20080, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0) 2.2404557s ago: executing program 0 (id=806): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0x8, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r2, 0x934, 0x200000000005) 2.157339112s ago: executing program 0 (id=807): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 1.958018959s ago: executing program 0 (id=808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val={0xa, 0x8914}, @void, @eth={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x48, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[], {0x4e21, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "5aab333ce882c8aae294d6fa62ee12c32a97ba249ab9efb8", "de081cb0d67e54d6882b5b10955051672301055f43c2a82b7921c78e4261e278"}}}}}}}}, 0x82) mmap(&(0x7f00002e4000/0x1000)=nil, 0x1000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) 1.346723198s ago: executing program 0 (id=809): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) pselect6(0x40, &(0x7f0000000240)={0x2, 0xc9, 0x4, 0x6, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0x5, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) 1.346574927s ago: executing program 1 (id=811): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141442, 0x38) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000726) r2 = fanotify_init(0x1a, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x124) inotify_add_watch(r1, &(0x7f0000000080)='./file1\x00', 0x1) fanotify_mark(r2, 0x1, 0x4000001a, r3, 0x0) write$UHID_INPUT(r0, &(0x7f0000001a40)={0x8, {"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", 0x1000}}, 0x1006) 1.346424838s ago: executing program 6 (id=814): futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xb3020000) socket$inet6_udp(0xa, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x89, 0x7, 0x7ffc0001}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_PROG(0x9, &(0x7f0000000600)=@generic={0x0, 0x11, 0x10}, 0xc) syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') 1.021042678s ago: executing program 5 (id=817): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@delchain={0x5c, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x800008}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 814.667084ms ago: executing program 1 (id=819): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d40746877", 0x22, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000140)=""/51, 0x33}], 0x2}, 0x42) 790.214415ms ago: executing program 5 (id=820): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) getpid() r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000001c0)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x0, 0x4000ffc, 0x4a}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 789.107615ms ago: executing program 0 (id=821): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 721.573667ms ago: executing program 4 (id=822): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000000200)) 716.574387ms ago: executing program 1 (id=823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val={0xa, 0x8914}, @void, @eth={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x48, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[], {0x4e21, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "5aab333ce882c8aae294d6fa62ee12c32a97ba249ab9efb8", "de081cb0d67e54d6882b5b10955051672301055f43c2a82b7921c78e4261e278"}}}}}}}}, 0x82) mmap(&(0x7f00002e4000/0x1000)=nil, 0x1000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) 702.852168ms ago: executing program 0 (id=824): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x3, 0x9, 0xf, 0x3, 0x5, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x6, 0xff, 0x0, 0x5}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) 693.011058ms ago: executing program 4 (id=825): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 635.24425ms ago: executing program 4 (id=826): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.\x00\x00\x00', 0x4}], 0x1}, 0x80054) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x80004, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2082, 0x0) 541.932073ms ago: executing program 4 (id=827): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x106) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 540.781633ms ago: executing program 5 (id=828): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 441.546486ms ago: executing program 6 (id=829): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, 0x0, 0x20080, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0) 256.106942ms ago: executing program 5 (id=830): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) pselect6(0x40, &(0x7f0000000240)={0x2, 0xc9, 0x4, 0x6, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0x5, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) 254.859922ms ago: executing program 1 (id=840): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 250.710162ms ago: executing program 4 (id=841): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 138.184465ms ago: executing program 1 (id=831): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e9ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 137.905155ms ago: executing program 4 (id=832): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000000)={[{@enospc_debug}]}, 0x1, 0x50f9, &(0x7f0000005140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffffffffffff}) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x105042, 0x0) 62.092767ms ago: executing program 5 (id=833): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x8000) ppoll(&(0x7f0000000000)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xa0201, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0xff51) 0s ago: executing program 1 (id=834): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x2, 0x8, 0xff, 0x0, 0x2, 0x1, 0x5b, 0xc, 0x3, 0xc, 0x7, 0x81, 0x0, 0x2, 0x9, 0xae, 0x9, 0x6, 0x6, '\x00', 0x80, 0x80000000000004}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x4000, 0xc000, {0x3}, 0x0, 0x2}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffdd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000089a500000000000000000000000000000000000000000000000000000000000000000000e6ffffff00"}}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): : ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.590433][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.599673][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.616244][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.627016][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.637867][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.650607][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.660776][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.671532][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.683068][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.708330][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.717959][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.748895][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.757971][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.767123][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.775879][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.792796][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 65.798983][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 65.812413][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 65.841381][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.844038][ T590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.852986][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.872954][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 65.882297][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 65.888436][ T590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.896040][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.905537][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.919412][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.929067][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.938309][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.950143][ T4189] device veth0_macvtap entered promiscuous mode [ 65.975028][ T4189] device veth1_macvtap entered promiscuous mode [ 65.985101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.995000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.056255][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.085496][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.098349][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.114428][ T4272] loop7: detected capacity change from 0 to 16384 [ 66.116942][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.132688][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.144463][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.155498][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.166641][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.178518][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.209312][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.222228][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.244443][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.262608][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.280848][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.298581][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.309116][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.322106][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.332588][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.343603][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.356883][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.371166][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.372894][ T4273] loop_set_status: loop7 () has still dirty pages (nrpages=455) [ 66.401618][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.443897][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.455416][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.464566][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.203989][ T4276] loop1: detected capacity change from 0 to 131072 [ 67.243021][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.251740][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.265270][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.276856][ T4276] F2FS-fs (loop1): invalid crc value [ 67.287854][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.312388][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.330170][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.335662][ T4276] F2FS-fs (loop1): Found nat_bits in checkpoint [ 67.391401][ T4276] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 67.409578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.451879][ T4276] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 67.518543][ T3034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.549869][ T3034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.590817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.661262][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.685357][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.691422][ T4290] loop2: detected capacity change from 0 to 2048 [ 67.722305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.760346][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.788312][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.798561][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.878625][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 67.900448][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 67.922016][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 67.952750][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 67.967161][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 68.005341][ T4290] loop2: detected capacity change from 0 to 512 [ 68.122107][ T4290] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.142288][ T4290] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.594891][ T4294] loop3: detected capacity change from 0 to 32768 [ 68.804119][ T4305] loop1: detected capacity change from 0 to 4096 [ 69.022382][ T4236] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.312855][ T4236] usb 3-1: Using ep0 maxpacket: 32 [ 69.403307][ T4309] loop0: detected capacity change from 0 to 32768 [ 69.410046][ T4318] process 'syz.4.16' launched './file0' with NULL argv: empty string added [ 69.487313][ T4236] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 69.501570][ T4236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.691876][ T2237] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.692620][ T4236] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 69.719119][ T4309] XFS (loop0): Mounting V5 Filesystem [ 69.735156][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.766602][ T4236] usb 3-1: Product: syz [ 69.772946][ T4236] usb 3-1: Manufacturer: syz [ 69.778719][ T4236] usb 3-1: SerialNumber: syz [ 69.790775][ T4236] usb 3-1: config 0 descriptor?? [ 69.836146][ T4236] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 69.842137][ T4309] XFS (loop0): Ending clean mount [ 69.941959][ T2237] usb 4-1: Using ep0 maxpacket: 16 [ 70.025682][ T25] audit: type=1800 audit(1781888095.753:2): pid=4309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13" name="file1" dev="loop0" ino=6156 res=0 errno=0 [ 70.062161][ T2237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.129621][ T2237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.194833][ T4195] XFS (loop0): Unmounting Filesystem [ 70.209404][ T2237] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 70.225259][ T2237] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 70.235016][ T2237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.267997][ T2237] usb 4-1: config 0 descriptor?? [ 70.412669][ T4333] loop4: detected capacity change from 0 to 1024 [ 70.441020][ T4333] ======================================================= [ 70.441020][ T4333] WARNING: The mand mount option has been deprecated and [ 70.441020][ T4333] and is ignored by this kernel. Remove the mand [ 70.441020][ T4333] option from the mount to silence this warning. [ 70.441020][ T4333] ======================================================= [ 70.522030][ T4333] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,jqfmt=vfsv1,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 70.580388][ T4333] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.686794][ T4340] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.767131][ T4333] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.20: bg 0: block 112: padding at end of block bitmap is not set [ 70.811320][ T2237] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input5 [ 70.859052][ T2237] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 71.106671][ T4348] loop0: detected capacity change from 0 to 512 [ 71.136593][ T4350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 71.291660][ T2237] usb 4-1: USB disconnect, device number 2 [ 71.312823][ T4338] loop1: detected capacity change from 0 to 40427 [ 71.325424][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.332305][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.388971][ T4338] F2FS-fs (loop1): invalid crc value [ 71.451913][ T4338] F2FS-fs (loop1): Found nat_bits in checkpoint [ 71.547364][ T4338] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 71.607457][ T4366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.31'. [ 71.620310][ T4236] gspca_sunplus: reg_r err -71 [ 71.625467][ T4236] sunplus: probe of 3-1:0.0 failed with error -71 [ 71.641084][ T4236] usb 3-1: USB disconnect, device number 2 [ 71.647252][ T4368] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.806400][ T4190] attempt to access beyond end of device [ 71.806400][ T4190] loop1: rw=2049, want=45104, limit=40427 [ 71.989824][ T4375] loop3: detected capacity change from 0 to 2048 [ 72.005583][ T4377] netlink: 'syz.4.36': attribute type 1 has an invalid length. [ 72.033915][ T4377] netlink: 'syz.4.36': attribute type 22 has an invalid length. [ 72.050547][ T4377] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.059339][ T4377] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.182567][ T4381] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.331003][ T4388] loop4: detected capacity change from 0 to 256 [ 72.542096][ T2237] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 72.667285][ T4397] loop3: detected capacity change from 0 to 128 [ 72.744002][ T25] audit: type=1326 audit(1781888098.473:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4400 comm="syz.1.46" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e613a9e59 code=0x0 [ 72.748244][ T4404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.45'. [ 72.800636][ T4397] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.827014][ T4397] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.947537][ T2237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.960372][ T2237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.987207][ T2237] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 72.998765][ T2237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.027063][ T2237] usb 3-1: config 0 descriptor?? [ 73.184436][ T4409] loop0: detected capacity change from 0 to 32768 [ 73.291042][ T4409] JBD2: Ignoring recovery information on journal [ 73.374946][ T4409] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 73.515788][ T2237] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 73.551077][ T2237] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 73.618073][ T4423] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.722056][ T2237] cp2112 0003:10C4:EA90.0002: error requesting version [ 73.829397][ T2237] cp2112: probe of 0003:10C4:EA90.0002 failed with error -32 [ 73.864971][ T2237] usb 3-1: USB disconnect, device number 3 [ 73.890341][ T4409] syz.0.47 (4409) used greatest stack depth: 19920 bytes left [ 74.040883][ T4439] fido_id[4439]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 74.073086][ T4195] ocfs2: Unmounting device (7,0) on (node local) [ 74.105734][ T4443] loop3: detected capacity change from 0 to 256 [ 74.195087][ T4443] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.264852][ T25] audit: type=1800 audit(1781888099.993:4): pid=4443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.58" name="file1" dev="loop3" ino=1048591 res=0 errno=0 [ 74.282268][ T4446] loop4: detected capacity change from 0 to 8192 [ 74.315671][ T25] audit: type=1800 audit(1781888100.033:5): pid=4443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.58" name="file1" dev="loop3" ino=1048591 res=0 errno=0 [ 74.423443][ T4446] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 74.452208][ T4446] REISERFS (device loop4): using ordered data mode [ 74.465810][ T4446] reiserfs: using flush barriers [ 74.484616][ T4449] FAT-fs (loop3): error, invalid FAT chain (i_pos 196, last_block 8200) [ 74.494991][ T4449] FAT-fs (loop3): Filesystem has been set read-only [ 74.506693][ T4446] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.525885][ T4446] REISERFS (device loop4): checking transaction log (loop4) [ 74.546124][ T4446] REISERFS (device loop4): Using r5 hash to sort names [ 74.558334][ T4446] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 74.693877][ T4458] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 3209, free_space(entry_count) 2 [ 74.731644][ T4458] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 540. Fsck? [ 74.758720][ T4458] REISERFS (device loop4): Remounting filesystem read-only [ 74.781695][ T4458] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4 0x0 SD] stat data [ 74.999092][ T4452] loop2: detected capacity change from 0 to 32768 [ 75.108258][ T4452] XFS (loop2): Mounting V5 Filesystem [ 75.166083][ T4452] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 75.189051][ T4452] XFS (loop2): Tail block (0x29) overwrite detected. Updated to 0x30 [ 75.208683][ T4452] XFS (loop2): Ending clean mount [ 75.258855][ T4452] XFS (loop2): User initiated shutdown received. [ 75.265737][ T4452] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 75.280495][ T4452] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 75.289062][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.301456][ T4452] XFS (loop2): Error -5 reserving per-AG metadata reserve pool. [ 75.319744][ T4191] XFS (loop2): Unmounting Filesystem [ 75.392110][ T2287] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.620870][ T4483] loop0: detected capacity change from 0 to 128 [ 75.632012][ T2287] usb 5-1: Using ep0 maxpacket: 32 [ 75.692186][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.705600][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.723517][ T4483] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 75.736941][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.752231][ T2287] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 75.760361][ T4483] hpfs: filesystem error: improperly stopped [ 75.768155][ T4483] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 75.776473][ T7] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.785934][ T4483] hpfs: You really don't want any checks? You are crazy... [ 75.795721][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.799531][ T2287] usb 5-1: config 0 has no interface number 0 [ 75.804223][ T4483] hpfs: Code page index out of array [ 75.828783][ T7] usb 4-1: config 0 descriptor?? [ 75.834428][ T4483] hpfs: code page support is disabled [ 75.860046][ T4483] hpfs: hpfs_map_4sectors(): unaligned read [ 75.868954][ T4483] hpfs: hpfs_map_4sectors(): unaligned read [ 75.876545][ T4483] hpfs: filesystem error: unable to find root dir [ 75.992110][ T2287] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 76.020086][ T2287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.036657][ T4493] bridge0: port 3(syz_tun) entered blocking state [ 76.056034][ T2287] usb 5-1: Product: syz [ 76.056884][ T4493] bridge0: port 3(syz_tun) entered disabled state [ 76.070750][ T2287] usb 5-1: Manufacturer: syz [ 76.072736][ T4493] device syz_tun entered promiscuous mode [ 76.082284][ T2287] usb 5-1: SerialNumber: syz [ 76.090349][ T4493] bridge0: port 3(syz_tun) entered blocking state [ 76.097231][ T4493] bridge0: port 3(syz_tun) entered forwarding state [ 76.112933][ T2287] usb 5-1: config 0 descriptor?? [ 76.173111][ T2287] smsc95xx v2.0.0 [ 76.197707][ T4501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.77'. [ 76.329601][ T7] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 76.367466][ T7] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 76.440525][ T4513] raw_sendmsg: syz.1.83 forgot to set AF_INET. Fix it! [ 76.612192][ T2287] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 76.635214][ T2287] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 76.669360][ T4242] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.787260][ T4242] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.861583][ T4242] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.930989][ T4242] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.956130][ T4520] loop1: detected capacity change from 0 to 32768 [ 76.987204][ T4520] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.86 (4520) [ 77.030860][ T4520] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 77.040263][ T4520] BTRFS info (device loop1): setting nodatacow, compression disabled [ 77.049884][ T4520] BTRFS info (device loop1): force clearing of disk cache [ 77.058854][ T4520] BTRFS info (device loop1): turning off barriers [ 77.065914][ T4520] BTRFS info (device loop1): use no compression [ 77.076428][ T4520] BTRFS info (device loop1): disabling free space tree [ 77.084541][ T4520] BTRFS info (device loop1): enabling ssd optimizations [ 77.092691][ T4520] BTRFS info (device loop1): using spread ssd allocation scheme [ 77.102224][ T4520] BTRFS info (device loop1): not using ssd optimizations [ 77.120475][ T4520] BTRFS info (device loop1): not using spread ssd allocation scheme [ 77.128843][ T4520] BTRFS info (device loop1): has skinny extents [ 77.376750][ T4549] overlayfs: failed to clone upperpath [ 77.402546][ T4524] chnl_net:caif_netlink_parms(): no params data found [ 77.505999][ T4520] BTRFS info (device loop1): clearing free space tree [ 77.534490][ T4520] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 77.538556][ T2287] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71 [ 77.545128][ T4520] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 77.598438][ T2287] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 77.622193][ T4524] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.630788][ T4520] BTRFS info (device loop1): checking UUID tree [ 77.648292][ T4524] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.663422][ T2287] usb 5-1: USB disconnect, device number 2 [ 77.706700][ T4524] device bridge_slave_0 entered promiscuous mode [ 77.724009][ T4524] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.772270][ T4524] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.801747][ T4524] device bridge_slave_1 entered promiscuous mode [ 77.833154][ T7] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 77.903117][ T4524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.951352][ T4524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.043547][ T7] usb 4-1: device descriptor read/64, error -32 [ 78.062219][ T4524] team0: Port device team_slave_0 added [ 78.080057][ T4524] team0: Port device team_slave_1 added [ 78.491131][ T4524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.515247][ T4524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.544917][ T4524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.592966][ T4524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.642155][ T4524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.753056][ T4524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.801431][ T4606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.100'. [ 78.945054][ T4524] device hsr_slave_0 entered promiscuous mode [ 78.974873][ T4524] device hsr_slave_1 entered promiscuous mode [ 79.003723][ T4524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.024955][ T4524] Cannot create hsr debugfs directory [ 79.027034][ T4265] usb 4-1: USB disconnect, device number 3 [ 79.072077][ T2237] Bluetooth: hci2: command 0x0409 tx timeout [ 79.239498][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.282057][ T4235] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 79.303282][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.310915][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.330040][ T4629] device bridge_slave_0 left promiscuous mode [ 79.340290][ T4629] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.382257][ T4629] device bridge_slave_1 left promiscuous mode [ 79.388663][ T4629] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.400789][ T4629] bond0: (slave bond_slave_0): Releasing backup interface [ 79.418135][ T4629] bond0: (slave bond_slave_1): Releasing backup interface [ 79.459062][ T4629] team0: Port device team_slave_0 removed [ 79.476494][ T4629] team0: Port device team_slave_1 removed [ 79.482966][ T4629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.490551][ T4629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.501535][ T4629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.509051][ T4629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.612126][ T4265] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.745075][ T4242] device hsr_slave_0 left promiscuous mode [ 79.753951][ T4242] device hsr_slave_1 left promiscuous mode [ 79.764868][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.773134][ T4242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.795948][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.804724][ T4242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.812505][ T4235] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 79.827331][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.841913][ T4235] usb 2-1: Product: syz [ 79.852065][ T4235] usb 2-1: Manufacturer: syz [ 79.862119][ T4235] usb 2-1: SerialNumber: syz [ 79.876501][ T4242] device bridge_slave_1 left promiscuous mode [ 79.884102][ T4235] usb 2-1: config 0 descriptor?? [ 79.891905][ T4242] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.892446][ T4265] usb 4-1: Using ep0 maxpacket: 32 [ 79.929805][ T4242] device bridge_slave_0 left promiscuous mode [ 79.942211][ T4242] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.006610][ T4242] device veth1_macvtap left promiscuous mode [ 80.013146][ T4242] device veth0_macvtap left promiscuous mode [ 80.042135][ T4242] device veth1_vlan left promiscuous mode [ 80.048413][ T4242] device veth0_vlan left promiscuous mode [ 80.072982][ T4265] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 80.089452][ T4265] usb 4-1: config 0 has no interface number 0 [ 80.120070][ T4265] usb 4-1: config 0 interface 12 has no altsetting 0 [ 80.145814][ T4235] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 80.297267][ T4674] loop4: detected capacity change from 0 to 1024 [ 80.332331][ T4265] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 80.341639][ T4265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.353839][ T4265] usb 4-1: Product: syz [ 80.358293][ T4265] usb 4-1: Manufacturer: syz [ 80.365214][ T4265] usb 4-1: SerialNumber: syz [ 80.372687][ T4265] usb 4-1: config 0 descriptor?? [ 80.387421][ T4674] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 80.405255][ T4674] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.455663][ T4674] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.117: bg 0: block 112: padding at end of block bitmap is not set [ 80.474901][ T4674] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 42 with max blocks 1 with error 28 [ 80.490298][ T4674] EXT4-fs (loop4): This should not happen!! Data will be lost [ 80.490298][ T4674] [ 80.500229][ T4674] EXT4-fs (loop4): Total free blocks count 0 [ 80.506654][ T4674] EXT4-fs (loop4): Free/Dirty block details [ 80.518817][ T4674] EXT4-fs (loop4): free_blocks=0 [ 80.525205][ T4674] EXT4-fs (loop4): dirty_blocks=16 [ 80.530727][ T4674] EXT4-fs (loop4): Block reservation details [ 80.537052][ T4674] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 80.577692][ T4242] team0 (unregistering): Port device team_slave_1 removed [ 80.596699][ T4242] team0 (unregistering): Port device team_slave_0 removed [ 80.614902][ T4242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.639190][ T4242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.729343][ T4242] bond0 (unregistering): Released all slaves [ 80.823792][ T4524] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.888170][ T4524] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.946711][ T4524] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.996731][ T4524] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 81.082070][ T4235] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 81.096740][ T4235] usb 2-1: USB disconnect, device number 2 [ 81.152112][ T2287] Bluetooth: hci2: command 0x041b tx timeout [ 81.224172][ T4524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.243205][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.257210][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.271736][ T4524] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.306935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.317440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.326608][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.333754][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.352059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.360275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.370366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.379402][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.386584][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.397389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.406141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.419524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.436120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.447223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.461457][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.470473][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.486759][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.498803][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.527898][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.604126][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.638408][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.362070][ T4265] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 82.588533][ T4265] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 82.596209][ T4265] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 82.605072][ T4265] f81534: probe of 4-1:0.12 failed with error -71 [ 82.632668][ T4265] usb 4-1: USB disconnect, device number 4 [ 82.794777][ T4728] autofs4:pid:4728:autofs_fill_super: called with bogus options [ 83.095193][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.110634][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.165862][ T4524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.232886][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 84.270243][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.322617][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.420399][ T4524] device veth0_vlan entered promiscuous mode [ 84.483199][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.495741][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.523646][ T4776] netlink: 'syz.4.134': attribute type 1 has an invalid length. [ 84.542125][ T4776] netlink: 101600 bytes leftover after parsing attributes in process `syz.4.134'. [ 84.564198][ T4773] bridge0: port 3(syz_tun) entered disabled state [ 84.571505][ T4773] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.578917][ T4773] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.789360][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.805197][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.829881][ T4524] device veth1_vlan entered promiscuous mode [ 84.842472][ T4784] tipc: Started in network mode [ 84.847952][ T4784] tipc: Node identity 7f, cluster identity 4711 [ 84.911860][ T4784] tipc: Node number set to 127 [ 85.012501][ T4794] fuse: Bad value for 'fd' [ 85.020185][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.071508][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.100239][ T4796] loop1: detected capacity change from 0 to 64 [ 85.118869][ T4794] xt_hashlimit: max too large, truncated to 1048576 [ 85.135055][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.170362][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.194263][ T4524] device veth0_macvtap entered promiscuous mode [ 85.229405][ T4524] device veth1_macvtap entered promiscuous mode [ 85.303934][ T4803] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 85.312126][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 85.450236][ T4524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.540967][ T4524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.582432][ T4524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.627611][ T4819] loop3: detected capacity change from 0 to 1024 [ 85.682319][ T4524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.738054][ T4524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.769993][ T4819] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,bsdgroups,nodelalloc,resuid=0x0000000000000000,usrquota,,errors=continue. Quota mode: writeback. [ 85.817359][ T4524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.920370][ T4819] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.961644][ T4524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.018100][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.059661][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.087197][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.122947][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.123301][ T4818] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm syz.3.150: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.222045][ T4818] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.150: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.290140][ T4818] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.150: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.316145][ T4818] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.150: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.335428][ T4824] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 86.369587][ T4818] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.150: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.403934][ T4524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.422399][ T4818] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.150: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.446028][ T4524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.466973][ T4818] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.150: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.485771][ T4524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.508911][ T4524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.525090][ T4818] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.150: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.548838][ T4524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.569870][ T4524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.587596][ T4524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.609206][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.629406][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.661994][ T4524] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.676759][ T26] cfg80211: failed to load regulatory.db [ 86.691165][ T4819] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.150: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.695585][ T4524] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.747705][ T4524] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.775207][ T4524] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.999774][ T3034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.031918][ T3034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.056118][ T4848] loop1: detected capacity change from 0 to 512 [ 87.092652][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.145812][ T4718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.187908][ T4718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.217312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.225258][ T4848] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 87.414875][ T4848] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.502768][ T4860] loop5: detected capacity change from 0 to 512 [ 87.590467][ T4848] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 87.717328][ T4860] EXT4-fs (loop5): Ignoring removed bh option [ 87.728225][ T4848] EXT4-fs (loop1): 1 truncate cleaned up [ 87.764376][ T4848] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,user_xattr,. Quota mode: none. [ 87.836991][ T25] audit: type=1800 audit(1781888113.563:6): pid=4848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.157" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 87.861983][ T4860] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.87: corrupted in-inode xattr [ 87.953665][ T4860] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.87: couldn't read orphan inode 15 (err -117) [ 88.050901][ T4860] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 88.099560][ T4851] loop3: detected capacity change from 0 to 32768 [ 88.305822][ T4860] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.87: Unrecognised inode hash code 4 [ 88.358215][ T4860] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.87: Corrupt directory, running e2fsck is recommended [ 88.400681][ T4860] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.87: Unrecognised inode hash code 4 [ 88.476765][ T4860] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.87: Corrupt directory, running e2fsck is recommended [ 88.527215][ T4892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.165'. [ 88.887178][ T4913] syz.1.170 sent an empty control message without MSG_MORE. [ 88.900638][ T4912] fuse: Bad value for 'fd' [ 89.486312][ T4942] loop1: detected capacity change from 0 to 512 [ 89.629927][ T4942] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.752515][ T4942] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 89.785258][ T4950] block device autoloading is deprecated and will be removed. [ 89.857504][ T4942] System zones: 1-12 [ 89.943764][ T4942] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.181: bad orphan inode 131072 [ 90.057926][ T4942] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none. [ 90.273511][ T4962] loop5: detected capacity change from 0 to 1024 [ 90.559309][ T4970] loop4: detected capacity change from 0 to 2048 [ 91.111956][ T4970] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.162020][ T4970] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.189344][ T4978] overlayfs: failed to clone upperpath [ 91.404390][ T4985] overlayfs: failed to resolve './bus': -2 [ 91.518607][ T4988] syz.5.192 uses obsolete (PF_INET,SOCK_PACKET) [ 91.546576][ T4988] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.573494][ T4992] Illegal XDP return value 4294967274, expect packet loss! [ 91.809992][ T4970] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 91.897039][ T4970] overlayfs: failed to verify index dir 'upper' xattr [ 91.942837][ T4970] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 92.127396][ T13] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.587326][ T5030] loop5: detected capacity change from 0 to 512 [ 92.653817][ T5030] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.702024][ T13] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 92.733740][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.734575][ T25] audit: type=1800 audit(1781888118.463:7): pid=5030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.208" name="file1" dev="loop5" ino=1048594 res=0 errno=0 [ 92.761868][ T13] usb 2-1: Product: syz [ 92.780412][ T5030] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 92.788880][ T13] usb 2-1: Manufacturer: syz [ 92.790002][ T5030] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 92.802461][ T5030] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 92.816858][ T13] usb 2-1: SerialNumber: syz [ 92.873960][ T13] usb 2-1: config 0 descriptor?? [ 92.928007][ T13] hub 2-1:0.0: bad descriptor, ignoring hub [ 92.944320][ T13] hub: probe of 2-1:0.0 failed with error -5 [ 93.081585][ T5044] loop3: detected capacity change from 0 to 256 [ 93.150529][ T5044] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 93.170058][ T25] audit: type=1800 audit(1781888118.893:8): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.212" name="file1" dev="loop3" ino=1048595 res=0 errno=0 [ 93.192121][ T13] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 93.261235][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 93.329089][ T13] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 93.354769][ T13] usb 2-1: media controller created [ 93.385572][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.470561][ T5050] sctp: [Deprecated]: syz.4.213 (pid 5050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 93.470561][ T5050] Use struct sctp_sack_info instead [ 93.501955][ T13] DVB: Unable to find symbol dib7000p_attach() [ 93.508160][ T13] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 93.522211][ T2237] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 93.632023][ T13] rc_core: IR keymap rc-dib0700-rc5 not found [ 93.638127][ T13] Registered IR keymap rc-empty [ 93.657285][ T13] dvb-usb: could not initialize remote control. [ 93.665095][ T13] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 93.675447][ T5054] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 93.732089][ T13] usb 2-1: USB disconnect, device number 3 [ 93.818096][ T13] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 93.932088][ T2237] usb 6-1: unable to get BOS descriptor or descriptor too short [ 93.956535][ T5060] loop3: detected capacity change from 0 to 512 [ 94.022254][ T2237] usb 6-1: config 1 interface 0 has no altsetting 0 [ 94.048509][ T5060] EXT4-fs (loop3): Test dummy encryption mode enabled [ 94.066001][ T5060] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.216: inode #1: comm syz.3.216: iget: illegal inode # [ 94.149227][ T5060] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.216: error while reading EA inode 1 err=-117 [ 94.188496][ T5060] EXT4-fs (loop3): 1 orphan inode deleted [ 94.218175][ T5060] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x0000000000000006,usrjquota=,test_dummy_encryption=v1,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 94.302185][ T2237] usb 6-1: string descriptor 0 read error: -22 [ 94.308468][ T2237] usb 6-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 94.367554][ T2237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.407072][ T4200] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 94.436200][ T2237] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input7 [ 94.447742][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.456252][ T4200] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extended attribute block 393216 [ 94.499852][ T4200] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extended attribute block 393216 [ 94.653170][ T3547] bcm5974 6-1:1.0: could not read from device [ 94.692000][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 94.722115][ T4181] bcm5974 6-1:1.0: could not read from device [ 94.788342][ T3547] bcm5974 6-1:1.0: could not read from device [ 94.851975][ T5046] bcm5974 6-1:1.0: could not read from device [ 94.891955][ T4181] bcm5974 6-1:1.0: could not read from device [ 94.900893][ T4181] udevd[4181]: Error opening device "/dev/input/event4": Input/output error [ 94.909231][ T4265] usb 6-1: USB disconnect, device number 2 [ 94.914083][ T3547] bcm5974 6-1:1.0: could not read from device [ 94.932472][ T3547] bcm5974 6-1:1.0: could not read from device [ 94.939524][ T4181] udevd[4181]: Unable to EVIOCGABS device "/dev/input/event4" [ 94.960326][ T4181] udevd[4181]: Unable to EVIOCGABS device "/dev/input/event4" [ 95.003543][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.019953][ T4181] udevd[4181]: Unable to EVIOCGABS device "/dev/input/event4" [ 95.035395][ T4181] udevd[4181]: Unable to EVIOCGABS device "/dev/input/event4" [ 95.092237][ T21] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 95.103405][ T21] usb 2-1: can't read configurations, error -71 [ 95.113277][ T4714] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.178807][ T4714] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.279581][ T4714] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.364446][ T4714] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.883082][ T4714] tipc: Left network mode [ 96.026259][ T5100] chnl_net:caif_netlink_parms(): no params data found [ 96.165538][ T5153] loop5: detected capacity change from 0 to 256 [ 96.226312][ T5153] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 96.295969][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.303400][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.311741][ T5100] device bridge_slave_0 entered promiscuous mode [ 96.321238][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.329627][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.338423][ T5100] device bridge_slave_1 entered promiscuous mode [ 96.395361][ T25] audit: type=1800 audit(1781888122.123:9): pid=5163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.240" name="file1" dev="loop5" ino=1048597 res=0 errno=0 [ 96.429424][ T5100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.458061][ T5100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.516824][ T5100] team0: Port device team_slave_0 added [ 96.554956][ T5100] team0: Port device team_slave_1 added [ 96.674815][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.681788][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.740527][ T5100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.771755][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.791707][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.878958][ T5100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.029293][ T5100] device hsr_slave_0 entered promiscuous mode [ 97.062367][ T5100] device hsr_slave_1 entered promiscuous mode [ 97.082564][ T5184] loop1: detected capacity change from 0 to 4096 [ 97.089542][ T5100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.121746][ T5100] Cannot create hsr debugfs directory [ 97.122616][ T5184] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 97.361114][ T5202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'. [ 97.392427][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 97.591468][ T4714] device hsr_slave_0 left promiscuous mode [ 97.634219][ T4714] device hsr_slave_1 left promiscuous mode [ 97.647716][ T4714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.662465][ T5210] fuse: Bad value for 'fd' [ 97.681406][ T4714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.714287][ T4714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.743991][ T4714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.764149][ T4714] device bridge_slave_1 left promiscuous mode [ 97.790524][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.821091][ T4714] device bridge_slave_0 left promiscuous mode [ 97.845992][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.849916][ T5177] syz.5.244 (5177): drop_caches: 2 [ 97.892851][ T4714] device veth1_macvtap left promiscuous mode [ 97.919387][ T4714] device veth0_macvtap left promiscuous mode [ 97.962899][ T4714] device veth1_vlan left promiscuous mode [ 97.968750][ T4714] device veth0_vlan left promiscuous mode [ 98.231984][ T4234] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 98.564389][ T5235] loop4: detected capacity change from 0 to 65536 [ 98.612368][ T5235] XFS: ikeep mount option is deprecated. [ 98.634513][ T4714] team0 (unregistering): Port device team_slave_1 removed [ 98.653397][ T4714] team0 (unregistering): Port device team_slave_0 removed [ 98.656042][ T5235] XFS (loop4): Mounting V5 Filesystem [ 98.676468][ T4714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.701161][ T4714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.743113][ T5235] XFS (loop4): Ending clean mount [ 98.836527][ T4234] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 98.858864][ T4234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.891320][ T4234] usb 6-1: Product: syz [ 98.897819][ T4234] usb 6-1: Manufacturer: syz [ 98.917450][ T4234] usb 6-1: SerialNumber: syz [ 98.930873][ T4234] usb 6-1: config 0 descriptor?? [ 98.944147][ T4714] bond0 (unregistering): Released all slaves [ 98.980131][ T4234] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 99.015742][ T26] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x6 [ 99.027638][ T26] XFS (loop4): Unmount and run xfs_repair [ 99.035722][ T26] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 99.047007][ T26] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 99.056235][ T26] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 99.065471][ T26] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 99.075879][ T26] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 99.085408][ T26] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 99.095100][ T26] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 99.104329][ T26] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 99.113590][ T26] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 99.123164][ T5235] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x6 len 2 error 74 [ 99.152014][ T5235] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x515/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 99.166777][ T5235] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 99.219558][ T4189] XFS (loop4): Unmounting Filesystem [ 99.241458][ T5100] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 99.335305][ T5100] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 99.384447][ T5100] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 99.448256][ T5100] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 99.472597][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 99.759567][ T5264] loop1: detected capacity change from 0 to 16384 [ 99.770275][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.844968][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.882645][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.901863][ T5270] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.926773][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.030978][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.055827][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.093428][ T590] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.100591][ T590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.111288][ T25] audit: type=1804 audit(1781888125.833:10): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.267" name="/newroot/48/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 100.150351][ T5264] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=18) [ 100.162459][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.191451][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.225446][ T590] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.232646][ T590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.250581][ T5264] Remounting filesystem read-only [ 100.281358][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.323943][ T4190] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 100.340860][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.366475][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.409208][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.467131][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.523800][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.598558][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.639737][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.660341][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.700430][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.724923][ T4234] gspca_sunplus: reg_r err -71 [ 100.730330][ T4234] sunplus: probe of 6-1:0.0 failed with error -71 [ 100.764596][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.783039][ T4234] usb 6-1: USB disconnect, device number 3 [ 100.808052][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.854110][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.871503][ T5290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 100.904608][ T5290] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.914417][ T5290] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.923631][ T5290] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.932509][ T5290] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.970422][ T5290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 101.038238][ T5290] Zero length message leads to an empty skb [ 101.098179][ T5300] tipc: Started in network mode [ 101.128523][ T5300] tipc: Node identity ac1414aa, cluster identity 4711 [ 101.162685][ T5300] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 101.188836][ T5300] tipc: Enabled bearer , priority 10 [ 101.229358][ T5305] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.229625][ T5308] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.304171][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 101.441949][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 101.453563][ T5319] loop2: detected capacity change from 0 to 7 [ 101.493351][ T4183] Dev loop2: unable to read RDB block 7 [ 101.501437][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.511892][ T4183] loop2: unable to read partition table [ 101.518759][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.529041][ T4183] loop2: partition table beyond EOD, truncated [ 101.552960][ T2237] Bluetooth: hci4: command 0x040f tx timeout [ 101.559261][ T5319] Dev loop2: unable to read RDB block 7 [ 101.567903][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.581965][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 101.590150][ T5319] loop2: unable to read partition table [ 101.596315][ T5319] loop2: partition table beyond EOD, truncated [ 101.625267][ T5319] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 101.669397][ T3562] Dev loop2: unable to read RDB block 7 [ 101.677600][ T3562] loop2: unable to read partition table [ 101.705194][ T3562] loop2: partition table beyond EOD, truncated [ 101.722034][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 101.862027][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 102.002015][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 102.045935][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.068834][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.110309][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.122618][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.141962][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 102.147989][ T5100] device veth0_vlan entered promiscuous mode [ 102.162775][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.181762][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.206847][ T5100] device veth1_vlan entered promiscuous mode [ 102.289609][ T26] tipc: Node number set to 2886997162 [ 102.326077][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.342640][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.382503][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.412542][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.422018][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 102.434871][ T5100] device veth0_macvtap entered promiscuous mode [ 102.461416][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.485505][ T5100] device veth1_macvtap entered promiscuous mode [ 102.540402][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.571844][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.589582][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.603406][ T5360] fuse: Bad value for 'fd' [ 102.648421][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.681977][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.692884][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 102.699935][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.828944][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.886712][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.924821][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.984556][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.024660][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.071976][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.120504][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.170438][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.215386][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.227879][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.391073][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.453389][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.478370][ T5100] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.507796][ T5100] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.530301][ T5100] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.569607][ T5100] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.633209][ T2237] Bluetooth: hci4: command 0x0419 tx timeout [ 103.861932][ T4717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.869802][ T4717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.917714][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.949118][ T3034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.968082][ T3034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.990197][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.426502][ T5416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.295'. [ 104.661132][ T5434] loop5: detected capacity change from 0 to 512 [ 104.794123][ T5434] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.921261][ T5434] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.302: invalid indirect mapped block 256 (level 2) [ 104.963779][ T5434] EXT4-fs (loop5): 2 truncates cleaned up [ 104.969679][ T5434] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 105.072232][ T4588] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 105.267128][ T5457] batman_adv: batadv0: Adding interface: dummy0 [ 105.303818][ T5457] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.341898][ T5457] batman_adv: batadv0: Interface activated: dummy0 [ 105.442035][ T5444] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 105.512124][ T4588] usb 2-1: unable to get BOS descriptor or descriptor too short [ 105.554338][ T5464] syz.5.302 (pid 5464) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 105.782276][ T4588] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 105.819361][ T4588] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.836038][ T4588] usb 2-1: Product: syz [ 105.850582][ T4588] usb 2-1: Manufacturer: syz [ 105.856265][ T4588] usb 2-1: SerialNumber: syz [ 106.292246][ T4588] usb 2-1: unit 5 not found! [ 106.297354][ T4588] usb 2-1: unit 3 not found! [ 106.352139][ C1] net_ratelimit: 23 callbacks suppressed [ 106.352153][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 106.555507][ T4588] usb_set_interface error [ 106.574992][ T4588] snd-usb-us122l: probe of 2-1:1.1 failed with error -22 [ 106.615325][ T4588] usb 2-1: USB disconnect, device number 6 [ 106.826662][ T5511] loop6: detected capacity change from 0 to 512 [ 106.902734][ T5511] EXT4-fs (loop6): Ignoring removed bh option [ 106.937018][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.955810][ T5511] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 107.049812][ T5511] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.317: corrupted in-inode xattr [ 107.082675][ T5511] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.317: couldn't read orphan inode 15 (err -117) [ 107.138708][ T5511] EXT4-fs (loop6): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 107.360868][ T5524] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 107.392555][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 107.392641][ T5524] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 107.578084][ T5536] loop5: detected capacity change from 0 to 128 [ 107.633914][ T5527] overlayfs: failed to clone upperpath [ 107.700046][ T5536] FAT-fs (loop5): bogus number of reserved sectors [ 107.708574][ T5542] netlink: 'syz.1.325': attribute type 18 has an invalid length. [ 107.732422][ T5536] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 107.741753][ T5536] FAT-fs (loop5): Can't find a valid FAT filesystem [ 107.741863][ T5542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 107.815016][ T5542] netlink: 'syz.1.325': attribute type 18 has an invalid length. [ 107.889957][ T5542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 108.070574][ T5568] netlink: 'syz.5.330': attribute type 3 has an invalid length. [ 108.107980][ T5572] xt_hashlimit: size too large, truncated to 1048576 [ 108.257945][ T5577] netlink: 12 bytes leftover after parsing attributes in process `syz.6.333'. [ 108.269264][ T5579] fuse: Bad value for 'fd' [ 108.397233][ T5582] fuse: root generation should be zero [ 108.432294][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 108.523930][ T5591] loop6: detected capacity change from 0 to 512 [ 108.596006][ T5591] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.017642][ T5610] capability: warning: `syz.0.340' uses 32-bit capabilities (legacy support in use) [ 109.024914][ T5608] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 109.472043][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 109.479706][ T5595] loop5: detected capacity change from 0 to 32768 [ 109.509372][ T5595] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.338 (5595) [ 109.598811][ T5595] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 109.619680][ T5595] BTRFS info (device loop5): using free space tree [ 109.639669][ T5595] BTRFS info (device loop5): has skinny extents [ 109.879076][ T5658] overlayfs: failed to clone upperpath [ 109.948350][ T5595] BTRFS info (device loop5): enabling ssd optimizations [ 110.039947][ T25] audit: type=1800 audit(1781888135.763:11): pid=5595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.338" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 110.206066][ T25] audit: type=1804 audit(1781888135.933:12): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.338" name="/newroot/28/file0/file2" dev="loop5" ino=261 res=1 errno=0 [ 110.272756][ T5641] loop6: detected capacity change from 0 to 32768 [ 110.511986][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 111.388221][ T5713] overlayfs: failed to clone upperpath [ 111.551955][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 112.320070][ T5717] loop5: detected capacity change from 0 to 40427 [ 112.452240][ T5717] F2FS-fs (loop5): invalid crc value [ 112.463388][ T5717] F2FS-fs (loop5): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 112.520954][ T5717] F2FS-fs (loop5): Found nat_bits in checkpoint [ 112.592043][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 112.725367][ T5717] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 112.737501][ T5760] netlink: 'syz.0.371': attribute type 1 has an invalid length. [ 112.759119][ T5717] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 112.801578][ T5717] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 112.811214][ T5760] netlink: 'syz.0.371': attribute type 4 has an invalid length. [ 112.860417][ T5760] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.371'. [ 112.889906][ T5772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.001869][ T5768] netlink: 'syz.0.371': attribute type 1 has an invalid length. [ 113.009545][ T5768] netlink: 'syz.0.371': attribute type 4 has an invalid length. [ 113.036979][ T5768] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.371'. [ 113.369604][ T4232] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 113.408142][ T5794] netlink: 'syz.5.380': attribute type 21 has an invalid length. [ 113.426352][ T5794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.380'. [ 113.449776][ T5794] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.458752][ T5794] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.467536][ T5794] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.476471][ T5794] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.490968][ T5796] netlink: 'syz.0.381': attribute type 4 has an invalid length. [ 113.538725][ T5794] netlink: 'syz.5.380': attribute type 21 has an invalid length. [ 113.559146][ T5794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.380'. [ 113.573334][ T5802] netlink: 'syz.0.381': attribute type 4 has an invalid length. [ 113.633690][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 113.642093][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 113.778610][ T5823] binder: 5815:5823 ioctl c0306201 200000000480 returned -14 [ 113.925543][ T4232] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 113.933634][ T5836] loop5: detected capacity change from 0 to 128 [ 113.940544][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 113.959271][ T4232] usb 2-1: Product: syz [ 113.968540][ T4232] usb 2-1: Manufacturer: syz [ 113.976675][ T4232] usb 2-1: SerialNumber: syz [ 113.987672][ T4232] usb 2-1: config 0 descriptor?? [ 114.037792][ T4232] gspca_main: sq905-2.14.0 probing 2770:9120 [ 114.065610][ T5836] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.086009][ T5836] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.671943][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 114.714279][ T5877] loop5: detected capacity change from 0 to 1024 [ 114.777044][ T5877] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.883154][ T5873] loop6: detected capacity change from 0 to 32768 [ 114.895371][ T5877] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.404: Invalid inode table block 5 in block_group 0 [ 114.913054][ T5877] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 114.934973][ T5877] EXT4-fs error (device loop5): ext4_setattr:5586: inode #16: comm syz.5.404: mark_inode_dirty error [ 114.968080][ T5877] EXT4-fs error (device loop5) in ext4_setattr:5645: Corrupt filesystem [ 114.989368][ T5873] XFS (loop6): Mounting V5 Filesystem [ 115.047607][ T5873] XFS (loop6): Ending clean mount [ 115.122092][ T4232] gspca_sq905: bulk read fail (-22) len 0/4 [ 115.129997][ T4232] sq905: probe of 2-1:0.0 failed with error -5 [ 115.260197][ T5100] XFS (loop6): Unmounting Filesystem [ 115.332063][ T5700] usb 2-1: USB disconnect, device number 7 [ 115.492196][ T4232] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 115.712028][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 115.742024][ T4232] usb 6-1: Using ep0 maxpacket: 16 [ 116.752717][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 117.130615][ T5949] loop6: detected capacity change from 0 to 32768 [ 117.237813][ T5949] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 117.246652][ T5949] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 117.288874][ T5949] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 117.304015][ T4579] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 117.351258][ T4579] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 117.560351][ T4579] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 209ms [ 117.630541][ T4579] gfs2: fsid=syz:syz.0: jid=0: Done [ 117.666065][ T5949] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 117.791973][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 117.843287][ T5949] gfs2: fsid=syz:syz.0: found 1 quota changes [ 117.883431][ T5961] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 117.883431][ T5961] inode = 11 2339 [ 117.883431][ T5961] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 414 [ 118.047456][ T5961] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 118.097549][ T5961] gfs2: fsid=syz:syz.0: The quotad daemon is withdrawing. [ 118.291998][ T4232] usb 6-1: unable to get BOS descriptor or descriptor too short [ 118.307079][ T4232] usb 6-1: no configurations [ 118.309050][ T5973] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 118.322934][ T4232] usb 6-1: can't read configurations, error -22 [ 118.433724][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.442'. [ 118.467619][ T5982] device team1 entered promiscuous mode [ 118.473838][ T5982] 8021q: adding VLAN 0 to HW filter on device team1 [ 118.488531][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.442'. [ 118.515318][ T5984] device team2 entered promiscuous mode [ 118.521578][ T5984] 8021q: adding VLAN 0 to HW filter on device team2 [ 118.593392][ T5989] Set syz1 is full, maxelem 2 reached [ 118.831980][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 119.682299][ T6004] loop1: detected capacity change from 0 to 32768 [ 119.803426][ T6004] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 119.811597][ T6004] CPU: 1 PID: 6004 Comm: syz.1.447 Not tainted syzkaller #0 [ 119.818898][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 119.829420][ T6004] Call Trace: [ 119.832721][ T6004] [ 119.835669][ T6004] dump_stack_lvl+0x188/0x250 [ 119.840420][ T6004] ? show_regs_print_info+0x20/0x20 [ 119.845823][ T6004] ? load_image+0x410/0x410 [ 119.850368][ T6004] sysfs_create_dir_ns+0x26a/0x290 [ 119.855508][ T6004] ? sysfs_warn_dup+0xa0/0xa0 [ 119.860652][ T6004] ? do_raw_spin_unlock+0x11d/0x230 [ 119.865890][ T6004] kobject_add_internal+0x5ba/0xcd0 [ 119.871138][ T6004] kobject_init_and_add+0x128/0x190 [ 119.876366][ T6004] ? lockdep_softirqs_off+0x430/0x430 [ 119.881766][ T6004] ? kobject_add+0x230/0x230 [ 119.886381][ T6004] ? __init_swait_queue_head+0xa4/0x140 [ 119.891959][ T6004] gfs2_sys_fs_add+0x24f/0x4b0 [ 119.896756][ T6004] ? gfs2_recover_set+0x240/0x240 [ 119.901823][ T6004] ? snprintf+0xe5/0x140 [ 119.906093][ T6004] ? __free_pages+0x95/0x1a0 [ 119.910810][ T6004] ? vscnprintf+0x80/0x80 [ 119.915171][ T6004] gfs2_fill_super+0x11ed/0x1ea0 [ 119.920324][ T6004] ? gfs2_reconfigure+0xd80/0xd80 [ 119.925413][ T6004] ? sb_set_blocksize+0xa5/0xe0 [ 119.930302][ T6004] get_tree_bdev+0x3e6/0x610 [ 119.934918][ T6004] ? gfs2_reconfigure+0xd80/0xd80 [ 119.939972][ T6004] gfs2_get_tree+0x4d/0x1e0 [ 119.944505][ T6004] vfs_get_tree+0x88/0x270 [ 119.948949][ T6004] do_new_mount+0x247/0xa40 [ 119.953503][ T6004] __se_sys_mount+0x2e3/0x3d0 [ 119.958305][ T6004] ? __x64_sys_mount+0xc0/0xc0 [ 119.963099][ T6004] ? lockdep_hardirqs_on+0x94/0x140 [ 119.968322][ T6004] ? __x64_sys_mount+0x1c/0xc0 [ 119.973113][ T6004] do_syscall_64+0x4c/0xa0 [ 119.977559][ T6004] ? clear_bhb_loop+0x30/0x80 [ 119.982522][ T6004] ? clear_bhb_loop+0x30/0x80 [ 119.987312][ T6004] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 119.993417][ T6004] RIP: 0033:0x7f6e613ab0ca [ 119.997866][ T6004] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.017498][ T6004] RSP: 002b:00007f6e5f602e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.025951][ T6004] RAX: ffffffffffffffda RBX: 00007f6e5f602ee0 RCX: 00007f6e613ab0ca [ 120.033938][ T6004] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f6e5f602ea0 [ 120.042012][ T6004] RBP: 00002000000124c0 R08: 00007f6e5f602ee0 R09: 0000000000000000 [ 120.049996][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 120.057982][ T6004] R13: 00007f6e5f602ea0 R14: 00000000000125c7 R15: 0000200000000180 [ 120.066157][ T6004] [ 120.069539][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 120.078039][ T6004] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 120.091483][ T6004] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 120.281765][ T6022] loop1: detected capacity change from 0 to 1024 [ 120.289659][ T6023] fuse: Bad value for 'fd' [ 120.613078][ T25] audit: type=1800 audit(1781888146.343:13): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.453" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 120.661329][ T6022] hfsplus: request for non-existent node 16777216 in B*Tree [ 120.691994][ T6022] hfsplus: request for non-existent node 16777216 in B*Tree [ 120.768232][ T6038] loop5: detected capacity change from 0 to 512 [ 120.826400][ T6038] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.867965][ T6038] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 120.920638][ T6038] EXT4-fs (loop5): 1 truncate cleaned up [ 120.971438][ T6038] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,jqfmt=vfsold,data=journal,,errors=continue. Quota mode: none. [ 121.071956][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 121.653310][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.469'. [ 122.111936][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 123.163414][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 123.232353][ T5961] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 123.246584][ T5961] CPU: 0 PID: 5961 Comm: gfs2_quotad Not tainted syzkaller #0 [ 123.254051][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 123.264117][ T5961] Call Trace: [ 123.267388][ T5961] [ 123.270309][ T5961] dump_stack_lvl+0x188/0x250 [ 123.274983][ T5961] ? show_regs_print_info+0x20/0x20 [ 123.280164][ T5961] ? load_image+0x410/0x410 [ 123.285000][ T5961] ? do_raw_spin_unlock+0x11d/0x230 [ 123.290181][ T5961] gfs2_assert_warn_i+0x187/0x2c0 [ 123.295198][ T5961] gfs2_quota_cleanup+0x48c/0x670 [ 123.300229][ T5961] gfs2_make_fs_ro+0x440/0x620 [ 123.304982][ T5961] ? __might_sleep+0xf0/0xf0 [ 123.309578][ T5961] ? gfs2_dinode_out+0xb00/0xb00 [ 123.314497][ T5961] ? _raw_spin_unlock+0x24/0x40 [ 123.319327][ T5961] ? gfs2_glock_nq+0xcaa/0x1510 [ 123.324311][ T5961] ? init_wait_entry+0xd0/0xd0 [ 123.329074][ T5961] gfs2_withdraw+0x660/0x14e0 [ 123.333839][ T5961] ? gfs2_meta_new+0x160/0x160 [ 123.338610][ T5961] ? gfs2_lm+0x240/0x240 [ 123.342957][ T5961] ? gfs2_freeze_lock+0x52/0xc0 [ 123.347981][ T5961] ? gfs2_consist_inode_i+0xc0/0xe0 [ 123.353300][ T5961] gfs2_inode_refresh+0xb2d/0x11a0 [ 123.358435][ T5961] ? gfs2_inode_metasync+0xf0/0xf0 [ 123.363550][ T5961] inode_go_lock+0x127/0x450 [ 123.368145][ T5961] do_promote+0x75b/0xb20 [ 123.372464][ T5961] finish_xmote+0x4c2/0xaf0 [ 123.376956][ T5961] do_xmote+0x752/0x10a0 [ 123.381182][ T5961] gfs2_glock_nq+0xc6b/0x1510 [ 123.385847][ T5961] do_sync+0x49c/0xba0 [ 123.389900][ T5961] ? slot_put+0x1e0/0x1e0 [ 123.394210][ T5961] ? __lock_acquire+0x7b50/0x7b50 [ 123.399212][ T5961] ? do_raw_spin_lock+0x128/0x2f0 [ 123.404223][ T5961] ? do_sync+0x494/0xba0 [ 123.408467][ T5961] ? do_raw_spin_unlock+0x11d/0x230 [ 123.413662][ T5961] gfs2_quota_sync+0x355/0x780 [ 123.418416][ T5961] gfs2_quotad+0x40f/0x890 [ 123.422825][ T5961] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 123.428065][ T5961] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 123.433987][ T5961] ? init_wait_entry+0xd0/0xd0 [ 123.438744][ T5961] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 123.444722][ T5961] ? __kthread_parkme+0x14e/0x1b0 [ 123.450200][ T5961] kthread+0x42e/0x520 [ 123.454276][ T5961] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 123.459437][ T5961] ? kthread_blkcg+0xd0/0xd0 [ 123.464254][ T5961] ret_from_fork+0x1f/0x30 [ 123.468684][ T5961] [ 123.476011][ T5961] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 123.484986][ T5961] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 123.494572][ T5961] gfs2: fsid=syz:syz.0: File system withdrawn [ 123.500686][ T5961] CPU: 0 PID: 5961 Comm: gfs2_quotad Not tainted syzkaller #0 [ 123.508143][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 123.518217][ T5961] Call Trace: [ 123.521480][ T5961] [ 123.524401][ T5961] dump_stack_lvl+0x188/0x250 [ 123.529068][ T5961] ? show_regs_print_info+0x20/0x20 [ 123.534276][ T5961] ? load_image+0x410/0x410 [ 123.538768][ T5961] ? lockref_put_or_lock+0x6e/0xb0 [ 123.543883][ T5961] gfs2_withdraw+0xb9a/0x14e0 [ 123.548588][ T5961] ? gfs2_meta_new+0x160/0x160 [ 123.553359][ T5961] ? gfs2_lm+0x240/0x240 [ 123.557634][ T5961] ? gfs2_consist_inode_i+0xc0/0xe0 [ 123.562842][ T5961] gfs2_inode_refresh+0xb2d/0x11a0 [ 123.567946][ T5961] ? gfs2_inode_metasync+0xf0/0xf0 [ 123.573064][ T5961] inode_go_lock+0x127/0x450 [ 123.577643][ T5961] do_promote+0x75b/0xb20 [ 123.581967][ T5961] finish_xmote+0x4c2/0xaf0 [ 123.586467][ T5961] do_xmote+0x752/0x10a0 [ 123.590729][ T5961] gfs2_glock_nq+0xc6b/0x1510 [ 123.595399][ T5961] do_sync+0x49c/0xba0 [ 123.599471][ T5961] ? slot_put+0x1e0/0x1e0 [ 123.603795][ T5961] ? __lock_acquire+0x7b50/0x7b50 [ 123.608850][ T5961] ? do_raw_spin_lock+0x128/0x2f0 [ 123.613869][ T5961] ? do_sync+0x494/0xba0 [ 123.618292][ T5961] ? do_raw_spin_unlock+0x11d/0x230 [ 123.623572][ T5961] gfs2_quota_sync+0x355/0x780 [ 123.628366][ T5961] gfs2_quotad+0x40f/0x890 [ 123.632788][ T5961] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 123.637885][ T5961] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 123.643863][ T5961] ? init_wait_entry+0xd0/0xd0 [ 123.648632][ T5961] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 123.654883][ T5961] ? __kthread_parkme+0x14e/0x1b0 [ 123.659923][ T5961] kthread+0x42e/0x520 [ 123.664107][ T5961] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 123.669365][ T5961] ? kthread_blkcg+0xd0/0xd0 [ 123.673971][ T5961] ret_from_fork+0x1f/0x30 [ 123.678482][ T5961] [ 124.126075][ T6153] IPVS: rr: FWM 3 0x00000003 - no destination available [ 124.192088][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 124.819551][ T6181] loop1: detected capacity change from 0 to 16 [ 124.887379][ T6181] erofs: (device loop1): mounted with root inode @ nid 36. [ 124.903278][ T6185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.510'. [ 125.058318][ T6190] block device autoloading is deprecated and will be removed. [ 125.241976][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 125.266664][ T6198] bridge0: port 1(syz_tun) entered blocking state [ 125.300164][ T6198] bridge0: port 1(syz_tun) entered disabled state [ 125.319666][ T6198] device syz_tun entered promiscuous mode [ 125.336432][ T6198] bridge0: port 1(syz_tun) entered blocking state [ 125.342951][ T6198] bridge0: port 1(syz_tun) entered forwarding state [ 125.370563][ T6201] loop6: detected capacity change from 0 to 4096 [ 126.078415][ T6205] loop1: detected capacity change from 0 to 40427 [ 126.119418][ T6205] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 126.166270][ T6205] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 126.205464][ T6205] F2FS-fs (loop1): invalid crc value [ 126.240635][ T6205] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.272025][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 126.379559][ T6205] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 126.400507][ T6205] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 126.554352][ T6205] attempt to access beyond end of device [ 126.554352][ T6205] loop1: rw=2051, want=45064, limit=40427 [ 126.636815][ T6205] F2FS-fs (loop1): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 126.838923][ T4190] attempt to access beyond end of device [ 126.838923][ T4190] loop1: rw=2051, want=81920, limit=40427 [ 126.886440][ T4190] F2FS-fs (loop1): Issue discard(5637, 5637, 4603) failed, ret: -5 [ 127.311998][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 127.460124][ T6273] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 127.505275][ T6273] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 127.633803][ T6288] loop6: detected capacity change from 0 to 16 [ 127.689366][ T6288] erofs: (device loop6): mounted with root inode @ nid 36. [ 127.946037][ T6301] loop1: detected capacity change from 0 to 512 [ 127.985334][ T6301] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.351964][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 128.668403][ T4579] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 129.127625][ T6370] loop1: detected capacity change from 0 to 256 [ 129.222256][ T4579] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 129.237743][ T4579] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.266216][ T4579] usb 7-1: Product: syz [ 129.277755][ T4579] usb 7-1: Manufacturer: syz [ 129.286472][ T4579] usb 7-1: SerialNumber: syz [ 129.402012][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 129.523033][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 129.539961][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.558088][ T6385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.792142][ T4579] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 130.342007][ T21] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 130.442066][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 130.495924][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.569'. [ 130.704927][ T6436] ODEBUG: Out of memory. ODEBUG disabled [ 130.841832][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 130.851844][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 130.871833][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 130.881837][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 130.941821][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 130.951837][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 130.961844][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 130.971840][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 130.989074][ T6436] syz.5.574 (6436): drop_caches: 2 [ 131.111842][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 131.128689][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.212053][ T4579] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 131.232481][ T21] usb 2-1: config 0 has no interfaces? [ 131.234639][ T4579] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 131.257018][ T4579] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 131.267556][ T4579] lan78xx: probe of 7-1:1.0 failed with error -71 [ 131.285873][ T4579] usb 7-1: USB disconnect, device number 2 [ 131.472266][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 131.531981][ T21] usb 2-1: string descriptor 0 read error: -22 [ 131.538242][ T21] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 131.547403][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.560264][ T21] usb 2-1: config 0 descriptor?? [ 131.816107][ T21] usb 2-1: USB disconnect, device number 8 [ 131.946428][ T6453] loop6: detected capacity change from 0 to 32768 [ 132.029726][ T6453] XFS (loop6): Mounting V5 Filesystem [ 132.060233][ T6453] XFS (loop6): Ending clean mount [ 132.110803][ T25] audit: type=1800 audit(1781888157.833:14): pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.581" name="file1" dev="loop6" ino=6156 res=0 errno=0 [ 132.166825][ T5100] XFS (loop6): Unmounting Filesystem [ 132.218295][ T25] audit: type=1326 audit(1781888157.943:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.0.585" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01388a4e59 code=0x0 [ 132.521936][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 132.741915][ T4265] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 132.753601][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.759962][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.779636][ T6484] loop6: detected capacity change from 0 to 32768 [ 132.837588][ T6484] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.590 (6484) [ 132.866137][ T6484] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 132.875536][ T6484] BTRFS info (device loop6): setting nodatacow, compression disabled [ 132.884621][ T6484] BTRFS info (device loop6): force clearing of disk cache [ 132.892044][ T6484] BTRFS info (device loop6): turning off barriers [ 132.898575][ T6484] BTRFS info (device loop6): use no compression [ 132.905100][ T6484] BTRFS info (device loop6): disabling free space tree [ 132.912154][ T6484] BTRFS info (device loop6): enabling ssd optimizations [ 132.919413][ T6484] BTRFS info (device loop6): using spread ssd allocation scheme [ 132.927171][ T6484] BTRFS info (device loop6): not using ssd optimizations [ 132.934499][ T6484] BTRFS info (device loop6): not using spread ssd allocation scheme [ 132.943794][ T6484] BTRFS info (device loop6): has skinny extents [ 132.981862][ T4265] usb 2-1: Using ep0 maxpacket: 32 [ 132.988196][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.595'. [ 132.993487][ T6496] loop5: detected capacity change from 0 to 1024 [ 133.048453][ T6492] device bond1 entered promiscuous mode [ 133.062262][ T6492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.075532][ T6503] device macvlan2 entered promiscuous mode [ 133.093487][ T6496] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 133.101983][ T4265] usb 2-1: config index 0 descriptor too short (expected 3659, got 75) [ 133.120010][ T6503] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 133.131877][ T4265] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.181977][ T6484] BTRFS info (device loop6): clearing free space tree [ 133.202111][ T6496] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.215092][ T6484] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 133.277921][ T6496] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.593: bg 0: block 112: padding at end of block bitmap is not set [ 133.303185][ T6484] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 133.332163][ T4265] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 133.337627][ T6518] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 133.347827][ T6496] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 42 with max blocks 1 with error 28 [ 133.361354][ T6518] netlink: 'syz.0.598': attribute type 22 has an invalid length. [ 133.367653][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.369715][ T6484] BTRFS info (device loop6): checking UUID tree [ 133.388732][ T4265] usb 2-1: Product: syz [ 133.394821][ T6518] bridge0: port 1(syz_tun) entered disabled state [ 133.397555][ T6496] EXT4-fs (loop5): This should not happen!! Data will be lost [ 133.397555][ T6496] [ 133.419106][ T4265] usb 2-1: Manufacturer: syz [ 133.426932][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'. [ 133.431915][ T4265] usb 2-1: SerialNumber: syz [ 133.442779][ T4265] usb 2-1: config 0 descriptor?? [ 133.467623][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.599'. [ 133.481893][ T6496] EXT4-fs (loop5): Total free blocks count 0 [ 133.494501][ T4265] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 133.511076][ T6496] EXT4-fs (loop5): Free/Dirty block details [ 133.531231][ T6496] EXT4-fs (loop5): free_blocks=0 [ 133.552753][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 133.581709][ T6496] EXT4-fs (loop5): dirty_blocks=16 [ 133.622049][ T6496] EXT4-fs (loop5): Block reservation details [ 133.638378][ T6496] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 134.203455][ T6556] smc: net device bond0 applied user defined pnetid SYZ2 [ 134.216218][ T6556] netlink: 14 bytes leftover after parsing attributes in process `syz.6.605'. [ 134.277840][ T6556] smc: removing net device bond0 with user defined pnetid SYZ2 [ 134.291251][ T6556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.315959][ T6556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.337785][ T6556] bond0 (unregistering): Released all slaves [ 134.591951][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 134.711526][ T6568] netlink: 'syz.5.612': attribute type 1 has an invalid length. [ 134.727882][ T6568] netlink: 'syz.5.612': attribute type 22 has an invalid length. [ 134.740581][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.747992][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.031631][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.617'. [ 135.241964][ T4265] gspca_sunplus: reg_r err -71 [ 135.246947][ T4265] sunplus: probe of 2-1:0.0 failed with error -71 [ 135.268588][ T4265] usb 2-1: USB disconnect, device number 9 [ 135.641952][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 135.841918][ T21] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 136.122101][ T21] usb 7-1: Using ep0 maxpacket: 32 [ 136.173806][ T6629] tipc: Started in network mode [ 136.182538][ T6629] tipc: Node identity 7f, cluster identity 4711 [ 136.188828][ T6629] tipc: Node number set to 127 [ 136.262237][ T21] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 136.275880][ T21] usb 7-1: config 0 has no interface number 0 [ 136.283673][ T21] usb 7-1: config 0 interface 184 has no altsetting 0 [ 136.467361][ T21] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 136.491444][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.509046][ T21] usb 7-1: Product: syz [ 136.512175][ T5700] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 136.516788][ T21] usb 7-1: Manufacturer: syz [ 136.528053][ T21] usb 7-1: SerialNumber: syz [ 136.562293][ T21] usb 7-1: config 0 descriptor?? [ 136.626381][ T21] smsc75xx v1.0.0 [ 136.672047][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 136.762024][ T5700] usb 2-1: Using ep0 maxpacket: 32 [ 136.883926][ T5700] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 136.892387][ T5700] usb 2-1: config 0 has no interface number 0 [ 136.898567][ T5700] usb 2-1: config 0 interface 184 has no altsetting 0 [ 137.062088][ T5700] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 137.078689][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.101709][ T5700] usb 2-1: Product: syz [ 137.116383][ T5700] usb 2-1: Manufacturer: syz [ 137.131259][ T5700] usb 2-1: SerialNumber: syz [ 137.148780][ T5700] usb 2-1: config 0 descriptor?? [ 137.206104][ T5700] smsc75xx v1.0.0 [ 137.261972][ T21] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 137.274167][ T21] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 137.377740][ T6637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.427528][ T6637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.698043][ T6637] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.707177][ T6637] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.716210][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 137.723731][ T6637] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.732745][ T6637] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.818211][ T6637] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.827232][ T6637] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.836321][ T6637] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.845236][ T6637] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.870632][ T6648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.646'. [ 137.920648][ T6656] loop5: detected capacity change from 0 to 256 [ 137.943215][ T6658] overlayfs: failed to clone upperpath [ 138.192213][ T21] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 138.203316][ T21] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 138.214558][ T21] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 138.224530][ T21] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 138.235542][ T21] usb 7-1: USB disconnect, device number 3 [ 138.634469][ T6684] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 138.685410][ T6686] loop5: detected capacity change from 0 to 1024 [ 138.732112][ T5700] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 138.749876][ T5700] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 138.761977][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 138.785355][ T6686] EXT4-fs (loop5): Ignoring removed orlov option [ 138.789451][ T5700] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 138.824580][ T5700] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 138.835453][ T6686] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 138.842083][ T5700] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 138.879048][ T5700] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 138.889088][ T5700] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 138.905812][ T5700] usb 2-1: USB disconnect, device number 10 [ 138.973313][ T25] audit: type=1326 audit(1781888164.703:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.4.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71dae2e59 code=0x7ffc0000 [ 139.016573][ T25] audit: type=1326 audit(1781888164.703:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.4.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71dae2e59 code=0x7ffc0000 [ 139.045470][ T25] audit: type=1326 audit(1781888164.703:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.4.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71dae2e59 code=0x7ffc0000 [ 139.072414][ T25] audit: type=1326 audit(1781888164.703:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.4.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb71dae2e59 code=0x7ffc0000 [ 139.097363][ T25] audit: type=1326 audit(1781888164.703:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.4.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71dae2e59 code=0x7ffc0000 [ 139.130458][ T4236] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 139.139725][ T25] audit: type=1326 audit(1781888164.703:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.4.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71dae2e59 code=0x7ffc0000 [ 139.164985][ T25] audit: type=1326 audit(1781888164.703:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.4.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71dae2e59 code=0x7ffc0000 [ 139.189587][ T25] audit: type=1326 audit(1781888164.703:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.4.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71dae2e59 code=0x7ffc0000 [ 139.218824][ T25] audit: type=1326 audit(1781888164.703:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.4.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb71dae2e59 code=0x7ffc0000 [ 139.251936][ T25] audit: type=1326 audit(1781888164.703:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.4.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71dae2e59 code=0x7ffc0000 [ 139.382054][ T4236] usb 7-1: Using ep0 maxpacket: 16 [ 139.502493][ T4236] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.536247][ T4236] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.622136][ T4236] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 139.641408][ T4236] usb 7-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 139.650196][ T4236] usb 7-1: Manufacturer: syz [ 139.666775][ T4236] usb 7-1: config 0 descriptor?? [ 139.684252][ T6724] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 139.792596][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 140.016444][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.689'. [ 140.116187][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 140.186192][ T4236] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:041E:3100.0004/input/input8 [ 140.285201][ T4236] creative-sb0540 0003:041E:3100.0004: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 140.456818][ T26] usb 7-1: USB disconnect, device number 4 [ 140.842250][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 141.135004][ T6762] loop5: detected capacity change from 0 to 4096 [ 141.255324][ T6762] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 141.290669][ T6762] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 141.312018][ T6762] ntfs3: loop5: Failed to load $Extend. [ 141.359047][ T6762] ntfs3: loop5: MftZone: unavailable [ 141.385362][ T6762] ntfs3: loop5: MftZone: unavailable [ 141.403206][ T6762] ntfs3: loop5: no free space to extend mft [ 141.418773][ T6762] ntfs3: loop5: MftZone: unavailable [ 141.440502][ T6762] ntfs3: loop5: no free space to extend mft [ 141.456998][ T6762] ntfs3: loop5: MftZone: unavailable [ 141.472763][ T6762] ntfs3: loop5: no free space to extend mft [ 141.532106][ T4236] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 141.799215][ T4236] usb 2-1: Using ep0 maxpacket: 32 [ 141.881920][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 141.924014][ T4236] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 141.939743][ T4236] usb 2-1: config 0 has no interface number 0 [ 142.125611][ T4236] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 142.141066][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.164577][ T4236] usb 2-1: Product: syz [ 142.169912][ T4236] usb 2-1: Manufacturer: syz [ 142.186997][ T4236] usb 2-1: SerialNumber: syz [ 142.213981][ T4236] usb 2-1: config 0 descriptor?? [ 142.262870][ T4236] smsc95xx v2.0.0 [ 142.426031][ T6815] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 142.447826][ T6815] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 142.489093][ T6811] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 142.511946][ T6811] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 142.638927][ T6825] loop6: detected capacity change from 0 to 512 [ 142.698851][ T6825] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 142.709456][ T4236] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 142.740986][ T4236] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 142.755184][ T6825] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 142.801250][ T6825] System zones: 1-12 [ 142.839594][ T6825] EXT4-fs error (device loop6): ext4_orphan_get:1432: comm syz.6.715: bad orphan inode 131072 [ 142.866407][ T6825] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none. [ 142.911945][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 143.059883][ T6820] loop5: detected capacity change from 0 to 32768 [ 143.168046][ T6820] XFS (loop5): Mounting V5 Filesystem [ 143.278250][ T6820] XFS (loop5): Ending clean mount [ 143.651962][ T4236] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71 [ 143.683457][ T4236] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 143.703563][ T4236] usb 2-1: USB disconnect, device number 11 [ 143.749716][ T6860] overlayfs: failed to clone upperpath [ 143.769767][ T4524] XFS (loop5): Unmounting Filesystem [ 143.827684][ T6855] loop6: detected capacity change from 0 to 32768 [ 143.860397][ T6855] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.723 (6855) [ 143.919811][ T6855] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 143.936173][ T6855] BTRFS info (device loop6): using free space tree [ 143.947137][ T6855] BTRFS info (device loop6): has skinny extents [ 143.970323][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 144.196203][ T6855] BTRFS info (device loop6): enabling ssd optimizations [ 144.748605][ T6909] loop6: detected capacity change from 0 to 512 [ 144.827220][ T6909] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.732: missing EA_INODE flag [ 144.859943][ T6909] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.732: error while reading EA inode 2 err=-117 [ 144.876473][ T6909] EXT4-fs (loop6): 1 orphan inode deleted [ 144.886694][ T6909] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 145.001966][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 145.369578][ T21] libceph: connect (1)[c::]:6789 error -101 [ 145.385726][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 145.401555][ T6552] libceph: connect (1)[c::]:6789 error -101 [ 145.414920][ T6552] libceph: mon0 (1)[c::]:6789 connect error [ 145.478868][ T6937] ceph: No mds server is up or the cluster is laggy [ 145.976642][ T26] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 146.031967][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 146.063165][ T6964] bond0: (slave vlan2): Opening slave failed [ 146.398339][ T6971] xt_hashlimit: max too large, truncated to 1048576 [ 146.587410][ T26] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 146.600597][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.631476][ T26] usb 7-1: Product: syz [ 146.648113][ T26] usb 7-1: Manufacturer: syz [ 146.668400][ T26] usb 7-1: SerialNumber: syz [ 146.692400][ T26] usb 7-1: config 0 descriptor?? [ 146.760082][ T26] hub 7-1:0.0: bad descriptor, ignoring hub [ 146.771462][ T26] hub: probe of 7-1:0.0 failed with error -5 [ 146.972127][ T26] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 147.006547][ T26] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 147.067294][ T26] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 147.076031][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 147.099619][ T26] usb 7-1: media controller created [ 147.129922][ T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.208774][ T26] DVB: Unable to find symbol dib7000p_attach() [ 147.215209][ T26] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 147.292056][ T26] rc_core: IR keymap rc-dib0700-rc5 not found [ 147.298447][ T26] Registered IR keymap rc-empty [ 147.315877][ T26] dvb-usb: could not initialize remote control. [ 147.328013][ T26] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 147.365555][ T26] usb 7-1: USB disconnect, device number 5 [ 147.443348][ T26] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 147.792056][ T5696] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 148.112207][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 148.152087][ T5696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.639502][ T5696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.649522][ T5696] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.662633][ T5696] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.671900][ T5696] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.689581][ T5696] usb 6-1: config 0 descriptor?? [ 149.151965][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 149.174108][ T5696] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 149.279558][ T5696] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 149.500706][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.790'. [ 149.727984][ T7067] loop1: detected capacity change from 0 to 2048 [ 149.786690][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.793'. [ 149.869242][ T7067] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.986302][ T7067] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.201923][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 150.235114][ T7080] EXT4-fs (loop1): shut down requested (2) [ 150.249234][ T7067] overlayfs: failed to verify origin (/, ino=2, err=-28) [ 150.269416][ T7080] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 150.301671][ T7067] overlayfs: failed to verify upper root origin [ 150.578621][ T7077] loop6: detected capacity change from 0 to 32768 [ 150.689810][ T7077] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.795 (7077) [ 150.702156][ T5699] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 150.748277][ T7077] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 150.761369][ T7077] BTRFS info (device loop6): using free space tree [ 150.785984][ T7077] BTRFS info (device loop6): has skinny extents [ 150.871976][ T5699] usb 6-1: device descriptor read/64, error -32 [ 150.937345][ T7077] BTRFS info (device loop6): enabling ssd optimizations [ 150.982839][ T4714] BTRFS info (device loop6): space_info 5 has 10432512 free, is not full [ 150.992561][ T4714] BTRFS info (device loop6): space_info total=11534336, used=53248, pinned=0, reserved=16384, may_use=1032192, readonly=0 zone_unusable=0 [ 151.007592][ T4714] BTRFS info (device loop6): global_block_rsv: size 851968 reserved 847872 [ 151.017124][ T4714] BTRFS info (device loop6): trans_block_rsv: size 0 reserved 0 [ 151.025969][ T4714] BTRFS info (device loop6): chunk_block_rsv: size 0 reserved 0 [ 151.034211][ T4714] BTRFS info (device loop6): delayed_block_rsv: size 32768 reserved 32768 [ 151.042984][ T4714] BTRFS info (device loop6): delayed_refs_rsv: size 720896 reserved 151552 [ 151.170205][ T4714] BTRFS info (device loop6): cannot satisfy tickets, dumping space info [ 151.181601][ T4714] BTRFS info (device loop6): space_info 5 has 10629120 free, is full [ 151.190161][ T4714] BTRFS info (device loop6): space_info total=11534336, used=53248, pinned=0, reserved=0, may_use=851968, readonly=0 zone_unusable=0 [ 151.206172][ T4714] BTRFS info (device loop6): global_block_rsv: size 851968 reserved 851968 [ 151.216197][ T4714] BTRFS info (device loop6): trans_block_rsv: size 0 reserved 0 [ 151.224447][ T4714] BTRFS info (device loop6): chunk_block_rsv: size 0 reserved 0 [ 151.232200][ T4714] BTRFS info (device loop6): delayed_block_rsv: size 0 reserved 0 [ 151.240018][ T4714] BTRFS info (device loop6): delayed_refs_rsv: size 0 reserved 0 [ 151.241939][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 151.247800][ T4714] BTRFS info (device loop6): failing ticket with 9223372036854775808 bytes [ 151.298003][ T7077] BTRFS info (device loop6): space_info 5 has 10629120 free, is full [ 151.306896][ T7077] BTRFS info (device loop6): space_info total=11534336, used=53248, pinned=0, reserved=0, may_use=851968, readonly=0 zone_unusable=0 [ 151.320978][ T7077] BTRFS info (device loop6): global_block_rsv: size 851968 reserved 851968 [ 151.330298][ T7077] BTRFS info (device loop6): trans_block_rsv: size 0 reserved 0 [ 151.338030][ T7077] BTRFS info (device loop6): chunk_block_rsv: size 0 reserved 0 [ 151.345726][ T7077] BTRFS info (device loop6): delayed_block_rsv: size 0 reserved 0 [ 151.353614][ T7077] BTRFS info (device loop6): delayed_refs_rsv: size 0 reserved 0 [ 151.519359][ T25] kauditd_printk_skb: 29 callbacks suppressed [ 151.519374][ T25] audit: type=1800 audit(1781888177.243:55): pid=7077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.795" name="file1" dev="loop6" ino=261 res=0 errno=0 [ 151.823038][ T5696] usb 6-1: USB disconnect, device number 6 [ 152.272191][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 152.514501][ T7152] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 152.766303][ T7155] netlink: 24 bytes leftover after parsing attributes in process `syz.5.817'. [ 153.034683][ T7162] tipc: Started in network mode [ 153.060821][ T7162] tipc: Node identity ac1414aa, cluster identity 4711 [ 153.084887][ T7162] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 153.119746][ T7162] tipc: Enabled bearer , priority 10 [ 153.166829][ T25] audit: type=1326 audit(1781888178.893:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.6.814" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a3f59e59 code=0x7ffc0000 [ 153.222002][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 153.259592][ T25] audit: type=1326 audit(1781888178.933:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.6.814" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a3f59e59 code=0x7ffc0000 [ 153.312011][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 153.358574][ T25] audit: type=1326 audit(1781888178.933:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.6.814" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a3f59e59 code=0x7ffc0000 [ 153.382801][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 153.452242][ T25] audit: type=1326 audit(1781888178.933:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.6.814" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f74a3f59e59 code=0x7ffc0000 [ 153.521984][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 153.544191][ T7191] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 153.553660][ T25] audit: type=1326 audit(1781888178.933:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.6.814" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a3f59e59 code=0x7ffc0000 [ 153.627862][ T25] audit: type=1326 audit(1781888178.933:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.6.814" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a3f59e59 code=0x7ffc0000 [ 153.664323][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 153.753654][ T25] audit: type=1326 audit(1781888178.933:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7176 comm="syz.6.814" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a3f59e59 code=0x7ffc0000 [ 153.801963][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 153.881946][ T5961] ================================================================== [ 153.890832][ T5961] BUG: KASAN: use-after-free in __lock_acquire+0x107/0x7b50 [ 153.898226][ T5961] Read of size 8 at addr ffff888059b84bb0 by task gfs2_quotad/5961 [ 153.906581][ T5961] [ 153.908917][ T5961] CPU: 1 PID: 5961 Comm: gfs2_quotad Not tainted syzkaller #0 [ 153.917437][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 153.928527][ T5961] Call Trace: [ 153.931857][ T5961] [ 153.935290][ T5961] dump_stack_lvl+0x188/0x250 [ 153.940113][ T5961] ? show_regs_print_info+0x20/0x20 [ 153.942002][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 153.945518][ T5961] ? load_image+0x410/0x410 [ 153.945537][ T5961] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 153.945553][ T5961] ? __lock_acquire+0x13dc/0x7b50 [ 153.945573][ T5961] print_address_description+0x60/0x2d0 [ 153.975067][ T5961] ? __lock_acquire+0x107/0x7b50 [ 153.980834][ T5961] kasan_report+0xdf/0x130 [ 153.985760][ T5961] ? __lock_acquire+0x107/0x7b50 [ 153.991346][ T5961] __lock_acquire+0x107/0x7b50 [ 153.996125][ T5961] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 154.002288][ T5961] ? lock_chain_count+0x20/0x20 [ 154.007235][ T5961] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 154.012923][ T5961] ? verify_lock_unused+0x140/0x140 [ 154.018821][ T5961] ? lockdep_hardirqs_off+0x70/0x100 [ 154.024382][ T5961] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 154.030288][ T5961] ? lockdep_hardirqs_on+0x94/0x140 [ 154.035536][ T5961] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 154.041447][ T5961] ? _raw_spin_unlock+0x40/0x40 [ 154.046325][ T5961] lock_acquire+0x19e/0x400 [ 154.050928][ T5961] ? finish_wait+0xb8/0x1c0 [ 154.055439][ T5961] ? timer_delete_sync+0x20/0x20 [ 154.060391][ T5961] ? read_lock_is_recursive+0x10/0x10 [ 154.065798][ T5961] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 154.071265][ T5961] ? lockdep_hardirqs_off+0x70/0x100 [ 154.076560][ T5961] _raw_spin_lock_irqsave+0xb0/0x100 [ 154.081890][ T5961] ? finish_wait+0xb8/0x1c0 [ 154.086398][ T5961] ? _raw_spin_lock+0x40/0x40 [ 154.090028][ T5696] tipc: Node number set to 2886997162 [ 154.091081][ T5961] ? update_process_times+0x200/0x200 [ 154.091106][ T5961] finish_wait+0xb8/0x1c0 [ 154.106381][ T5961] gfs2_quotad+0x713/0x890 [ 154.110934][ T5961] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 154.116047][ T5961] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 154.121973][ T5961] ? init_wait_entry+0xd0/0xd0 [ 154.126867][ T5961] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 154.132779][ T5961] ? __kthread_parkme+0x14e/0x1b0 [ 154.137808][ T5961] kthread+0x42e/0x520 [ 154.141879][ T5961] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 154.146995][ T5961] ? kthread_blkcg+0xd0/0xd0 [ 154.151591][ T5961] ret_from_fork+0x1f/0x30 [ 154.156018][ T5961] [ 154.159046][ T5961] [ 154.161364][ T5961] Allocated by task 5696: [ 154.165681][ T5961] __kasan_kmalloc+0xaf/0xe0 [ 154.170545][ T5961] hid_add_field+0x79b/0x1a90 [ 154.175416][ T5961] hid_parser_main+0x298/0xac0 [ 154.180549][ T5961] hid_open_report+0x84c/0xed0 [ 154.185314][ T5961] plantronics_probe+0x40/0x380 [ 154.190686][ T5961] hid_device_probe+0x275/0x360 [ 154.195534][ T5961] really_probe+0x276/0xc70 [ 154.200140][ T5961] __driver_probe_device+0x1f5/0x390 [ 154.205422][ T5961] driver_probe_device+0x4f/0x420 [ 154.210442][ T5961] __device_attach_driver+0x2b0/0x500 [ 154.215830][ T5961] bus_for_each_drv+0x184/0x210 [ 154.220695][ T5961] __device_attach+0x2a7/0x480 [ 154.221980][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 154.225551][ T5961] bus_probe_device+0xba/0x1d0 [ 154.237242][ T5961] device_add+0xbcf/0x1050 [ 154.241665][ T5961] hid_add_device+0x361/0x500 [ 154.246341][ T5961] usbhid_probe+0xbc5/0xf50 [ 154.250935][ T5961] usb_probe_interface+0x5be/0xae0 [ 154.256052][ T5961] really_probe+0x276/0xc70 [ 154.260554][ T5961] __driver_probe_device+0x1f5/0x390 [ 154.265848][ T5961] driver_probe_device+0x4f/0x420 [ 154.270880][ T5961] __device_attach_driver+0x2b0/0x500 [ 154.276248][ T5961] bus_for_each_drv+0x184/0x210 [ 154.281104][ T5961] __device_attach+0x2a7/0x480 [ 154.285950][ T5961] bus_probe_device+0xba/0x1d0 [ 154.290784][ T5961] device_add+0xbcf/0x1050 [ 154.295208][ T5961] usb_set_configuration+0x19d5/0x2030 [ 154.300684][ T5961] usb_generic_driver_probe+0x89/0x150 [ 154.306150][ T5961] usb_probe_device+0x126/0x250 [ 154.311012][ T5961] really_probe+0x276/0xc70 [ 154.315608][ T5961] __driver_probe_device+0x1f5/0x390 [ 154.320903][ T5961] driver_probe_device+0x4f/0x420 [ 154.325945][ T5961] __device_attach_driver+0x2b0/0x500 [ 154.331327][ T5961] bus_for_each_drv+0x184/0x210 [ 154.336210][ T5961] __device_attach+0x2a7/0x480 [ 154.340983][ T5961] bus_probe_device+0xba/0x1d0 [ 154.345769][ T5961] device_add+0xbcf/0x1050 [ 154.350196][ T5961] usb_new_device+0x9f6/0x15d0 [ 154.354963][ T5961] hub_event+0x2b8d/0x5260 [ 154.359378][ T5961] process_one_work+0x867/0xff0 [ 154.364223][ T5961] worker_thread+0xad7/0x12a0 [ 154.368893][ T5961] kthread+0x42e/0x520 [ 154.372950][ T5961] ret_from_fork+0x1f/0x30 [ 154.377387][ T5961] [ 154.379703][ T5961] Freed by task 5696: [ 154.383666][ T5961] kasan_set_track+0x4b/0x70 [ 154.388240][ T5961] kasan_set_free_info+0x1f/0x40 [ 154.393172][ T5961] ____kasan_slab_free+0xd5/0x110 [ 154.398188][ T5961] slab_free_freelist_hook+0xec/0x170 [ 154.403544][ T5961] kfree+0xef/0x2a0 [ 154.407345][ T5961] hid_close_report+0x42c/0x630 [ 154.412187][ T5961] hid_device_remove+0x22f/0x340 [ 154.417200][ T5961] device_release_driver_internal+0x44c/0x710 [ 154.423261][ T5961] bus_remove_device+0x2dd/0x400 [ 154.428191][ T5961] device_del+0x63f/0xa80 [ 154.432502][ T5961] hid_destroy_device+0x66/0x100 [ 154.437423][ T5961] usbhid_disconnect+0x9b/0xc0 [ 154.442175][ T5961] usb_unbind_interface+0x203/0x870 [ 154.447356][ T5961] device_release_driver_internal+0x487/0x710 [ 154.453491][ T5961] bus_remove_device+0x2dd/0x400 [ 154.458416][ T5961] device_del+0x63f/0xa80 [ 154.462731][ T5961] usb_disable_device+0x3e7/0x8a0 [ 154.467749][ T5961] usb_disconnect+0x33c/0x8a0 [ 154.472408][ T5961] hub_event+0x1d64/0x5260 [ 154.476811][ T5961] process_one_work+0x867/0xff0 [ 154.481644][ T5961] worker_thread+0xad7/0x12a0 [ 154.486307][ T5961] kthread+0x42e/0x520 [ 154.490357][ T5961] ret_from_fork+0x1f/0x30 [ 154.491962][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 154.494757][ T5961] [ 154.494763][ T5961] The buggy address belongs to the object at ffff888059b84000 [ 154.494763][ T5961] which belongs to the cache kmalloc-8k of size 8192 [ 154.518015][ T5961] The buggy address is located 2992 bytes inside of [ 154.518015][ T5961] 8192-byte region [ffff888059b84000, ffff888059b86000) [ 154.531444][ T5961] The buggy address belongs to the page: [ 154.537100][ T5961] page:ffffea000166e000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59b80 [ 154.547251][ T5961] head:ffffea000166e000 order:3 compound_mapcount:0 compound_pincount:0 [ 154.555794][ T5961] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 154.563781][ T5961] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c42280 [ 154.572348][ T5961] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 154.580909][ T5961] page dumped because: kasan: bad access detected [ 154.587387][ T5961] page_owner tracks the page as allocated [ 154.593170][ T5961] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5100, ts 99753183947, free_ts 99709603115 [ 154.613746][ T5961] get_page_from_freelist+0x24f6/0x2670 [ 154.619294][ T5961] __alloc_pages+0x1ee/0x480 [ 154.623869][ T5961] new_slab+0xc0/0x4b0 [ 154.627942][ T5961] ___slab_alloc+0x807/0xdd0 [ 154.632518][ T5961] __kmalloc_node+0x142/0x3a0 [ 154.637241][ T5961] kvmalloc_node+0x84/0x130 [ 154.641729][ T5961] pfifo_fast_init+0x35f/0x6a0 [ 154.646484][ T5961] qdisc_create_dflt+0x11a/0x410 [ 154.651406][ T5961] dev_activate+0x33d/0x1330 [ 154.655973][ T5961] __dev_open+0x33b/0x430 [ 154.660287][ T5961] __dev_change_flags+0x1e4/0x6a0 [ 154.665294][ T5961] dev_change_flags+0x78/0x1a0 [ 154.670040][ T5961] do_setlink+0xca4/0x29d0 [ 154.674440][ T5961] rtnl_newlink+0x15bb/0x1920 [ 154.679105][ T5961] rtnetlink_rcv_msg+0x82c/0xf00 [ 154.684114][ T5961] netlink_rcv_skb+0x1e9/0x430 [ 154.688973][ T5961] page last free stack trace: [ 154.693622][ T5961] free_unref_page_prepare+0x637/0x6c0 [ 154.699071][ T5961] free_unref_page+0x8f/0x2a0 [ 154.703730][ T5961] __unfreeze_partials+0x188/0x1e0 [ 154.708854][ T5961] put_cpu_partial+0x12d/0x190 [ 154.713626][ T5961] qlist_free_all+0x35/0x90 [ 154.718122][ T5961] kasan_quarantine_reduce+0x150/0x160 [ 154.723568][ T5961] __kasan_slab_alloc+0x2f/0xc0 [ 154.728401][ T5961] slab_post_alloc_hook+0x4c/0x380 [ 154.733492][ T5961] kmem_cache_alloc_node+0x184/0x2c0 [ 154.738765][ T5961] __alloc_skb+0xf4/0x750 [ 154.743096][ T5961] netlink_sendmsg+0x654/0xbe0 [ 154.747855][ T5961] __sys_sendto+0x46d/0x620 [ 154.752353][ T5961] __x64_sys_sendto+0xda/0xf0 [ 154.757017][ T5961] do_syscall_64+0x4c/0xa0 [ 154.761514][ T5961] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.767481][ T5961] [ 154.769831][ T5961] Memory state around the buggy address: [ 154.775462][ T5961] ffff888059b84a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.783608][ T5961] ffff888059b84b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.791843][ T5961] >ffff888059b84b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.799895][ T5961] ^ [ 154.805517][ T5961] ffff888059b84c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.813565][ T5961] ffff888059b84c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.821609][ T5961] ================================================================== [ 154.829657][ T5961] Disabling lock debugging due to kernel taint [ 154.835809][ T5961] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 154.842990][ T5961] CPU: 1 PID: 5961 Comm: gfs2_quotad Tainted: G B syzkaller #0 [ 154.851828][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.861866][ T5961] Call Trace: [ 154.865130][ T5961] [ 154.868447][ T5961] dump_stack_lvl+0x188/0x250 [ 154.873145][ T5961] ? show_regs_print_info+0x20/0x20 [ 154.878428][ T5961] ? load_image+0x410/0x410 [ 154.882921][ T5961] panic+0x2f8/0x850 [ 154.886807][ T5961] ? bpf_jit_dump+0xd0/0xd0 [ 154.891317][ T5961] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 154.897200][ T5961] ? _raw_spin_unlock+0x40/0x40 [ 154.902037][ T5961] ? __lock_acquire+0x107/0x7b50 [ 154.907082][ T5961] check_panic_on_warn+0x80/0xa0 [ 154.912316][ T5961] ? __lock_acquire+0x107/0x7b50 [ 154.917277][ T5961] end_report+0x6d/0xf0 [ 154.921425][ T5961] kasan_report+0x102/0x130 [ 154.925945][ T5961] ? __lock_acquire+0x107/0x7b50 [ 154.930881][ T5961] __lock_acquire+0x107/0x7b50 [ 154.935656][ T5961] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 154.941655][ T5961] ? lock_chain_count+0x20/0x20 [ 154.946512][ T5961] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 154.951964][ T5961] ? verify_lock_unused+0x140/0x140 [ 154.957150][ T5961] ? lockdep_hardirqs_off+0x70/0x100 [ 154.962518][ T5961] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 154.968402][ T5961] ? lockdep_hardirqs_on+0x94/0x140 [ 154.973591][ T5961] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 154.980267][ T5961] ? _raw_spin_unlock+0x40/0x40 [ 154.985137][ T5961] lock_acquire+0x19e/0x400 [ 154.989651][ T5961] ? finish_wait+0xb8/0x1c0 [ 154.994149][ T5961] ? timer_delete_sync+0x20/0x20 [ 154.999101][ T5961] ? read_lock_is_recursive+0x10/0x10 [ 155.004489][ T5961] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 155.009952][ T5961] ? lockdep_hardirqs_off+0x70/0x100 [ 155.015222][ T5961] _raw_spin_lock_irqsave+0xb0/0x100 [ 155.020494][ T5961] ? finish_wait+0xb8/0x1c0 [ 155.025076][ T5961] ? _raw_spin_lock+0x40/0x40 [ 155.029842][ T5961] ? update_process_times+0x200/0x200 [ 155.035291][ T5961] finish_wait+0xb8/0x1c0 [ 155.039622][ T5961] gfs2_quotad+0x713/0x890 [ 155.044065][ T5961] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 155.049187][ T5961] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 155.055066][ T5961] ? init_wait_entry+0xd0/0xd0 [ 155.059820][ T5961] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 155.065744][ T5961] ? __kthread_parkme+0x14e/0x1b0 [ 155.070817][ T5961] kthread+0x42e/0x520 [ 155.075076][ T5961] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 155.080287][ T5961] ? kthread_blkcg+0xd0/0xd0 [ 155.084901][ T5961] ret_from_fork+0x1f/0x30 [ 155.089310][ T5961] [ 155.092545][ T5961] Kernel Offset: disabled [ 155.096865][ T5961] Rebooting in 86400 seconds..