last executing test programs: 3.091771337s ago: executing program 2 (id=2884): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r4}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r3, @ANYRES8=0x0, @ANYBLOB="0103000000000000000032"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) readv(r6, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x1) mremap(&(0x7f0000638000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nobarrier}, {@noauto_da_alloc}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r5) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000b40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffd}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004001}, 0x4001) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file1\x00', &(0x7f0000000240), &(0x7f0000000d40)=ANY=[], 0xff68, 0x0) 2.727054576s ago: executing program 0 (id=2887): prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x1002efa}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000b40), 0x2b842ac, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000014c0)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000009c0)={0x44, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d7872ac05d8c"}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]]}, 0x44}}, 0x0) 2.152357206s ago: executing program 3 (id=2892): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0x66a, &(0x7f00000002c0)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) pread64(r2, &(0x7f0000000300)=""/153, 0x99, 0x7fffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@setlink={0x30, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8}]}, 0x30}}, 0x0) 1.924825329s ago: executing program 3 (id=2894): r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0}) 1.840683459s ago: executing program 3 (id=2895): openat$pmem0(0xffffff9c, &(0x7f00000003c0), 0x8000, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1f, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007d0c00078000000001000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x9, 0x7d, &(0x7f00000001c0)=""/125, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x4, 0x1, 0x9, 0x4}, {0x0, 0x2, 0xf, 0x4}, {0x0, 0x0, 0xf, 0xa}, {0x5, 0x5, 0xe, 0x7}, {0x1, 0x5, 0xa, 0xc}, {0x0, 0x2, 0x9, 0xb}, {0x0, 0x3, 0x6, 0xb}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x0, 0x8, &(0x7f0000000980)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind(r3, &(0x7f0000000700)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000780)=""/77) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000e40)=ANY=[@ANYRES16=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400d1}, 0x40000) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000a40)={r2, @remote, @multicast1}, 0xc) pipe2(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000ac0)=0xffff, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="4c0085c0a63edc80ed8f719707253ffc01b8c6f0ede75118661118c06e6819d66f740316ba569b21d864f2f356f8c2f2785756d15f8726c59cafbad0334b226f63d1fdaa4d51010e0945a7573848f66d45b8344d56c56c87197248806f3514d31ef677bde6915163bdc6978d745370b4462626de482686360bbad5bd8baa3003b902799364b2a34c6110dbcf9bcc2b3c80da0004f78ace", @ANYBLOB="000229bd7000fddbdf250600000006001b004e200000050007000200000008000c0000000000050021000100000006001d000700000008000c0001000000060001000b00"], 0x4c}, 0x1, 0x0, 0x0, 0x40814}, 0x4081) socket$inet6(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(0xffffffffffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045731, &(0x7f0000000100)) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES16=r9, @ANYBLOB="200028bd7000fbdbdf251200000005002e00000000f907003a00", @ANYRES32, @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700260a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 1.82697332s ago: executing program 0 (id=2896): socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') write$cgroup_int(r1, &(0x7f00000012c0), 0x12) syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000140)={0x3, 0x2, "f57ab0", 0x2, 0x1}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000002000)=ANY=[], &(0x7f0000000f40)=""/4073, 0x32, 0xfe9, 0x1}, 0x20) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x7fffdf7ff000}}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000040)=0x1fde5dba, 0x4) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) 1.770628267s ago: executing program 1 (id=2897): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000380)=0x7, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x0}, 0x90) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x2042, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 1.752167526s ago: executing program 3 (id=2898): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 1.657571192s ago: executing program 2 (id=2899): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x12, &(0x7f00000000c0), 0x4) 1.630376498s ago: executing program 1 (id=2900): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000140)={@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, 0x8, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1f}) fcntl$lock(r5, 0x5, &(0x7f0000000080)={0x1}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) io_setup(0x5, &(0x7f0000000480)=0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x5517, &(0x7f0000005840)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r7, &(0x7f00000000c0)='./bus\x00', r7, &(0x7f0000000140)='./file1\x00', 0x0) io_submit(r6, 0x1, &(0x7f0000000780)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=')', 0x1}]) 1.473887925s ago: executing program 2 (id=2901): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) pread64(r1, &(0x7f0000000340)=""/109, 0x6d, 0x0) 1.467120539s ago: executing program 2 (id=2902): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000640)='./file0\x00', 0x3000044, &(0x7f00000000c0)={[{@acl}, {@skip_balance}, {@compress}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@discard}, {@enospc_debug}, {@max_inline={'max_inline', 0x3d, [0x37, 0x39]}}, {@noflushoncommit}, {@ssd_spread}, {@compress}]}, 0xfe, 0x55a8, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfea7) copy_file_range(r2, &(0x7f0000000100), r1, 0x0, 0xffffffffa003e45f, 0x700000000000000) pwrite64(r0, &(0x7f0000000000)="98", 0x1, 0x0) 1.413831771s ago: executing program 0 (id=2903): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000200)={{0x81}}) 1.336588777s ago: executing program 0 (id=2904): r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r0, 0x3) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x7e) listen(r1, 0x3) 1.266689027s ago: executing program 0 (id=2905): syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000001780)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='background_compression=none,background_compression=zstd,str_hash=crc64,str_hash=crc32c,data_checksum=crc64,data_checksu\x00=crc32c,str_hash=siphash,background_compression=none,\x00'], 0x1, 0x5b83, &(0x7f0000011200)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') gettid() read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0xfffffe5e) 1.011065545s ago: executing program 1 (id=2906): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0x8940) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc903ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="11", 0x10}], 0x3) 811.812518ms ago: executing program 2 (id=2907): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x3cc, 0x100, 0x2b8, 0x182, 0x100, 0x0, 0x304, 0x3a8, 0x3a8, 0x304, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x100, 0x0, {0x0, 0x1800}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x292}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private2, @private2, [], [], 'macsec0\x00', 'netdevsim0\x00'}, 0x0, 0x1dc, 0x204, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0xe, [@mcast2, @dev, @rand_addr=' \x01\x00', @local, @remote, @mcast1, @dev, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @empty, @dev, @mcast1, @loopback, @private0, @empty]}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x428) 806.847668ms ago: executing program 3 (id=2908): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50d4, &(0x7f00000051c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/55, 0x37) 567.294396ms ago: executing program 0 (id=2909): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_es_remove_extent\x00', r4}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r3, @ANYRES8=0x0, @ANYBLOB="0103000000000000000032"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) readv(r6, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x1) mremap(&(0x7f0000638000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nobarrier}, {@noauto_da_alloc}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r5) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000b40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffd}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004001}, 0x4001) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file1\x00', &(0x7f0000000240), &(0x7f0000000d40)=ANY=[], 0xff68, 0x0) 399.431664ms ago: executing program 2 (id=2910): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x80013, r2, 0x0) msync(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x74}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 334.862443ms ago: executing program 1 (id=2911): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) pread64(r1, &(0x7f0000000340)=""/109, 0x6d, 0x0) 246.463575ms ago: executing program 3 (id=2912): io_setup(0x40, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, &(0x7f0000000600)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f000000b800), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) read(r2, &(0x7f0000009180)=""/91, 0x5b) 240.956095ms ago: executing program 1 (id=2913): openat$pmem0(0xffffff9c, &(0x7f00000003c0), 0x8000, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1f, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007d0c00078000000001000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x9, 0x7d, &(0x7f00000001c0)=""/125, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x4, 0x1, 0x9, 0x4}, {0x0, 0x2, 0xf, 0x4}, {0x0, 0x0, 0xf, 0xa}, {0x5, 0x5, 0xe, 0x7}, {0x1, 0x5, 0xa, 0xc}, {0x0, 0x2, 0x9, 0xb}, {0x0, 0x3, 0x6, 0xb}]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x0, 0x8, &(0x7f0000000980)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind(r3, &(0x7f0000000700)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000780)=""/77) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000e40)=ANY=[@ANYRES16=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400d1}, 0x40000) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000a40)={r2, @remote, @multicast1}, 0xc) pipe2(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000ac0)=0xffff, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="4c0085c0a63edc80ed8f719707253ffc01b8c6f0ede75118661118c06e6819d66f740316ba569b21d864f2f356f8c2f2785756d15f8726c59cafbad0334b226f63d1fdaa4d51010e0945a7573848f66d45b8344d56c56c87197248806f3514d31ef677bde6915163bdc6978d745370b4462626de482686360bbad5bd8baa3003b902799364b2a34c6110dbcf9bcc2b3c80da0004f78ace", @ANYBLOB="000229bd7000fddbdf250600000006001b004e200000050007000200000008000c0000000000050021000100000006001d000700000008000c0001000000060001000b00"], 0x4c}, 0x1, 0x0, 0x0, 0x40814}, 0x4081) socket$inet6(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) dup(0xffffffffffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045731, &(0x7f0000000100)) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES16=r9, @ANYBLOB="200028bd7000fbdbdf251200000005002e00000000f907003a00", @ANYRES32, @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700260a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 0s ago: executing program 1 (id=2914): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 290.473258][T12030] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x244/0x4f0" at daddr 0x10 len 8 error 74 [ 290.486758][T12030] XFS (loop2): page discard on page ffffea00019fbb40, inode 0x1149, pos 0. [ 290.503714][T12053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.515077][T12053] ext4 filesystem being mounted at /syzkaller.sgvA9I/203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.557594][T12053] EXT4-fs error (device loop0): ext4_readdir:258: inode #2: block 3: comm syz.0.2194: path /syzkaller.sgvA9I/203/file1: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 290.568209][ T8973] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 290.587428][ T8973] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 290.841910][T12066] loop1: detected capacity change from 0 to 128 [ 291.054404][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.162395][T12073] loop2: detected capacity change from 0 to 8 [ 291.231851][T12073] loop2: detected capacity change from 0 to 8 [ 291.310007][ T39] audit: type=1326 audit(1719399915.344:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12076 comm="syz.0.2204" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x0 [ 292.181131][T12080] loop2: detected capacity change from 0 to 32768 [ 292.211534][T12080] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 292.251240][T12080] XFS (loop2): Ending clean mount [ 292.305481][T12080] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 [ 292.309816][T12080] XFS (loop2): Unmount and run xfs_repair [ 292.312198][T12080] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 292.319374][T12080] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 292.322881][T12080] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 292.326096][T12080] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 292.329763][T12080] 00000030: 00 00 00 87 00 00 00 11 00 00 04 4e 00 00 00 02 ...........N.... [ 292.332973][T12080] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 292.338397][T12080] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 292.341841][T12080] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 292.345678][T12080] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 292.349806][T12080] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x244/0x4f0" at daddr 0x10 len 8 error 74 [ 292.354464][T12080] XFS (loop2): page discard on page ffffea00018cbbc0, inode 0x1149, pos 0. [ 292.363998][T12084] loop1: detected capacity change from 0 to 40427 [ 292.368490][T12084] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 292.371389][T12084] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 292.378877][T12084] F2FS-fs (loop1): invalid crc value [ 292.392122][ T8973] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 292.402883][T12084] F2FS-fs (loop1): Found nat_bits in checkpoint [ 292.410808][ T8973] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 292.463173][T12084] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 292.466434][T12084] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 292.655086][T12084] loop1: detected capacity change from 40427 to 11 [ 292.711972][T12084] syz.1.2206: attempt to access beyond end of device [ 292.711972][T12084] loop1: rw=2049, sector=36912, nr_sectors = 8 limit=11 [ 292.719891][T12084] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 292.723275][T12084] syz.1.2206: attempt to access beyond end of device [ 292.723275][T12084] loop1: rw=395265, sector=36920, nr_sectors = 8 limit=11 [ 292.738835][T12084] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 292.742534][T12084] syz.1.2206: attempt to access beyond end of device [ 292.742534][T12084] loop1: rw=0, sector=36912, nr_sectors = 8 limit=11 [ 292.758556][ T5239] F2FS-fs (loop1): f2fs_commit_super fails to record stop_reason, err:-5 [ 292.763114][T12084] syz.1.2206: attempt to access beyond end of device [ 292.763114][T12084] loop1: rw=0, sector=36912, nr_sectors = 8 limit=11 [ 292.767802][ T5239] F2FS-fs (loop1): f2fs_commit_super fails to record stop_reason, err:-5 [ 292.770965][T12084] syz.1.2206: attempt to access beyond end of device [ 292.770965][T12084] loop1: rw=0, sector=36912, nr_sectors = 8 limit=11 [ 292.776732][T12084] syz.1.2206: attempt to access beyond end of device [ 292.776732][T12084] loop1: rw=0, sector=36912, nr_sectors = 8 limit=11 [ 292.782238][T12084] syz.1.2206: attempt to access beyond end of device [ 292.782238][T12084] loop1: rw=0, sector=36912, nr_sectors = 8 limit=11 [ 292.787625][T12084] syz.1.2206: attempt to access beyond end of device [ 292.787625][T12084] loop1: rw=0, sector=36912, nr_sectors = 8 limit=11 [ 292.792385][T12084] syz.1.2206: attempt to access beyond end of device [ 292.792385][T12084] loop1: rw=0, sector=36912, nr_sectors = 8 limit=11 [ 292.797049][T12084] syz.1.2206: attempt to access beyond end of device [ 292.797049][T12084] loop1: rw=0, sector=36912, nr_sectors = 8 limit=11 [ 292.809399][T12084] F2FS-fs (loop1): f2fs_commit_super fails to record stop_reason, err:-5 [ 292.813222][T12084] F2FS-fs (loop1): Stopped filesystem due to reason: 5 [ 292.917842][T12102] loop2: detected capacity change from 0 to 40427 [ 292.949464][T12102] F2FS-fs (loop2): Found nat_bits in checkpoint [ 292.980105][T12102] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 293.247184][ T1088] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.375969][ T1088] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.548217][T12115] loop0: detected capacity change from 0 to 8 [ 293.549014][ T1088] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.623646][T12115] loop0: detected capacity change from 0 to 8 [ 293.658144][T12119] ax25_connect(): syz.3.2217 uses autobind, please contact jreuter@yaina.de [ 293.659739][ T5204] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.672709][ T5204] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.678709][ T1088] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.685151][ T5204] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.692237][ T5204] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.695676][ T5204] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 293.698594][ T5204] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.920524][T12130] Bluetooth: MGMT ver 1.22 [ 293.932429][ T1088] bridge_slave_1: left allmulticast mode [ 293.935107][ T1088] bridge_slave_1: left promiscuous mode [ 293.937864][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.955664][ T1088] bridge_slave_0: left allmulticast mode [ 293.964703][ T1088] bridge_slave_0: left promiscuous mode [ 293.967331][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.093911][T12119] loop3: detected capacity change from 0 to 40427 [ 294.105498][T12119] F2FS-fs (loop3): Unrecognized mount option "jqfmt=vsold" or missing value [ 294.548182][T12140] loop2: detected capacity change from 0 to 40427 [ 294.568946][T12140] F2FS-fs (loop2): Found nat_bits in checkpoint [ 294.576486][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.582118][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.588081][ T1088] bond0 (unregistering): Released all slaves [ 294.599457][T12140] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 294.657763][T12120] chnl_net:caif_netlink_parms(): no params data found [ 294.699481][ T39] audit: type=1800 audit(1719399918.734:672): pid=12150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2227" name="file0" dev="sda1" ino=2027 res=0 errno=0 [ 294.764696][T12143] loop3: detected capacity change from 0 to 40427 [ 294.770448][T12143] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 294.802025][T12143] F2FS-fs (loop3): Found nat_bits in checkpoint [ 294.839899][T12143] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 294.859477][T12120] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.862109][T12120] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.872317][T12120] bridge_slave_0: entered allmulticast mode [ 294.876486][T12120] bridge_slave_0: entered promiscuous mode [ 294.881655][T12120] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.884824][T12120] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.887573][T12120] bridge_slave_1: entered allmulticast mode [ 294.890967][T12120] bridge_slave_1: entered promiscuous mode [ 295.092792][T12120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.107611][T12120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.132807][T12164] loop0: detected capacity change from 0 to 256 [ 295.136109][T12164] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 295.149273][T12164] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 295.203370][ T1088] hsr_slave_0: left promiscuous mode [ 295.225066][ T1088] hsr_slave_1: left promiscuous mode [ 295.228131][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.231096][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.234302][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.237059][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.287404][ T1088] veth1_macvtap: left promiscuous mode [ 295.289423][ T1088] veth0_macvtap: left promiscuous mode [ 295.291461][ T1088] veth1_vlan: left promiscuous mode [ 295.293786][ T1088] veth0_vlan: left promiscuous mode [ 295.348800][T12166] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2231'. [ 295.402173][T12168] loop2: detected capacity change from 0 to 128 [ 295.679164][T12174] loop3: detected capacity change from 0 to 40427 [ 295.692372][T12174] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 295.695770][T12174] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 295.702713][T12174] F2FS-fs (loop3): invalid crc value [ 295.709253][T12174] F2FS-fs (loop3): Found nat_bits in checkpoint [ 295.752673][T12174] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 295.755820][T12174] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 295.764982][ T4640] Bluetooth: hci0: command tx timeout [ 296.030833][T12174] loop3: detected capacity change from 40427 to 11 [ 296.085539][T12174] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 296.102609][ T5239] F2FS-fs (loop3): f2fs_commit_super fails to record stop_reason, err:-5 [ 297.212449][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 297.403852][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 297.844936][ T4640] Bluetooth: hci0: command tx timeout [ 298.866489][T12120] team0: Port device team_slave_0 added [ 298.915846][T12120] team0: Port device team_slave_1 added [ 298.973629][T12120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.976725][T12120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.990205][T12120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.996876][T12120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.999828][T12120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.011197][T12120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.016686][T12193] loop0: detected capacity change from 0 to 64 [ 299.057173][T12193] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2239'. [ 299.062183][T12189] bio_check_eod: 4 callbacks suppressed [ 299.062194][T12189] syz.2.2238: attempt to access beyond end of device [ 299.062194][T12189] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 299.074795][T12189] vxfs: unable to read disk superblock at 1 [ 299.079938][T12189] syz.2.2238: attempt to access beyond end of device [ 299.079938][T12189] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 299.087947][T12189] vxfs: unable to read disk superblock at 8 [ 299.090450][T12189] vxfs: can't find superblock. [ 299.125698][T12120] hsr_slave_0: entered promiscuous mode [ 299.158446][T12120] hsr_slave_1: entered promiscuous mode [ 299.161168][T12120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.166293][T12120] Cannot create hsr debugfs directory [ 299.197591][T12200] ax25_connect(): syz.0.2242 uses autobind, please contact jreuter@yaina.de [ 299.483919][T12200] loop0: detected capacity change from 0 to 40427 [ 299.490505][T12200] F2FS-fs (loop0): Unrecognized mount option "jqfmt=vsold" or missing value [ 299.492671][ T1088] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.587711][ T5204] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.594864][ T5204] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.613608][ T1088] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.621431][ T5204] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.630362][ T5204] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.639199][ T5204] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 299.654856][ T5204] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.725634][ T1088] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.881397][ T1088] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.901952][T12205] chnl_net:caif_netlink_parms(): no params data found [ 299.914888][ T4640] Bluetooth: hci0: command tx timeout [ 300.060828][T12205] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.063333][T12205] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.066242][T12205] bridge_slave_0: entered allmulticast mode [ 300.069307][T12205] bridge_slave_0: entered promiscuous mode [ 300.090303][T12205] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.093541][T12205] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.096924][T12205] bridge_slave_1: entered allmulticast mode [ 300.100858][T12205] bridge_slave_1: entered promiscuous mode [ 300.205610][T12205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.224920][T12205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.229035][T12120] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 300.243316][T12120] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 300.281683][ T1088] bridge_slave_1: left allmulticast mode [ 300.284238][ T1088] bridge_slave_1: left promiscuous mode [ 300.287148][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.293064][ T1088] bridge_slave_0: left promiscuous mode [ 300.296669][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.378103][T12220] loop2: detected capacity change from 0 to 8192 [ 300.392518][T12221] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 300.625783][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2250'. [ 300.672158][T12225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2250'. [ 300.808120][T12229] loop2: detected capacity change from 0 to 64 [ 300.870020][T12229] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2252'. [ 300.917768][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.927567][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.932887][ T1088] bond0 (unregistering): Released all slaves [ 300.938473][T12120] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 300.973300][T12231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'. [ 300.974939][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2254'. [ 301.071055][T12120] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 301.092747][T12205] team0: Port device team_slave_0 added [ 301.104360][T12205] team0: Port device team_slave_1 added [ 301.221987][T12205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.225515][T12205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.236565][T12205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.245460][T12205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.248391][T12205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.258221][T12205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.278000][T12243] syz.0.2259: attempt to access beyond end of device [ 301.278000][T12243] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 301.286412][T12243] vxfs: unable to read disk superblock at 1 [ 301.289157][T12243] syz.0.2259: attempt to access beyond end of device [ 301.289157][T12243] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 301.293825][T12243] vxfs: unable to read disk superblock at 8 [ 301.296417][T12243] vxfs: can't find superblock. [ 301.394894][T12205] hsr_slave_0: entered promiscuous mode [ 301.398788][T12205] hsr_slave_1: entered promiscuous mode [ 301.401884][T12205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.407599][T12205] Cannot create hsr debugfs directory [ 301.521417][ T1088] hsr_slave_0: left promiscuous mode [ 301.525535][ T1088] hsr_slave_1: left promiscuous mode [ 301.529060][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.532517][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.539374][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.542758][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.593845][ T1088] veth1_macvtap: left promiscuous mode [ 301.596625][ T1088] veth0_macvtap: left promiscuous mode [ 301.599244][ T1088] veth1_vlan: left promiscuous mode [ 301.601664][ T1088] veth0_vlan: left promiscuous mode [ 301.687392][T12252] loop0: detected capacity change from 0 to 64 [ 301.733460][T12252] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2261'. [ 301.762151][ T4640] Bluetooth: hci4: command tx timeout [ 301.820784][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2262'. [ 301.994859][ T4640] Bluetooth: hci0: command tx timeout [ 302.100835][T12258] ax25_connect(): syz.2.2264 uses autobind, please contact jreuter@yaina.de [ 302.361022][T12258] loop2: detected capacity change from 0 to 40427 [ 302.368201][T12258] F2FS-fs (loop2): Unrecognized mount option "jqfmt=vsold" or missing value [ 303.330518][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 303.526967][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 303.834860][ T4640] Bluetooth: hci4: command tx timeout [ 304.908219][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2267'. [ 305.032567][T12273] loop0: detected capacity change from 0 to 128 [ 305.038361][T12120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.042172][T12273] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 305.074134][T12120] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.083601][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.087466][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.106524][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.110054][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.349450][T12120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.418146][T12120] veth0_vlan: entered promiscuous mode [ 305.438002][T12120] veth1_vlan: entered promiscuous mode [ 305.466844][T12120] veth0_macvtap: entered promiscuous mode [ 305.474047][T12120] veth1_macvtap: entered promiscuous mode [ 305.498785][T12120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.506379][T12120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.510291][T12120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.514197][T12120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.517758][T12120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.522222][T12120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.528812][T12120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.540729][T12120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.546685][T12120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.551387][T12120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.556103][T12120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.560493][T12120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.566140][T12120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.572625][T12120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.581882][T12120] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.585494][T12120] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.589144][T12120] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.593050][T12120] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.687617][T12205] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 305.706329][T12205] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 305.716466][T12205] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 305.732638][T12205] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 305.744117][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.748555][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.770763][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.775576][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.864859][T12288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2275'. [ 305.886516][T12205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.914552][T12205] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.925150][ T4640] Bluetooth: hci4: command tx timeout [ 305.931860][T12289] loop2: detected capacity change from 0 to 4096 [ 305.939596][T12289] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 305.966372][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.969761][ T5239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.975518][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.978549][ T5239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.022760][T12289] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 306.063760][T12205] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.167596][ T1086] ntfs3: loop2: ino=5, ntfs3_write_inode failed, -22. [ 306.260858][T12205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.321175][T12317] loop0: detected capacity change from 0 to 128 [ 306.327299][T12317] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 306.330375][T12205] veth0_vlan: entered promiscuous mode [ 306.343212][T12205] veth1_vlan: entered promiscuous mode [ 306.369519][ T39] audit: type=1804 audit(1719399930.404:673): pid=12317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2285" name="/syzkaller.sgvA9I/244/file0/bus" dev="loop0" ino=115 res=1 errno=0 [ 306.373942][T12205] veth0_macvtap: entered promiscuous mode [ 306.389003][ T39] audit: type=1800 audit(1719399930.404:674): pid=12317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2285" name="bus" dev="loop0" ino=115 res=0 errno=0 [ 306.391242][T12205] veth1_macvtap: entered promiscuous mode [ 306.401236][ T39] audit: type=1804 audit(1719399930.424:675): pid=12317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2285" name="/syzkaller.sgvA9I/244/file0/bus" dev="loop0" ino=115 res=1 errno=0 [ 306.436822][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.441315][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.446744][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.451352][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.457783][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.462972][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.467894][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.472784][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.479688][T12205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.497963][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.498678][T12325] loop2: detected capacity change from 0 to 4096 [ 306.501654][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.501669][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.501677][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.501686][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.510777][T12325] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 306.513487][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.529203][T12205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.533390][T12205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.548801][T12205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.553956][T12325] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 306.561396][T12205] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.564388][T12205] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.568294][T12205] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.571675][T12205] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.642364][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.648058][T12333] loop1: detected capacity change from 0 to 128 [ 306.648650][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.658602][T12333] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 306.717897][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.721075][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.725972][ T1088] ntfs3: loop2: ino=5, "/" ntfs3_write_inode failed, -22. [ 306.921404][T12342] input: syz0 as /devices/virtual/input/input30 [ 307.016776][T12352] loop1: detected capacity change from 0 to 128 [ 307.020208][T12352] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 307.096448][ T39] audit: type=1804 audit(1719399931.134:676): pid=12352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2301" name="/syzkaller.TuhMOU/10/file0/bus" dev="loop1" ino=115 res=1 errno=0 [ 307.112189][ T39] audit: type=1800 audit(1719399931.134:677): pid=12352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2301" name="bus" dev="loop1" ino=115 res=0 errno=0 [ 307.121187][ T39] audit: type=1804 audit(1719399931.134:678): pid=12352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2301" name="/syzkaller.TuhMOU/10/file0/bus" dev="loop1" ino=115 res=1 errno=0 [ 307.147979][T12364] loop0: detected capacity change from 0 to 128 [ 307.152988][T12364] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 307.278296][T12370] input: syz0 as /devices/virtual/input/input31 [ 307.820690][T12413] loop0: detected capacity change from 0 to 4096 [ 307.824842][T12413] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 307.834469][T12413] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 307.934837][ T11] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22. [ 308.004863][ T4640] Bluetooth: hci4: command tx timeout [ 308.013891][T12430] netlink: 'syz.0.2336': attribute type 5 has an invalid length. [ 308.089823][ T39] audit: type=1326 audit(1719399932.124:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.0.2339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 308.103760][ T39] audit: type=1326 audit(1719399932.124:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.0.2339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 308.120461][ T39] audit: type=1326 audit(1719399932.144:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.0.2339" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 308.141419][ T39] audit: type=1326 audit(1719399932.154:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12433 comm="syz.0.2339" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 308.251791][T12428] loop2: detected capacity change from 0 to 40427 [ 308.258203][T12428] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 308.273582][T12428] F2FS-fs (loop2): Found nat_bits in checkpoint [ 308.299156][T12428] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 308.314744][ T4640] Bluetooth: hci0: command tx timeout [ 308.326443][T12428] syz.2.2337: attempt to access beyond end of device [ 308.326443][T12428] loop2: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 308.444264][T12444] loop1: detected capacity change from 0 to 32768 [ 308.450124][T12444] (syz.1.2341,12444,3):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "@ý…l§ƒ±Œ»×alLòM¶A.ÊpgkÓBnÃrüÅ^ôËðåUD" or missing value [ 308.455750][T12444] (syz.1.2341,12444,3):ocfs2_fill_super:1178 ERROR: status = -22 [ 308.751364][T12444] loop1: detected capacity change from 0 to 32768 [ 308.754327][T12444] XFS: noikeep mount option is deprecated. [ 308.763274][T12444] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 308.808723][T12444] XFS (loop1): Ending clean mount [ 308.819577][T12444] XFS (loop1): Quotacheck needed: Please wait. [ 308.871757][T12444] XFS (loop1): Quotacheck: Done. [ 308.932256][T12120] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 309.106956][T12476] loop2: detected capacity change from 0 to 4096 [ 309.126002][T12476] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 309.126503][T12478] netlink: 'syz.0.2347': attribute type 5 has an invalid length. [ 309.141119][T12476] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 309.171927][T12480] loop1: detected capacity change from 0 to 128 [ 309.179782][T12480] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 309.278246][ T96] ntfs3: loop2: ino=5, ntfs3_write_inode failed, -22. [ 309.668157][T12495] loop2: detected capacity change from 0 to 32768 [ 309.671533][T12495] (syz.2.2354,12495,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "@ý…l§ƒ±Œ»×alLòM¶A.ÊpgkÓBnÃrüÅ^ôËðåUD" or missing value [ 309.678610][T12495] (syz.2.2354,12495,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 309.731375][T12523] loop3: detected capacity change from 0 to 256 [ 310.077511][T12495] loop2: detected capacity change from 0 to 32768 [ 310.078654][ T4640] Bluetooth: hci4: command tx timeout [ 310.081208][T12495] XFS: noikeep mount option is deprecated. [ 310.090209][T12544] input: syz0 as /devices/virtual/input/input32 [ 310.130503][T12495] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 310.180490][T12495] XFS (loop2): Ending clean mount [ 310.185388][T12495] XFS (loop2): Quotacheck needed: Please wait. [ 310.222230][T12495] XFS (loop2): Quotacheck: Done. [ 310.323580][T12565] loop3: detected capacity change from 0 to 128 [ 310.342276][T12566] loop0: detected capacity change from 0 to 512 [ 310.346144][ T8973] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 310.347424][T12565] FAT-fs (loop3): invalid media value (0x00) [ 310.352877][T12565] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 310.374807][T12566] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 310.378945][T12566] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 310.393104][T12565] FAT-fs (loop3): Can't find a valid FAT filesystem [ 310.405453][ T4640] Bluetooth: hci0: command tx timeout [ 310.461702][T12566] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 310.541313][T12548] loop1: detected capacity change from 0 to 40427 [ 310.654477][T12548] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 310.689156][T12548] F2FS-fs (loop1): Found nat_bits in checkpoint [ 310.733290][T12548] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 310.804449][T12548] syz.1.2371: attempt to access beyond end of device [ 310.804449][T12548] loop1: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 311.128318][T12599] loop3: detected capacity change from 0 to 32768 [ 311.134057][T12599] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2385 (12599) [ 311.142224][T12599] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 311.146996][T12599] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 311.150490][T12599] BTRFS info (device loop3): using free-space-tree [ 311.308081][T12205] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 311.659547][T12621] loop2: detected capacity change from 0 to 32768 [ 311.684086][T12633] loop1: detected capacity change from 0 to 16 [ 311.691172][T12633] erofs: (device loop1): mounted with root inode @ nid 36. [ 311.705741][T12621] find_entry called with index = 0 [ 311.711506][T12621] find_entry called with index = 0 [ 311.721125][T12621] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 311.721125][T12621] [ 311.740562][T12621] ERROR: (device loop2): remounting filesystem as read-only [ 311.743729][T12621] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 311.743729][T12621] [ 311.754128][T12621] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 5 [ 311.754128][T12621] [ 311.761544][T12621] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 311.761544][T12621] [ 311.786353][T12621] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 5 [ 311.786353][T12621] [ 311.817704][T12643] loop3: detected capacity change from 0 to 256 [ 311.982113][T12641] loop0: detected capacity change from 0 to 32768 [ 311.995351][T12641] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2397 (12641) [ 312.015526][T12649] mmap: syz.1.2402 (12649) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 312.021684][T12641] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 312.026820][T12641] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 312.030896][T12641] BTRFS info (device loop0): using free-space-tree [ 312.127822][T12672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2407'. [ 312.192360][T12678] loop2: detected capacity change from 0 to 16 [ 312.202769][T12678] erofs: (device loop2): mounted with root inode @ nid 36. [ 312.210832][T12680] loop1: detected capacity change from 0 to 256 [ 312.212325][ T9649] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 312.390261][T12688] loop2: detected capacity change from 0 to 512 [ 312.412543][T12688] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 312.417222][T12688] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 312.597140][T12690] loop3: detected capacity change from 0 to 32768 [ 312.603384][ T39] kauditd_printk_skb: 97 callbacks suppressed [ 312.603400][ T39] audit: type=1804 audit(1719399936.634:780): pid=12688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2412" name="/syzkaller.Q1g6dX/307/.log" dev="sda1" ino=2024 res=1 errno=0 [ 312.613753][T12688] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 312.752707][T12690] find_entry called with index = 0 [ 312.774798][T12690] find_entry called with index = 0 [ 312.797998][T12690] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 312.797998][T12690] [ 312.824680][T12690] ERROR: (device loop3): remounting filesystem as read-only [ 312.827724][T12690] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 312.827724][T12690] [ 312.832395][T12690] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 5 [ 312.832395][T12690] [ 312.855581][T12707] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 312.855581][T12707] [ 312.860475][T12707] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 5 [ 312.860475][T12707] [ 313.039222][T12706] loop0: detected capacity change from 0 to 32768 [ 313.043596][T12706] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2421 (12706) [ 313.060457][T12706] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 313.065167][T12706] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 313.068640][T12706] BTRFS info (device loop0): using free-space-tree [ 313.250603][ T9649] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 313.422489][T12746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2423'. [ 313.800934][T12748] loop1: detected capacity change from 0 to 32768 [ 313.896648][T12748] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 313.898701][T12750] loop2: detected capacity change from 0 to 32768 [ 313.902170][T12748] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 313.902646][T12773] program syz.0.2439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.953967][T12748] bcachefs (loop1): alloc_read... done [ 313.960812][T12748] bcachefs (loop1): stripes_read... done [ 313.963362][T12748] bcachefs (loop1): snapshots_read... done [ 313.971907][T12748] bcachefs (loop1): journal_replay... done [ 313.977562][T12748] bcachefs (loop1): resume_logged_ops... done [ 313.978058][T12750] find_entry called with index = 0 [ 313.980285][T12748] bcachefs (loop1): going read-write [ 313.986880][T12750] find_entry called with index = 0 [ 313.988691][T12748] bcachefs (loop1): done starting filesystem [ 314.001180][T12750] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 314.001180][T12750] [ 314.010747][T12750] ERROR: (device loop2): remounting filesystem as read-only [ 314.014072][T12750] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 314.014072][T12750] [ 314.022358][T12750] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 5 [ 314.022358][T12750] [ 314.034494][T12750] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 314.034494][T12750] [ 314.041304][T12750] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 5 [ 314.041304][T12750] [ 314.208148][T12793] loop0: detected capacity change from 0 to 256 [ 314.212099][T12793] exfat: Unknown parameter 'ÿÿÿÿ' [ 314.267032][T12120] bcachefs (loop1): shutting down [ 314.269531][T12120] bcachefs (loop1): going read-only [ 314.271754][T12120] bcachefs (loop1): finished waiting for writes to stop [ 314.287682][T12120] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 314.303725][T12120] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13 [ 314.326973][T12120] bcachefs (loop1): shutdown complete, journal seq 14 [ 314.330368][T12120] bcachefs (loop1): marking filesystem clean [ 314.353506][T12120] bcachefs (loop1): shutdown complete [ 314.360643][T12793] evm: overlay not supported [ 314.524751][ T39] audit: type=1326 audit(1719399938.554:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12795 comm="syz.2.2445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7416579 code=0x7ffc0000 [ 314.547242][ T39] audit: type=1326 audit(1719399938.554:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12795 comm="syz.2.2445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7416579 code=0x7ffc0000 [ 314.564742][ T39] audit: type=1326 audit(1719399938.554:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12795 comm="syz.2.2445" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7416579 code=0x7ffc0000 [ 314.589876][ T39] audit: type=1326 audit(1719399938.554:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12795 comm="syz.2.2445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7416579 code=0x7ffc0000 [ 314.621856][ T39] audit: type=1326 audit(1719399938.554:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12795 comm="syz.2.2445" exe="/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7416579 code=0x7ffc0000 [ 314.623211][T12798] program syz.2.2450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.633140][ T39] audit: type=1326 audit(1719399938.554:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12795 comm="syz.2.2445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7416579 code=0x7ffc0000 [ 314.646384][ T39] audit: type=1326 audit(1719399938.554:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12795 comm="syz.2.2445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7416579 code=0x7ffc0000 [ 314.655057][ T39] audit: type=1326 audit(1719399938.554:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12795 comm="syz.2.2445" exe="/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf7416579 code=0x7ffc0000 [ 314.670962][ T39] audit: type=1326 audit(1719399938.564:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12795 comm="syz.2.2445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7416579 code=0x7ffc0000 [ 314.700647][T12802] loop1: detected capacity change from 0 to 64 [ 314.943254][T12819] loop1: detected capacity change from 0 to 256 [ 314.947635][T12819] exfat: Unknown parameter 'ÿÿÿÿ' [ 315.132986][T12816] loop2: detected capacity change from 0 to 32768 [ 315.140451][T12816] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2456 (12816) [ 315.145914][T12817] loop0: detected capacity change from 0 to 32768 [ 315.147949][T12816] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 315.151998][T12817] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2457 (12817) [ 315.152799][T12816] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 315.161389][T12816] BTRFS info (device loop2): using free-space-tree [ 315.164116][T12817] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 315.169483][T12817] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 315.173846][T12817] BTRFS info (device loop0): using free-space-tree [ 315.305056][ T8973] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 315.353617][T12852] loop1: detected capacity change from 0 to 512 [ 315.357631][T12852] EXT4-fs: Ignoring removed oldalloc option [ 315.437112][T12852] EXT4-fs error (device loop1): ext4_xattr_inode_iget:435: comm syz.1.2459: Parent and EA inode have the same ino 15 [ 315.474903][T12852] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 315.483316][T12852] EXT4-fs error (device loop1): ext4_xattr_inode_iget:435: comm syz.1.2459: Parent and EA inode have the same ino 15 [ 315.503177][T12852] EXT4-fs (loop1): 1 orphan inode deleted [ 315.519312][T12852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.551461][T12857] loop2: detected capacity change from 0 to 64 [ 315.572072][T12852] EXT4-fs error (device loop1): ext4_find_dest_de:2110: inode #2: block 13: comm syz.1.2459: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 315.627980][T12120] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.665982][ T9649] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 315.809732][T12865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2464'. [ 315.893290][T12871] loop1: detected capacity change from 0 to 256 [ 315.897240][T12871] exfat: Unknown parameter 'ÿÿÿÿ' [ 315.925820][ T5204] Bluetooth: hci2: command tx timeout [ 316.126072][T12873] loop2: detected capacity change from 0 to 32768 [ 316.161901][T12886] loop0: detected capacity change from 0 to 64 [ 316.182159][T12873] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 316.188605][T12873] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 316.216110][T12873] bcachefs (loop2): alloc_read... done [ 316.218352][T12873] bcachefs (loop2): stripes_read... done [ 316.220535][T12873] bcachefs (loop2): snapshots_read... done [ 316.224523][T12873] bcachefs (loop2): journal_replay... done [ 316.227181][T12873] bcachefs (loop2): resume_logged_ops... done [ 316.229702][T12873] bcachefs (loop2): going read-write [ 316.236740][T12873] bcachefs (loop2): done starting filesystem [ 316.334278][T12891] loop0: detected capacity change from 0 to 512 [ 316.338882][T12891] EXT4-fs: Ignoring removed oldalloc option [ 316.353492][T12891] EXT4-fs error (device loop0): ext4_xattr_inode_iget:435: comm syz.0.2471: Parent and EA inode have the same ino 15 [ 316.360274][T12891] EXT4-fs error (device loop0): ext4_xattr_inode_iget:435: comm syz.0.2471: Parent and EA inode have the same ino 15 [ 316.378010][T12891] EXT4-fs (loop0): 1 orphan inode deleted [ 316.381524][T12891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.416037][T12891] EXT4-fs error (device loop0): ext4_find_dest_de:2110: inode #2: block 13: comm syz.0.2471: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 316.450048][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.542671][ T8973] bcachefs (loop2): shutting down [ 316.547021][ T8973] bcachefs (loop2): going read-only [ 316.550493][ T8973] bcachefs (loop2): finished waiting for writes to stop [ 316.572664][ T8973] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 316.592264][ T8973] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13 [ 316.614431][ T8973] bcachefs (loop2): shutdown complete, journal seq 14 [ 316.619609][ T8973] bcachefs (loop2): marking filesystem clean [ 316.643075][ T8973] bcachefs (loop2): shutdown complete [ 316.645185][ T4640] Bluetooth: hci1: command tx timeout [ 316.661246][T12908] loop1: detected capacity change from 0 to 512 [ 316.668563][T12908] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 316.673363][T12908] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 316.815072][T12908] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 317.028822][T12912] loop2: detected capacity change from 0 to 512 [ 317.040234][T12912] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 317.044788][T12914] loop0: detected capacity change from 0 to 256 [ 317.049361][T12914] exfat: Deprecated parameter 'namecase' [ 317.063604][T12914] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 317.090600][T12912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.113523][T12912] ext4 filesystem being mounted at /syzkaller.Q1g6dX/326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.160640][T12912] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 317.225016][ T8973] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.420546][T12934] loop3: detected capacity change from 0 to 512 [ 317.439264][T12934] EXT4-fs: Ignoring removed oldalloc option [ 317.452921][T12934] EXT4-fs error (device loop3): ext4_xattr_inode_iget:435: comm syz.3.2490: Parent and EA inode have the same ino 15 [ 317.462652][T12934] EXT4-fs error (device loop3): ext4_xattr_inode_iget:435: comm syz.3.2490: Parent and EA inode have the same ino 15 [ 317.469305][T12934] EXT4-fs (loop3): 1 orphan inode deleted [ 317.479819][T12934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.498179][T12941] loop2: detected capacity change from 0 to 1024 [ 317.515266][T12941] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 317.530761][T12941] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 317.537015][T12941] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 317.539940][T12934] EXT4-fs error (device loop3): ext4_find_dest_de:2110: inode #2: block 13: comm syz.3.2490: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 317.550189][T12941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 317.558736][T12928] loop1: detected capacity change from 0 to 32768 [ 317.610903][T12205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.659926][T12928] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 317.663952][T12928] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 317.702061][T12928] bcachefs (loop1): alloc_read... done [ 317.709347][T12928] bcachefs (loop1): stripes_read... done [ 317.711877][T12928] bcachefs (loop1): snapshots_read... done [ 317.716233][T12928] bcachefs (loop1): journal_replay... done [ 317.718660][T12928] bcachefs (loop1): resume_logged_ops... done [ 317.721585][T12928] bcachefs (loop1): going read-write [ 317.729751][T12928] bcachefs (loop1): done starting filesystem [ 317.770904][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 317.770920][ T39] audit: type=1326 audit(1719412226.807:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.3.2494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 317.790664][ T39] audit: type=1326 audit(1719412226.807:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.3.2494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 317.798899][ T39] audit: type=1326 audit(1719412226.827:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.3.2494" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 317.809709][ T39] audit: type=1326 audit(1719412226.827:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.3.2494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 317.819954][ T39] audit: type=1326 audit(1719412226.827:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.3.2494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 317.828624][ T39] audit: type=1326 audit(1719412226.857:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.3.2494" exe="/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 317.841230][ T39] audit: type=1326 audit(1719412226.857:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.3.2494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 317.849560][ T39] audit: type=1326 audit(1719412226.867:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.3.2494" exe="/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 317.873058][ T39] audit: type=1326 audit(1719412226.867:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12956 comm="syz.3.2494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744c579 code=0x7ffc0000 [ 317.993688][T12928] syz.1.2488 (12928) used greatest stack depth: 18192 bytes left [ 318.003572][T12120] bcachefs (loop1): shutting down [ 318.014685][T12120] bcachefs (loop1): going read-only [ 318.017068][T12120] bcachefs (loop1): finished waiting for writes to stop [ 318.035747][T12120] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10 [ 318.101659][T12120] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 12 [ 318.110706][T12120] bcachefs (loop1): shutdown complete, journal seq 13 [ 318.114725][T12120] bcachefs (loop1): marking filesystem clean [ 318.134280][T12120] bcachefs (loop1): shutdown complete [ 318.162221][T12959] loop3: detected capacity change from 0 to 32768 [ 318.170514][T12959] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2495 (12959) [ 318.196504][T12959] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 318.201486][T12959] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 318.206950][T12959] BTRFS info (device loop3): using free-space-tree [ 318.411317][ T8973] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.543520][T12205] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 318.589490][T12980] loop1: detected capacity change from 0 to 512 [ 318.609270][T12980] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 318.664603][T12980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.670630][T12980] ext4 filesystem being mounted at /syzkaller.TuhMOU/62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.736896][T12980] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 318.783696][T12978] netlink: 'syz.2.2497': attribute type 1 has an invalid length. [ 318.823856][T12120] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.867329][T12985] loop3: detected capacity change from 0 to 2048 [ 318.878534][T12986] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.116090][T12996] loop2: detected capacity change from 0 to 1024 [ 319.122424][T12996] hfsplus: Filesystem is marked locked, mounting read-only. [ 319.136171][T12996] hfsplus: bad catalog entry used to create inode [ 319.140789][T12996] hfsplus: failed to load root directory [ 319.354832][ T5205] Bluetooth: hci1: command 0x0406 tx timeout [ 319.412969][T13000] loop3: detected capacity change from 0 to 32768 [ 319.477351][T13000] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 319.482277][T13000] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 319.521300][T13000] bcachefs (loop3): alloc_read... done [ 319.524021][T13000] bcachefs (loop3): stripes_read... done [ 319.527597][T13000] bcachefs (loop3): snapshots_read... done [ 319.532785][T13000] bcachefs (loop3): journal_replay... done [ 319.538598][T13000] bcachefs (loop3): resume_logged_ops... done [ 319.542299][T13000] bcachefs (loop3): going read-write [ 319.549553][T13000] bcachefs (loop3): done starting filesystem [ 319.721422][T13028] netlink: 'syz.2.2511': attribute type 1 has an invalid length. [ 319.788807][T12205] bcachefs (loop3): shutting down [ 319.795563][T12205] bcachefs (loop3): going read-only [ 319.798313][T12205] bcachefs (loop3): finished waiting for writes to stop [ 319.812671][T12205] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 319.850592][T12205] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13 [ 319.855481][T12205] bcachefs (loop3): shutdown complete, journal seq 14 [ 319.858949][T12205] bcachefs (loop3): marking filesystem clean [ 319.916917][T12205] bcachefs (loop3): shutdown complete [ 319.983154][T13041] loop2: detected capacity change from 0 to 1024 [ 319.989004][T13041] hfsplus: Filesystem is marked locked, mounting read-only. [ 320.006976][T13041] hfsplus: bad catalog entry used to create inode [ 320.009858][T13041] hfsplus: failed to load root directory [ 320.235494][T13048] loop2: detected capacity change from 0 to 64 [ 320.254306][T13048] hfs: request for non-existent node 131072 in B*Tree [ 320.259160][T13048] hfs: request for non-existent node 131072 in B*Tree [ 320.649398][T13065] loop2: detected capacity change from 0 to 8192 [ 320.660212][T13065] REISERFS warning (device loop2): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. [ 320.708129][T13071] loop0: detected capacity change from 0 to 512 [ 320.712573][T13071] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 320.732213][T13071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.737727][T13071] ext4 filesystem being mounted at /syzkaller.sgvA9I/307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.755759][T13063] netlink: 'syz.3.2524': attribute type 1 has an invalid length. [ 320.790760][T13071] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 320.844905][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.921499][T13080] loop0: detected capacity change from 0 to 1024 [ 320.934574][T13082] syzkaller1: entered promiscuous mode [ 320.939774][T13082] syzkaller1: entered allmulticast mode [ 321.054241][ T13] hfsplus: b-tree write err: -5, ino 4 [ 321.339124][T13097] loop0: detected capacity change from 0 to 8192 [ 321.350661][T13097] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. [ 321.472060][T13108] loop3: detected capacity change from 0 to 1024 [ 321.571493][ T96] hfsplus: b-tree write err: -5, ino 4 [ 321.616718][T13106] loop2: detected capacity change from 0 to 32768 [ 321.621689][T13106] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2541 (13106) [ 321.630377][T13106] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 321.634999][T13106] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 321.638795][T13106] BTRFS info (device loop2): using free-space-tree [ 321.753897][T13129] loop3: detected capacity change from 0 to 2048 [ 321.778195][ T8973] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 322.298178][T13143] loop3: detected capacity change from 0 to 8192 [ 322.303536][T13143] REISERFS warning (device loop3): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. [ 322.355722][ T4231] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 322.399081][T13146] loop0: detected capacity change from 0 to 1024 [ 322.409942][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.472513][ T11] hfsplus: b-tree write err: -5, ino 4 [ 322.540340][T13150] loop3: detected capacity change from 0 to 2048 [ 322.544819][ T4231] usb 7-1: Using ep0 maxpacket: 8 [ 322.548316][ T4231] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 322.553051][ T4231] usb 7-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 322.556436][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.561358][ T4231] usb 7-1: config 0 descriptor?? [ 322.565789][ T4231] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 322.801810][ T8] usb 7-1: USB disconnect, device number 15 [ 322.875997][T13167] loop0: detected capacity change from 0 to 1024 [ 322.945230][ T13] hfsplus: b-tree write err: -5, ino 4 [ 323.009090][T13171] loop3: detected capacity change from 0 to 2048 [ 323.296996][T13188] loop3: detected capacity change from 0 to 1024 [ 323.385263][ T13] hfsplus: b-tree write err: -5, ino 4 [ 323.428599][T13194] loop0: detected capacity change from 0 to 2048 [ 323.708000][T13214] loop0: detected capacity change from 0 to 64 [ 323.723357][T13210] loop3: detected capacity change from 0 to 1024 [ 323.731669][T13210] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 323.749232][T13210] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 323.754213][T13210] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 323.760879][T13210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.899557][T13225] loop0: detected capacity change from 0 to 2048 [ 323.924843][T13226] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 324.015301][T13230] loop2: detected capacity change from 0 to 2048 [ 324.049820][T13230] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.506181][T13253] loop0: detected capacity change from 0 to 256 [ 324.624802][T12205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.695964][T13258] loop0: detected capacity change from 0 to 2048 [ 324.707483][T13258] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.010470][T13284] loop0: detected capacity change from 0 to 256 [ 325.184433][T13286] loop0: detected capacity change from 0 to 1024 [ 325.191021][T13286] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 325.205115][T13286] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 325.209292][T13286] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 325.225497][T13286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 325.227845][T13282] loop2: detected capacity change from 0 to 32768 [ 325.248188][T13282] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 325.302022][T13282] XFS (loop2): Ending clean mount [ 325.331903][T13282] XFS (loop2): Quotacheck needed: Please wait. [ 325.398317][T13282] XFS (loop2): Quotacheck: Done. [ 325.593844][ T8973] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 326.059707][T13309] loop2: detected capacity change from 0 to 2048 [ 326.067933][T13309] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.081687][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.341859][T13321] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 326.362566][T13321] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 326.364520][T13327] loop2: detected capacity change from 0 to 64 [ 326.423632][T13327] hfs: request for non-existent node 131072 in B*Tree [ 326.427038][T13327] hfs: request for non-existent node 131072 in B*Tree [ 326.516081][T13333] loop0: detected capacity change from 0 to 16 [ 326.519800][T13333] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 326.543985][T13335] loop2: detected capacity change from 0 to 1024 [ 326.555303][T13335] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 326.575041][T13335] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 326.578767][T13335] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 326.582658][T13335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 326.653127][T13340] loop0: detected capacity change from 0 to 2048 [ 326.661905][T13340] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.025230][T13357] loop3: detected capacity change from 0 to 64 [ 327.075888][T13357] hfs: request for non-existent node 131072 in B*Tree [ 327.079037][T13357] hfs: request for non-existent node 131072 in B*Tree [ 327.256833][T13355] loop0: detected capacity change from 0 to 40427 [ 327.263924][T13355] F2FS-fs (loop0): Invalid log blocks per segment (5) [ 327.266320][T13355] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 327.270157][T13362] loop3: detected capacity change from 0 to 16 [ 327.274148][T13362] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 327.275428][T13355] F2FS-fs (loop0): Found nat_bits in checkpoint [ 327.328307][T13355] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 327.331432][T13355] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 327.416057][ T8973] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.642132][T13368] loop3: detected capacity change from 0 to 32768 [ 327.677733][T13368] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 327.722847][T13368] XFS (loop3): Ending clean mount [ 327.791230][ T8] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_bnobt block 0x8 [ 327.796932][ T8] XFS (loop3): Unmount and run xfs_repair [ 327.799545][ T8] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 327.802829][ T8] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 327.811052][ T8] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 327.815669][ T8] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 327.820054][ T8] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 327.826435][ T8] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 327.831047][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 327.838152][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 327.844426][T13372] loop2: detected capacity change from 0 to 40427 [ 327.844816][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 327.849548][T13372] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 327.852320][T13368] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x244/0x4f0" at daddr 0x8 len 8 error 74 [ 327.854769][T13372] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 327.860068][T13372] F2FS-fs (loop2): Found nat_bits in checkpoint [ 327.883365][T13368] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x414/0x990 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 327.890094][T13368] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 327.922674][T13372] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 327.927743][T13372] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 327.938251][T12205] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 327.941505][ T39] audit: type=1800 audit(1719412236.977:811): pid=13372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2641" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 328.125456][T13396] loop0: detected capacity change from 0 to 16 [ 328.131711][T13396] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 328.562095][T13403] loop0: detected capacity change from 0 to 40427 [ 328.568905][T13403] F2FS-fs (loop0): Invalid log blocks per segment (5) [ 328.571788][T13403] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 328.596643][T13403] F2FS-fs (loop0): Found nat_bits in checkpoint [ 328.676321][T13403] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 328.679384][T13403] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 328.710121][T13423] loop2: detected capacity change from 0 to 4096 [ 328.723270][T13424] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.885053][T13428] loop2: detected capacity change from 0 to 16 [ 328.888450][T13428] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 328.903542][T13419] loop3: detected capacity change from 0 to 40427 [ 328.909756][T13419] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 328.912979][T13419] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 328.936575][T13419] F2FS-fs (loop3): Found nat_bits in checkpoint [ 328.981196][T13419] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 328.984236][T13419] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 329.021938][ T39] audit: type=1800 audit(1719412238.057:812): pid=13419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2655" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 329.254224][T13445] loop2: detected capacity change from 0 to 4096 [ 329.274699][T13448] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 329.587191][T13450] loop0: detected capacity change from 0 to 40427 [ 329.591948][T13450] F2FS-fs (loop0): Invalid log blocks per segment (5) [ 329.596225][T13450] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 329.608819][T13450] F2FS-fs (loop0): Found nat_bits in checkpoint [ 329.657125][T13450] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 329.660587][T13450] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 330.107047][T13463] loop0: detected capacity change from 0 to 40427 [ 330.112203][T13463] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 330.115735][T13463] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 330.125656][T13463] F2FS-fs (loop0): Found nat_bits in checkpoint [ 330.177311][T13463] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 330.181347][T13463] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 330.238788][ T39] audit: type=1800 audit(1719412239.277:813): pid=13463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2670" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 330.359364][T13470] loop3: detected capacity change from 0 to 1024 [ 330.396065][ T5205] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.402297][ T5205] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 330.414760][ T5205] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 330.417367][T13470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.421771][ T5205] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 330.430734][ T5205] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 330.434718][ T5205] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 330.534471][T12205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.560745][T13481] loop2: detected capacity change from 0 to 4096 [ 330.571661][T13483] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 330.680385][T13473] chnl_net:caif_netlink_parms(): no params data found [ 330.780923][T13490] loop3: detected capacity change from 0 to 256 [ 330.869589][T13473] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.872257][T13473] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.875408][T13473] bridge_slave_0: entered allmulticast mode [ 330.878982][T13473] bridge_slave_0: entered promiscuous mode [ 330.886489][T13473] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.889541][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.892632][T13473] bridge_slave_1: entered allmulticast mode [ 330.902863][T13473] bridge_slave_1: entered promiscuous mode [ 331.009461][T13473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.016260][T13473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.143396][T13473] team0: Port device team_slave_0 added [ 331.173221][T13490] loop3: detected capacity change from 0 to 32768 [ 331.179413][T13490] bcachefs (/dev/loop3): error reading default superblock: checksum error, type crc32c_nonzero: got 21cb763f should be 29d2fb78 [ 331.189046][T13473] team0: Port device team_slave_1 added [ 331.253515][T13490] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=errors=continue,compression=lz4,nojournal_transaction_names [ 331.257781][T13490] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 331.285484][T13473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.287070][T13490] bcachefs (loop3): alloc_read... [ 331.289371][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.289401][T13473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.291471][T13473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.291896][T13490] done [ 331.303415][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.309087][T13490] bcachefs (loop3): stripes_read... [ 331.311378][T13473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.312745][T13490] done [ 331.338285][T13490] bcachefs (loop3): snapshots_read... done [ 331.343367][T13490] bcachefs (loop3): journal_replay... done [ 331.346914][T13490] bcachefs (loop3): resume_logged_ops... done [ 331.349878][T13490] bcachefs (loop3): going read-write [ 331.357045][T13490] bcachefs (loop3): done starting filesystem [ 331.401803][T13473] hsr_slave_0: entered promiscuous mode [ 331.405481][T13473] hsr_slave_1: entered promiscuous mode [ 331.606492][T13473] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.740855][T13473] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.767240][T12205] bcachefs (loop3): shutting down [ 331.769086][T12205] bcachefs (loop3): going read-only [ 331.771077][T12205] bcachefs (loop3): finished waiting for writes to stop [ 331.787278][T12205] bcachefs (loop3): flushing journal and stopping allocators, journal seq 7 [ 331.791931][T12205] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 7 [ 331.820278][T12205] bcachefs (loop3): shutdown complete, journal seq 8 [ 331.824228][T12205] bcachefs (loop3): marking filesystem clean [ 331.863808][T12205] bcachefs (loop3): shutdown complete [ 331.871059][T13473] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.013678][T13473] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.216618][T13473] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 332.223253][T13473] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 332.246198][T13473] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 332.252632][T13473] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 332.323229][T13473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.341897][T13473] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.351688][ T4231] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.354721][ T4231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.365979][ T4231] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.369125][ T4231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.487342][ T5204] Bluetooth: hci5: command tx timeout [ 332.559501][T13473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.593113][T13473] veth0_vlan: entered promiscuous mode [ 332.601182][T13473] veth1_vlan: entered promiscuous mode [ 332.630138][T13473] veth0_macvtap: entered promiscuous mode [ 332.636600][T13473] veth1_macvtap: entered promiscuous mode [ 332.651195][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.656034][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.660567][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.666466][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.670550][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.674830][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.679404][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.684380][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.688802][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.693424][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.699697][T13473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.714131][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.718656][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.722618][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.727548][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.731919][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.736977][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.741405][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.745831][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.750027][T13473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.754592][T13473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.760374][T13473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.767605][T13473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.770693][T13473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.773716][T13473] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.776898][T13473] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.840693][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.844249][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.863043][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.870217][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.101737][T13522] loop1: detected capacity change from 0 to 32768 [ 333.121050][T13522] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 333.159359][T13522] XFS (loop1): Ending clean mount [ 333.163112][T13522] XFS (loop1): Quotacheck needed: Please wait. [ 333.221531][T13522] XFS (loop1): Quotacheck: Done. [ 333.374992][T13473] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 334.555532][ T5204] Bluetooth: hci5: command tx timeout [ 335.267483][T13536] loop1: detected capacity change from 0 to 8 [ 335.329366][T13537] loop3: detected capacity change from 0 to 4096 [ 335.397629][T13544] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 335.620179][T13535] loop2: detected capacity change from 0 to 40427 [ 335.624742][T13535] F2FS-fs (loop2): Invalid log blocks per segment (5) [ 335.627579][T13535] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 335.647208][T13535] F2FS-fs (loop2): Found nat_bits in checkpoint [ 335.688992][T13535] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 335.692059][T13535] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 335.990639][T13554] loop0: detected capacity change from 0 to 32768 [ 336.056313][T13554] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 336.074405][T13554] XFS (loop0): Ending clean mount [ 336.094103][T13574] loop1: detected capacity change from 0 to 4096 [ 336.100011][T13577] loop2: detected capacity change from 0 to 1024 [ 336.121972][T13578] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.125947][ T55] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_bnobt block 0x8 [ 336.133774][ T55] XFS (loop0): Unmount and run xfs_repair [ 336.137136][ T55] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 336.140395][ T55] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 336.145144][ T55] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 336.150614][ T55] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 336.159847][T13577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.174073][ T55] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 336.180460][ T55] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 336.183985][ T55] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 336.187516][ T55] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 336.190706][ T55] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 336.195277][T13554] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x244/0x4f0" at daddr 0x8 len 8 error 74 [ 336.206853][T13554] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x414/0x990 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 336.213970][T13554] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 336.250962][ T8973] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.263928][ T9649] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 336.344959][T13586] loop1: detected capacity change from 0 to 8 [ 336.465143][T13589] fscrypt_msg: 4 callbacks suppressed [ 336.465154][T13589] fscrypt (sda1, inode 2040): Direct key flag not allowed with different contents and filenames modes [ 336.525414][T13593] ptrace attach of "/syz-executor exec"[8973] was attempted by " [ 336.527540][T13593] @ÿ: renamed from veth0_vlan (while UP) [ 336.577319][T13595] loop0: detected capacity change from 0 to 256 [ 336.586558][T13595] exfat: Deprecated parameter 'utf8' [ 336.594567][T13595] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 336.636079][ T5204] Bluetooth: hci5: command tx timeout [ 336.658852][ T39] audit: type=1804 audit(1719412245.697:814): pid=13595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2704" name=2F73797A6B616C6C65722E7367764139492F3336362F66696C65302FB7 dev="loop0" ino=1048756 res=1 errno=0 [ 336.795184][T13603] loop2: detected capacity change from 0 to 1024 [ 336.833639][T13603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.000279][ T8973] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.296570][T13618] fscrypt (sda1, inode 2034): Direct key flag not allowed with different contents and filenames modes [ 337.349310][ T39] audit: type=1800 audit(1719412246.387:815): pid=13620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2716" name="file0" dev="sda1" ino=2024 res=0 errno=0 [ 337.420676][T13624] loop1: detected capacity change from 0 to 256 [ 337.425474][T13624] exfat: Deprecated parameter 'utf8' [ 337.444253][T13624] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 337.500687][ T39] audit: type=1804 audit(1719412246.537:816): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2718" name=2F73797A6B616C6C65722E484E427752652F392F66696C65302FB7 dev="loop1" ino=1048758 res=1 errno=0 [ 337.691004][T13632] loop1: detected capacity change from 0 to 1024 [ 337.720358][T13632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.862409][T13473] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.975537][T13649] loop1: detected capacity change from 0 to 8 [ 338.037732][ T5927] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 338.064203][T13652] mkiss: ax0: crc mode is auto. [ 338.234788][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 338.239509][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.246763][ T5927] usb 5-1: config 0 interface 0 has no altsetting 0 [ 338.251227][ T5927] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 338.255367][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 338.258629][ T5927] usb 5-1: SerialNumber: syz [ 338.271360][ T5927] usb 5-1: config 0 descriptor?? [ 338.366891][T13657] loop3: detected capacity change from 0 to 1024 [ 338.715044][ T5205] Bluetooth: hci5: command tx timeout [ 338.737502][ T5927] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 338.740663][ T5927] usb 5-1: No valid video chain found. [ 338.754923][ T5927] usb 5-1: USB disconnect, device number 11 [ 338.862174][T13660] loop3: detected capacity change from 0 to 32768 [ 338.868430][T13660] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2729 (13660) [ 338.877930][T13660] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 338.885513][T13660] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 338.890046][T13660] BTRFS info (device loop3): using free-space-tree [ 339.066382][T12205] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 339.417607][T13686] loop3: detected capacity change from 0 to 4096 [ 339.429319][T13686] NILFS (loop3): invalid segment: Checksum error in segment payload [ 339.433002][T13686] NILFS (loop3): trying rollback from an earlier position [ 339.449568][T13686] NILFS (loop3): recovery complete [ 339.452926][T13691] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 339.505430][T13686] overlayfs: upper fs does not support tmpfile. [ 339.507800][T13686] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 339.510122][T13686] overlayfs: failed to set xattr on upper [ 339.522616][T13686] overlayfs: ...falling back to redirect_dir=nofollow. [ 339.525078][T13686] overlayfs: ...falling back to index=off. [ 339.527233][T13686] overlayfs: ...falling back to uuid=null. [ 339.534321][T13686] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 339.541138][T13686] overlayfs: upper fs does not support tmpfile. [ 339.544128][T13686] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 339.547077][T13686] overlayfs: failed to set xattr on upper [ 339.549387][T13686] overlayfs: ...falling back to redirect_dir=nofollow. [ 339.552056][T13686] overlayfs: ...falling back to uuid=null. [ 339.790653][ T39] audit: type=1800 audit(1719412248.827:817): pid=13699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2740" name="file0" dev="sda1" ino=2038 res=0 errno=0 [ 339.841103][ T5205] Bluetooth: hci2: command 0x0406 tx timeout [ 339.853097][T13690] loop0: detected capacity change from 0 to 40427 [ 339.860015][T13690] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 339.863650][T13690] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 339.884801][T13690] F2FS-fs (loop0): Found nat_bits in checkpoint [ 339.913116][T13708] loop1: detected capacity change from 0 to 1024 [ 339.953704][T13690] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 339.964763][T13690] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 340.012507][ T39] audit: type=1800 audit(1719412249.047:818): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2736" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 340.073857][T13697] loop3: detected capacity change from 0 to 32768 [ 340.095174][T13697] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 340.099419][T13697] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 340.106636][T13697] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 340.170525][T13697] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 340.286296][T13721] loop1: detected capacity change from 0 to 4096 [ 340.297411][T13721] NILFS (loop1): invalid segment: Checksum error in segment payload [ 340.300494][T13721] NILFS (loop1): trying rollback from an earlier position [ 340.333649][T13721] NILFS (loop1): recovery complete [ 340.346716][T13722] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 340.401037][T13721] overlayfs: upper fs does not support tmpfile. [ 340.403706][T13721] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 340.406821][T13721] overlayfs: failed to set xattr on upper [ 340.409236][T13721] overlayfs: ...falling back to redirect_dir=nofollow. [ 340.412343][T13721] overlayfs: ...falling back to index=off. [ 340.419094][T13721] overlayfs: ...falling back to uuid=null. [ 340.442173][T13721] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 340.451621][T13721] overlayfs: upper fs does not support tmpfile. [ 340.456858][T13721] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 340.460224][T13721] overlayfs: failed to set xattr on upper [ 340.462745][T13721] overlayfs: ...falling back to redirect_dir=nofollow. [ 340.470712][T13721] overlayfs: ...falling back to uuid=null. [ 340.475678][T13728] loop2: detected capacity change from 0 to 64 [ 341.427834][T13738] loop3: detected capacity change from 0 to 256 [ 341.432118][T13738] exfat: Deprecated parameter 'utf8' [ 341.439733][T13738] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 341.496425][ T39] audit: type=1804 audit(1719412250.537:819): pid=13738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2754" name=2F73797A6B616C6C65722E4D41775661652F3131392F66696C65302FB7 dev="loop3" ino=1048760 res=1 errno=0 [ 341.605690][ T96] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.758042][ T96] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.851608][ T5205] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.861758][ T5205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.867785][ T5205] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.873596][ T5205] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.877419][ T5205] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.883679][ T5205] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.904473][ T96] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.077241][ T96] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.138030][T13757] chnl_net:caif_netlink_parms(): no params data found [ 342.321031][T13757] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.324023][T13757] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.328299][T13757] bridge_slave_0: entered allmulticast mode [ 342.331377][T13757] bridge_slave_0: entered promiscuous mode [ 342.340536][T13757] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.343103][T13757] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.346477][T13757] bridge_slave_1: entered allmulticast mode [ 342.350182][T13770] loop1: detected capacity change from 0 to 40427 [ 342.350616][T13757] bridge_slave_1: entered promiscuous mode [ 342.354112][T13770] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 342.363220][T13770] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 342.382167][T13770] F2FS-fs (loop1): invalid crc value [ 342.397317][T13770] F2FS-fs (loop1): Found nat_bits in checkpoint [ 342.445744][ T96] bridge_slave_1: left allmulticast mode [ 342.448303][ T96] bridge_slave_1: left promiscuous mode [ 342.450946][ T96] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.457617][T13770] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 342.460957][T13770] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 342.467139][ T96] bridge_slave_0: left allmulticast mode [ 342.470169][ T96] bridge_slave_0: left promiscuous mode [ 342.473276][ T96] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.606135][ T1088] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 342.638838][ T1088] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 342.787534][T13783] loop0: detected capacity change from 0 to 32768 [ 342.802014][T13783] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 342.806405][T13783] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 342.812474][T13783] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 342.872629][T13783] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 343.072072][T13797] loop3: detected capacity change from 0 to 256 [ 343.092547][T13797] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 343.216390][ T96] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.223170][ T96] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.231263][ T96] bond0 (unregistering): Released all slaves [ 343.247286][T13757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.255639][T13803] exFAT-fs (loop3): hint_cluster is invalid (1), rewind to the first cluster [ 343.290234][T13757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.422495][T13757] team0: Port device team_slave_0 added [ 343.451938][T13757] team0: Port device team_slave_1 added [ 343.551411][T13805] loop0: detected capacity change from 0 to 40427 [ 343.557650][T13805] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 343.561458][T13805] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 343.567655][T13805] F2FS-fs (loop0): invalid crc value [ 343.573916][T13805] F2FS-fs (loop0): Found nat_bits in checkpoint [ 343.624284][T13805] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 343.625254][T13757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.630004][T13757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.630096][T13805] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 343.642444][T13757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.651063][T13757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.654007][T13757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.667300][T13757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.705724][ T1086] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 343.713702][ T1086] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 343.742963][T13757] hsr_slave_0: entered promiscuous mode [ 343.748316][T13757] hsr_slave_1: entered promiscuous mode [ 343.751693][T13757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.754938][T13757] Cannot create hsr debugfs directory [ 343.778923][T13815] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 343.852481][T13815] kvm: pic: non byte read [ 343.871355][T13815] kvm: pic: non byte read [ 343.889821][T13815] kvm: pic: non byte read [ 343.898837][T13815] kvm: pic: non byte read [ 343.902197][ T96] hsr_slave_0: left promiscuous mode [ 343.906119][ T96] hsr_slave_1: left promiscuous mode [ 343.910056][ T96] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.910120][T13815] kvm: pic: non byte read [ 343.913368][ T96] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.921276][ T96] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.928988][ T96] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.929724][T13815] kvm: pic: non byte read [ 343.942604][T13815] kvm: pic: single mode not supported [ 343.942958][T13815] kvm: pic: level sensitive irq not supported [ 343.952629][T13815] kvm: pic: non byte read [ 343.964213][T13815] kvm: pic: non byte read [ 343.973815][T13815] kvm: pic: non byte read [ 343.983355][T13815] kvm: pic: non byte read [ 343.986659][ T96] veth1_macvtap: left promiscuous mode [ 343.989312][ T96] veth0_macvtap: left promiscuous mode [ 343.991941][ T96] veth1_vlan: left promiscuous mode [ 343.994374][ T96] @ÿ: left promiscuous mode [ 343.996957][T13815] kvm: pic: single mode not supported [ 343.998239][ T5204] Bluetooth: hci1: command tx timeout [ 344.111143][T13828] loop1: detected capacity change from 0 to 32768 [ 344.117399][T13828] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2787 (13828) [ 344.134721][T13828] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 344.141872][T13828] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 344.148532][T13828] BTRFS info (device loop1): using free-space-tree [ 344.275714][T13847] loop0: detected capacity change from 0 to 256 [ 344.308621][T13847] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 344.451427][T13473] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 344.565328][T13855] exFAT-fs (loop0): hint_cluster is invalid (1), rewind to the first cluster [ 346.084773][ T5204] Bluetooth: hci1: command tx timeout [ 346.406704][ T96] team0 (unregistering): Port device team_slave_1 removed [ 346.619789][ T96] team0 (unregistering): Port device team_slave_0 removed [ 348.164842][ T5204] Bluetooth: hci1: command tx timeout [ 348.403627][T13878] loop0: detected capacity change from 0 to 8 [ 348.419019][T13878] unable to read xattr id index table [ 348.471501][T13883] fuse: Bad value for 'group_id' [ 348.506053][ T39] audit: type=1804 audit(1719412257.537:820): pid=13883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2803" name="/syzkaller.MAwVae/133/file0" dev="sda1" ino=2045 res=1 errno=0 [ 348.562787][T13875] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 348.564523][T13888] loop3: detected capacity change from 0 to 256 [ 348.583602][T13888] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 348.599260][T13875] kvm: pic: single mode not supported [ 348.599280][T13875] kvm: pic: level sensitive irq not supported [ 348.616442][T13875] kvm: pic: single mode not supported [ 348.658139][T13888] exFAT-fs (loop3): hint_cluster is invalid (1), rewind to the first cluster [ 348.926878][T13757] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 348.942562][T13757] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 348.957459][T13757] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 348.964244][T13757] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 349.016184][T13900] loop1: detected capacity change from 0 to 8 [ 349.023106][T13900] unable to read xattr id index table [ 349.048408][T13757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.069290][T13757] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.085140][ T4231] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.087637][ T4231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.091253][ T4231] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.094077][ T4231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.185509][T13757] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 349.190228][T13757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.269864][T13903] loop1: detected capacity change from 0 to 4096 [ 349.274476][T13903] ntfs3: loop1: Primary boot: invalid record size -127. [ 349.281425][T13903] ntfs3: loop1: try to read out of volume at offset 0x1ffe00 [ 349.371230][T13757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.444146][T13757] veth0_vlan: entered promiscuous mode [ 349.464053][T13757] veth1_vlan: entered promiscuous mode [ 349.464962][T13886] loop0: detected capacity change from 0 to 131072 [ 349.493451][T13886] F2FS-fs (loop0): Found nat_bits in checkpoint [ 349.498499][T13757] veth0_macvtap: entered promiscuous mode [ 349.506432][T13757] veth1_macvtap: entered promiscuous mode [ 349.526807][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.533032][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.536768][T13886] F2FS-fs (loop0): Mounted with checkpoint version = 1b41e955 [ 349.538904][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.546159][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.550711][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.555413][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.559632][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.564163][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.569871][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.574263][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.582917][T13757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.600824][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.605032][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.608937][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.613184][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.618211][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.622279][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.626986][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.631034][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.635680][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.640532][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.645340][T13757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.653940][T13757] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.659448][T13757] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.663281][T13757] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.667290][T13757] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.758016][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.772565][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.796683][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.799839][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.927613][T13920] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 349.952715][T13920] picdev_read: 14 callbacks suppressed [ 349.952742][T13920] kvm: pic: non byte read [ 349.958225][T13920] kvm: pic: non byte read [ 349.961965][T13920] kvm: pic: non byte read [ 349.975710][T13920] kvm: pic: non byte read [ 349.980936][T13920] kvm: pic: non byte read [ 349.986750][T13920] kvm: pic: non byte read [ 349.989432][T13931] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.2820'. [ 349.997286][T13929] loop2: detected capacity change from 0 to 4096 [ 350.001691][T13920] kvm: pic: single mode not supported [ 350.001708][T13920] kvm: pic: level sensitive irq not supported [ 350.009497][T13920] kvm: pic: non byte read [ 350.015513][T13920] kvm: pic: non byte read [ 350.020863][T13920] kvm: pic: non byte read [ 350.022568][T13929] NILFS (loop2): invalid segment: Checksum error in segment payload [ 350.026243][T13920] kvm: pic: non byte read [ 350.027950][T13929] NILFS (loop2): trying rollback from an earlier position [ 350.030716][T13920] kvm: pic: single mode not supported [ 350.068252][T13929] NILFS (loop2): recovery complete [ 350.078650][T13934] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 350.171589][T13929] overlayfs: upper fs does not support tmpfile. [ 350.174269][T13929] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 350.177757][T13929] overlayfs: failed to set xattr on upper [ 350.180028][T13929] overlayfs: ...falling back to redirect_dir=nofollow. [ 350.183191][T13929] overlayfs: ...falling back to index=off. [ 350.186119][T13929] overlayfs: ...falling back to uuid=null. [ 350.211617][T13929] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 350.218364][T13929] overlayfs: upper fs does not support tmpfile. [ 350.221214][T13929] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 350.224337][T13929] overlayfs: failed to set xattr on upper [ 350.232498][T13929] overlayfs: ...falling back to redirect_dir=nofollow. [ 350.239168][T13929] overlayfs: ...falling back to uuid=null. [ 350.246092][ T5204] Bluetooth: hci1: command tx timeout [ 350.410069][T13945] loop1: detected capacity change from 0 to 512 [ 350.420296][T13945] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 350.454895][T13945] EXT4-fs (loop1): 1 truncate cleaned up [ 350.458216][T13945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.483150][T13945] tipc: Started in network mode [ 350.486291][T13945] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 350.492874][T13945] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 350.501942][T13945] tipc: Enabled bearer , priority 10 [ 350.517415][T13945] tipc: Enabled bearer , priority 0 [ 350.527109][T13957] loop3: detected capacity change from 0 to 256 [ 350.572309][T13957] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 350.581009][T13960] loop0: detected capacity change from 0 to 2048 [ 350.587024][T13960] EXT4-fs: Ignoring removed orlov option [ 350.614039][T13960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.656488][T13957] exFAT-fs (loop3): hint_cluster is invalid (1), rewind to the first cluster [ 350.786478][T13967] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 350.893601][T13473] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.947145][T13969] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 350.980889][T13969] kvm: pic: single mode not supported [ 350.980910][T13969] kvm: pic: level sensitive irq not supported [ 350.999610][T13969] kvm: pic: single mode not supported [ 351.133947][T13978] loop1: detected capacity change from 0 to 4096 [ 351.141446][T13978] ntfs3: loop1: Primary boot: invalid record size -127. [ 351.144825][T13978] ntfs3: loop1: try to read out of volume at offset 0x1ffe00 [ 351.148920][T13963] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 351.161779][T13963] EXT4-fs (loop0): Remounting filesystem read-only [ 351.440728][T13989] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 351.518603][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.574516][T13995] loop2: detected capacity change from 0 to 8 [ 351.583695][T13996] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.2843'. [ 351.604799][T13995] unable to read xattr id index table [ 351.621964][T13997] loop3: detected capacity change from 0 to 4096 [ 351.626471][T13997] ntfs3: loop3: Primary boot: invalid record size -127. [ 351.627024][ T5244] tipc: Node number set to 1 [ 351.632851][T13997] ntfs3: loop3: try to read out of volume at offset 0x1ffe00 [ 351.783494][T14001] loop0: detected capacity change from 0 to 512 [ 351.812859][T14001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.822937][T14001] ext4 filesystem being mounted at /syzkaller.sgvA9I/386/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 351.860652][T14003] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 351.902714][T13999] loop1: detected capacity change from 0 to 32768 [ 351.916796][T14003] kvm: pic: single mode not supported [ 351.916814][T14003] kvm: pic: level sensitive irq not supported [ 351.918465][T13999] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2846 (13999) [ 351.933818][T14003] kvm: pic: single mode not supported [ 351.956543][T13999] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 351.963611][T13999] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 351.974813][T13999] BTRFS info (device loop1): disk space caching is enabled [ 352.009975][T13999] BTRFS info (device loop1): rebuilding free space tree [ 352.026884][T13999] BTRFS info (device loop1): disabling free space tree [ 352.030017][T13999] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 352.034099][T13999] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 352.100992][T13999] BTRFS info (device loop1): balance: start -d -m [ 352.128256][T13999] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 352.201104][T13999] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 352.345407][T13999] BTRFS info (device loop1): found 9 extents, stage: move data extents [ 352.401609][T13999] BTRFS info (device loop1): found 1 extents, stage: update data pointers [ 352.438242][T13999] BTRFS info (device loop1): balance: ended with status: 0 [ 352.487349][T13473] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 352.528765][ T9649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.767487][T14042] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 352.843327][T14050] input: syz1 as /devices/virtual/input/input33 [ 352.908321][T14052] fuse: Bad value for 'group_id' [ 352.924938][ T39] audit: type=1804 audit(1719412261.957:821): pid=14052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2858" name="/syzkaller.HNBwRe/59/file0" dev="sda1" ino=2048 res=1 errno=0 [ 353.216625][T14056] loop0: detected capacity change from 0 to 40427 [ 353.231352][T14056] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 353.234556][T14056] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 353.243059][T14054] loop3: detected capacity change from 0 to 32768 [ 353.256672][T14056] F2FS-fs (loop0): Found nat_bits in checkpoint [ 353.297888][T14076] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 353.298820][T14056] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 353.303767][T14056] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 353.316495][T14054] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,noshard_inode_numbers,noinodes_use_key_cache,gc_reserve_bytes=512 GiB,nojournal_transaction_names [ 353.325636][T14054] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 353.355896][T14054] bcachefs (loop3): alloc_read... done [ 353.358700][T14054] bcachefs (loop3): stripes_read... done [ 353.361370][T14054] bcachefs (loop3): snapshots_read... done [ 353.366529][T14054] bcachefs (loop3): journal_replay... done [ 353.369502][T14054] bcachefs (loop3): resume_logged_ops... done [ 353.372452][T14054] bcachefs (loop3): going read-write [ 353.380106][T14054] bcachefs (loop3): done starting filesystem [ 353.404051][T12205] bcachefs (loop3): shutting down [ 353.409958][T12205] bcachefs (loop3): going read-only [ 353.412167][T12205] bcachefs (loop3): finished waiting for writes to stop [ 353.416281][T12205] bcachefs (loop3): flushing journal and stopping allocators, journal seq 8 [ 353.419823][T12205] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 8 [ 353.442587][T14085] input: syz1 as /devices/virtual/input/input34 [ 353.454741][T12205] bcachefs (loop3): shutdown complete, journal seq 9 [ 353.458266][T12205] bcachefs (loop3): marking filesystem clean [ 353.538865][T12205] bcachefs (loop3): shutdown complete [ 353.632060][T14091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2872'. [ 353.737788][T14100] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 353.808051][T14104] syz.0.2877 (14104): /proc/14103/oom_adj is deprecated, please use /proc/14103/oom_score_adj instead. [ 353.978375][T14117] input: syz1 as /devices/virtual/input/input35 [ 354.121278][T14109] loop2: detected capacity change from 0 to 32768 [ 354.146304][T14119] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 354.178790][T14109] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,noshard_inode_numbers,noinodes_use_key_cache,gc_reserve_bytes=512 GiB,nojournal_transaction_names [ 354.181544][T14119] kvm: pic: single mode not supported [ 354.187454][T14109] bcachefs (loop2): recovering from clean shutdown, journal seq 8 [ 354.193764][T14119] kvm: pic: level sensitive irq not supported [ 354.211139][T14109] bcachefs (loop2): alloc_read... done [ 354.218217][T14109] bcachefs (loop2): stripes_read... done [ 354.220892][T14109] bcachefs (loop2): snapshots_read... done [ 354.226272][T14109] bcachefs (loop2): journal_replay... done [ 354.228606][T14119] kvm: pic: single mode not supported [ 354.228954][T14109] bcachefs (loop2): resume_logged_ops... done [ 354.234176][T14109] bcachefs (loop2): going read-write [ 354.245940][T14109] bcachefs (loop2): done starting filesystem [ 354.283772][T13757] bcachefs (loop2): shutting down [ 354.298101][T13757] bcachefs (loop2): going read-only [ 354.300918][T13757] bcachefs (loop2): finished waiting for writes to stop [ 354.315744][T13757] bcachefs (loop2): flushing journal and stopping allocators, journal seq 8 [ 354.320144][T13757] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 8 [ 354.349902][T13757] bcachefs (loop2): shutdown complete, journal seq 9 [ 354.355869][T13757] bcachefs (loop2): marking filesystem clean [ 354.373693][T13757] bcachefs (loop2): shutdown complete [ 354.926111][T14145] loop1: detected capacity change from 0 to 32768 [ 354.931178][T14145] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2888 (14145) [ 354.933964][T14148] loop2: detected capacity change from 0 to 512 [ 354.948691][T14145] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 354.952503][T14145] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 354.955860][T14145] BTRFS info (device loop1): using free-space-tree [ 354.960423][T14148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.970567][T14148] ext4 filesystem being mounted at /syzkaller.6lBZfH/15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.256869][T13473] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 355.595756][T14182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2895'. [ 355.652604][T13757] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.921890][ T5204] Bluetooth: hci3: command 0x0406 tx timeout [ 356.064186][T14194] loop1: detected capacity change from 0 to 40427 [ 356.086989][T14194] F2FS-fs (loop1): invalid crc value [ 356.092543][T14194] F2FS-fs (loop1): Found nat_bits in checkpoint [ 356.133747][T14194] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 356.189920][T14200] loop2: detected capacity change from 0 to 32768 [ 356.195270][T14200] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2902 (14200) [ 356.204944][T14200] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 356.208812][T14200] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 356.212169][T14200] BTRFS info (device loop2): using free-space-tree [ 356.309441][T13473] syz-executor: attempt to access beyond end of device [ 356.309441][T13473] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 356.318719][T13473] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 356.329962][T14209] loop0: detected capacity change from 0 to 32768 [ 356.432732][T14209] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,background_compression=zstd,str_hash=crc32c,gc_reserve_bytes=485 KiB,nojournal_transaction_names [ 356.442340][T14209] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 356.507522][T14209] bcachefs (loop0): alloc_read... done [ 356.510862][T14209] bcachefs (loop0): stripes_read... done [ 356.513594][T14209] bcachefs (loop0): snapshots_read... done [ 356.530028][T14209] bcachefs (loop0): going read-write [ 356.552778][T14209] bcachefs (loop0): journal_replay... [ 356.581777][T13757] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 356.637361][T14209] done [ 356.643054][T14209] bcachefs (loop0): resume_logged_ops... done [ 356.645983][T14209] bcachefs (loop0): delete_dead_inodes... done [ 356.699243][T14209] bcachefs (loop0): done starting filesystem [ 356.789568][T14236] loop3: detected capacity change from 0 to 32768 [ 356.793849][T14236] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2908 (14236) [ 356.802886][ T9649] bcachefs (loop0): shutting down [ 356.806191][ T9649] bcachefs (loop0): going read-only [ 356.807862][T14236] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 356.808550][ T9649] bcachefs (loop0): finished waiting for writes to stop [ 356.813317][T14236] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 356.821729][T14236] BTRFS info (device loop3): using free-space-tree [ 356.838163][ T9649] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 356.857867][ T9649] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12 [ 356.885508][ T9649] bcachefs (loop0): shutdown complete, journal seq 13 [ 356.889197][ T9649] bcachefs (loop0): marking filesystem clean [ 356.965705][ T9649] bcachefs (loop0): shutdown complete [ 357.117889][T12205] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 357.146866][T14257] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 357.228159][T14257] picdev_read: 38 callbacks suppressed [ 357.228219][T14257] kvm: pic: non byte read [ 357.234502][T14257] kvm: pic: non byte read [ 357.238915][T14257] kvm: pic: non byte read [ 357.242734][T14257] kvm: pic: non byte read [ 357.247842][T14257] kvm: pic: non byte read [ 357.252737][T14257] kvm: pic: non byte read [ 357.256717][T14257] kvm: pic: single mode not supported [ 357.256734][T14257] kvm: pic: level sensitive irq not supported [ 357.260315][T14257] kvm: pic: non byte read [ 357.277854][T14257] kvm: pic: non byte read [ 357.283330][T14257] kvm: pic: non byte read [ 357.308273][T14257] kvm: pic: non byte read [ 357.309633][T14266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2913'. [ 357.313525][T14257] kvm: pic: single mode not supported [ 357.532103][T14256] ------------[ cut here ]------------ [ 357.536851][T14256] WARNING: CPU: 0 PID: 14256 at kernel/rcu/srcutree.c:653 cleanup_srcu_struct+0x37c/0x520 [ 357.542086][T14256] Modules linked in: [ 357.545672][T14256] CPU: 0 PID: 14256 Comm: syz.2.2910 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 357.552411][T14256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 357.557489][T14256] RIP: 0010:cleanup_srcu_struct+0x37c/0x520 [ 357.560501][T14256] Code: 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 90 0f 0b 90 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 90 <0f> 0b 90 e9 35 ff ff ff 90 0f 0b 90 48 b8 00 00 00 00 00 fc ff df [ 357.569514][T14256] RSP: 0018:ffffc9002458fd10 EFLAGS: 00010202 [ 357.571959][T14256] RAX: 0000000000000001 RBX: ffffc900245d9000 RCX: 0000000000000008 [ 357.575135][T14256] RDX: fffff91ffffad0e4 RSI: 0000000000000008 RDI: ffffe8ffffd68718 [ 357.579063][T14256] RBP: ffff88805dd42800 R08: 0000000000000000 R09: fffff91ffffad0e3 [ 357.582857][T14256] R10: ffffe8ffffd6871f R11: 0000000000000000 R12: ffffc900245e28a8 [ 357.586746][T14256] R13: ffffc900245e2880 R14: ffffc900245e2868 R15: 0000000000000004 [ 357.590858][T14256] FS: 0000000000000000(0000) GS:ffff88802c000000(0063) knlGS:0000000057c8c440 [ 357.597939][T14256] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 357.600416][T14256] CR2: 000000002ed16ff8 CR3: 00000000458fe000 CR4: 0000000000352ef0 [ 357.603746][T14256] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 357.607506][T14256] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 357.610816][T14256] Call Trace: [ 357.612057][T14256] [ 357.613446][T14256] ? show_regs+0x8c/0xa0 [ 357.615284][T14256] ? __warn+0xe5/0x3c0 [ 357.617090][T14256] ? cleanup_srcu_struct+0x37c/0x520 [ 357.619478][T14256] ? report_bug+0x3c0/0x580 [ 357.621463][T14256] ? handle_bug+0x3d/0x70 [ 357.623941][T14256] ? exc_invalid_op+0x17/0x50 [ 357.626693][T14256] ? asm_exc_invalid_op+0x1a/0x20 [ 357.629336][T14256] ? cleanup_srcu_struct+0x37c/0x520 [ 357.632502][T14256] kvm_put_kvm+0x8df/0xb80 [ 357.634769][T14256] ? __pfx_kvm_vm_release+0x10/0x10 [ 357.637467][T14256] kvm_vm_release+0x42/0x60 [ 357.639171][T14256] __fput+0x408/0xbb0 [ 357.640945][T14256] task_work_run+0x14e/0x250 [ 357.642899][T14256] ? __pfx_task_work_run+0x10/0x10 [ 357.645281][T14256] ? __pfx___close_range+0x10/0x10 [ 357.647641][T14256] syscall_exit_to_user_mode+0x278/0x2a0 [ 357.649914][T14256] __do_fast_syscall_32+0x80/0x120 [ 357.652159][T14256] do_fast_syscall_32+0x32/0x80 [ 357.654740][T14256] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.657833][T14256] RIP: 0023:0xf73af579 [ 357.659730][T14256] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 357.668480][T14256] RSP: 002b:00000000ffc58b0c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 357.681256][T14256] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 357.685265][T14256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 357.688697][T14256] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.692370][T14256] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 357.696287][T14256] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 357.700295][T14256] [ 357.702036][T14256] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 357.705090][T14256] CPU: 0 PID: 14256 Comm: syz.2.2910 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 357.709270][T14256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 357.714148][T14256] Call Trace: [ 357.715595][T14256] [ 357.716884][T14256] dump_stack_lvl+0x3d/0x1f0 [ 357.718742][T14256] panic+0x6f5/0x7a0 [ 357.719989][T14256] ? __pfx_panic+0x10/0x10 [ 357.721491][T14256] ? show_trace_log_lvl+0x363/0x500 [ 357.723103][T14256] ? check_panic_on_warn+0x1f/0xb0 [ 357.725136][T14256] ? cleanup_srcu_struct+0x37c/0x520 [ 357.727363][T14256] check_panic_on_warn+0xab/0xb0 [ 357.729519][T14256] __warn+0xf1/0x3c0 [ 357.731157][T14256] ? cleanup_srcu_struct+0x37c/0x520 [ 357.733319][T14256] report_bug+0x3c0/0x580 [ 357.735064][T14256] handle_bug+0x3d/0x70 [ 357.736891][T14256] exc_invalid_op+0x17/0x50 [ 357.738803][T14256] asm_exc_invalid_op+0x1a/0x20 [ 357.740486][T14256] RIP: 0010:cleanup_srcu_struct+0x37c/0x520 [ 357.743177][T14256] Code: 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 90 0f 0b 90 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 90 <0f> 0b 90 e9 35 ff ff ff 90 0f 0b 90 48 b8 00 00 00 00 00 fc ff df [ 357.750862][T14256] RSP: 0018:ffffc9002458fd10 EFLAGS: 00010202 [ 357.753850][T14256] RAX: 0000000000000001 RBX: ffffc900245d9000 RCX: 0000000000000008 [ 357.757968][T14256] RDX: fffff91ffffad0e4 RSI: 0000000000000008 RDI: ffffe8ffffd68718 [ 357.761494][T14256] RBP: ffff88805dd42800 R08: 0000000000000000 R09: fffff91ffffad0e3 [ 357.764695][T14256] R10: ffffe8ffffd6871f R11: 0000000000000000 R12: ffffc900245e28a8 [ 357.768264][T14256] R13: ffffc900245e2880 R14: ffffc900245e2868 R15: 0000000000000004 [ 357.771681][T14256] kvm_put_kvm+0x8df/0xb80 [ 357.773661][T14256] ? __pfx_kvm_vm_release+0x10/0x10 [ 357.775902][T14256] kvm_vm_release+0x42/0x60 [ 357.777836][T14256] __fput+0x408/0xbb0 [ 357.779522][T14256] task_work_run+0x14e/0x250 [ 357.781404][T14256] ? __pfx_task_work_run+0x10/0x10 [ 357.783740][T14256] ? __pfx___close_range+0x10/0x10 [ 357.786085][T14256] syscall_exit_to_user_mode+0x278/0x2a0 [ 357.788655][T14256] __do_fast_syscall_32+0x80/0x120 [ 357.791082][T14256] do_fast_syscall_32+0x32/0x80 [ 357.793385][T14256] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.796317][T14256] RIP: 0023:0xf73af579 [ 357.798213][T14256] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 357.807014][T14256] RSP: 002b:00000000ffc58b0c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 357.810768][T14256] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 357.814154][T14256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 357.817252][T14256] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.820765][T14256] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 357.824280][T14256] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 357.827420][T14256] [ 357.829537][T14256] Kernel Offset: disabled [ 357.831461][T14256] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:06:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84f95405 RDI=ffffffff94d5c040 RBP=ffffffff94d5c000 RSP=ffffc9002458f700 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000003 R12=0000000000000000 R13=0000000000000035 R14=ffffffff84f953a0 R15=0000000000000000 RIP=ffffffff84f9542f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c000000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002ed16ff8 CR3=00000000458fe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=8ae39a1a4aff1888 RBX=ffffc900205a7680 RCX=611c3c2b134892eb RDX=600f7e6b22a8b36a RSI=63c74b476ac5740d RDI=7a73a4ce4e5fb141 RBP=f2ec28b94e1c5a5a RSP=ffffc900205a7448 R8 =83c3693986d86256 R9 =a0bd39d267272fd8 R10=36c302b41e1b49cc R11=0d13d746b1e3a5a5 R12=1b61e95a0f0da4e6 R13=47c236d6b816745a R14=7e4cb58e8417ce34 R15=ec505e9ce9339397 RIP=ffffffff8449d3a4 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c100000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5d43da4 CR3=000000002b3c0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffea0001770000 RCX=ffffffff81f4a834 RDX=ffff8880252ba440 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88805d37ca3c RSP=ffffc90007467c70 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000019 R11=0000000000000002 R12=ffff88805d37ca20 R13=0000000000000008 R14=0000000000000003 R15=00000000014404fd RIP=ffffffff81f4a83d RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c200000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056aa899c CR3=000000006028c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff8880276a2f70 RCX=0000000000020000 RDX=1ffff11004ed45f2 RSI=ffff8880276a2f04 RDI=ffff8880276a2f90 RBP=0000000000000000 RSP=ffffc90006d96c90 R8 =0000000000000000 R9 =0000000000000000 R10=000000000000000a R11=dffffc0000000000 R12=0000000000000000 R13=0000000000000000 R14=ffff8880276a2f70 R15=0000000000000021 RIP=ffffffff816bc889 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c300000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f743e1e8 CR3=000000005f6b4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000004ffffffe3 00000190000000c8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000