last executing test programs: 10.43552588s ago: executing program 4 (id=691): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000200)="2227a019d5e7f8e7f37b8483f12eb9716ddff30653c2fcc91a7b93d9032615e616b9cce3b11b24eaacf7cd5730342f767c2264cea4847dd424cf02e86f062c640259dca922a664d47b586c99e65c4f1ef29c5911746568639e844f7ab079f91b7e24d3cf0f21", 0x66}], 0x1}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.31799425s ago: executing program 1 (id=692): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000c80)=0xf4e) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) 10.240726907s ago: executing program 0 (id=693): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000740)={[{@shortname_lower}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@shortname_winnt}, {@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@shortname_lower}, {@uni_xlate}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}]}, 0x2d, 0x342, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prlimit64(0x0, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f00000001c0)=""/202, 0xff4) 8.640716796s ago: executing program 0 (id=696): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x5, '\x00', 0x0, r0, 0x5, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000001480)=""/4091, &(0x7f0000000000), &(0x7f0000000040), 0x8, r2}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x3, 0xf4, 0x7fff, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 8.417907146s ago: executing program 1 (id=698): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000040)=0x6) 8.397723408s ago: executing program 3 (id=699): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000003c0)=ANY=[@ANYBLOB="706172743d3078300002a27f9edc6b44900000c63d5f852c6769643d", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES8, @ANYRES32, @ANYRES8, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611", @ANYRES16, @ANYBLOB="4599"], 0x1, 0x701, &(0x7f00000009c0)="$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") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fcntl$addseals(r1, 0x409, 0xb) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x6f, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.088635035s ago: executing program 4 (id=700): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="fd72c91726872af17284cbbecb2360cff1988314f6cc09c4c07f0b44d9c16a610f294283b780b506b765d798ca8ab5adc7", 0x31}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000280)={0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0xe) r3 = dup(r2) r4 = syz_io_uring_setup(0x5169, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r4, 0x5089, 0x0, 0x0, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)) 7.263478636s ago: executing program 1 (id=701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x60400) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) r5 = dup(r3) inotify_rm_watch(r5, r4) 7.21789777s ago: executing program 2 (id=702): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000280)=0x5d, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000001c0)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000009000)=r3, 0x4) 5.813387273s ago: executing program 3 (id=703): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000000c0)='(', 0x1) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, 0x0, &(0x7f0000000280)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r2}, 0x50) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x1, 0x8, 0x7}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r3, 0x2284, &(0x7f0000000140)=0x1) 5.812684493s ago: executing program 0 (id=713): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$int_out(r3, 0x2, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.764514567s ago: executing program 1 (id=704): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$minix(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYBLOB="019c69c38d480ca2ca2f775afad182a67ab6e00358c62a66b370b125572078e1b597e1a41a1c9bbd554c", @ANYRES64, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC], 0xd, 0x1a6, &(0x7f00000003c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_io_uring_setup(0x6438, &(0x7f0000000340), &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r4], 0x29) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 5.72390264s ago: executing program 2 (id=705): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000002c0)='./bus\x00', 0x1308020, &(0x7f00000004c0)={[{@auto_da_alloc}]}, 0xec, 0x58b, &(0x7f0000001a00)="$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") syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000640)={[{@inlinecrypt}, {@user_xattr}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10}}, {@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$eJzs281vVFUbAPDn3pkCL/DSivgBglbR2PjR0oLKwo1GExeamOgCl7UtBBmooTUR0mg1BpeGxL1xaeJf4MqVUVcmbnVvSIg2JqAbx9yZe9vOdKb0Y8pU5vdLBs6Ze+ae8+Tcc+fMOb0B9KzB7J8kYm9E/BIR/fVsY4HB+n83F+Ym/lqYm0iiWn3j96RW7sbC3ERRtPjcnjwzlEaknyR5JY1mLl0+N16pTF3M8yOz598dmbl0+emz58fPTJ2ZujB28uSJ46PPPTv2TEfizNp049AH04cPvvLW1dcmTl19+4evs/bee6R+fHkcnTKYBf5Htab52GOdrqzL/qkuxZmUu90a1qoUEVl39dXGf3+UYqnz+uPlj7vaOGBLZffsne0Pz1eBO1gS3W4B0B3FF332+7d43aapx7Zw/YX6D6As7pv5q36kHGlepm8L6x+MiFPzf3+RvaJpHaLaYt0AAGCzvs3mP0+tnP/V9kaWlUvyvaGBiLgrIvZHxN0RcSAi7snL3hcR96+z/uatoZXzz/TaBkNbk2z+93y+t9U4/ytmfzFQynP/r8Xfl5w+W5k6FhH7ImIo+nZm+dFWJy9O8dLPn7Wrf/n8L3tl9Rdzwfwk18pNC3ST47PjnZqUXv8o4lC5VfzJ4k5A1vcHI+LQ+k69r0icfeKrw+0K3Tr+VXRgn6n6ZcTj9f6fj6b4C8nq+5Mju6IydWykuCpW+vGnK6+3q39T8XdA1v+7G6//phL9fybL92tn1l/HlV8/bfubsrzB639H8mZtz3pH/t7747OzF0cjdiSv1vIN748tfbbIF+Wz+IeOth7/+/PPZPE/EBHZRXwkIh6MiIfyvns4Ih6JiKOrxP/9i4++0+7Yduj/yZb3v8Xrf6Cx/9efKJ377pt29a/t/neilhrK36nd/26hfXN25SU2ejUDAADAf08aEXsjSYcX02k6PFz/e/kDsTutTM/MPnl6+r0Lk/VnBAaiLy1WuvqXrYeOJvP5Gev5sXytuDh+PF83/rz0v1p+eGK6Mtnl2KHX7Wkz/jO/lbrdOmDLeV4Lelfz+E+71A7g9vP9D73L+IfeZfxD72o1/j9sytsLgDuT73/oXcY/9C7jH3qX8Q89aTPP9W9VorzK0/sS2yUR6bZohkSLRLkDo7vLNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAO+TcAAP//uZjx6g==") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x100000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) 5.648899747s ago: executing program 4 (id=706): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) syz_emit_ethernet(0x1378, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(r4, &(0x7f0000000340)={&(0x7f0000000040)=@name, 0x10, 0x0}, 0x0) 5.472195473s ago: executing program 1 (id=707): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@stripe={'stripe', 0x3d, 0x1}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@noinit_itable}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") open(0x0, 0x181042, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffe000) write$cgroup_int(r1, &(0x7f0000000200), 0x40c000) 5.453002354s ago: executing program 3 (id=708): signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x400]}, 0x8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@jqfmt_vfsv0}, {@delalloc}, {@usrjquota}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 4.404103166s ago: executing program 4 (id=709): syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x800008ec0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 4.398966316s ago: executing program 2 (id=710): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffffc) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 4.261546848s ago: executing program 0 (id=711): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x2, 0x44, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x20, 0x4}}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x21000e, &(0x7f0000000080), 0x1, 0x4f4, &(0x7f0000000540)="$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") timer_create(0x2, &(0x7f0000000440)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7) lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {}, [], {}, [], {0x8}, {0x10}}, 0x24, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000b00)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.00751368s ago: executing program 1 (id=712): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="c000006dd56384168987e9b6201d2d001b00000000000000000000007f00000000000000e000"], 0xc0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff000000003609080000000000c39af0ffa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.89286892s ago: executing program 2 (id=714): r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x1, 0x0, 0xfffffffe}, 0x2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 2.764000989s ago: executing program 3 (id=715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x60400) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) r5 = dup(r3) inotify_rm_watch(r5, r4) 2.664147337s ago: executing program 4 (id=716): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000440)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@lazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@orlov}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r2, r1, 0x0, 0x8000000d) 1.464838851s ago: executing program 2 (id=717): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000700)="a9d21b9f", 0x4}], 0x1, 0x7fff, 0x80, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4c842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) write$UHID_INPUT(r3, &(0x7f0000006fc0)={0x8, {"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", 0x1000}}, 0x1006) rename(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./bus\x00') r5 = open(&(0x7f0000001780)='./bus\x00', 0x64842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x3000}], 0x1, 0x7800, 0x0, 0x3) 1.463854752s ago: executing program 3 (id=718): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x4, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000003ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20044840) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)='*', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)='\\', 0x1}], 0x1}}], 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x2, 0x0) 1.398682197s ago: executing program 0 (id=719): bpf$PROG_LOAD(0x5, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r4, &(0x7f0000000180), &(0x7f0000000200)=0x60) 1.163170518s ago: executing program 3 (id=720): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x64, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x656}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x3}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x4}, {@multicast2}, {@private=0xa010102}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2, 0x8}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xda, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.162184488s ago: executing program 2 (id=730): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x4}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 324.772011ms ago: executing program 4 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x44}}, 0x0) 0s ago: executing program 0 (id=722): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000002c0)='./bus\x00', 0x1308020, &(0x7f00000004c0)={[{@auto_da_alloc}]}, 0xec, 0x58b, &(0x7f0000001a00)="$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") syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000640)={[{@inlinecrypt}, {@user_xattr}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10}}, {@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x100000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) kernel console output (not intermixed with test programs): scall=202 compat=0 ip=0x7fd1b737def9 code=0x7ffc0000 [ 191.230786][ T26] audit: type=1326 audit(1726792207.332:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1b737def9 code=0x7ffc0000 [ 191.329429][ T26] audit: type=1326 audit(1726792207.332:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b737def9 code=0x7ffc0000 [ 191.408517][ T26] audit: type=1326 audit(1726792207.332:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd1b737def9 code=0x7ffc0000 [ 191.525257][ T26] audit: type=1326 audit(1726792207.332:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b737def9 code=0x7ffc0000 [ 191.575817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.578946][ T26] audit: type=1326 audit(1726792207.332:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fd1b737def9 code=0x7ffc0000 [ 191.590074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.671871][ T26] audit: type=1326 audit(1726792207.332:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b737def9 code=0x7ffc0000 [ 191.788980][ T26] audit: type=1326 audit(1726792207.342:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd1b737def9 code=0x7ffc0000 [ 191.846667][ T4661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.866922][ T26] audit: type=1326 audit(1726792207.342:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b737def9 code=0x7ffc0000 [ 191.960882][ T26] audit: type=1326 audit(1726792207.342:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5074 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1b737def9 code=0x7ffc0000 [ 192.272376][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.294377][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.507841][ T5103] loop3: detected capacity change from 0 to 2048 [ 192.630269][ T5098] loop0: detected capacity change from 0 to 1024 [ 192.679683][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.695174][ T3823] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.836337][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.971362][ T5103] loop3: detected capacity change from 0 to 2048 [ 193.022343][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.080288][ T5098] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 193.180700][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.573996][ T4661] device veth0_vlan entered promiscuous mode [ 193.588088][ T4661] device veth1_vlan entered promiscuous mode [ 193.648499][ T5103] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 193.939402][ T4885] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.015656][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.053768][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.122622][ T4661] device veth0_macvtap entered promiscuous mode [ 194.172012][ T41] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 194.173001][ T4885] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.188454][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.196027][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.215682][ T4661] device veth1_macvtap entered promiscuous mode [ 194.398402][ T4885] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.415477][ T4885] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.442223][ T41] usb 1-1: Using ep0 maxpacket: 32 [ 194.488091][ T4313] device hsr_slave_0 left promiscuous mode [ 194.496343][ T4313] device hsr_slave_1 left promiscuous mode [ 194.527243][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.538437][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.562164][ T41] usb 1-1: config index 0 descriptor too short (expected 26, got 18) [ 194.570333][ T41] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 194.580650][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.592890][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.600214][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.620974][ T41] usb 1-1: config 0 descriptor?? [ 194.630843][ T4313] device bridge_slave_1 left promiscuous mode [ 194.648103][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.689874][ T41] as10x_usb: device has been detected [ 194.699591][ T41] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 194.727001][ T4313] device bridge_slave_0 left promiscuous mode [ 194.736227][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.749839][ T41] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 194.804751][ T4313] device hsr_slave_0 left promiscuous mode [ 194.817975][ T4313] device hsr_slave_1 left promiscuous mode [ 194.825372][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.833401][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.841497][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.861563][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.884976][ T41] as10x_usb: error during firmware upload part1 [ 194.904060][ T41] Registered device nBox DVB-T Dongle [ 194.919356][ T41] usb 1-1: USB disconnect, device number 4 [ 194.973984][ T41] Unregistered device nBox DVB-T Dongle [ 194.985968][ T41] as10x_usb: device has been disconnected [ 195.033493][ T4313] device bridge_slave_1 left promiscuous mode [ 195.039824][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.040247][ T3708] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 195.066559][ T4313] device bridge_slave_0 left promiscuous mode [ 195.073351][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.111168][ T3708] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 195.141943][ T3708] EXT4-fs (loop3): This should not happen!! Data will be lost [ 195.141943][ T3708] [ 195.162020][ T3708] EXT4-fs (loop3): Total free blocks count 0 [ 195.172648][ T3708] EXT4-fs (loop3): Free/Dirty block details [ 195.178636][ T3708] EXT4-fs (loop3): free_blocks=2415919104 [ 195.194056][ T4313] device veth1_macvtap left promiscuous mode [ 195.200201][ T3708] EXT4-fs (loop3): dirty_blocks=16 [ 195.205830][ T3708] EXT4-fs (loop3): Block reservation details [ 195.212340][ T4313] device veth0_macvtap left promiscuous mode [ 195.218507][ T4313] device veth1_vlan left promiscuous mode [ 195.226658][ T3708] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 195.237478][ T4313] device veth0_vlan left promiscuous mode [ 195.245684][ T3743] EXT4-fs (loop3): unmounting filesystem. [ 195.266115][ T4313] device veth1_macvtap left promiscuous mode [ 195.272504][ T4313] device veth0_macvtap left promiscuous mode [ 195.278671][ T4313] device veth1_vlan left promiscuous mode [ 195.290433][ T4313] device veth0_vlan left promiscuous mode [ 195.354198][ T5134] loop3: detected capacity change from 0 to 512 [ 195.361529][ T5134] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.381050][ T5134] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 195.410806][ T5134] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b000c118, mo2=0002] [ 195.419133][ T5134] System zones: 1-12 [ 195.442733][ T5134] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.282: corrupted in-inode xattr [ 195.469691][ T5134] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.282: couldn't read orphan inode 15 (err -117) [ 195.493871][ T5134] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 196.413926][ T5144] loop0: detected capacity change from 0 to 512 [ 196.564401][ T3743] EXT4-fs (loop3): unmounting filesystem. [ 196.773221][ T5144] EXT4-fs (loop0): Test dummy encryption mode enabled [ 196.799517][ T5144] EXT4-fs error (device loop0): __ext4_iget:5055: inode #11: block 1: comm syz.0.284: invalid block [ 196.821671][ T5144] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.284: couldn't read orphan inode 11 (err -117) [ 196.843430][ T5144] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 197.807196][ T4387] EXT4-fs (loop0): unmounting filesystem. [ 198.084660][ T4313] team0 (unregistering): Port device team_slave_1 removed [ 199.019645][ T4313] team0 (unregistering): Port device team_slave_0 removed [ 199.098943][ T4313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.147752][ T4313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.596758][ T5177] loop0: detected capacity change from 0 to 128 [ 199.608329][ T5177] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 199.623902][ T5177] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 200.796374][ T4313] bond0 (unregistering): Released all slaves [ 201.373246][ T4313] team0 (unregistering): Port device team_slave_1 removed [ 201.425743][ T4313] team0 (unregistering): Port device team_slave_0 removed [ 201.476844][ T4313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.526357][ T4313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.023155][ T4313] bond0 (unregistering): Released all slaves [ 202.131562][ T4661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.148272][ T4661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.158737][ T4661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.169466][ T4661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.179384][ T4661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.190284][ T4661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.213250][ T4661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.222960][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.231461][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.240319][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.254743][ T5152] tipc: Started in network mode [ 202.259661][ T5152] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 202.270767][ T5152] tipc: Enabled bearer , priority 10 [ 202.744874][ T41] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 202.993420][ T41] usb 1-1: Using ep0 maxpacket: 32 [ 203.118950][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.130863][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.140982][ T41] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 203.151151][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.168497][ T41] usb 1-1: config 0 descriptor?? [ 203.214159][ T41] hub 1-1:0.0: USB hub found [ 203.381928][ T3629] tipc: Node number set to 4269801488 [ 203.432065][ T41] hub 1-1:0.0: 1 port detected [ 204.132183][ T41] hub 1-1:0.0: activate --> -90 [ 204.716703][ T3685] usb 1-1: USB disconnect, device number 5 [ 205.045204][ T4661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.056440][ T4661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.067356][ T4661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.077944][ T4661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.087883][ T4661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.098390][ T4661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.109448][ T4661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.121112][ T4661] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.142916][ T4661] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.153397][ T4661] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.162632][ T4661] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.177184][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.207600][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 206.151433][ T4885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.168830][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.182572][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.254674][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 206.302529][ T4885] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.328583][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.346980][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.412602][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.420802][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.429521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.620448][ T3655] Bluetooth: hci3: command 0x0406 tx timeout [ 206.849492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.858804][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.866061][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.875418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.884727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.898710][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.905953][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.914944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.925193][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.942736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 207.069310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.087064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.108653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.129232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.241331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.269493][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.279636][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.288532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.315218][ T4885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.420100][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.431247][ T5206] loop1: detected capacity change from 0 to 512 [ 207.459741][ T5206] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.187: invalid indirect mapped block 2 (level 1) [ 207.475248][ T5206] EXT4-fs (loop1): 1 truncate cleaned up [ 207.476150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.480934][ T5206] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 207.514766][ T5206] EXT4-fs (loop1): unmounting filesystem. [ 207.566286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.754390][ T5206] process 'syz.1.187' launched './file0' with NULL argv: empty string added [ 208.117481][ T5219] loop0: detected capacity change from 0 to 128 [ 208.135896][ T5219] FAT-fs (loop0): Unrecognized mount option "0x0000000000000000" or missing value [ 208.385198][ T5219] loop0: detected capacity change from 0 to 256 [ 208.411029][ T5219] exfat: Unknown parameter '184467440737095516150x0000000000000003' [ 209.331047][ T5233] loop0: detected capacity change from 0 to 512 [ 209.407037][ T4606] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 209.418642][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.432834][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.569422][ T5237] loop1: detected capacity change from 0 to 2048 [ 209.606841][ T5237] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 209.802345][ T5237] bio_check_eod: 120 callbacks suppressed [ 209.802389][ T5237] syz.1.301: attempt to access beyond end of device [ 209.802389][ T5237] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 209.902274][ T5238] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.298104][ T4885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.558251][ T5242] netlink: 'syz.1.302': attribute type 16 has an invalid length. [ 211.712056][ T3655] Bluetooth: hci1: command 0x0406 tx timeout [ 212.570685][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.661391][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.767211][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.853656][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.875407][ T4885] device veth0_vlan entered promiscuous mode [ 212.892249][ T5266] loop0: detected capacity change from 0 to 2048 [ 212.923278][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.941163][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.975240][ T5266] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 212.983839][ T5269] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 213.012169][ T5272] loop1: detected capacity change from 0 to 2048 [ 213.020126][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 213.020143][ T26] audit: type=1804 audit(1726792229.142:36): pid=5266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.307" name="/newroot/31/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 213.106792][ T26] audit: type=1804 audit(1726792229.212:37): pid=5266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.307" name="/newroot/31/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 213.135379][ T5269] batman_adv: batadv0: Adding interface: ip6gretap1 [ 213.154787][ T3823] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 213.177880][ T5269] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.263691][ T5269] batman_adv: batadv0: Interface activated: ip6gretap1 [ 213.284655][ T4885] device veth1_vlan entered promiscuous mode [ 213.362130][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 213.379208][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 213.415480][ T5272] loop1: detected capacity change from 0 to 2048 [ 213.432938][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.451003][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.463551][ T4885] device veth0_macvtap entered promiscuous mode [ 213.474586][ T4885] device veth1_macvtap entered promiscuous mode [ 213.476773][ T5279] loop3: detected capacity change from 0 to 256 [ 213.499635][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.504282][ T5272] loop1: p3 < > p4 < > [ 213.532648][ T5272] loop1: partition table partially beyond EOD, truncated [ 213.536937][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.546783][ T5279] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 213.565098][ T5272] loop1: p3 start 4284289 is beyond EOD, truncated [ 213.588438][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.604576][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.618395][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.631339][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.662181][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.700301][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.738811][ T4885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.752189][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.788400][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.827007][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.840503][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.853165][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.897787][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.921827][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.939464][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.949741][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.967121][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.977053][ T4885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.993140][ T4885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.009623][ T4885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.021410][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.046837][ T4387] EXT4-fs (loop0): unmounting filesystem. [ 214.077072][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.119365][ T4885] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.148590][ T4885] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.172748][ T4885] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.181512][ T4885] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.370605][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.389498][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.419172][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.642927][ T3780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.651115][ T3780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.710626][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 214.719300][ T5297] loop1: detected capacity change from 0 to 512 [ 214.729348][ T5297] EXT4-fs: Ignoring removed i_version option [ 214.739540][ T5297] EXT4-fs: Ignoring removed nobh option [ 214.746247][ T5297] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 214.777423][ T5297] EXT4-fs (loop1): 1 truncate cleaned up [ 214.848272][ T5297] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 214.852641][ T5303] loop4: detected capacity change from 0 to 512 [ 214.961710][ T5303] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 214.977107][ T5303] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 214.992282][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 215.021566][ T5297] EXT4-fs error (device loop1): __ext4_get_inode_loc:4506: comm syz.1.316: Invalid inode table block 5 in block_group 0 [ 215.093208][ T5297] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 215.112328][ T5303] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.232: corrupted inode contents [ 215.145903][ T5297] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #18: comm syz.1.316: mark_inode_dirty error [ 215.175617][ T5303] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #2: comm syz.4.232: mark_inode_dirty error [ 215.208413][ T5297] EXT4-fs error (device loop1): __ext4_get_inode_loc:4506: comm syz.1.316: Invalid inode table block 5 in block_group 0 [ 215.239208][ T5303] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.232: corrupted inode contents [ 215.269047][ T5297] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 215.311289][ T5307] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.232: Directory hole found for htree leaf block 0 [ 215.477389][ T7] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 215.488774][ T5297] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #18: comm syz.1.316: mark_inode_dirty error [ 215.489648][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.545186][ T5297] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.316: Invalid block bitmap block 3 in block_group 0 [ 215.569070][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 142, changing to 11 [ 215.591176][ T5297] EXT4-fs error (device loop1): ext4_mb_discard_group_preallocations:4950: comm syz.1.316: Error -117 reading block bitmap for 0 [ 215.605649][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 33 [ 215.629367][ T7] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 215.638715][ T5297] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.316: Invalid block bitmap block 3 in block_group 0 [ 215.661921][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.670403][ T5297] EXT4-fs error (device loop1): ext4_mb_discard_group_preallocations:4950: comm syz.1.316: Error -117 reading block bitmap for 0 [ 215.691093][ T7] usb 4-1: config 0 descriptor?? [ 215.765974][ T4885] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 215.838228][ T4885] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 215.874629][ T4661] EXT4-fs (loop1): unmounting filesystem. [ 215.917719][ T4885] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 215.966908][ T5295] dccp_invalid_packet: P.Data Offset(0) too small [ 215.980039][ T4885] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 216.031311][ T4885] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 216.087480][ T4885] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 216.316693][ T7] input: HID 28bd:1903 Mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:1903.0006/input/input8 [ 216.447155][ T7] uclogic 0003:28BD:1903.0006: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.3-1/input0 [ 216.536922][ T7] usb 4-1: USB disconnect, device number 9 [ 216.712914][ T3780] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.004017][ T3780] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.027094][ T5314] loop0: detected capacity change from 0 to 64 [ 219.597748][ T3780] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.860788][ T3780] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.779883][ T3655] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.806589][ T3655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.817353][ T3655] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.830472][ T3655] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.860385][ T3655] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 221.871497][ T3655] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 224.023460][ T3655] Bluetooth: hci2: command tx timeout [ 224.700368][ T5326] chnl_net:caif_netlink_parms(): no params data found [ 224.895492][ T5359] device team_slave_0 entered promiscuous mode [ 224.902216][ T5359] device team_slave_1 entered promiscuous mode [ 224.942278][ T5359] device macvtap1 entered promiscuous mode [ 224.948415][ T5359] device team0 entered promiscuous mode [ 225.013300][ T5359] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 225.075165][ T5359] team0: Device macvtap1 is already an upper device of the team interface [ 225.129009][ T5359] device team0 left promiscuous mode [ 225.142400][ T5359] device team_slave_0 left promiscuous mode [ 225.148410][ T5359] device team_slave_1 left promiscuous mode [ 225.329071][ T5366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.329'. [ 225.811930][ T5337] loop2: detected capacity change from 256 to 255 [ 226.102016][ T3652] Bluetooth: hci2: command tx timeout [ 227.822489][ T3780] device hsr_slave_0 left promiscuous mode [ 227.851191][ T3780] device hsr_slave_1 left promiscuous mode [ 227.932076][ T3780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.956541][ T3780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.973703][ T3780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.011655][ T3780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.019899][ T3780] device bridge_slave_1 left promiscuous mode [ 228.044582][ T3780] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.108232][ T5371] loop0: detected capacity change from 0 to 32768 [ 228.134311][ T3655] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.150315][ T5392] loop3: detected capacity change from 0 to 1024 [ 228.164777][ T3655] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.173640][ T3655] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.178028][ T5371] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.331 (5371) [ 228.199794][ T3640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.202887][ T3655] Bluetooth: hci2: command tx timeout [ 228.215303][ T3655] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 228.215843][ T3780] device bridge_slave_0 left promiscuous mode [ 228.229301][ T3640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 228.229389][ T5392] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 228.247705][ T3780] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.826022][ T3780] device veth1_macvtap left promiscuous mode [ 228.890485][ T3780] device veth0_macvtap left promiscuous mode [ 229.029880][ T3780] device veth1_vlan left promiscuous mode [ 229.035840][ T3780] device veth0_vlan left promiscuous mode [ 229.058604][ T5371] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 229.129260][ T5371] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 229.151942][ T5371] BTRFS info (device loop0): doing ref verification [ 229.179588][ T5371] BTRFS info (device loop0): use zlib compression, level 3 [ 229.259484][ T5371] BTRFS info (device loop0): using free space tree [ 229.641983][ T3715] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 229.662337][ T5371] BTRFS error (device loop0): open_ctree failed [ 229.883424][ T3715] usb 4-1: Using ep0 maxpacket: 32 [ 230.002224][ T3715] usb 4-1: config index 0 descriptor too short (expected 26, got 18) [ 230.121824][ T3715] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 230.131022][ T3715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.150948][ T3715] usb 4-1: config 0 descriptor?? [ 230.201254][ T3715] as10x_usb: device has been detected [ 230.209754][ T3715] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 230.355554][ T3652] Bluetooth: hci2: command tx timeout [ 230.725219][ T3640] Bluetooth: hci4: command tx timeout [ 230.756235][ T3715] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 230.777923][ T3715] as10x_usb: error during firmware upload part1 [ 230.784914][ T3715] Registered device nBox DVB-T Dongle [ 230.973631][ T3780] team0 (unregistering): Port device team_slave_1 removed [ 231.147474][ T3780] team0 (unregistering): Port device team_slave_0 removed [ 231.201121][ T3780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.257301][ T3780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.368789][ T3685] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 231.548219][ T7] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 231.614658][ T3685] usb 3-1: Using ep0 maxpacket: 8 [ 231.734360][ T3685] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 231.753892][ T3685] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 231.755187][ T14] usb 4-1: USB disconnect, device number 10 [ 231.809264][ T14] Unregistered device nBox DVB-T Dongle [ 231.810381][ T14] as10x_usb: device has been disconnected [ 231.879029][ T3780] bond0 (unregistering): Released all slaves [ 231.922363][ T3685] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=f0.c9 [ 231.931451][ T3685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.939667][ T3685] usb 3-1: Product: syz [ 231.942117][ T7] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 231.944530][ T3685] usb 3-1: Manufacturer: syz [ 231.957477][ T3685] usb 3-1: SerialNumber: syz [ 231.959730][ T7] usb 1-1: config 179 has no interface number 0 [ 231.968758][ T7] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 231.985504][ T7] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 231.996602][ T7] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 232.008470][ T7] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 232.019727][ T7] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 232.033231][ T7] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 232.042361][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.072159][ T5326] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.079314][ T5326] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.082172][ T5446] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 232.089256][ T5326] device bridge_slave_0 entered promiscuous mode [ 232.100241][ T5446] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 232.186500][ T5326] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.209160][ T5326] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.218369][ T5326] device bridge_slave_1 entered promiscuous mode [ 232.222133][ T3685] snd-usb-6fire 3-1:2.0: unknown device firmware state received from device: [ 232.246008][ T3685] d8 70 a4 ab 2e b6 ee 60 [ 232.250610][ T3685] snd-usb-6fire: probe of 3-1:2.0 failed with error -5 [ 232.366378][ T5326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.380087][ T3685] usb 1-1: USB disconnect, device number 6 [ 232.381850][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 232.395230][ T5326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.403019][ T5308] EXT4-fs error: 11 callbacks suppressed [ 232.403038][ T5308] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.232: corrupted inode contents [ 232.432030][ T5308] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #2: comm syz.4.232: mark_inode_dirty error [ 232.459616][ T5451] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 232.466422][ T5308] EXT4-fs (loop4): unmounting filesystem. [ 232.474862][ T5451] batman_adv: batadv0: Adding interface: ip6gretap1 [ 232.486846][ T5451] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.514356][ T5451] batman_adv: batadv0: Interface activated: ip6gretap1 [ 232.596518][ T5326] team0: Port device team_slave_0 added [ 232.604095][ T5452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 232.620697][ T5452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.628385][ T5452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.644848][ T5452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.657747][ T5452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.667823][ T5452] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 232.675444][ T5452] batman_adv: batadv0: Removing interface: ip6gretap1 [ 232.741913][ T3640] Bluetooth: hci4: command tx timeout [ 232.767493][ T3685] usb 3-1: USB disconnect, device number 3 [ 232.778889][ T5326] team0: Port device team_slave_1 added [ 232.893896][ T5326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.901381][ T5326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.957822][ T5326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.077927][ T5326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.098407][ T5326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.186398][ T5326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.288035][ T5463] loop3: detected capacity change from 0 to 4096 [ 233.330476][ T5463] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 233.750467][ T5326] device hsr_slave_0 entered promiscuous mode [ 233.761608][ T5326] device hsr_slave_1 entered promiscuous mode [ 234.842258][ T3640] Bluetooth: hci4: command tx timeout [ 235.428356][ T3780] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.531143][ T5393] chnl_net:caif_netlink_parms(): no params data found [ 235.665642][ T3780] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.988730][ T3780] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.288593][ T3780] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.537192][ T5393] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.563071][ T5393] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.574358][ T5393] device bridge_slave_0 entered promiscuous mode [ 236.719077][ T5393] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.728264][ T5393] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.771410][ T5393] device bridge_slave_1 entered promiscuous mode [ 236.901959][ T3655] Bluetooth: hci4: command tx timeout [ 237.014015][ T5393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.150176][ T5393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.326217][ T5393] team0: Port device team_slave_0 added [ 237.386439][ T5393] team0: Port device team_slave_1 added [ 237.404927][ T5326] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 237.667269][ T5326] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 237.757009][ T5326] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 237.786692][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.795922][ T5506] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 237.813512][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.842357][ T5393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.843715][ T5501] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 237.890359][ T5326] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 237.964305][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.971449][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.062252][ T5393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.150110][ T5510] loop3: detected capacity change from 0 to 2048 [ 238.438902][ T5510] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 239.203390][ T26] audit: type=1804 audit(1726792255.332:38): pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.351" name="/newroot/68/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 239.342926][ T26] audit: type=1804 audit(1726792255.462:39): pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.351" name="/newroot/68/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 239.392553][ T5393] device hsr_slave_0 entered promiscuous mode [ 239.414369][ T5393] device hsr_slave_1 entered promiscuous mode [ 239.450666][ T5393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.459670][ T5393] Cannot create hsr debugfs directory [ 239.793480][ T5326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.906286][ T3743] EXT4-fs (loop3): unmounting filesystem. [ 239.969713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.022683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.045974][ T5326] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.070185][ T5524] loop0: detected capacity change from 0 to 32768 [ 240.195906][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.210895][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.222828][ T3708] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.230065][ T3708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.239418][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.323578][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.363489][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.387430][ T3708] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.394638][ T3708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.481081][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.532846][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.578681][ T5549] loop3: detected capacity change from 0 to 2048 [ 240.647602][ T5549] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 240.796046][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.826890][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.859770][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.894629][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.922889][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.936991][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.051644][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.894611][ T3743] EXT4-fs (loop3): unmounting filesystem. [ 241.968487][ T5326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.990695][ T3780] device hsr_slave_0 left promiscuous mode [ 242.037736][ T3780] device hsr_slave_1 left promiscuous mode [ 242.060677][ T3780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.077720][ T3780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.088295][ T3780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.118987][ T3780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.132907][ T3780] device bridge_slave_1 left promiscuous mode [ 242.149388][ T3780] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.168444][ T3780] device bridge_slave_0 left promiscuous mode [ 242.182446][ T3780] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.253322][ T3780] device veth1_macvtap left promiscuous mode [ 242.259434][ T3780] device veth0_macvtap left promiscuous mode [ 242.282050][ T3780] device veth1_vlan left promiscuous mode [ 242.288016][ T3780] device veth0_vlan left promiscuous mode [ 243.123605][ T3780] team0 (unregistering): Port device team_slave_1 removed [ 243.174542][ T3780] team0 (unregistering): Port device team_slave_0 removed [ 243.222911][ T3780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.274087][ T3780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.766108][ T3780] bond0 (unregistering): Released all slaves [ 243.838194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.846948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.130323][ T5393] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 244.147831][ T5393] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 244.160767][ T5393] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 244.176577][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.185396][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.199390][ T5326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.207842][ T5393] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.259863][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.273565][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.313911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.323330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.333922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.345254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.366794][ T5326] device veth0_vlan entered promiscuous mode [ 244.393573][ T5326] device veth1_vlan entered promiscuous mode [ 244.430941][ T5393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.440961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.452769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.460922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.470110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.485729][ T5326] device veth0_macvtap entered promiscuous mode [ 244.500729][ T5326] device veth1_macvtap entered promiscuous mode [ 244.509625][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.517896][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.527880][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.536221][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.549254][ T5393] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.564401][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.573590][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.583516][ T3778] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.590599][ T3778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.607715][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.619192][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.629868][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.640010][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.651003][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.663822][ T5326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.675885][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.685498][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.695359][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.704247][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.715100][ T3708] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.722275][ T3708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.732217][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.743392][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.753367][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.764230][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.775641][ T5326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.787271][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.796534][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.807197][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.819172][ T5326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.831248][ T5326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.840393][ T5326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.849474][ T5326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.866611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.880013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.893194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.911609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.942234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.951231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.960404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.969368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.988188][ T5393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.009573][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.020774][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.029643][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.086774][ T3780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.122222][ T3780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.137171][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.157823][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.172211][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.199167][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 245.282521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.290074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.321089][ T5393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.549654][ T5597] device team_slave_0 entered promiscuous mode [ 245.556030][ T5597] device team_slave_1 entered promiscuous mode [ 245.570133][ T5597] device vlan2 entered promiscuous mode [ 245.576953][ T5597] device team0 entered promiscuous mode [ 245.586363][ T5597] team0: Device vlan2 is already an upper device of the team interface [ 246.008395][ T5597] device team0 left promiscuous mode [ 246.030696][ T5597] device team_slave_0 left promiscuous mode [ 246.036885][ T5597] device team_slave_1 left promiscuous mode [ 246.634811][ T5615] loop0: detected capacity change from 0 to 16 [ 246.668191][ T5615] erofs: (device loop0): mounted with root inode @ nid 36. [ 248.263194][ T5623] loop1: detected capacity change from 0 to 512 [ 248.270234][ T5623] EXT4-fs: Ignoring removed orlov option [ 248.293002][ T5623] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 248.324771][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.356345][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.375180][ T5623] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 248.424849][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.446734][ T5623] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.371: casefold flag without casefold feature [ 248.474092][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.498567][ T5626] loop0: detected capacity change from 0 to 1024 [ 248.513603][ T5623] EXT4-fs (loop1): Remounting filesystem read-only [ 248.528109][ T5393] device veth0_vlan entered promiscuous mode [ 248.537227][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.566243][ T5623] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.371: couldn't read orphan inode 15 (err -117) [ 248.579841][ T5623] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 248.594930][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.684525][ T26] audit: type=1804 audit(1726792264.792:40): pid=5626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.358" name="/newroot/48/file2/cgroup.controllers" dev="loop0" ino=26 res=1 errno=0 [ 248.718729][ T5393] device veth1_vlan entered promiscuous mode [ 250.167962][ T5393] device veth0_macvtap entered promiscuous mode [ 250.228974][ T5393] device veth1_macvtap entered promiscuous mode [ 250.368428][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 250.384430][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 250.408724][ T5326] EXT4-fs (loop1): unmounting filesystem. [ 250.453886][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.515710][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.574732][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 250.616230][ T5648] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 250.619163][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.643586][ T5642] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 250.686998][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.706967][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.724434][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.734812][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.745879][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.773646][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.781144][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 250.804993][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 250.827068][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 250.862458][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.888054][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.924095][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.942001][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 250.953028][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.984279][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.005505][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.026073][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.036263][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.047233][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.061056][ T5393] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.123510][ T5393] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.132350][ T5393] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.141086][ T5393] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.150032][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 252.302282][ T7] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.330394][ T7] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.355851][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.384345][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.393588][ T7] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 252.421285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 252.442170][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 252.448853][ T7] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 252.490761][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.501031][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.509829][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.527177][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 252.557137][ T7] usb 2-1: config 0 descriptor?? [ 252.741102][ T5663] loop4: detected capacity change from 0 to 512 [ 252.805708][ T5663] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.334: invalid indirect mapped block 2 (level 1) [ 252.968160][ T5663] EXT4-fs (loop4): 1 truncate cleaned up [ 252.981088][ T5663] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 253.020078][ T5663] EXT4-fs (loop4): unmounting filesystem. [ 253.192151][ T7] usbhid 2-1:0.0: can't add hid device: -71 [ 253.198339][ T7] usbhid: probe of 2-1:0.0 failed with error -71 [ 253.241850][ T5650] loop0: detected capacity change from 0 to 40427 [ 253.258288][ T7] usb 2-1: USB disconnect, device number 3 [ 253.264680][ T5650] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 253.273369][ T5650] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 253.464143][ T5650] F2FS-fs (loop0): Found nat_bits in checkpoint [ 253.811962][ T5650] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 253.868960][ T5650] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 253.914920][ T5676] loop4: detected capacity change from 0 to 2048 [ 254.040341][ T5676] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 254.145144][ T26] audit: type=1804 audit(1726792270.272:41): pid=5676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.373" name="/newroot/1/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 254.254953][ T5685] loop3: detected capacity change from 0 to 2048 [ 254.263749][ T26] audit: type=1804 audit(1726792270.382:42): pid=5676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.373" name="/newroot/1/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 254.361126][ T4606] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 254.506952][ T5685] loop3: detected capacity change from 0 to 2048 [ 254.582724][ T5685] loop3: p3 < > p4 < > [ 254.586966][ T5685] loop3: partition table partially beyond EOD, truncated [ 254.617349][ T5685] loop3: p3 start 4284289 is beyond EOD, truncated [ 254.785676][ T5691] loop0: detected capacity change from 0 to 512 [ 254.869658][ T5691] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.376: inode #1: comm syz.0.376: iget: illegal inode # [ 254.912500][ T5691] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.376: error while reading EA inode 1 err=-117 [ 254.932204][ T5691] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.376: inode #1: comm syz.0.376: iget: illegal inode # [ 254.958859][ T5393] EXT4-fs (loop4): unmounting filesystem. [ 254.972334][ T5691] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.376: error while reading EA inode 1 err=-117 [ 254.998001][ T5691] EXT4-fs (loop0): 1 orphan inode deleted [ 255.030115][ T5691] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 255.639476][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.701365][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.568350][ T5710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.955608][ T5689] EXT4-fs error (device loop0): ext4_lookup:1860: inode #2: comm syz.0.376: deleted inode referenced: 15 [ 257.159787][ T4387] EXT4-fs (loop0): unmounting filesystem. [ 257.814915][ T5725] loop3: detected capacity change from 0 to 128 [ 259.163101][ T5729] loop1: detected capacity change from 0 to 1024 [ 259.210490][ T5729] EXT4-fs: Ignoring removed nobh option [ 259.232595][ T5729] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 259.353242][ T5729] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 259.462329][ T5429] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 259.698653][ T5740] loop0: detected capacity change from 0 to 1764 [ 260.371663][ T5729] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28 [ 260.399130][ T5729] EXT4-fs (loop1): This should not happen!! Data will be lost [ 260.399130][ T5729] [ 260.410800][ T5729] EXT4-fs (loop1): Total free blocks count 0 [ 260.422226][ T5729] EXT4-fs (loop1): Free/Dirty block details [ 260.428215][ T5729] EXT4-fs (loop1): free_blocks=0 [ 260.438792][ T5729] EXT4-fs (loop1): dirty_blocks=0 [ 260.444423][ T5729] EXT4-fs (loop1): Block reservation details [ 260.451246][ T5729] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 260.457131][ T3715] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 260.577088][ T5326] EXT4-fs (loop1): unmounting filesystem. [ 260.681852][ T5429] usb 4-1: Using ep0 maxpacket: 16 [ 260.691818][ T3715] usb 3-1: Using ep0 maxpacket: 16 [ 261.584850][ T5747] loop1: detected capacity change from 0 to 2048 [ 261.650029][ T5747] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 261.732128][ T3715] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 261.740342][ T5429] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.751337][ T26] audit: type=1804 audit(1726792277.862:43): pid=5747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.390" name="/newroot/7/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 261.773387][ T3715] usb 3-1: config 0 has no interface number 0 [ 261.780974][ T5429] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.791379][ T5429] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 261.804882][ T5429] usb 4-1: config 0 interface 0 has no altsetting 0 [ 261.814871][ T5429] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 261.842171][ T5429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.842994][ T26] audit: type=1804 audit(1726792277.972:44): pid=5747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.390" name="/newroot/7/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 262.436143][ T5429] usb 4-1: config 0 descriptor?? [ 262.522486][ T5429] usb 4-1: can't set config #0, error -71 [ 262.542034][ T3715] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 262.557152][ T3715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.559270][ T5429] usb 4-1: USB disconnect, device number 11 [ 262.590876][ T3715] usb 3-1: Product: syz [ 262.693250][ T3715] usb 3-1: config 0 descriptor?? [ 262.718608][ T3715] usb 3-1: can't set config #0, error -71 [ 262.960348][ T5761] loop3: detected capacity change from 0 to 512 [ 263.378343][ T3715] usb 3-1: USB disconnect, device number 4 [ 263.429619][ T5761] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 263.539001][ T5761] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.393: invalid indirect mapped block 4294967295 (level 1) [ 263.597140][ T5761] EXT4-fs (loop3): Remounting filesystem read-only [ 263.637362][ T5761] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.393: invalid indirect mapped block 4294967295 (level 1) [ 263.666467][ T5326] EXT4-fs (loop1): unmounting filesystem. [ 263.722939][ T5761] EXT4-fs (loop3): 2 truncates cleaned up [ 263.761842][ T5761] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 265.329910][ T3743] EXT4-fs (loop3): unmounting filesystem. [ 265.998388][ T5794] loop0: detected capacity change from 0 to 2048 [ 266.077413][ T3823] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 266.204984][ T5798] loop1: detected capacity change from 0 to 8 [ 266.248595][ T5800] loop0: detected capacity change from 0 to 2048 [ 266.457201][ T5798] SQUASHFS error: zlib decompression failed, data probably corrupt [ 266.470421][ T5798] SQUASHFS error: Failed to read block 0x9b: -5 [ 266.477084][ T5798] SQUASHFS error: Unable to read metadata cache entry [99] [ 266.597957][ T5805] loop3: detected capacity change from 0 to 1764 [ 267.535236][ T5798] SQUASHFS error: Unable to read inode 0x127 [ 267.567894][ T5800] loop0: p3 < > p4 < > [ 268.122035][ T5800] loop0: partition table partially beyond EOD, truncated [ 268.129570][ T5800] loop0: p3 start 4284289 is beyond EOD, truncated [ 268.340861][ T3092] loop0: p3 < > p4 < > [ 268.400578][ T3092] loop0: partition table partially beyond EOD, truncated [ 268.797861][ T3092] loop0: p3 start 4284289 is beyond EOD, truncated [ 269.290057][ T3823] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 269.339816][ T5820] loop3: detected capacity change from 0 to 2048 [ 269.369776][ T3823] udevd[3823]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 269.463439][ T5828] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 269.779610][ T5820] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 270.161792][ T26] audit: type=1804 audit(1726792286.272:45): pid=5820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.408" name="/newroot/82/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 270.203886][ T3823] udevd[3823]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 270.272728][ T26] audit: type=1804 audit(1726792286.402:46): pid=5820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.408" name="/newroot/82/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 270.847910][ T3743] EXT4-fs (loop3): unmounting filesystem. [ 271.887743][ T5833] netlink: 16 bytes leftover after parsing attributes in process `syz.0.412'. [ 275.045348][ T5882] loop3: detected capacity change from 0 to 256 [ 275.094129][ T5879] loop4: detected capacity change from 0 to 2048 [ 275.158301][ T5882] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 275.191862][ T3823] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 275.340146][ T26] audit: type=1326 audit(1726792291.462:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea817def9 code=0x7ffc0000 [ 275.364226][ T5879] loop4: detected capacity change from 0 to 2048 [ 275.381431][ T5889] loop1: detected capacity change from 0 to 512 [ 275.389228][ T26] audit: type=1326 audit(1726792291.492:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea817def9 code=0x7ffc0000 [ 275.441631][ T26] audit: type=1326 audit(1726792291.492:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ea817def9 code=0x7ffc0000 [ 275.471177][ T26] audit: type=1326 audit(1726792291.492:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea817def9 code=0x7ffc0000 [ 275.511053][ T5889] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 275.514356][ T5879] loop4: p3 < > p4 < > [ 275.532487][ T5882] loop3: detected capacity change from 256 to 255 [ 276.058029][ T5879] loop4: partition table partially beyond EOD, truncated [ 276.062224][ T5893] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 276.082174][ T5879] loop4: p3 start 4284289 is beyond EOD, truncated [ 276.089819][ T26] audit: type=1326 audit(1726792291.492:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea817def9 code=0x7ffc0000 [ 276.185494][ T26] audit: type=1326 audit(1726792291.492:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ea817def9 code=0x7ffc0000 [ 276.229674][ T3743] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 276.271366][ T3743] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 276.290676][ T26] audit: type=1326 audit(1726792291.492:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea817def9 code=0x7ffc0000 [ 276.393643][ T3743] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 276.441365][ T26] audit: type=1326 audit(1726792291.492:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea817def9 code=0x7ffc0000 [ 276.535628][ T26] audit: type=1326 audit(1726792291.492:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f5ea817def9 code=0x7ffc0000 [ 276.608549][ T26] audit: type=1326 audit(1726792291.492:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5887 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ea817def9 code=0x7ffc0000 [ 276.785339][ T3780] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 276.956986][ T3794] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.148349][ T3794] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.340344][ T3794] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.476226][ T3794] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.608885][ T5916] loop0: detected capacity change from 0 to 2048 [ 278.532031][ T5928] loop4: detected capacity change from 0 to 1764 [ 279.174996][ T5933] loop1: detected capacity change from 0 to 512 [ 279.248027][ T5933] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 279.314972][ T5933] EXT4-fs error (device loop1): __ext4_iget:5055: inode #11: block 393240: comm syz.1.441: invalid block [ 279.399119][ T5916] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 279.442212][ T5933] EXT4-fs (loop1): Remounting filesystem read-only [ 279.448880][ T5933] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.441: couldn't read orphan inode 11 (err -117) [ 279.508145][ T5933] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 279.524755][ T5934] loop2: detected capacity change from 255 to 0 [ 280.354681][ T3640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.365494][ T3640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.382223][ T3640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.400228][ T3640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.410034][ T3640] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.420210][ T5326] EXT4-fs (loop1): unmounting filesystem. [ 280.427090][ T3640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.543854][ T5949] loop4: detected capacity change from 0 to 2048 [ 280.605928][ T4606] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 281.270899][ T5956] loop4: detected capacity change from 0 to 2048 [ 281.275931][ T4387] EXT4-fs (loop0): unmounting filesystem. [ 281.362651][ T5956] loop4: p3 < > p4 < > [ 281.373489][ T5956] loop4: partition table partially beyond EOD, truncated [ 281.523680][ T5956] loop4: p3 start 4284289 is beyond EOD, truncated [ 282.504712][ T3655] Bluetooth: hci3: command tx timeout [ 282.835000][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 283.242603][ T3794] IPVS: stopping backup sync thread 5506 ... [ 283.254693][ T5993] loop1: detected capacity change from 0 to 256 [ 283.261910][ T5993] exfat: Deprecated parameter 'utf8' [ 283.267278][ T5993] exfat: Deprecated parameter 'namecase' [ 283.329334][ T5993] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 283.575505][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.583155][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.593342][ T5943] device bridge_slave_0 entered promiscuous mode [ 283.613452][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.620590][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.630238][ T5943] device bridge_slave_1 entered promiscuous mode [ 283.986723][ T6006] loop0: detected capacity change from 0 to 2048 [ 284.040898][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.085035][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.085898][ T6006] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 284.156600][ T3794] device hsr_slave_0 left promiscuous mode [ 284.175485][ T3794] device hsr_slave_1 left promiscuous mode [ 284.216495][ T3794] device bridge_slave_1 left promiscuous mode [ 284.249202][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 284.249219][ T26] audit: type=1804 audit(1726792300.372:98): pid=6006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.456" name="/newroot/67/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 284.258282][ T3794] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.317436][ T3794] device bridge_slave_0 left promiscuous mode [ 284.328992][ T3794] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.336513][ T26] audit: type=1804 audit(1726792300.432:99): pid=6006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.456" name="/newroot/67/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 284.433654][ T3794] device veth1_macvtap left promiscuous mode [ 284.449569][ T3794] device veth0_macvtap left promiscuous mode [ 284.474667][ T3794] device veth1_vlan left promiscuous mode [ 284.485924][ T3794] device veth0_vlan left promiscuous mode [ 284.590329][ T3640] Bluetooth: hci3: command tx timeout [ 284.811527][ T4387] EXT4-fs (loop0): unmounting filesystem. [ 284.859379][ T6022] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 285.009326][ T6026] loop0: detected capacity change from 0 to 512 [ 285.029062][ T6026] EXT4-fs: Ignoring removed orlov option [ 285.038664][ T6026] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 285.056089][ T6026] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.078034][ T6026] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.458: casefold flag without casefold feature [ 285.117395][ T6026] EXT4-fs (loop0): Remounting filesystem read-only [ 285.137575][ T6026] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.458: couldn't read orphan inode 15 (err -117) [ 285.157454][ T6026] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 286.210600][ T4387] EXT4-fs (loop0): unmounting filesystem. [ 286.297438][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.460'. [ 286.385452][ T6040] loop4: detected capacity change from 0 to 1024 [ 287.404872][ T3655] Bluetooth: hci3: command tx timeout [ 287.472962][ T3794] team0 (unregistering): Port device team_slave_1 removed [ 287.558933][ T3794] team0 (unregistering): Port device team_slave_0 removed [ 287.632831][ T3794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.769608][ T3794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.055923][ T6065] rdma_op ffff888057ce11f0 conn xmit_rdma 0000000000000000 [ 288.876902][ T6067] x_tables: duplicate underflow at hook 1 [ 288.965990][ T6069] xt_ipcomp: unknown flags B [ 289.288446][ T6075] loop4: detected capacity change from 0 to 512 [ 289.302527][ T6075] EXT4-fs: Ignoring removed orlov option [ 289.356419][ T6075] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 289.378692][ T6075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 289.423301][ T6075] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.473: casefold flag without casefold feature [ 289.461923][ T3655] Bluetooth: hci3: command tx timeout [ 289.514645][ T6075] EXT4-fs (loop4): Remounting filesystem read-only [ 289.564613][ T6075] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.473: couldn't read orphan inode 15 (err -117) [ 289.646404][ T6075] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 289.958397][ T3794] bond0 (unregistering): Released all slaves [ 290.500630][ T5943] team0: Port device team_slave_0 added [ 290.524410][ T5943] team0: Port device team_slave_1 added [ 290.608440][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.635180][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.673887][ T5393] EXT4-fs (loop4): unmounting filesystem. [ 290.689983][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.732521][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.739518][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.853006][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.159031][ T5943] device hsr_slave_0 entered promiscuous mode [ 292.186093][ T5943] device hsr_slave_1 entered promiscuous mode [ 292.338610][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.399358][ T5943] Cannot create hsr debugfs directory [ 292.419993][ T6097] loop0: detected capacity change from 0 to 256 [ 292.438130][ T6097] exfat: Deprecated parameter 'namecase' [ 293.313263][ T6097] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 293.592301][ T6113] loop1: detected capacity change from 0 to 4096 [ 293.721177][ T6113] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 296.604656][ T5326] EXT4-fs (loop1): unmounting filesystem. [ 297.149749][ T6144] loop1: detected capacity change from 0 to 16 [ 297.175260][ T6144] erofs: (device loop1): mounted with root inode @ nid 36. [ 297.535658][ T6147] Zero length message leads to an empty skb [ 297.642234][ T6146] dccp_close: ABORT with 1 bytes unread [ 298.178598][ T6152] loop1: detected capacity change from 0 to 1024 [ 299.655187][ T6167] loop4: detected capacity change from 0 to 16 [ 299.692080][ T6167] erofs: (device loop4): mounted with root inode @ nid 36. [ 299.729260][ T6167] syz.4.489: attempt to access beyond end of device [ 299.729260][ T6167] loop4: rw=0, sector=40, nr_sectors = 8 limit=16 [ 303.061362][ T6167] syz.4.489 (6167): drop_caches: 2 [ 303.326515][ T5943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 303.407823][ T5943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 303.447379][ T6171] loop1: detected capacity change from 0 to 256 [ 303.496593][ T5943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 303.515053][ T6173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.492'. [ 303.598779][ T5943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 304.743486][ T6184] loop4: detected capacity change from 0 to 16 [ 304.783424][ T6184] erofs: (device loop4): mounted with root inode @ nid 36. [ 305.296673][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.806398][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.832392][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.898887][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.985692][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.164091][ T26] audit: type=1326 audit(1726792322.292:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992677def9 code=0x7ffc0000 [ 306.345147][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.356776][ T3794] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.364004][ T3794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.375618][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.386231][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.397248][ T3794] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.404522][ T3794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.416582][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.494959][ T5943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.505580][ T5943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.637810][ T26] audit: type=1326 audit(1726792322.452:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f992677def9 code=0x7ffc0000 [ 306.661060][ T26] audit: type=1326 audit(1726792322.462:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992677def9 code=0x7ffc0000 [ 306.910123][ T26] audit: type=1326 audit(1726792322.822:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992677def9 code=0x7ffc0000 [ 307.116551][ T26] audit: type=1326 audit(1726792322.832:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f992677def9 code=0x7ffc0000 [ 307.178222][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 307.226124][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 307.407537][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 307.431942][ T26] audit: type=1326 audit(1726792322.832:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992677def9 code=0x7ffc0000 [ 307.455171][ T26] audit: type=1326 audit(1726792322.852:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992677def9 code=0x7ffc0000 [ 307.472942][ T6219] loop1: detected capacity change from 0 to 128 [ 307.479193][ T26] audit: type=1326 audit(1726792322.852:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f992677def9 code=0x7ffc0000 [ 307.535333][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 307.550853][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 307.564329][ T6220] loop0: detected capacity change from 0 to 512 [ 307.587889][ T26] audit: type=1326 audit(1726792322.862:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992677def9 code=0x7ffc0000 [ 307.611239][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.658061][ T6220] EXT4-fs: Ignoring removed orlov option [ 307.673356][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 307.690626][ T6220] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 307.712375][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.736883][ T26] audit: type=1326 audit(1726792322.872:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f992677def9 code=0x7ffc0000 [ 307.772680][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 307.781184][ T6220] EXT4-fs (loop0): Test dummy encryption mode enabled [ 307.803070][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.824576][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.837478][ T6220] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0002] [ 307.847129][ T6220] System zones: 1-12 [ 307.853229][ T3794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 307.935362][ T6220] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.504: casefold flag without casefold feature [ 307.948420][ T6220] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.504: couldn't read orphan inode 15 (err -117) [ 307.965063][ T6220] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 308.088144][ T6230] nfs: Unknown parameter 'smackfsfloor' [ 308.795408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 308.816620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 308.848989][ T4387] EXT4-fs (loop0): unmounting filesystem. [ 308.880525][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.996799][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 309.035078][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 309.118859][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 309.127968][ T6249] loop0: detected capacity change from 0 to 256 [ 309.156568][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 309.201795][ T6249] FAT-fs (loop0): bogus logical sector size 2145 [ 309.210445][ T5943] device veth0_vlan entered promiscuous mode [ 309.245528][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 309.267416][ T6249] FAT-fs (loop0): Can't find a valid FAT filesystem [ 309.274588][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 309.318958][ T5943] device veth1_vlan entered promiscuous mode [ 309.350451][ T3823] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 309.453649][ T5943] device veth0_macvtap entered promiscuous mode [ 309.495566][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 309.545289][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 309.597514][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 309.658488][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 309.689716][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 309.727608][ T5943] device veth1_macvtap entered promiscuous mode [ 309.805596][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 309.830484][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.928251][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.968904][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.006798][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.072835][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.112993][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.163529][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.211847][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.244867][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.284208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 310.324817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.360848][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.401792][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.451632][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.497439][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.509996][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.520'. [ 310.530700][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.681879][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.721879][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.806269][ T6289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'. [ 310.978542][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.077665][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.730371][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 311.768244][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.825753][ T5943] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.865106][ T5943] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.885389][ T5943] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.911755][ T5943] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.124885][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.152147][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.211579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 312.233467][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.264120][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.303166][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 312.369784][ T6284] loop0: detected capacity change from 0 to 32768 [ 312.551178][ T6284] XFS (loop0): Mounting V5 Filesystem [ 312.704653][ T6284] XFS (loop0): Ending clean mount [ 312.970719][ T6284] syz.0.520 (6284) used greatest stack depth: 18224 bytes left [ 313.033446][ T4387] XFS (loop0): Unmounting Filesystem [ 313.340442][ T6293] loop1: detected capacity change from 0 to 32768 [ 313.474644][ T6293] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 313.520354][ T6293] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 313.643923][ T6293] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 2ms [ 313.681147][ T1918] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 313.700284][ T1918] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 313.890679][ T6338] loop4: detected capacity change from 0 to 16 [ 313.907945][ T6338] erofs: (device loop4): mounted with root inode @ nid 36. [ 314.758177][ T1918] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1057ms [ 314.810187][ T1918] gfs2: fsid=syz:syz.0: jid=0: Done [ 314.846160][ T6293] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 315.950022][ T6354] loop3: detected capacity change from 0 to 1024 [ 316.011792][ T6354] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 316.335407][ T6354] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 316.608122][ T6374] device lo entered promiscuous mode [ 317.226523][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.236556][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.540453][ T6374] device lo left promiscuous mode [ 319.551285][ T6401] loop0: detected capacity change from 0 to 2048 [ 319.642229][ T6401] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 319.827048][ T6408] loop1: detected capacity change from 0 to 256 [ 319.856441][ T6408] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 320.171511][ T4387] EXT4-fs (loop0): unmounting filesystem. [ 320.652524][ T5943] EXT4-fs (loop3): unmounting filesystem. [ 321.034322][ T6410] loop1: detected capacity change from 0 to 32768 [ 321.061355][ T6410] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.542 (6410) [ 321.139447][ T6431] loop0: detected capacity change from 0 to 16 [ 321.152076][ T6431] erofs: (device loop0): mounted with root inode @ nid 36. [ 322.081891][ T6410] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 322.158788][ T6410] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 322.193331][ T6410] BTRFS info (device loop1): use zlib compression, level 3 [ 322.244028][ T6410] BTRFS info (device loop1): using free space tree [ 322.545345][ T6410] BTRFS info (device loop1): enabling ssd optimizations [ 324.214023][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 324.214040][ T26] audit: type=1800 audit(1726792340.342:132): pid=6410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.542" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 324.403437][ T6470] device syzkaller0 entered promiscuous mode [ 324.413128][ T26] audit: type=1800 audit(1726792340.442:133): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.542" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 324.657399][ T6478] device syzkaller0 entered promiscuous mode [ 324.784469][ T5326] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 325.358209][ T6488] loop4: detected capacity change from 0 to 4096 [ 325.401775][ T6488] ntfs: (device loop4): map_mft_record_page(): Mft record 0x1 is corrupt. Run chkdsk. [ 325.461768][ T6488] ntfs: (device loop4): map_mft_record(): Failed with error code 5. [ 325.521797][ T6488] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 325.591989][ T6488] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 325.641975][ T6488] ntfs: (device loop4): ntfs_read_locked_inode(): Inode is not in use! [ 325.668741][ T6476] loop3: detected capacity change from 0 to 32768 [ 325.681836][ T6488] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 325.728387][ T6476] XFS: attr2 mount option is deprecated. [ 325.737417][ T6476] XFS: ikeep mount option is deprecated. [ 325.747006][ T6488] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 325.761848][ T6476] XFS: noikeep mount option is deprecated. [ 325.807556][ T6488] ntfs: (device loop4): load_and_init_attrdef(): Failed to initialize attribute definition table. [ 325.922475][ T6476] XFS (loop3): Mounting V5 Filesystem [ 326.103293][ T6476] XFS (loop3): Ending clean mount [ 326.160971][ T6476] XFS (loop3): Quotacheck needed: Please wait. [ 326.413588][ T6510] netlink: 36 bytes leftover after parsing attributes in process `syz.2.562'. [ 326.746015][ T6476] XFS (loop3): Quotacheck: Done. [ 327.039178][ T5943] XFS (loop3): Unmounting Filesystem [ 332.193353][ T6557] loop4: detected capacity change from 0 to 256 [ 332.212243][ T6557] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 332.562067][ T6557] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 333.051572][ T6557] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 333.151830][ T6557] UDF-fs: Scanning with blocksize 512 failed [ 333.212996][ T6566] loop0: detected capacity change from 0 to 1024 [ 333.222500][ T6557] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 333.247012][ T6566] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 333.358519][ T6557] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.369232][ T6566] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 333.594728][ T6576] loop3: detected capacity change from 0 to 16 [ 333.611356][ T6576] erofs: (device loop3): mounted with root inode @ nid 36. [ 334.041857][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 334.041899][ T26] audit: type=1800 audit(1726792350.092:134): pid=6578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.578" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 334.397126][ T6566] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 16777241 free clusters [ 334.423030][ T6566] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16384 with max blocks 1 with error 28 [ 334.452104][ T6566] EXT4-fs (loop0): This should not happen!! Data will be lost [ 334.452104][ T6566] [ 334.491864][ T6566] EXT4-fs (loop0): Total free blocks count 0 [ 334.505443][ T26] audit: type=1800 audit(1726792350.152:135): pid=6577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.578" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 334.531822][ T6566] EXT4-fs (loop0): Free/Dirty block details [ 334.544677][ T6566] EXT4-fs (loop0): free_blocks=268435456 [ 334.589263][ T6566] EXT4-fs (loop0): dirty_blocks=48 [ 334.630848][ T26] audit: type=1804 audit(1726792350.282:136): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.578" name="/newroot/98/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 334.655911][ T6566] EXT4-fs (loop0): Block reservation details [ 334.663054][ T6566] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 334.753692][ T3778] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 336.431487][ T6580] loop1: detected capacity change from 0 to 32768 [ 336.523776][ T6580] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.580 (6580) [ 336.602378][ T6580] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 336.649560][ T6580] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 336.729415][ T6580] BTRFS info (device loop1): using free space tree [ 336.981920][ T3747] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 337.044379][ T6580] BTRFS info (device loop1): enabling ssd optimizations [ 337.196267][ T5326] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 337.362244][ T3747] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 337.572639][ T3747] usb 1-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 337.592605][ T3747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.615239][ T3747] usb 1-1: Product: syz [ 337.669612][ T3747] usb 1-1: Manufacturer: syz [ 337.687190][ T3747] usb 1-1: SerialNumber: syz [ 337.728398][ T3747] usb 1-1: config 0 descriptor?? [ 337.790270][ T26] audit: type=1326 audit(1726792353.912:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.2.594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3283f7def9 code=0x0 [ 337.839702][ T3747] rndis_wlan 1-1:0.0: skipping garbage [ 337.856451][ T3747] usb 1-1: bad CDC descriptors [ 337.922140][ T3747] rndis_host 1-1:0.0: skipping garbage [ 337.943568][ T3747] usb 1-1: bad CDC descriptors [ 337.961388][ T3747] cdc_acm 1-1:0.0: skipping garbage [ 338.046527][ T7] usb 1-1: USB disconnect, device number 7 [ 340.363665][ T6637] loop1: detected capacity change from 0 to 32768 [ 341.055255][ T6642] loop3: detected capacity change from 0 to 40427 [ 341.096640][ T6642] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 341.134330][ T6642] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 341.249212][ T6642] F2FS-fs (loop3): Found nat_bits in checkpoint [ 341.327482][ T6642] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 341.376524][ T6642] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 341.476592][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.600'. [ 341.526165][ T6665] device bridge_slave_1 left promiscuous mode [ 341.537574][ T6663] loop4: detected capacity change from 0 to 1024 [ 341.582818][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.636681][ T6665] device bridge_slave_0 left promiscuous mode [ 341.654261][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.809856][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'. [ 343.178193][ T6680] batman_adv: batadv0: Adding interface: macvtap1 [ 343.206798][ T6680] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.243652][ T6680] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 343.269409][ T6688] loop1: detected capacity change from 0 to 1024 [ 343.307915][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.603'. [ 343.323628][ T5943] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 343.323719][ T5943] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 343.335771][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.339017][ T5943] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 343.351391][ T5943] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 343.366672][ T5943] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 343.375146][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.395699][ T5943] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 343.395725][ T5943] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 343.417617][ T6688] hfsplus: request for non-existent node 3 in B*Tree [ 343.443198][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.467595][ T6688] hfsplus: request for non-existent node 3 in B*Tree [ 343.481329][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.541154][ T6685] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 343.559839][ T6685] batman_adv: batadv0: Removing interface: ip6gretap1 [ 343.607410][ T6685] batman_adv: batadv0: Removing interface: macvtap1 [ 344.160070][ T6690] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 344.862283][ T3640] Bluetooth: hci2: command 0x0406 tx timeout [ 346.240752][ T26] audit: type=1326 audit(1726792361.842:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.3.612" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d00b7def9 code=0x0 [ 347.956994][ T6699] loop4: detected capacity change from 0 to 40427 [ 348.027513][ T6699] F2FS-fs (loop4): Invalid log blocks per segment (4278190089) [ 348.049668][ T6699] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 348.153651][ T6699] F2FS-fs (loop4): invalid crc value [ 348.172080][ T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 348.292576][ T6699] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 348.583100][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 348.703619][ T14] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 348.841756][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.956706][ T14] usb 3-1: config 0 descriptor?? [ 349.051311][ T6738] loop3: detected capacity change from 0 to 16 [ 349.064283][ T6738] erofs: (device loop3): mounted with root inode @ nid 36. [ 349.242498][ T6725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.319021][ T14] gspca_main: sq930x-2.14.0 probing 041e:403c [ 349.484834][ T6725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.001909][ T14] gspca_sq930x: reg_r 001f failed -110 [ 350.007484][ T14] sq930x: probe of 3-1:0.0 failed with error -110 [ 350.049610][ T14] usb 3-1: USB disconnect, device number 5 [ 350.186931][ T6745] netlink: 'syz.3.623': attribute type 10 has an invalid length. [ 350.577741][ T6748] ip6t_rpfilter: unknown options [ 351.375202][ T6754] device pim6reg1 entered promiscuous mode [ 352.283609][ T6765] loop0: detected capacity change from 0 to 512 [ 352.342840][ T6766] netlink: 'syz.2.629': attribute type 2 has an invalid length. [ 353.092068][ T6765] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 353.294272][ T6765] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.630: invalid indirect mapped block 4294967295 (level 1) [ 353.384420][ T6765] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.630: invalid indirect mapped block 4294967295 (level 1) [ 353.406327][ T6765] EXT4-fs (loop0): 2 truncates cleaned up [ 353.412657][ T6765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 353.710047][ T4387] EXT4-fs (loop0): unmounting filesystem. [ 354.991803][ T3652] Bluetooth: hci4: command 0x0406 tx timeout [ 355.234033][ T6798] netlink: 248 bytes leftover after parsing attributes in process `syz.3.638'. [ 355.245440][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 356.327481][ T6810] loop3: detected capacity change from 0 to 8192 [ 357.806507][ T6834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.649'. [ 359.750675][ T6843] loop4: detected capacity change from 0 to 256 [ 359.769496][ T3655] Bluetooth: hci2: command 0x0406 tx timeout [ 360.881920][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 361.851764][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 362.132043][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.143153][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 362.157759][ T14] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 362.193922][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.221162][ T6888] xt_socket: unknown flags 0x50 [ 362.384163][ T14] usb 1-1: config 0 descriptor?? [ 363.031496][ T14] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0007/input/input9 [ 363.927366][ T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 363.938897][ T14] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 363.994835][ T14] usb 1-1: USB disconnect, device number 8 [ 364.035315][ T3823] udevd[3823]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 364.221880][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 364.502112][ T7] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 364.516365][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.526659][ T7] usb 4-1: Product: syz [ 364.539109][ T7] usb 4-1: Manufacturer: syz [ 364.545574][ T7] usb 4-1: SerialNumber: syz [ 364.563157][ T7] usb 4-1: config 0 descriptor?? [ 364.593121][ T6911] loop4: detected capacity change from 0 to 2048 [ 364.652095][ T6911] Alternate GPT is invalid, using primary GPT. [ 364.663900][ T6911] loop4: p2 p3 p7 [ 364.822072][ T7] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 364.869961][ T6909] block nbd1: NBD_DISCONNECT [ 364.886684][ T6913] block nbd1: Disconnected due to user request. [ 364.926868][ T3632] udevd[3632]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 364.931951][ T4368] udevd[4368]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 364.973578][ T4606] udevd[4606]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 364.996892][ T6913] block nbd1: shutting down sockets [ 368.248678][ T6950] loop3: detected capacity change from 0 to 1024 [ 368.257672][ T7] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 368.303915][ T7] usb 4-1: USB disconnect, device number 12 [ 368.311014][ T6950] hfsplus: session requires an argument [ 368.370753][ T6950] hfsplus: unable to parse mount options [ 368.411946][ T945] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 368.441127][ T26] audit: type=1326 audit(1726792384.562:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.3.683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d00b7def9 code=0x0 [ 368.532594][ T6948] loop4: detected capacity change from 0 to 4096 [ 368.543288][ T26] audit: type=1326 audit(1726792384.672:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.3.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d00b7def9 code=0x7ffc0000 [ 368.597264][ T6948] ntfs: (device loop4): parse_options(): Invalid umask option argument: 000000000000000le_sparse=no [ 368.614167][ T26] audit: type=1326 audit(1726792384.692:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.3.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2d00b7def9 code=0x7ffc0000 [ 368.711525][ T26] audit: type=1326 audit(1726792384.692:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.3.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d00b7def9 code=0x7ffc0000 [ 368.768778][ T4606] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 368.804428][ T26] audit: type=1326 audit(1726792384.702:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.3.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2d00b7def9 code=0x7ffc0000 [ 368.949912][ T945] usb 3-1: Using ep0 maxpacket: 16 [ 369.243260][ T945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.428000][ T945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 369.496461][ T26] audit: type=1326 audit(1726792384.702:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.3.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d00b7def9 code=0x7ffc0000 [ 369.533095][ T945] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 369.582538][ T26] audit: type=1326 audit(1726792384.702:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.3.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f2d00b7def9 code=0x7ffc0000 [ 369.607806][ T945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.636369][ T26] audit: type=1326 audit(1726792384.702:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.3.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d00b7def9 code=0x7ffc0000 [ 369.816218][ T26] audit: type=1326 audit(1726792384.702:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.3.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f2d00b7def9 code=0x7ffc0000 [ 369.880157][ T945] usb 3-1: config 0 descriptor?? [ 370.669517][ T945] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0008/input/input10 [ 370.823215][ T6966] loop3: detected capacity change from 0 to 4096 [ 370.830832][ T6966] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 370.863809][ T945] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 370.924560][ T945] usb 3-1: USB disconnect, device number 6 [ 370.936212][ T6969] sd 0:0:1:0: device reset [ 370.947858][ T6966] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 371.120203][ T6979] loop0: detected capacity change from 0 to 256 [ 371.183026][ T6978] loop1: detected capacity change from 0 to 1024 [ 371.214899][ T6978] EXT4-fs: Ignoring removed orlov option [ 371.225828][ T6979] FAT-fs (loop0): Directory bread(block 64) failed [ 371.227474][ T6978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 371.240164][ T3778] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22. [ 371.254447][ T6979] FAT-fs (loop0): Directory bread(block 65) failed [ 371.263960][ T6979] FAT-fs (loop0): Directory bread(block 66) failed [ 371.271757][ T5943] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 371.279051][ T6979] FAT-fs (loop0): Directory bread(block 67) failed [ 371.285845][ T6979] FAT-fs (loop0): Directory bread(block 68) failed [ 371.292676][ T6979] FAT-fs (loop0): Directory bread(block 69) failed [ 371.299850][ T6979] FAT-fs (loop0): Directory bread(block 70) failed [ 371.310293][ T6979] FAT-fs (loop0): Directory bread(block 71) failed [ 371.317038][ T6979] FAT-fs (loop0): Directory bread(block 72) failed [ 371.324579][ T6979] FAT-fs (loop0): Directory bread(block 73) failed [ 371.333335][ T6978] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 372.930989][ T5326] EXT4-fs (loop1): unmounting filesystem. [ 373.181131][ T7006] loop3: detected capacity change from 0 to 1024 [ 373.278397][ T7006] hfsplus: extend alloc file! (8192,65536,366) [ 375.675381][ T7029] loop1: detected capacity change from 0 to 47 [ 375.798393][ T7025] sd 0:0:1:0: device reset [ 375.977805][ T7041] loop1: detected capacity change from 0 to 1024 [ 376.060456][ T7041] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 376.778924][ T7050] loop3: detected capacity change from 0 to 512 [ 376.837831][ T7050] EXT4-fs (loop3): Test dummy encryption mode enabled [ 376.911529][ T7050] EXT4-fs error (device loop3): __ext4_iget:5055: inode #11: block 1: comm syz.3.708: invalid block [ 376.952147][ T7041] loop1: detected capacity change from 1024 to 64 [ 377.028486][ T7050] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.708: couldn't read orphan inode 11 (err -117) [ 377.093982][ T7050] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 377.268583][ T7060] x_tables: unsorted entry at hook 2 [ 377.343589][ T5326] EXT4-fs warning (device loop1): ext4_empty_dir:3137: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 377.381375][ T7060] loop0: detected capacity change from 0 to 512 [ 378.554721][ T7060] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 378.571806][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.578226][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.595045][ T5326] EXT4-fs warning (device loop1): ext4_empty_dir:3137: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 378.609678][ T5943] EXT4-fs (loop3): unmounting filesystem. [ 378.671978][ T7060] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 378.752766][ T5326] EXT4-fs warning (device loop1): ext4_empty_dir:3137: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 378.756743][ T7066] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 378.798513][ T7060] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.711: bg 0: block 18: invalid block bitmap [ 378.825027][ T7066] tipc: Enabled bearer , priority 10 [ 378.836681][ T5326] EXT4-fs warning (device loop1): ext4_empty_dir:3137: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 378.881847][ T7060] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 378.892352][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 378.912962][ T7060] EXT4-fs (loop0): 1 truncate cleaned up [ 378.918681][ T7060] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 378.938832][ T5326] EXT4-fs warning (device loop1): ext4_empty_dir:3137: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 378.962646][ T7060] ext2 filesystem being mounted at /124/file0 supports timestamps until 2038 (0x7fffffff) [ 378.987759][ T7060] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #2: block 3: comm syz.0.711: lblock 0 mapped to illegal pblock 3 (length 1) [ 379.012424][ T5326] EXT4-fs warning (device loop1): ext4_empty_dir:3137: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 379.031433][ T5326] EXT4-fs warning (device loop1): ext4_empty_dir:3137: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 379.052157][ T5326] EXT4-fs warning (device loop1): ext4_empty_dir:3137: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 379.161836][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 379.167760][ T5326] EXT4-fs warning (device loop1): ext4_empty_dir:3137: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 379.353931][ T7071] loop4: detected capacity change from 0 to 1024 [ 379.470575][ T5326] EXT4-fs warning (device loop1): ext4_empty_dir:3137: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 379.772703][ T7071] EXT4-fs: Ignoring removed orlov option [ 379.778603][ T7071] EXT4-fs: Ignoring removed bh option [ 379.862184][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 379.969580][ T7071] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 380.027518][ T9] kworker/u4:0: attempt to access beyond end of device [ 380.027518][ T9] loop1: rw=1, sector=224, nr_sectors = 8 limit=64 [ 380.065608][ T4387] EXT4-fs (loop0): unmounting filesystem. [ 380.112220][ T9] Buffer I/O error on device loop1, logical block 112 [ 380.119658][ T9] Buffer I/O error on device loop1, logical block 113 [ 380.126543][ T9] Buffer I/O error on device loop1, logical block 114 [ 380.133546][ T9] Buffer I/O error on device loop1, logical block 115 [ 380.140359][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.213639][ T9] kworker/u4:0: attempt to access beyond end of device [ 380.213639][ T9] loop1: rw=1, sector=232, nr_sectors = 4 limit=64 [ 380.247325][ T9] Buffer I/O error on device loop1, logical block 116 [ 380.254142][ T9] Buffer I/O error on device loop1, logical block 117 [ 380.352162][ T9] kworker/u4:0: attempt to access beyond end of device [ 380.352162][ T9] loop1: rw=1, sector=240, nr_sectors = 16 limit=64 [ 380.406510][ T9] Buffer I/O error on device loop1, logical block 120 [ 380.413456][ T9] Buffer I/O error on device loop1, logical block 121 [ 380.420241][ T9] Buffer I/O error on device loop1, logical block 122 [ 380.427023][ T9] Buffer I/O error on device loop1, logical block 123 [ 380.496075][ T9] kworker/u4:0: attempt to access beyond end of device [ 380.496075][ T9] loop1: rw=1, sector=272, nr_sectors = 752 limit=64 [ 380.525662][ T6107] EXT4-fs (loop1): unmounting filesystem. [ 380.902113][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 381.065511][ T7042] kmmpd-loop1: attempt to access beyond end of device [ 381.065511][ T7042] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 381.206081][ T7042] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 381.245751][ T7042] EXT4-fs error (device loop1): kmmpd:186: comm kmmpd-loop1: Error writing to MMP block [ 381.349366][ T7042] kmmpd-loop1: attempt to access beyond end of device [ 381.349366][ T7042] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 381.411196][ T7042] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 381.419890][ T6107] ------------[ cut here ]------------ [ 381.425867][ T6107] ODEBUG: free active (active state 0) object type: timer_list hint: print_daily_error_info+0x0/0x490 [ 381.437499][ T6107] WARNING: CPU: 0 PID: 6107 at lib/debugobjects.c:517 debug_check_no_obj_freed+0x38e/0x4e0 [ 381.447641][ T6107] Modules linked in: [ 381.451588][ T6107] CPU: 0 PID: 6107 Comm: syz.1.478 Not tainted 6.1.111-syzkaller #0 [ 381.459706][ T6107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 381.470544][ T6107] RIP: 0010:debug_check_no_obj_freed+0x38e/0x4e0 [ 381.477015][ T6107] Code: ef e8 56 dc a3 fd 4c 8b 45 00 48 c7 c7 20 77 5d 8b 48 c7 c6 e0 73 5d 8b 48 c7 c2 80 78 5d 8b 8b 0c 24 49 89 d9 e8 b2 4c 14 fd <0f> 0b ff 05 f2 c4 5b 0a 48 83 c5 30 48 89 e8 48 c1 e8 03 48 b9 00 [ 381.496801][ T6107] RSP: 0018:ffffc9000451f6a0 EFLAGS: 00010246 [ 381.502994][ T6107] RAX: 7c6e36bed5dda700 RBX: ffffffff824ae2f0 RCX: ffff888025598000 [ 381.508080][ T7096] loop0: detected capacity change from 0 to 1024 [ 381.510984][ T6107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.511003][ T6107] RBP: ffffffff8b0dda60 R08: ffffffff8152a48e R09: fffff520008a3e35 [ 381.511022][ T6107] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888027f1c698 [ 381.511040][ T6107] R13: ffffffff97640398 R14: ffff888027f1d000 R15: ffff88805841af38 [ 381.549606][ T6107] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 381.558646][ T6107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.565353][ T6107] CR2: 0000001b2dc15ff8 CR3: 0000000077f7e000 CR4: 00000000003526f0 [ 381.573416][ T6107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 381.581413][ T6107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 381.589461][ T6107] Call Trace: [ 381.592810][ T6107] [ 381.595764][ T6107] ? __warn+0x15a/0x520 [ 381.600015][ T6107] ? debug_check_no_obj_freed+0x38e/0x4e0 [ 381.605864][ T6107] ? report_bug+0x2af/0x500 [ 381.610403][ T6107] ? debug_check_no_obj_freed+0x38e/0x4e0 [ 381.616228][ T6107] ? handle_bug+0x3d/0x70 [ 381.620587][ T6107] ? exc_invalid_op+0x16/0x40 [ 381.625347][ T6107] ? asm_exc_invalid_op+0x16/0x20 [ 381.630435][ T6107] ? ext4_group_desc_init+0x1de0/0x1de0 [ 381.636151][ T6107] ? __warn_printk+0x28e/0x350 [ 381.640974][ T6107] ? debug_check_no_obj_freed+0x38e/0x4e0 [ 381.646801][ T6107] __kmem_cache_free+0x205/0x3c0 [ 381.651842][ T6107] ? generic_shutdown_super+0x130/0x340 [ 381.657434][ T6107] ? ext4_drop_inode+0x2e0/0x2e0 [ 381.662480][ T6107] generic_shutdown_super+0x130/0x340 [ 381.668117][ T6107] kill_block_super+0x7a/0xe0 [ 381.672999][ T6107] deactivate_locked_super+0xa0/0x110 [ 381.678427][ T6107] cleanup_mnt+0x490/0x520 [ 381.682955][ T6107] ? lockdep_hardirqs_on+0x94/0x130 [ 381.688184][ T6107] task_work_run+0x246/0x300 [ 381.692877][ T6107] ? kasan_quarantine_put+0xd4/0x220 [ 381.698196][ T6107] ? task_work_cancel+0x2e0/0x2e0 [ 381.703309][ T6107] ? kmem_cache_free+0x292/0x510 [ 381.708272][ T6107] ? do_exit+0xa6e/0x26a0 [ 381.712686][ T6107] do_exit+0xa73/0x26a0 [ 381.716878][ T6107] ? put_task_struct+0x80/0x80 [ 381.721747][ T6107] ? get_signal+0x161c/0x17d0 [ 381.726473][ T6107] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 381.732570][ T6107] ? print_irqtrace_events+0x210/0x210 [ 381.738083][ T6107] do_group_exit+0x202/0x2b0 [ 381.742771][ T6107] ? _raw_spin_unlock_irq+0x1f/0x40 [ 381.748012][ T6107] ? lockdep_hardirqs_on+0x94/0x130 [ 381.753293][ T6107] get_signal+0x16f7/0x17d0 [ 381.757836][ T6107] ? ptrace_notify+0x370/0x370 [ 381.762948][ T6107] ? finish_task_switch+0x1ca/0x810 [ 381.768180][ T6107] arch_do_signal_or_restart+0xb0/0x1a10 [ 381.773901][ T6107] ? __schedule+0x1447/0x4570 [ 381.778646][ T6107] ? get_sigframe_size+0x10/0x10 [ 381.783670][ T6107] ? release_firmware_map_entry+0x186/0x186 [ 381.789705][ T6107] ? lockdep_hardirqs_on+0x94/0x130 [ 381.795011][ T6107] exit_to_user_mode_loop+0x6a/0x100 [ 381.800321][ T6107] exit_to_user_mode_prepare+0xb1/0x140 [ 381.805969][ T6107] syscall_exit_to_user_mode+0x60/0x270 [ 381.811561][ T6107] do_syscall_64+0x47/0xb0 [ 381.816105][ T6107] ? clear_bhb_loop+0x45/0xa0 [ 381.820836][ T6107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 381.826822][ T6107] RIP: 0033:0x7f5ea81affe5 [ 381.831270][ T6107] Code: Unable to access opcode bytes at 0x7f5ea81affbb. [ 381.838349][ T6107] RSP: 002b:00007f5ea8fc3f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 381.846848][ T6107] RAX: fffffffffffffdfc RBX: 00007f5ea8336208 RCX: 00007f5ea81affe5 [ 381.854899][ T6107] RDX: 00007f5ea8fc3fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.862955][ T6107] RBP: 00007f5ea81f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 381.870959][ T6107] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 381.879011][ T6107] R13: 0000000000000001 R14: 00007f5ea8336208 R15: 00007fff08395af8 [ 381.887063][ T6107] [ 381.890092][ T6107] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 381.897407][ T6107] CPU: 0 PID: 6107 Comm: syz.1.478 Not tainted 6.1.111-syzkaller #0 [ 381.905474][ T6107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 381.915703][ T6107] Call Trace: [ 381.918989][ T6107] [ 381.921919][ T6107] dump_stack_lvl+0x1e3/0x2cb [ 381.926619][ T6107] ? nf_tcp_handle_invalid+0x642/0x642 [ 381.932087][ T6107] ? panic+0x764/0x764 [ 381.936158][ T6107] ? 0xffffffffa0003b40 [ 381.940309][ T6107] ? vscnprintf+0x59/0x80 [ 381.942197][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 381.951500][ T6107] panic+0x318/0x764 [ 381.955408][ T6107] ? __warn+0x169/0x520 [ 381.959569][ T6107] ? memcpy_page_flushcache+0xfc/0xfc [ 381.964962][ T6107] __warn+0x348/0x520 [ 381.968945][ T6107] ? debug_check_no_obj_freed+0x38e/0x4e0 [ 381.974705][ T6107] report_bug+0x2af/0x500 [ 381.979055][ T6107] ? debug_check_no_obj_freed+0x38e/0x4e0 [ 381.984812][ T6107] handle_bug+0x3d/0x70 [ 381.988971][ T6107] exc_invalid_op+0x16/0x40 [ 381.993479][ T6107] asm_exc_invalid_op+0x16/0x20 [ 381.998346][ T6107] RIP: 0010:debug_check_no_obj_freed+0x38e/0x4e0 [ 382.004711][ T6107] Code: ef e8 56 dc a3 fd 4c 8b 45 00 48 c7 c7 20 77 5d 8b 48 c7 c6 e0 73 5d 8b 48 c7 c2 80 78 5d 8b 8b 0c 24 49 89 d9 e8 b2 4c 14 fd <0f> 0b ff 05 f2 c4 5b 0a 48 83 c5 30 48 89 e8 48 c1 e8 03 48 b9 00 [ 382.024346][ T6107] RSP: 0018:ffffc9000451f6a0 EFLAGS: 00010246 [ 382.030422][ T6107] RAX: 7c6e36bed5dda700 RBX: ffffffff824ae2f0 RCX: ffff888025598000 [ 382.038414][ T6107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.046385][ T6107] RBP: ffffffff8b0dda60 R08: ffffffff8152a48e R09: fffff520008a3e35 [ 382.054375][ T6107] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888027f1c698 [ 382.062348][ T6107] R13: ffffffff97640398 R14: ffff888027f1d000 R15: ffff88805841af38 [ 382.070328][ T6107] ? ext4_group_desc_init+0x1de0/0x1de0 [ 382.075902][ T6107] ? __warn_printk+0x28e/0x350 [ 382.080713][ T6107] __kmem_cache_free+0x205/0x3c0 [ 382.085675][ T6107] ? generic_shutdown_super+0x130/0x340 [ 382.091230][ T6107] ? ext4_drop_inode+0x2e0/0x2e0 [ 382.096181][ T6107] generic_shutdown_super+0x130/0x340 [ 382.101577][ T6107] kill_block_super+0x7a/0xe0 [ 382.106266][ T6107] deactivate_locked_super+0xa0/0x110 [ 382.111663][ T6107] cleanup_mnt+0x490/0x520 [ 382.116089][ T6107] ? lockdep_hardirqs_on+0x94/0x130 [ 382.121293][ T6107] task_work_run+0x246/0x300 [ 382.125890][ T6107] ? kasan_quarantine_put+0xd4/0x220 [ 382.131183][ T6107] ? task_work_cancel+0x2e0/0x2e0 [ 382.136216][ T6107] ? kmem_cache_free+0x292/0x510 [ 382.141175][ T6107] ? do_exit+0xa6e/0x26a0 [ 382.145613][ T6107] do_exit+0xa73/0x26a0 [ 382.149793][ T6107] ? put_task_struct+0x80/0x80 [ 382.154568][ T6107] ? get_signal+0x161c/0x17d0 [ 382.159342][ T6107] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 382.165333][ T6107] ? print_irqtrace_events+0x210/0x210 [ 382.170807][ T6107] do_group_exit+0x202/0x2b0 [ 382.175414][ T6107] ? _raw_spin_unlock_irq+0x1f/0x40 [ 382.180634][ T6107] ? lockdep_hardirqs_on+0x94/0x130 [ 382.185836][ T6107] get_signal+0x16f7/0x17d0 [ 382.190394][ T6107] ? ptrace_notify+0x370/0x370 [ 382.195167][ T6107] ? finish_task_switch+0x1ca/0x810 [ 382.200374][ T6107] arch_do_signal_or_restart+0xb0/0x1a10 [ 382.206103][ T6107] ? __schedule+0x1447/0x4570 [ 382.210898][ T6107] ? get_sigframe_size+0x10/0x10 [ 382.215895][ T6107] ? release_firmware_map_entry+0x186/0x186 [ 382.221886][ T6107] ? lockdep_hardirqs_on+0x94/0x130 [ 382.227219][ T6107] exit_to_user_mode_loop+0x6a/0x100 [ 382.232531][ T6107] exit_to_user_mode_prepare+0xb1/0x140 [ 382.238095][ T6107] syscall_exit_to_user_mode+0x60/0x270 [ 382.243662][ T6107] do_syscall_64+0x47/0xb0 [ 382.248092][ T6107] ? clear_bhb_loop+0x45/0xa0 [ 382.252802][ T6107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.258706][ T6107] RIP: 0033:0x7f5ea81affe5 [ 382.263123][ T6107] Code: Unable to access opcode bytes at 0x7f5ea81affbb. [ 382.270175][ T6107] RSP: 002b:00007f5ea8fc3f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 382.278628][ T6107] RAX: fffffffffffffdfc RBX: 00007f5ea8336208 RCX: 00007f5ea81affe5 [ 382.286631][ T6107] RDX: 00007f5ea8fc3fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.294623][ T6107] RBP: 00007f5ea81f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 382.302623][ T6107] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 382.310615][ T6107] R13: 0000000000000001 R14: 00007f5ea8336208 R15: 00007fff08395af8 [ 382.318603][ T6107] [ 382.321932][ T6107] Kernel Offset: disabled [ 382.326363][ T6107] Rebooting in 86400 seconds..