last executing test programs: 8.371812063s ago: executing program 1 (id=308): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) pread64(r0, &(0x7f0000000040)=""/121, 0x79, 0x3caa) 8.099106038s ago: executing program 1 (id=310): inotify_init1(0x800) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x4e22, 0xe, 0xa}, {0xfffffffffffffffc, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d6, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x3ff}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x3506, 0x0, 0x3, 0xd, 0x80000, 0x7, 0x3}}, 0xe4) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000480)="0c2308fe72183e14453d1abb1b6a45d9", 0x10) write(r5, &(0x7f0000000300)='1', 0x1) 7.082488028s ago: executing program 2 (id=311): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 7.0355929s ago: executing program 1 (id=312): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom$inet6(r0, &(0x7f00000006c0)=""/205, 0xfffffffffffffd95, 0x10100, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 6.96301024s ago: executing program 2 (id=313): socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="92180004"], 0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0xa9}, &(0x7f0000000280)=0x9, 0x0, 0x8000, 0x6, 0x84e, 0x2f7, 0x10, 0x712}}], 0x58}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 5.974938101s ago: executing program 2 (id=318): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x8000004d) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) chown(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x108}}], 0x2, 0xc040) 5.708757324s ago: executing program 0 (id=320): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x20008, 0x10, 0x100000002, 0x0, 0x6, 0xffffffffffffb473, 0xffffffffffffffff, 0x4}, {0x1000000003, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c9f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x568, &(0x7f0000000140)="$eJzs3V1v01gawPHHpV2i7Kq7WlYIVbwcyq5UpBKcBIIirrzOSXogsSPbQe0VqmiKKlJYUVba9obtDTMjzXwI5nI+xHwjNB+BkV/S17wAfZ3q/4uKHfv4nMdp5IfT5BwLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQy63ZdtGSpvE6i2o4txb4rd2n2dGHNsjdfYsR7YpY8Y/kcnIt3XTtH7u7r8b/zMr19Nl1ycWLnGz9+erfHl+ZnOgfPyLgr/LzN9a0sbn1arnX6749rkDOoRuXh+9raM+Evmk5Da1M6KtqpWLfX6iHqm6aOlwKI91SbqCdyA/UnHtXFavVstKFJb/jNWpOU/c3PrpXsu2KelJoaycIfe/+k0LoLphm03iNpEy8Oy7zKH4jPjWRirTTUmp1rdctjzuBuFDxSwqVxhUq2aVSsVgqFSsPqw8f2fbkoQ32AXKoxPG9afHHdIxXb+BoJrL8L00x4klHFkUNfLhSk0B8aQ3Zn+nn/3/d1yPb3Zv/+1n+2u7uGUny/8302c1h+X9ILKf32JBN2ZJXsiw96UlX3p55RKf7aIgWT4yE4ouRljjJFpVtUVKVilTElueyIPWp+JdYFyNN0RLKkoQSiU7eUa4EosWRSHwJRMmcuHJXlBSlKlUpixItBVkSXzriSUNq4iS1rMpa8rqXRVnDYtwpVBx6Gvn++64rJfnL0GLkfxzdcV6+gSP53M//AAAAAADgwrKSv75PJT83kud109T2WYcFAAAAAACO0YFP/m+I9aX9/9xJhQQAAAAAAI6ZlYyxs0QkL7fStVWxkuFSfAkAAAAAAIALIvn8/2a8SOZAuSXWznQp9P8BAAAAALggvh87x37Yvmz9+psEwZS13V78p7WezM3rrF9Kj7t0sMaoPmNNZ5Uki0q6mJx09XUrGzWwMwnmp2yxOi4OazcAZyeA/39NAFcm5Ue5nZa5vZIuV7I9f01byddNUxdcv/m4KI4zPRHpxei/r9f+J8np/+C1pq2crPW6hRdveitJLNtxLdvr2TCKQ/MojojlXTLfQjLmYuAZTyUDMbJ285asrvW6dnvxclazsz6Rrkzsb/H99Ig2P8hsWmo2m/E239+TtpmL2ywWhp19FkXxiGf+Qe6kZe7M3UkXA6IojYuitDeKwa/F0aMo741iWw5HUT5iFABwVlbHZCFLDuXdb7jKHcju8WXvC7K7fGV2/yBzaZm5meTCOjkz4Ipuj8sr9hGz2y+H7oE0LMfG7f50IKt+jA/4OLTdsFmy4pfw0rv1/8jVjc2te2vryy+7L7uvS6VyxX5g2w9LMpWcRrYg9wAABth7jx1rYP4fcBeeOCknJT5/jnP3g6xXvX2wV51lvL/vfKWgIC/kjfRkReaT0QbJNw4G/r8jv+drCPNjeq35JE2md3iZH9Gr+1MyyqFfb2lk2f0xlE/jVwEAwKmZHZOHB+b/A333+TH97v25fHTvOL/nbm0AAOBk6OCTlY++s4LAtJ8Xq9WiEy1oFfjuUxWYWkMr40U6cBccr6FVO/Aj3/Wb8cozU9OhCjvtth9Equ4Hqu2HZjGZPlBlt34PdcvxIuOG7aZ2Qq1c34scN1I1E7qq3fl304QLOkgODtvaNXXjOpHxPRX6ncDVBaVCrfcUNDXtRaZu4lVPtQPTcoKceuY3Oy2tajp0A9OO/LTCflvGq/tBK6m2cNYvNgAA58TG5tar5V6v+/YEVwY2zPTBAACcmTFZGgAAAAAAAAAAAAAAAAAAAAAAnAOnMf6PlQu+0p8K+rzEw8oxrIy9dLw/8YsTgBP1ewAAAP//MVZPbw==") sendmsg$nl_route(r4, 0x0, 0x20044041) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000040)={0x1, 0x0, 0x27f}) 4.660011782s ago: executing program 0 (id=321): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7", 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4", 0xa4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3", 0x61}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.431227875s ago: executing program 0 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x12a) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl(r0, 0x40104d00, &(0x7f0000000900)="00000100000000000000") 4.33888217s ago: executing program 2 (id=324): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0xfff2}, {0xfff3}, {0x7671693a61b9ff27, 0x10}}, [{0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004010) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xc0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r6, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r7, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) socket$xdp(0x2c, 0x3, 0x0) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x1be) write$cgroup_int(r8, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 4.324828774s ago: executing program 1 (id=325): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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") socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x80) 4.023241627s ago: executing program 0 (id=326): socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="92180004"], 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0xa9}, &(0x7f0000000280)=0x9, 0x0, 0x8000, 0x6, 0x84e, 0x2f7, 0x10, 0x712}}], 0x58}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 3.287306569s ago: executing program 1 (id=329): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ec0)='\f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)='3q\n', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="c846d745efa4474262ae445ce877cfd35940a148fa029bf68dc5d0935223309a7a28b01410eb2c50c80df5401a7861708e37ee6da0c59b956ad07b994aad8a32302639f74bbe336443c894b216e4f9dea0fe1dd44d9343b5d08b1586258e7ed145c26214545b8e562350acc8ee3d", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000840)="38f3445c642aeb5ba29b161236d6e0cc71b59546bf918836b84034ffcf48b2ce1e53d88704a89185d18e0c7fa6b3dc2057954b29d02242908f79b810ad194428a12d410cbf08be97541b396a7d669d802fad107fe6120088b6774134030b599da0d74b8a90bb9cda44815766a022e9fafc2438739af2b6be3a962383fc4aadd82a641777e37530afa0160748ca3db72f3682062a90b3104a794c8eec0b03ebb2e6061df2ce1778fe153f29376c312c03a6f07c62cadc00bbaae80ebd49b7deda0f66e720c99986", 0xc7}, {&(0x7f0000000940)="aef5d59b82c6a013afe61d96ae7e0adbfd99e710305be3122739d403978a491a8772ba50a3ab450029b98b173b99e860fbdd1519c4477da33921e469cbda8313c92b40378f", 0x45}, {&(0x7f00000009c0)="ce0b13e73e01acbaee5f37c85a0967a9162bcc2de030aee94c91ce2b0ea975bd", 0x20}], 0x3}}], 0x4, 0x4000001) 3.24464819s ago: executing program 2 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x53b, 0xfffffffd, 0x25dfdbff, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4060040}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r4) sendmsg$NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbfa}, 0x14}}, 0x40) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) r8 = fcntl$dupfd(r6, 0x406, r6) write$binfmt_elf64(r8, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 3.052755063s ago: executing program 3 (id=331): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7", 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a", 0xbf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3", 0x61}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.908939442s ago: executing program 3 (id=332): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/68, 0x0, 0x60000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 2.082255919s ago: executing program 1 (id=333): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvfrom$inet6(r0, &(0x7f00000006c0)=""/205, 0xfffffffffffffd95, 0x10100, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0x6fa}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.941296078s ago: executing program 2 (id=334): syz_mount_image$f2fs(&(0x7f0000002100), &(0x7f00000000c0)='./bus\x00', 0x10000, &(0x7f0000002000)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x18b341, 0x84) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 1.82212884s ago: executing program 3 (id=335): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r3, &(0x7f00000091c0)=""/16384, 0x4000) 1.809206614s ago: executing program 0 (id=336): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x301, 0x20}, 0xc) r0 = socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000000c0)=0x8000) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x5, 0x7, 0x7, 0x8, 0x8, 0x5, 0x9, 0x0, 0x10, 0xb, 0x9, 0x1, 0xa, 0xfe}, 0xe) unshare(0x64000600) 706.828946ms ago: executing program 0 (id=337): inotify_init1(0x800) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x4e22, 0xe, 0xa}, {0xfffffffffffffffc, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d6, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x3ff}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x3506, 0x0, 0x3, 0xd, 0x80000, 0x7, 0x3}}, 0xe4) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000480)="0c2308fe72183e14453d1abb1b6a45d9", 0x10) write(r5, &(0x7f0000000300)='1', 0x1) 611.163173ms ago: executing program 3 (id=338): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x1, 0x2}]}]}}, &(0x7f0000001f40)=""/4097, 0x32, 0x1001, 0x1}, 0x28) 412.801907ms ago: executing program 3 (id=339): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280200001900010028bd7000fbdbdf251d010900500012"], 0x228}, 0x1, 0x0, 0x0, 0x40000085}, 0x4) 0s ago: executing program 3 (id=340): ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)="f938cbdbaa3e9a77e5061e1cee21ce63d6b8d7299e8fcfd1e7d65c457952") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@data_err_ignore}, {@jqfmt_vfsv0}]}, 0x0, 0x470, &(0x7f0000000bc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000") ioctl(0xffffffffffffffff, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2f") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. [ 74.404467][ T5762] cgroup: Unknown subsys name 'net' [ 74.535162][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.905405][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.466469][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.475175][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.484382][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.492681][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.492843][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.500082][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.517143][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.523059][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.526114][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.539995][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.540237][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.547589][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.559300][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.562859][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.575627][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.576324][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.582894][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.598688][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.610695][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.619663][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.627698][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.635195][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.642845][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.656704][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.016534][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 78.053989][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 78.152852][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 78.266086][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.273416][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.281495][ T5774] bridge_slave_0: entered allmulticast mode [ 78.290880][ T5774] bridge_slave_0: entered promiscuous mode [ 78.304520][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.311923][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.319271][ T5773] bridge_slave_0: entered allmulticast mode [ 78.326032][ T5773] bridge_slave_0: entered promiscuous mode [ 78.333846][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.341207][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.348484][ T5773] bridge_slave_1: entered allmulticast mode [ 78.355238][ T5773] bridge_slave_1: entered promiscuous mode [ 78.376534][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 78.388249][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.395529][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.403442][ T5774] bridge_slave_1: entered allmulticast mode [ 78.410280][ T5774] bridge_slave_1: entered promiscuous mode [ 78.470121][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.479440][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.486538][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.494136][ T5775] bridge_slave_0: entered allmulticast mode [ 78.502285][ T5775] bridge_slave_0: entered promiscuous mode [ 78.511930][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.531730][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.552776][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.560161][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.567340][ T5775] bridge_slave_1: entered allmulticast mode [ 78.574859][ T5775] bridge_slave_1: entered promiscuous mode [ 78.583395][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.644440][ T5774] team0: Port device team_slave_0 added [ 78.653717][ T5774] team0: Port device team_slave_1 added [ 78.683133][ T5773] team0: Port device team_slave_0 added [ 78.712153][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.725571][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.751322][ T5773] team0: Port device team_slave_1 added [ 78.758024][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.765560][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.791779][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.805767][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.813049][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.839040][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.903379][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.910858][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.918063][ T5776] bridge_slave_0: entered allmulticast mode [ 78.925239][ T5776] bridge_slave_0: entered promiscuous mode [ 78.933039][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.940257][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.947499][ T5776] bridge_slave_1: entered allmulticast mode [ 78.954926][ T5776] bridge_slave_1: entered promiscuous mode [ 78.973649][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.980984][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.007199][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.019840][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.026822][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.053697][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.067608][ T5775] team0: Port device team_slave_0 added [ 79.126807][ T5774] hsr_slave_0: entered promiscuous mode [ 79.133689][ T5774] hsr_slave_1: entered promiscuous mode [ 79.141916][ T5775] team0: Port device team_slave_1 added [ 79.150856][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.198884][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.253208][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.260300][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.287299][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.300109][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.307096][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.333164][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.360719][ T5773] hsr_slave_0: entered promiscuous mode [ 79.367337][ T5773] hsr_slave_1: entered promiscuous mode [ 79.375628][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.383585][ T5773] Cannot create hsr debugfs directory [ 79.401239][ T5776] team0: Port device team_slave_0 added [ 79.409945][ T5776] team0: Port device team_slave_1 added [ 79.498830][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.506443][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.532750][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.546060][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.553518][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.579479][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.614576][ T5775] hsr_slave_0: entered promiscuous mode [ 79.620315][ T5779] Bluetooth: hci1: command tx timeout [ 79.626684][ T5775] hsr_slave_1: entered promiscuous mode [ 79.633174][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.640847][ T5775] Cannot create hsr debugfs directory [ 79.689039][ T5779] Bluetooth: hci3: command tx timeout [ 79.689182][ T5781] Bluetooth: hci0: command tx timeout [ 79.694675][ T5779] Bluetooth: hci2: command tx timeout [ 79.762229][ T5776] hsr_slave_0: entered promiscuous mode [ 79.769328][ T5776] hsr_slave_1: entered promiscuous mode [ 79.775384][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.783639][ T5776] Cannot create hsr debugfs directory [ 79.862374][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.896982][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.931889][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.963627][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.125865][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.152809][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.167153][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.194133][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.273176][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.283907][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.294608][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.304429][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.377656][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.424087][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.436417][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.456653][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.464510][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.476029][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.514274][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.521697][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.553048][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.560300][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.596087][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.640235][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.684842][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.702494][ T2115] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.709693][ T2115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.756834][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.764092][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.817283][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.850140][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.857298][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.872083][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.879344][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.030411][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.057697][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.111558][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.168181][ T2115] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.175588][ T2115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.221381][ T2115] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.228794][ T2115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.273302][ T5774] veth0_vlan: entered promiscuous mode [ 81.334208][ T5774] veth1_vlan: entered promiscuous mode [ 81.425470][ T5774] veth0_macvtap: entered promiscuous mode [ 81.456285][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.481344][ T5774] veth1_macvtap: entered promiscuous mode [ 81.532353][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.545829][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.565035][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.594957][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.611540][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.626836][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.635695][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.676904][ T5773] veth0_vlan: entered promiscuous mode [ 81.690117][ T51] Bluetooth: hci1: command tx timeout [ 81.733960][ T5773] veth1_vlan: entered promiscuous mode [ 81.767788][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.775051][ T51] Bluetooth: hci0: command tx timeout [ 81.780502][ T5779] Bluetooth: hci3: command tx timeout [ 81.781148][ T51] Bluetooth: hci2: command tx timeout [ 81.825581][ T5775] veth0_vlan: entered promiscuous mode [ 81.855494][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.871317][ T5775] veth1_vlan: entered promiscuous mode [ 81.882677][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.944381][ T5773] veth0_macvtap: entered promiscuous mode [ 81.944462][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.967870][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.976251][ T5773] veth1_macvtap: entered promiscuous mode [ 82.018211][ T5775] veth0_macvtap: entered promiscuous mode [ 82.066872][ T5775] veth1_macvtap: entered promiscuous mode [ 82.085980][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.097590][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.110029][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.121223][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.132266][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.147320][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.159537][ T5776] veth0_vlan: entered promiscuous mode [ 82.166125][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.176041][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.186458][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.195666][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.222891][ T5776] veth1_vlan: entered promiscuous mode [ 82.289339][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.300386][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.315814][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.326589][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.339347][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.365405][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.382120][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.392552][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.403491][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.415919][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.452666][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.462473][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.471963][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.480981][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.514069][ T5776] veth0_macvtap: entered promiscuous mode [ 82.529116][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.541050][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.551513][ T5776] veth1_macvtap: entered promiscuous mode [ 82.571064][ T788] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.616092][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.631715][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.643197][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.654322][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.664326][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.675065][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.686624][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.701922][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.714811][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.732611][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.744077][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.753984][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.764663][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.774637][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.785241][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.787508][ T788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.796735][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.828860][ T788] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 82.849082][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.857145][ T788] usb 3-1: Product: syz [ 82.863902][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.869451][ T788] usb 3-1: Manufacturer: syz [ 82.877250][ T788] usb 3-1: SerialNumber: syz [ 82.881980][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.897601][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.906660][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.914980][ T788] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 82.931808][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.945206][ T788] cdc_wdm 3-1:1.0: Unknown control protocol [ 82.962216][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.052750][ T2115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.063704][ T5843] syz.3.4[5843]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.069043][ T2115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.191068][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.219615][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.312989][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.322733][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.381706][ T5845] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.505483][ T5820] usb 3-1: USB disconnect, device number 2 [ 83.770174][ T51] Bluetooth: hci1: command tx timeout [ 83.849062][ T51] Bluetooth: hci2: command tx timeout [ 83.853424][ T5781] Bluetooth: hci3: command tx timeout [ 83.854604][ T51] Bluetooth: hci0: command tx timeout [ 83.907355][ T5853] loop1: detected capacity change from 0 to 512 [ 83.920386][ T5843] loop3: detected capacity change from 0 to 40427 [ 83.952265][ T5843] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 83.976118][ T5843] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 84.004579][ T5843] F2FS-fs (loop3): invalid crc value [ 84.033404][ T5853] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 84.059690][ T5843] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.061890][ T5853] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 84.076409][ T5853] System zones: 0-1, 15-15, 18-18, 34-34 [ 84.083009][ T5853] EXT4-fs (loop1): orphan cleanup on readonly fs [ 84.093365][ T5853] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 84.103049][ T5853] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 84.118210][ T5853] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 84.139446][ T5853] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.5: bad orphan inode 16 [ 84.175540][ T5853] ext4_test_bit(bit=15, block=18) = 1 [ 84.208352][ T5853] is_bad_inode(inode)=0 [ 84.212560][ T5853] NEXT_ORPHAN(inode)=0 [ 84.216610][ T5853] max_ino=32 [ 84.268857][ T5853] i_nlink=2 [ 84.273492][ T5853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.299188][ T5843] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 84.321474][ T5843] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 84.507902][ T5849] loop0: detected capacity change from 0 to 40427 [ 84.525965][ T5849] F2FS-fs (loop0): invalid crc value [ 84.573649][ T5849] F2FS-fs (loop0): Found nat_bits in checkpoint [ 84.662385][ T5849] F2FS-fs (loop0): Start checkpoint disabled! [ 84.704370][ T5849] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 85.198463][ T788] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.410103][ T788] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.428567][ T788] usb 3-1: config 0 has no interfaces? [ 85.434217][ T788] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.468621][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.492404][ T1134] kworker/u4:7: attempt to access beyond end of device [ 85.492404][ T1134] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 85.509104][ T788] usb 3-1: config 0 descriptor?? [ 85.529266][ T1134] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 85.530604][ T5870] loop3: detected capacity change from 0 to 164 [ 85.784256][ T5851] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 85.844808][ T5851] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 85.858355][ T51] Bluetooth: hci1: command tx timeout [ 85.936221][ T51] Bluetooth: hci0: command tx timeout [ 85.936245][ T5781] Bluetooth: hci3: command tx timeout [ 85.941736][ T51] Bluetooth: hci2: command tx timeout [ 86.077304][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.983545][ T5881] loop1: detected capacity change from 0 to 4096 [ 87.000808][ T5881] EXT4-fs: Ignoring removed i_version option [ 87.068383][ T5881] EXT4-fs: quotafile must be on filesystem root [ 87.105449][ T5884] loop3: detected capacity change from 0 to 2048 [ 87.214879][ T5884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.244046][ T5884] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.558545][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.639063][ T5895] loop1: detected capacity change from 0 to 16 [ 87.683700][ T5895] erofs: (device loop1): mounted with root inode @ nid 36. [ 87.705645][ T5888] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 87.760239][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.770981][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.788130][ T5895] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.795787][ T5895] IPv6: NLM_F_CREATE should be set when creating new route [ 87.804626][ T8] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 87.814100][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 87.822432][ T8] usb 4-1: SerialNumber: syz [ 88.067413][ T8] usb 4-1: 0:2 : does not exist [ 88.116901][ T8] usb 4-1: USB disconnect, device number 2 [ 88.213432][ T5766] udevd[5766]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.317293][ T5820] usb 3-1: USB disconnect, device number 3 [ 88.362475][ T5903] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.674373][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.845769][ T5909] loop1: detected capacity change from 0 to 256 [ 88.869073][ T5909] FAT-fs (loop1): Unrecognized mount option "uni_xlöe=0" or missing value [ 89.737560][ T5914] loop0: detected capacity change from 0 to 1024 [ 89.760541][ T5914] EXT4-fs: Mount option(s) incompatible with ext3 [ 90.458289][ C0] sched: RT throttling activated [ 90.927299][ T5918] netlink: 'syz.3.25': attribute type 4 has an invalid length. [ 91.202621][ T5922] atomic_op ffff88807b420998 conn xmit_atomic 0000000000000000 [ 92.026743][ T5932] loop2: detected capacity change from 0 to 1024 [ 92.054991][ T5932] EXT4-fs: inline encryption not supported [ 92.104008][ T5932] EXT4-fs: inline encryption not supported [ 92.110315][ T5932] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.140301][ T1198] cfg80211: failed to load regulatory.db [ 92.146951][ T5932] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.219391][ T5932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 92.278049][ T5932] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.319493][ T5932] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.30: lblock 0 mapped to illegal pblock 0 (length 1) [ 92.337081][ T5932] EXT4-fs (loop2): Remounting filesystem read-only [ 92.391330][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 92.605578][ T5928] loop3: detected capacity change from 0 to 40427 [ 92.788896][ T5928] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 92.827415][ T5928] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 92.884380][ T5928] F2FS-fs (loop3): invalid crc value [ 92.931642][ T5928] F2FS-fs (loop3): Found nat_bits in checkpoint [ 93.038389][ T2182] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.077819][ T5928] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 93.096776][ T5928] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 93.133781][ T5930] loop1: detected capacity change from 0 to 40427 [ 93.198478][ T2182] usb 1-1: device descriptor read/64, error -71 [ 93.248462][ T5957] Zero length message leads to an empty skb [ 93.470925][ T1198] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.485170][ T5963] loop1: detected capacity change from 0 to 512 [ 93.488652][ T2182] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.540274][ T5963] EXT4-fs (loop1): orphan cleanup on readonly fs [ 93.571860][ T5963] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.37: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 93.607716][ T5963] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.37: ea_inode dec ref err=-117 [ 93.622623][ T5963] EXT4-fs (loop1): 1 orphan inode deleted [ 93.629721][ T5963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 93.653093][ T5963] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 93.669407][ T2182] usb 1-1: device descriptor read/64, error -71 [ 93.671711][ T1198] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.699636][ T1198] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.713747][ T1198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.723694][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.733340][ T1198] usb 3-1: Product: syz [ 93.737533][ T1198] usb 3-1: Manufacturer: syz [ 93.763313][ T1198] usb 3-1: SerialNumber: syz [ 93.828757][ T2182] usb usb1-port1: attempt power cycle [ 93.932895][ T5968] loop1: detected capacity change from 0 to 512 [ 93.988990][ T5968] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 94.000821][ T5954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.030303][ T5968] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.40: invalid indirect mapped block 256 (level 1) [ 94.068856][ T5954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.077090][ T5968] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.40: invalid indirect mapped block 2683928664 (level 1) [ 94.115244][ T5968] EXT4-fs (loop1): 1 truncate cleaned up [ 94.141517][ T5968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.289063][ T5954] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 94.306333][ T5954] kvm: requested 36876 ns i8254 timer period limited to 200000 ns [ 94.315661][ T5954] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 94.330818][ T5954] kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 94.338419][ T2182] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.343326][ T5954] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 94.355273][ T5974] atomic_op ffff888030aad998 conn xmit_atomic 0000000000000000 [ 94.359115][ T5954] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 94.370520][ T2182] usb 1-1: device descriptor read/8, error -71 [ 94.384423][ T5954] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 94.393498][ T5954] kvm: requested 157562 ns i8254 timer period limited to 200000 ns [ 94.402482][ T5954] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 94.411384][ T5954] kvm: requested 30171 ns i8254 timer period limited to 200000 ns [ 94.434038][ T1198] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 94.466247][ T1198] usb 3-1: USB disconnect, device number 4 [ 94.638977][ T2182] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.699158][ T2182] usb 1-1: device descriptor read/8, error -71 [ 94.806053][ T28] audit: type=1800 audit(1790782149.943:2): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.40" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 94.818774][ T2182] usb usb1-port1: unable to enumerate USB device [ 94.981106][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.048183][ T5977] loop1: detected capacity change from 0 to 128 [ 95.072755][ T5977] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 95.084646][ T5977] System zones: 1-3, 19-19, 35-36 [ 95.126838][ T5977] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 95.187804][ T5977] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.273459][ T5977] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 2037579777 (only 1 groups) [ 95.318853][ T5982] loop2: detected capacity change from 0 to 512 [ 96.113944][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.255946][ T5982] EXT4-fs (loop2): Test dummy encryption mode enabled [ 96.359195][ T5982] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #11: comm syz.2.43: casefold flag without casefold feature [ 96.447039][ T5982] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.43: couldn't read orphan inode 11 (err -117) [ 96.480106][ T5982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.513521][ T6001] netlink: 79 bytes leftover after parsing attributes in process `syz.3.47'. [ 96.624764][ T5982] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.43: bg 0: block 7: invalid block bitmap [ 96.656339][ T5982] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.724418][ T5982] syz.2.43 (5982) used greatest stack depth: 19984 bytes left [ 96.802206][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.544086][ T6014] atomic_op ffff88805dfdb198 conn xmit_atomic 0000000000000000 [ 97.597184][ T6012] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 98.535889][ T6026] loop3: detected capacity change from 0 to 2048 [ 98.552623][ T6029] input: syz1 as /devices/virtual/input/input5 [ 98.593598][ T6026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.731812][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.848014][ T5766] udevd[5766]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 98.989825][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.158576][ T8] usb 3-1: device descriptor read/64, error -71 [ 99.448370][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 99.618385][ T8] usb 3-1: device descriptor read/64, error -71 [ 99.706992][ T6044] loop1: detected capacity change from 0 to 512 [ 99.714413][ T6044] EXT4-fs: quotafile must be on filesystem root [ 99.738662][ T8] usb usb3-port1: attempt power cycle [ 99.809589][ T6036] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.819046][ T6036] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.843512][ T6036] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.858959][ T6036] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.867234][ T6036] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.880977][ T6036] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.896072][ T6036] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.903510][ T6036] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.917902][ T6036] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.934480][ T6036] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.943704][ T6036] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 99.956613][ T6036] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.178372][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 100.241392][ T8] usb 3-1: device descriptor read/8, error -71 [ 100.294246][ T6051] loop0: detected capacity change from 0 to 256 [ 100.491481][ T6051] FAT-fs (loop0): Directory bread(block 64) failed [ 100.513782][ T6051] FAT-fs (loop0): Directory bread(block 65) failed [ 100.520899][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 100.541612][ T6051] FAT-fs (loop0): Directory bread(block 66) failed [ 100.561094][ T6051] FAT-fs (loop0): Directory bread(block 67) failed [ 100.578522][ T6051] FAT-fs (loop0): Directory bread(block 68) failed [ 100.585143][ T6051] FAT-fs (loop0): Directory bread(block 69) failed [ 100.591936][ T6051] FAT-fs (loop0): Directory bread(block 70) failed [ 100.598547][ T6051] FAT-fs (loop0): Directory bread(block 71) failed [ 100.599128][ T8] usb 3-1: device descriptor read/8, error -71 [ 100.605378][ T6051] FAT-fs (loop0): Directory bread(block 72) failed [ 100.618192][ T6051] FAT-fs (loop0): Directory bread(block 73) failed [ 100.628892][ T6054] atomic_op ffff888077d16198 conn xmit_atomic 0000000000000000 [ 101.128413][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.639277][ T8] usb usb3-port1: unable to enumerate USB device [ 101.827742][ T5910] kworker/u4:10: attempt to access beyond end of device [ 101.827742][ T5910] loop0: rw=1, sector=1224, nr_sectors = 544 limit=256 [ 101.852082][ T5910] kworker/u4:10: attempt to access beyond end of device [ 101.852082][ T5910] loop0: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 101.915960][ T5910] kworker/u4:10: attempt to access beyond end of device [ 101.915960][ T5910] loop0: rw=1, sector=1960, nr_sectors = 20664 limit=256 [ 101.937662][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.937712][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.962678][ T5910] kworker/u4:10: attempt to access beyond end of device [ 101.962678][ T5910] loop0: rw=1, sector=22624, nr_sectors = 2344 limit=256 [ 101.978038][ T5910] kworker/u4:10: attempt to access beyond end of device [ 101.978038][ T5910] loop0: rw=1, sector=25000, nr_sectors = 8800 limit=256 [ 101.985260][ T5910] kworker/u4:10: attempt to access beyond end of device [ 101.985260][ T5910] loop0: rw=1, sector=24968, nr_sectors = 32 limit=256 [ 102.008581][ T5779] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.063473][ T6073] netlink: 36 bytes leftover after parsing attributes in process `syz.3.68'. [ 102.326942][ T6081] loop1: detected capacity change from 0 to 512 [ 102.378051][ T6081] EXT4-fs (loop1): orphan cleanup on readonly fs [ 102.434740][ T6081] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.71: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 102.540889][ T6081] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.71: ea_inode dec ref err=-117 [ 102.570950][ T6081] EXT4-fs (loop1): 1 orphan inode deleted [ 102.592508][ T6081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 102.642614][ T6081] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 102.752449][ T6092] loop0: detected capacity change from 0 to 512 [ 102.762534][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.848192][ T6092] ext3: Unknown parameter 'noacl' [ 102.977280][ T5766] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.208622][ T5779] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.232998][ T6098] loop0: detected capacity change from 0 to 256 [ 103.254897][ T6098] ======================================================= [ 103.254897][ T6098] WARNING: The mand mount option has been deprecated and [ 103.254897][ T6098] and is ignored by this kernel. Remove the mand [ 103.254897][ T6098] option from the mount to silence this warning. [ 103.254897][ T6098] ======================================================= [ 103.289753][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.398217][ T6098] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 103.412998][ T6100] atomic_op ffff8880250d1198 conn xmit_atomic 0000000000000000 [ 103.689282][ T1198] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 103.838430][ T1198] usb 3-1: device descriptor read/64, error -71 [ 103.885017][ T6107] EXT4-fs (sda1): shut down requested (1) [ 103.959429][ T6107] Aborting journal on device sda1-8. [ 104.009057][ T5779] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.015199][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.062996][ T6113] loop0: detected capacity change from 0 to 512 [ 104.088659][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.095377][ T6113] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 104.118448][ T6113] System zones: 1-12 [ 104.119115][ T6115] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 104.220950][ T1198] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 104.228956][ T6113] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.81: missing EA_INODE flag [ 104.243749][ T6113] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.81: error while reading EA inode 12 err=-117 [ 104.278651][ T6113] EXT4-fs (loop0): 1 orphan inode deleted [ 104.285856][ T6113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.328407][ T6115] @0Ùÿÿ: renamed from bond_slave_1 (while UP) [ 104.352975][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 104.362759][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 104.372088][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 104.381749][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 104.391049][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 104.399970][ T1198] usb 3-1: device descriptor read/64, error -71 [ 104.406583][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 104.415988][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 104.425879][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 104.435309][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 104.444757][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 104.531569][ T6126] loop1: detected capacity change from 0 to 512 [ 104.545219][ T1198] usb usb3-port1: attempt power cycle [ 104.564211][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.592279][ T6126] EXT4-fs (loop1): orphan cleanup on readonly fs [ 104.617783][ T6126] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.83: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 104.669525][ T6126] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.83: ea_inode dec ref err=-117 [ 104.682660][ T6126] EXT4-fs (loop1): 1 orphan inode deleted [ 104.689813][ T6126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 104.710971][ T6126] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 104.749503][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.819943][ T28] audit: type=1326 audit(1790782159.953:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.1.86" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331979e159 code=0x7ffc0000 [ 104.884968][ T28] audit: type=1326 audit(1790782159.993:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.1.86" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331979e159 code=0x7ffc0000 [ 104.915856][ T28] audit: type=1326 audit(1790782159.993:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.1.86" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331979e159 code=0x7ffc0000 [ 104.946641][ T28] audit: type=1326 audit(1790782159.993:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.1.86" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f331979e159 code=0x7ffc0000 [ 104.971571][ T6139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.88'. [ 104.975035][ T28] audit: type=1326 audit(1790782159.993:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.1.86" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331979e159 code=0x7ffc0000 [ 105.102353][ T28] audit: type=1326 audit(1790782159.993:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.1.86" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331979e159 code=0x7ffc0000 [ 105.126059][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.180574][ T28] audit: type=1326 audit(1790782159.993:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.1.86" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331979e159 code=0x7ffc0000 [ 105.191223][ T8] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 105.212725][ T1198] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 105.238657][ T28] audit: type=1326 audit(1790782159.993:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.1.86" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f331979e159 code=0x7ffc0000 [ 105.264379][ T1198] usb 3-1: device descriptor read/8, error -71 [ 105.288607][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.316055][ T28] audit: type=1326 audit(1790782159.993:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.1.86" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f331979e159 code=0x7ffc0000 [ 105.342739][ T6141] atomic_op ffff88805a869998 conn xmit_atomic 0000000000000000 [ 105.649281][ T8] usb 4-1: device descriptor read/64, error -71 [ 105.931929][ T8] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 106.085686][ T6151] loop2: detected capacity change from 0 to 512 [ 106.088449][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.098021][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.118395][ T8] usb 4-1: device descriptor read/64, error -71 [ 106.138545][ T6151] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 106.171502][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.174566][ T6151] System zones: 1-12 [ 106.204563][ T6151] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.93: missing EA_INODE flag [ 106.242312][ T6151] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.93: error while reading EA inode 12 err=-117 [ 106.258669][ T8] usb usb4-port1: attempt power cycle [ 106.296210][ T6151] EXT4-fs (loop2): 1 orphan inode deleted [ 106.310207][ T6151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.451490][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.624027][ T6159] loop1: detected capacity change from 0 to 512 [ 106.676339][ T6159] EXT4-fs (loop1): orphan cleanup on readonly fs [ 106.682935][ T8] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 106.712759][ T6159] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.95: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 106.728698][ T8] usb 4-1: device descriptor read/8, error -71 [ 106.749080][ T6159] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.95: ea_inode dec ref err=-117 [ 106.762214][ T6159] EXT4-fs (loop1): 1 orphan inode deleted [ 106.776468][ T6159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 106.780096][ T6157] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 107.485264][ T42] Bluetooth: hci4: Frame reassembly failed (-84) [ 107.614955][ T6159] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 108.487492][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.448560][ T5781] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 109.962019][ T6178] atomic_op ffff88802f41e198 conn xmit_atomic 0000000000000000 [ 110.103499][ T6180] loop3: detected capacity change from 0 to 512 [ 110.175398][ T6180] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 110.204266][ T6183] netlink: 36 bytes leftover after parsing attributes in process `syz.1.103'. [ 110.226016][ T6180] System zones: 1-12 [ 110.257544][ T6180] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.102: missing EA_INODE flag [ 110.286157][ T6180] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.102: error while reading EA inode 12 err=-117 [ 110.309087][ T6180] EXT4-fs (loop3): 1 orphan inode deleted [ 110.316696][ T6180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.346120][ C1] net_ratelimit: 510 callbacks suppressed [ 110.346140][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 110.361434][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 110.371294][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 110.380737][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 110.390009][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 110.399315][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 110.408729][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 110.417956][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 110.427198][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 110.436487][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 110.596832][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.725125][ T6187] loop2: detected capacity change from 0 to 512 [ 110.750088][ T6190] loop3: detected capacity change from 0 to 512 [ 110.840588][ T6190] EXT4-fs (loop3): orphan cleanup on readonly fs [ 110.863652][ T6192] loop0: detected capacity change from 0 to 1024 [ 110.876882][ T6192] EXT4-fs: inline encryption not supported [ 110.884339][ T6190] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.104: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 110.915928][ T6190] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.104: ea_inode dec ref err=-117 [ 110.999953][ T6192] EXT4-fs: inline encryption not supported [ 111.045420][ T6190] EXT4-fs (loop3): 1 orphan inode deleted [ 111.061027][ T6192] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.093001][ T6190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 111.118681][ T6192] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.205201][ T6192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 111.226279][ T6190] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 111.238721][ T6192] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.300150][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 111.338736][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 111.355863][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.421978][ T6198] loop1: detected capacity change from 0 to 128 [ 111.444571][ T6198] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 111.492312][ T6202] syz.0.108 uses obsolete (PF_INET,SOCK_PACKET) [ 111.519773][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.560170][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 111.579370][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.593445][ T8] usb 3-1: Product: syz [ 111.606141][ T8] usb 3-1: Manufacturer: syz [ 111.611316][ T8] usb 3-1: SerialNumber: syz [ 111.627202][ T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 111.638472][ T8] cdc_wdm 3-1:1.0: Unknown control protocol [ 111.851833][ T6213] loop1: detected capacity change from 0 to 512 [ 111.963574][ T6215] loop3: detected capacity change from 0 to 512 [ 112.032097][ T6212] atomic_op ffff88807c3e0198 conn xmit_atomic 0000000000000000 [ 112.137491][ T6213] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 112.139123][ T6215] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.114: Unimplemented hash flags: 0x0001 [ 112.175288][ T6213] System zones: 1-12 [ 112.181383][ T6213] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.112: missing EA_INODE flag [ 112.197585][ T6213] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.112: error while reading EA inode 12 err=-117 [ 112.199233][ T6215] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.114: Corrupt directory, running e2fsck is recommended [ 112.227554][ T6213] EXT4-fs (loop1): 1 orphan inode deleted [ 112.249321][ T6213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.286504][ T6221] netlink: 36 bytes leftover after parsing attributes in process `syz.0.115'. [ 112.302457][ T6215] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 112.316640][ T6215] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.114: corrupted in-inode xattr: invalid ea_ino [ 112.345407][ T6215] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.114: couldn't read orphan inode 15 (err -117) [ 112.366440][ T6215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.429729][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.516152][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.671818][ T6227] loop3: detected capacity change from 0 to 512 [ 112.759562][ T6227] EXT4-fs (loop3): orphan cleanup on readonly fs [ 112.774507][ T6227] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.117: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 112.847877][ T6227] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.117: ea_inode dec ref err=-117 [ 112.877027][ T6227] EXT4-fs (loop3): 1 orphan inode deleted [ 112.884938][ T6227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 112.905255][ T6227] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 113.589052][ T6231] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 113.858917][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.888040][ T5778] usb 3-1: USB disconnect, device number 13 [ 114.020940][ T6243] loop3: detected capacity change from 0 to 256 [ 114.038635][ T6243] exfat: Deprecated parameter 'utf8' [ 114.044747][ T6243] exfat: Unknown parameter 'na ' [ 114.516885][ T6251] atomic_op ffff888059159198 conn xmit_atomic 0000000000000000 [ 114.649028][ T6256] loop1: detected capacity change from 0 to 512 [ 114.679640][ T6256] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 114.687730][ T6256] System zones: 1-12 [ 114.699793][ T6243] loop3: detected capacity change from 0 to 16 [ 114.722799][ T6243] erofs: (device loop3): mounted with root inode @ nid 36. [ 114.763689][ T6256] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.125: missing EA_INODE flag [ 114.805146][ T6243] erofs: (device loop3): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 114.810298][ T6256] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.125: error while reading EA inode 12 err=-117 [ 114.840995][ T6243] syz.3.120: attempt to access beyond end of device [ 114.840995][ T6243] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 114.857891][ T6256] EXT4-fs (loop1): 1 orphan inode deleted [ 114.873665][ T6252] FAULT_INJECTION: forcing a failure. [ 114.873665][ T6252] name failslab, interval 1, probability 0, space 0, times 1 [ 114.893409][ T6256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.910274][ T6243] erofs: (device loop3): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 114.916299][ T6252] CPU: 0 PID: 6252 Comm: syz.0.124 Not tainted syzkaller #0 [ 114.926647][ T6252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.936753][ T6252] Call Trace: [ 114.939717][ T6243] syz.3.120: attempt to access beyond end of device [ 114.939717][ T6243] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 114.940039][ T6252] [ 114.940049][ T6252] dump_stack_lvl+0x18c/0x250 [ 114.961081][ T6252] ? show_regs_print_info+0x20/0x20 [ 114.966402][ T6252] ? load_image+0x420/0x420 [ 114.970942][ T6252] ? __might_fault+0xc6/0x120 [ 114.975644][ T6252] ? __might_fault+0xaa/0x120 [ 114.976590][ T6243] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4065 in[4096, 0] out[8192] [ 114.980325][ T6252] should_fail_ex+0x394/0x4c0 [ 114.980361][ T6252] should_failslab+0x9/0x20 [ 114.980386][ T6252] slab_pre_alloc_hook+0x59/0x300 [ 114.980417][ T6252] kmem_cache_alloc+0x5a/0x2c0 [ 114.980443][ T6252] ? build_skb+0x29/0x250 [ 114.994965][ T28] audit: type=1800 audit(1790782170.133:12): pid=6243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.120" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 114.996243][ T6252] build_skb+0x29/0x250 [ 115.008819][ T6243] syz.3.120 (6243) used greatest stack depth: 18512 bytes left [ 115.010552][ T6252] __tun_build_skb+0x36/0x320 [ 115.050669][ T6252] tun_get_user+0x1cb8/0x3d30 [ 115.055383][ T6252] ? tun_get_user+0x667/0x3d30 [ 115.060193][ T6252] ? rcu_read_unlock+0xa0/0xa0 [ 115.064996][ T6252] ? tun_get+0x1c/0x2e0 [ 115.069187][ T6252] ? __lock_acquire+0x7d80/0x7d80 [ 115.074247][ T6252] ? tun_get+0x1c/0x2e0 [ 115.078437][ T6252] tun_chr_write_iter+0x119/0x200 [ 115.083494][ T6252] vfs_write+0x474/0x9a0 [ 115.087859][ T6252] ? file_end_write+0x250/0x250 [ 115.092757][ T6252] ? __fget_files+0x3fc/0x460 [ 115.097468][ T6252] ? __fdget_pos+0x1d8/0x330 [ 115.102086][ T6252] ? ksys_write+0x74/0x260 [ 115.106538][ T6252] ksys_write+0x151/0x260 [ 115.110900][ T6252] ? __ia32_sys_read+0x90/0x90 [ 115.115699][ T6252] ? syscall_user_dispatch+0x49/0x90 [ 115.121071][ T6252] do_syscall_64+0x55/0xb0 [ 115.125517][ T6252] ? clear_bhb_loop+0x40/0x90 [ 115.130224][ T6252] ? clear_bhb_loop+0x40/0x90 [ 115.134932][ T6252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.140871][ T6252] RIP: 0033:0x7f65d9b5e98e [ 115.145307][ T6252] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 115.164946][ T6252] RSP: 002b:00007f65daa79fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 115.173397][ T6252] RAX: ffffffffffffffda RBX: 00007f65daa7a6c0 RCX: 00007f65d9b5e98e [ 115.181392][ T6252] RDX: 000000000000004a RSI: 0000200000000000 RDI: 00000000000000c8 [ 115.189384][ T6252] RBP: 00007f65d9c3506b R08: 0000000000000000 R09: 0000000000000000 [ 115.197375][ T6252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.205366][ T6252] R13: 00007f65d9e26038 R14: 00007f65d9e25fa0 R15: 00007ffe5ee5bf18 [ 115.213371][ T6252] [ 115.330010][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.428820][ T6267] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 115.707202][ T6278] netlink: 36 bytes leftover after parsing attributes in process `syz.1.131'. [ 118.149452][ T6287] atomic_op ffff88807df83998 conn xmit_atomic 0000000000000000 [ 118.663314][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 118.670399][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 121.360993][ T6299] loop2: detected capacity change from 0 to 512 [ 121.399546][ T6299] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 121.438747][ T6299] System zones: 1-12 [ 121.458906][ T6299] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.138: missing EA_INODE flag [ 121.486092][ T6299] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.138: error while reading EA inode 12 err=-117 [ 121.555748][ T6299] EXT4-fs (loop2): 1 orphan inode deleted [ 121.566995][ T6299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.624168][ C1] net_ratelimit: 457 callbacks suppressed [ 121.624187][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 121.639443][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 121.648701][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 121.657972][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 121.667289][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 121.676570][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 121.685896][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 121.695170][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 121.704429][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 121.713650][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 121.831374][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.967518][ T6315] loop0: detected capacity change from 0 to 256 [ 122.027911][ T6317] atomic_op ffff888022778998 conn xmit_atomic 0000000000000000 [ 122.048521][ T6315] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 125.422503][ T6332] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 126.888551][ T6335] loop3: detected capacity change from 0 to 512 [ 126.947009][ T6335] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 126.998506][ T6335] System zones: 1-12 [ 127.025185][ T6335] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.149: missing EA_INODE flag [ 127.084423][ T6335] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.149: error while reading EA inode 12 err=-117 [ 127.135686][ T6343] netlink: 36 bytes leftover after parsing attributes in process `syz.2.151'. [ 127.238743][ T6335] EXT4-fs (loop3): 1 orphan inode deleted [ 127.245843][ T6335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.335884][ C1] net_ratelimit: 250 callbacks suppressed [ 127.335901][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 127.350901][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 127.360434][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 127.370490][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 127.379971][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 127.389276][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 127.398540][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 127.407788][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 127.417072][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 127.426349][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 127.560138][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.846398][ T6357] FAULT_INJECTION: forcing a failure. [ 127.846398][ T6357] name failslab, interval 1, probability 0, space 0, times 0 [ 127.862069][ T6359] atomic_op ffff88805b062198 conn xmit_atomic 0000000000000000 [ 127.908153][ T6357] CPU: 1 PID: 6357 Comm: syz.0.155 Not tainted syzkaller #0 [ 127.915535][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.925609][ T6357] Call Trace: [ 127.928902][ T6357] [ 127.931846][ T6357] dump_stack_lvl+0x18c/0x250 [ 127.936559][ T6357] ? show_regs_print_info+0x20/0x20 [ 127.941780][ T6357] ? load_image+0x420/0x420 [ 127.946304][ T6357] ? __might_sleep+0xe0/0xe0 [ 127.951004][ T6357] ? __lock_acquire+0x7d80/0x7d80 [ 127.956081][ T6357] should_fail_ex+0x394/0x4c0 [ 127.960792][ T6357] should_failslab+0x9/0x20 [ 127.965333][ T6357] slab_pre_alloc_hook+0x59/0x300 [ 127.970394][ T6357] kmem_cache_alloc_lru+0x4d/0x2b0 [ 127.975534][ T6357] ? new_inode_pseudo+0x82/0x1d0 [ 127.980499][ T6357] new_inode_pseudo+0x82/0x1d0 [ 127.985282][ T6357] create_pipe_files+0x51/0x700 [ 127.990153][ T6357] ? __ia32_sys_get_robust_list+0x110/0x110 [ 127.996071][ T6357] __do_pipe_flags+0x4c/0x2c0 [ 128.000782][ T6357] do_pipe2+0xab/0x190 [ 128.004882][ T6357] ? _compound_head+0x120/0x120 [ 128.009763][ T6357] ? lock_chain_count+0x20/0x20 [ 128.014638][ T6357] ? syscall_enter_from_user_mode+0x25/0x80 [ 128.020552][ T6357] __x64_sys_pipe+0x3a/0x40 [ 128.025078][ T6357] do_syscall_64+0x55/0xb0 [ 128.029523][ T6357] ? clear_bhb_loop+0x40/0x90 [ 128.034225][ T6357] ? clear_bhb_loop+0x40/0x90 [ 128.039112][ T6357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.045295][ T6357] RIP: 0033:0x7f65d9b9e159 [ 128.049729][ T6357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.069363][ T6357] RSP: 002b:00007f65daa7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 128.077808][ T6357] RAX: ffffffffffffffda RBX: 00007f65d9e25fa0 RCX: 00007f65d9b9e159 [ 128.085803][ T6357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.093842][ T6357] RBP: 00007f65d9c3506b R08: 0000000000000000 R09: 0000000000000000 [ 128.101842][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.109844][ T6357] R13: 00007f65d9e26038 R14: 00007f65d9e25fa0 R15: 00007ffe5ee5bf18 [ 128.117861][ T6357] [ 128.281932][ T6361] loop1: detected capacity change from 0 to 1024 [ 132.557363][ T6381] loop0: detected capacity change from 0 to 1024 [ 132.587708][ T6381] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.650790][ T6381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.061730][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.069448][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.130212][ T6435] futex_wake_op: syz.2.175 tries to shift op by 144; fix this program [ 136.197259][ T6435] loop2: detected capacity change from 0 to 256 [ 136.249145][ T6435] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 136.407853][ T28] audit: type=1800 audit(1790782191.473:13): pid=6435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.175" name="file1" dev="loop2" ino=1048597 res=0 errno=0 [ 137.825564][ T6429] netlink: 36 bytes leftover after parsing attributes in process `syz.1.174'. [ 137.984132][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.012187][ T6441] sda1: Can't mount, would change RO state [ 138.137389][ T6446] loop1: detected capacity change from 0 to 1024 [ 138.141912][ T6447] loop0: detected capacity change from 0 to 128 [ 138.151471][ T6446] EXT4-fs: quotafile must be on filesystem root [ 138.159289][ T6443] x86/PAT: syz.3.178:6443 freeing invalid memtype [mem 0xfe004000-0xfe005fff] [ 142.120210][ T6478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.188'. [ 142.442643][ T6489] loop0: detected capacity change from 0 to 256 [ 142.950397][ T6486] loop1: detected capacity change from 0 to 40427 [ 142.960373][ T6486] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 142.980737][ T6486] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 143.001832][ T6486] F2FS-fs (loop1): invalid crc value [ 143.006609][ T6494] loop0: detected capacity change from 0 to 256 [ 143.028711][ T6486] F2FS-fs (loop1): Found nat_bits in checkpoint [ 143.209782][ T6486] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 143.256141][ T6486] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 143.376308][ T6503] atomic_op ffff888030598198 conn xmit_atomic 0000000000000000 [ 143.608863][ T6508] loop2: detected capacity change from 0 to 164 [ 147.896344][ T6523] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 148.804481][ T6537] loop0: detected capacity change from 0 to 512 [ 148.885450][ T6537] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 148.898501][ T6537] System zones: 1-12 [ 148.908603][ T6537] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.207: missing EA_INODE flag [ 148.931786][ T6537] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.207: error while reading EA inode 12 err=-117 [ 149.130795][ T6537] EXT4-fs (loop0): 1 orphan inode deleted [ 149.185180][ T6537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.257216][ C1] net_ratelimit: 250 callbacks suppressed [ 149.257234][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 149.272858][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 149.282963][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 149.292467][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 149.302434][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 149.312105][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 149.321684][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 149.332176][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 149.341641][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 149.351207][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 149.484046][ T6544] atomic_op ffff88807e871998 conn xmit_atomic 0000000000000000 [ 149.506476][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.904821][ T5781] Bluetooth: hci4: command 0x1003 tx timeout [ 152.928563][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 153.922440][ T6577] loop3: detected capacity change from 0 to 164 [ 154.006115][ T6579] loop2: detected capacity change from 0 to 1024 [ 154.013966][ T6579] EXT4-fs: inline encryption not supported [ 154.035136][ T6579] EXT4-fs: inline encryption not supported [ 154.061208][ T6579] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.102456][ T6579] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.205596][ T6579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 154.228068][ T6579] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.235368][ T6591] loop1: detected capacity change from 0 to 128 [ 154.307086][ T6591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 154.344019][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 154.358474][ T6591] System zones: 1-3, 19-19, 35-36 [ 154.365139][ T6591] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 154.400449][ T6591] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 154.432479][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.526403][ T6591] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 5 (only 1 groups) [ 154.770187][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.022218][ T2115] Bluetooth: hci4: Frame reassembly failed (-84) [ 155.097268][ T6606] atomic_op ffff888077e1f198 conn xmit_atomic 0000000000000000 [ 156.552852][ T6617] loop1: detected capacity change from 0 to 256 [ 156.567235][ T6617] exfat: Deprecated parameter 'utf8' [ 156.573143][ T6617] exfat: Deprecated parameter 'utf8' [ 156.578610][ T6617] exfat: Deprecated parameter 'namecase' [ 156.584582][ T6617] exfat: Deprecated parameter 'namecase' [ 156.631176][ T6617] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 156.789467][ T6618] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 156.978771][ T6622] loop1: detected capacity change from 0 to 164 [ 157.048722][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 157.056074][ T5781] Bluetooth: hci4: command 0x1003 tx timeout [ 157.299210][ T6625] loop1: detected capacity change from 0 to 1024 [ 157.317674][ T6625] EXT4-fs: inline encryption not supported [ 157.334067][ T6625] EXT4-fs: inline encryption not supported [ 157.358678][ T6625] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.383684][ T6625] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.443310][ T6625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 157.489264][ T6625] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.489510][ T6629] loop2: detected capacity change from 0 to 1024 [ 157.514436][ T6629] EXT4-fs: Ignoring removed orlov option [ 157.523217][ T6629] EXT4-fs: inline encryption not supported [ 157.552516][ T6629] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 157.614706][ T6629] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 157.646200][ T6629] EXT4-fs (loop2): group descriptors corrupted! [ 157.661334][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 158.466894][ T6643] atomic_op ffff888025687998 conn xmit_atomic 0000000000000000 [ 159.379684][ T6654] loop2: detected capacity change from 0 to 1024 [ 159.404083][ T6654] EXT4-fs: inline encryption not supported [ 159.418612][ T6654] EXT4-fs: inline encryption not supported [ 159.434530][ T6654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.557291][ T6654] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.643170][ T6654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 159.675969][ T6654] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.692759][ T6662] loop1: detected capacity change from 0 to 256 [ 159.809675][ T6663] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 159.834835][ T1134] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm kworker/u4:7: lblock 0 mapped to illegal pblock 0 (length 1) [ 159.891374][ T1134] EXT4-fs (loop2): Remounting filesystem read-only [ 159.910861][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 161.128702][ T788] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 161.430468][ T788] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 161.618773][ T788] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 161.648330][ T788] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 161.668323][ T788] usb 1-1: config 0 interface 0 has no altsetting 0 [ 161.676620][ T788] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 161.678931][ T6680] capability: warning: `syz.1.249' uses deprecated v2 capabilities in a way that may be insecure [ 161.687955][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.726739][ T788] usb 1-1: config 0 descriptor?? [ 161.743110][ T6673] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 161.758985][ T6673] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 162.211408][ T6673] tipc: Started in network mode [ 162.211436][ T6673] tipc: Node identity _, cluster identity 4711 [ 162.211489][ T6673] tipc: Enabling of bearer rejected, failed to enable media [ 162.278818][ T788] logitech-djreceiver 0003:046D:C71F.0001: hidraw0: USB HID v0.00 Joystick [HID 046d:c71f] on usb-dummy_hcd.0-1/input0 [ 162.443281][ T6692] udevd[6692]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 162.478308][ T1198] usb 1-1: USB disconnect, device number 6 [ 162.541636][ T6698] atomic_op ffff888024cb0198 conn xmit_atomic 0000000000000000 [ 163.191999][ T6696] loop3: detected capacity change from 0 to 1024 [ 163.200622][ T6696] EXT4-fs: inline encryption not supported [ 163.206594][ T6696] EXT4-fs: inline encryption not supported [ 163.212678][ T6696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.236720][ T6696] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.293010][ T6696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 163.328614][ T6696] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.506307][ T59] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm kworker/u4:4: lblock 0 mapped to illegal pblock 0 (length 1) [ 163.610146][ T59] EXT4-fs (loop3): Remounting filesystem read-only [ 163.629499][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 164.551502][ T6709] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -5 [ 164.561592][ T6709] platform regulatory.0: Direct firmware load for regulatory.db failed with error -5 [ 164.572033][ T6709] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 165.942025][ T6725] loop3: detected capacity change from 0 to 512 [ 165.995571][ T6725] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 166.019474][ T6725] System zones: 1-12 [ 166.037892][ T6725] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.263: missing EA_INODE flag [ 166.071276][ T6725] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.263: error while reading EA inode 12 err=-117 [ 166.125112][ T6725] EXT4-fs (loop3): 1 orphan inode deleted [ 166.146236][ T6725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.255081][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.719138][ T6736] atomic_op ffff8880238f4198 conn xmit_atomic 0000000000000000 [ 166.944908][ T6735] loop1: detected capacity change from 0 to 1024 [ 167.095335][ T6735] EXT4-fs: inline encryption not supported [ 167.231980][ T6735] EXT4-fs: inline encryption not supported [ 167.294735][ T6735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.343888][ T6735] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.410272][ T6738] loop2: detected capacity change from 0 to 512 [ 167.460903][ T6735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 167.514800][ T6735] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.547834][ T6738] EXT4-fs (loop2): orphan cleanup on readonly fs [ 167.571437][ T6738] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.267: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 167.626487][ T6738] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.267: ea_inode dec ref err=-117 [ 167.642316][ T6738] EXT4-fs (loop2): 1 orphan inode deleted [ 167.649216][ T2115] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm kworker/u4:8: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.650663][ T6738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 167.667493][ T2115] EXT4-fs (loop1): Remounting filesystem read-only [ 169.080769][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 169.136149][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.390232][ T6751] loop0: detected capacity change from 0 to 512 [ 169.465617][ T6751] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 169.476709][ T6755] syzkaller1: entered promiscuous mode [ 169.482971][ T6755] syzkaller1: entered allmulticast mode [ 169.494189][ T6751] System zones: 1-12 [ 169.507928][ T6751] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.272: missing EA_INODE flag [ 169.557799][ T6759] loop3: detected capacity change from 0 to 164 [ 169.591724][ T6751] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.272: error while reading EA inode 12 err=-117 [ 169.612485][ T6751] EXT4-fs (loop0): 1 orphan inode deleted [ 169.621506][ T6751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.763814][ T6394] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 169.777016][ T6760] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 169.923994][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.154062][ T6771] loop3: detected capacity change from 0 to 1024 [ 170.183558][ T6776] loop2: detected capacity change from 0 to 512 [ 170.191344][ T6771] EXT4-fs: inline encryption not supported [ 170.202365][ T6776] EXT4-fs (loop2): orphan cleanup on readonly fs [ 170.212388][ T6776] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.280: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 170.236148][ T6771] EXT4-fs: inline encryption not supported [ 170.260433][ T6776] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.280: ea_inode dec ref err=-117 [ 170.283192][ T6778] atomic_op ffff88805a32d198 conn xmit_atomic 0000000000000000 [ 170.402670][ T6771] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.504608][ T6776] EXT4-fs (loop2): 1 orphan inode deleted [ 170.583582][ T6771] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.680871][ T6776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 170.889336][ T6771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 171.005747][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.028503][ T6771] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.113391][ T12] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm kworker/u4:1: lblock 0 mapped to illegal pblock 0 (length 1) [ 171.139617][ T12] EXT4-fs (loop3): Remounting filesystem read-only [ 171.151395][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 171.188480][ T6789] loop2: detected capacity change from 0 to 512 [ 171.353782][ T6789] EXT4-fs (loop2): orphan cleanup on readonly fs [ 171.521853][ T6789] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.282: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 171.824213][ T6789] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.282: ea_inode dec ref err=-117 [ 171.867361][ T6789] EXT4-fs (loop2): 1 orphan inode deleted [ 171.909829][ T6789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 171.980950][ T6789] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 172.043502][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.065712][ T6798] loop0: detected capacity change from 0 to 512 [ 172.136095][ T6798] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 172.176173][ T6798] System zones: 1-12 [ 172.181433][ T6798] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.286: missing EA_INODE flag [ 172.193491][ T6798] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.286: error while reading EA inode 12 err=-117 [ 172.243249][ T6798] EXT4-fs (loop0): 1 orphan inode deleted [ 172.251880][ T6798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.464943][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.510078][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 173.148622][ T6807] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 173.554414][ T6815] loop2: detected capacity change from 0 to 1024 [ 173.568409][ T6815] EXT4-fs: inline encryption not supported [ 173.588523][ T6815] EXT4-fs: inline encryption not supported [ 173.594504][ T6815] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.648385][ T6815] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.688420][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 173.696691][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.720833][ T6815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 173.752917][ T23] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 173.783057][ T6815] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.786346][ T23] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 173.831476][ T23] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 173.849553][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.894358][ T6823] atomic_op ffff88801f38b198 conn xmit_atomic 0000000000000000 [ 174.001337][ T23] usb 4-1: Product: syz [ 174.057300][ T23] usb 4-1: Manufacturer: syz [ 174.102404][ T23] usb 4-1: SerialNumber: syz [ 174.405774][ T6825] loop1: detected capacity change from 0 to 512 [ 174.409468][ T12] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm kworker/u4:1: lblock 0 mapped to illegal pblock 0 (length 1) [ 174.433315][ T12] EXT4-fs (loop2): Remounting filesystem read-only [ 174.443245][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 174.547502][ T23] usb 4-1: Can't get UAC3 power state for id 10 [ 174.564630][ T6825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.580134][ T6825] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.589285][ T23] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 174.613366][ T23] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 174.647111][ T6831] loop0: detected capacity change from 0 to 512 [ 174.695128][ T6831] EXT4-fs (loop0): orphan cleanup on readonly fs [ 174.711076][ T6831] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.295: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 174.715500][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.021005][ T6831] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.295: ea_inode dec ref err=-117 [ 175.205356][ T6831] EXT4-fs (loop0): 1 orphan inode deleted [ 175.415340][ T6831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 175.446870][ T23] usb 4-1: USB disconnect, device number 7 [ 175.476642][ T6831] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 175.633493][ T6838] udevd[6838]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.657609][ T59] tipc: Subscription rejected, illegal request [ 175.724398][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.795849][ T5840] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 176.962881][ T6859] loop0: detected capacity change from 0 to 1024 [ 176.979421][ T6859] EXT4-fs: inline encryption not supported [ 176.995795][ T6859] EXT4-fs: inline encryption not supported [ 177.002082][ T5840] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 177.013835][ T5840] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 177.025852][ T6859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.033256][ T5840] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 177.044668][ T5840] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 177.072876][ T6859] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 177.088416][ T5840] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.113156][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.146317][ T5840] usb 2-1: Product: syz [ 177.165081][ T5840] usb 2-1: Manufacturer: syz [ 177.189440][ T5840] usb 2-1: SerialNumber: syz [ 177.196817][ T6859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 177.212562][ T6843] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 177.254398][ T5840] cdc_mbim 2-1:1.0: skipping garbage [ 177.283553][ T6859] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.297327][ T6869] atomic_op ffff888077e19998 conn xmit_atomic 0000000000000000 [ 177.798775][ T5840] cdc_mbim 2-1:1.0: bind() failure [ 177.825162][ T5840] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 177.868422][ T5840] cdc_ncm 2-1:1.1: bind() failure [ 177.912430][ T5840] usb 2-1: USB disconnect, device number 2 [ 177.967900][ T12] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm kworker/u4:1: lblock 0 mapped to illegal pblock 0 (length 1) [ 177.974702][ T6872] loop3: detected capacity change from 0 to 512 [ 178.003682][ T12] EXT4-fs (loop0): Remounting filesystem read-only [ 178.016709][ T6872] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 178.028479][ T6872] System zones: 1-12 [ 178.029894][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 178.049413][ T6872] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.305: missing EA_INODE flag [ 178.123112][ T6872] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.305: error while reading EA inode 12 err=-117 [ 178.138183][ T6872] EXT4-fs (loop3): 1 orphan inode deleted [ 178.162773][ T6872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.235140][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.406510][ T6881] loop3: detected capacity change from 0 to 512 [ 178.474469][ T6881] EXT4-fs (loop3): orphan cleanup on readonly fs [ 178.514474][ T6881] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.307: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 178.602166][ T6881] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.307: ea_inode dec ref err=-117 [ 178.664640][ T6881] EXT4-fs (loop3): 1 orphan inode deleted [ 179.125761][ T6881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 179.234410][ T6895] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 179.745732][ T6881] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 179.827661][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.145077][ T6909] atomic_op ffff88801e35e998 conn xmit_atomic 0000000000000000 [ 181.757898][ T6922] loop0: detected capacity change from 0 to 164 [ 182.456598][ T6930] loop0: detected capacity change from 0 to 512 [ 182.524962][ T6930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.553879][ T6930] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.595977][ T6930] mtrr: base(0x10000) is not aligned on a size(0x11710000) boundary [ 182.713940][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.077347][ T6933] loop1: detected capacity change from 0 to 40427 [ 183.093259][ T6933] F2FS-fs (loop1): invalid crc value [ 183.119079][ T6933] F2FS-fs (loop1): Found nat_bits in checkpoint [ 183.140381][ T6945] atomic_op ffff88805a986998 conn xmit_atomic 0000000000000000 [ 183.279707][ T6933] F2FS-fs (loop1): Start checkpoint disabled! [ 183.319560][ T6933] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 186.297098][ T6963] loop2: detected capacity change from 0 to 40427 [ 186.328126][ T6963] F2FS-fs (loop2): invalid crc value [ 186.396662][ T6963] F2FS-fs (loop2): Found nat_bits in checkpoint [ 186.497374][ T6985] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 186.564694][ T6963] F2FS-fs (loop2): Start checkpoint disabled! [ 186.601479][ T6984] netlink: 452 bytes leftover after parsing attributes in process `syz.3.339'. [ 186.636564][ T6963] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 186.778522][ T6963] ------------[ cut here ]------------ [ 186.784497][ T6963] kernel BUG at fs/f2fs/segment.c:3489! [ 186.790217][ T6963] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 186.796313][ T6963] CPU: 1 PID: 6963 Comm: syz.2.334 Not tainted syzkaller #0 [ 186.803622][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.813713][ T6963] RIP: 0010:f2fs_allocate_data_block+0x3fa1/0x3fd0 [ 186.820262][ T6963] Code: af 11 fe 49 8d 57 1c e9 8a e1 ff ff e8 08 23 b9 fd 48 c7 c7 b0 67 71 8d 4c 89 f6 e8 a9 0e 99 00 e9 a6 e1 ff ff e8 ef 22 b9 fd <0f> 0b e8 e8 22 b9 fd 0f 0b e8 e1 22 b9 fd 0f 0b e8 da 22 b9 fd 0f [ 186.839888][ T6963] RSP: 0018:ffffc9000c5ff410 EFLAGS: 00010287 [ 186.845982][ T6963] RAX: ffffffff83ce6861 RBX: 0000000000000202 RCX: 0000000000080000 [ 186.853980][ T6963] RDX: ffffc9000d1e3000 RSI: 000000000001cf65 RDI: 000000000001cf66 [ 186.856798][ T6989] loop3: detected capacity change from 0 to 512 [ 186.862309][ T6963] RBP: 0000000000000200 R08: ffff88802ef3845f R09: 1ffff11005de708b [ 186.862327][ T6963] R10: dffffc0000000000 R11: ffffed1005de708c R12: ffff888024980f64 [ 186.862340][ T6963] R13: ffff888024980168 R14: 0000000000003202 R15: dffffc0000000000 [ 186.862352][ T6963] FS: 00007f4319dbd6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 186.862367][ T6963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.862379][ T6963] CR2: 0000200000000080 CR3: 000000002f57a000 CR4: 00000000003506e0 [ 186.862395][ T6963] Call Trace: [ 186.895969][ T6989] EXT4-fs (loop3): orphan cleanup on readonly fs [ 186.902083][ T6963] [ 186.902107][ T6963] f2fs_map_blocks+0x13ec/0x4080 [ 186.902151][ T6963] ? f2fs_get_block_locked+0xe0/0xe0 [ 186.902177][ T6963] ? __up_read+0x2b8/0x6b0 [ 186.902193][ T6963] ? __lock_acquire+0x7d80/0x7d80 [ 186.902215][ T6963] ? up_write+0x1be/0x410 [ 186.902235][ T6963] f2fs_expand_inode_data+0x62b/0x9f0 [ 186.902263][ T6963] ? f2fs_insert_range+0x390/0x390 [ 186.902282][ T6963] ? inode_update_timestamps+0x4a0/0x600 [ 186.902309][ T6963] ? do_raw_spin_unlock+0x121/0x230 [ 186.902330][ T6963] ? __mnt_drop_write_file+0xc3/0x100 [ 186.902348][ T6963] ? file_modified_flags+0x230/0x260 [ 186.902372][ T6963] f2fs_fallocate+0x41c/0x8f0 [ 186.902390][ T6963] vfs_fallocate+0x585/0x6f0 [ 186.995411][ T6963] do_vfs_ioctl+0x19ef/0x1cc0 [ 187.000118][ T6963] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 187.005751][ T6963] ? tomoyo_path_number_perm+0x217/0x5e0 [ 187.011387][ T6963] ? __lock_acquire+0x7d80/0x7d80 [ 187.016410][ T6963] ? slab_free_freelist_hook+0x130/0x1a0 [ 187.022076][ T6963] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 187.027734][ T6963] ? tomoyo_path_number_perm+0x217/0x5e0 [ 187.033374][ T6963] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 187.038841][ T6963] ? __fget_files+0x28/0x460 [ 187.043447][ T6963] ? bpf_lsm_file_ioctl+0x9/0x10 [ 187.048392][ T6963] ? security_file_ioctl+0x80/0xa0 [ 187.053517][ T6963] __se_sys_ioctl+0x83/0x170 [ 187.058112][ T6963] do_syscall_64+0x55/0xb0 [ 187.062536][ T6963] ? clear_bhb_loop+0x40/0x90 [ 187.067237][ T6963] ? clear_bhb_loop+0x40/0x90 [ 187.071915][ T6963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.077810][ T6963] RIP: 0033:0x7f4318f9e159 [ 187.082227][ T6963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.101916][ T6963] RSP: 002b:00007f4319dbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.110327][ T6963] RAX: ffffffffffffffda RBX: 00007f4319225fa0 RCX: 00007f4318f9e159 [ 187.118317][ T6963] RDX: 00002000000000c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 187.126279][ T6963] RBP: 00007f431903506b R08: 0000000000000000 R09: 0000000000000000 [ 187.134261][ T6963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.142234][ T6963] R13: 00007f4319226038 R14: 00007f4319225fa0 R15: 00007fff021a47a8 [ 187.150223][ T6963] [ 187.153241][ T6963] Modules linked in: [ 187.157228][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.176149][ T6963] ---[ end trace 0000000000000000 ]--- [ 187.181721][ T6963] RIP: 0010:f2fs_allocate_data_block+0x3fa1/0x3fd0 [ 187.189664][ T6963] Code: af 11 fe 49 8d 57 1c e9 8a e1 ff ff e8 08 23 b9 fd 48 c7 c7 b0 67 71 8d 4c 89 f6 e8 a9 0e 99 00 e9 a6 e1 ff ff e8 ef 22 b9 fd <0f> 0b e8 e8 22 b9 fd 0f 0b e8 e1 22 b9 fd 0f 0b e8 da 22 b9 fd 0f [ 187.214550][ T6963] RSP: 0018:ffffc9000c5ff410 EFLAGS: 00010287 [ 187.220967][ T6963] RAX: ffffffff83ce6861 RBX: 0000000000000202 RCX: 0000000000080000 [ 187.230501][ T6963] RDX: ffffc9000d1e3000 RSI: 000000000001cf65 RDI: 000000000001cf66 [ 187.233185][ T6989] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.340: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 187.239853][ T6963] RBP: 0000000000000200 R08: ffff88802ef3845f R09: 1ffff11005de708b [ 187.262606][ T6989] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.340: ea_inode dec ref err=-117 [ 187.272303][ T6963] R10: dffffc0000000000 R11: ffffed1005de708c R12: ffff888024980f64 [ 187.275690][ T6989] EXT4-fs (loop3): 1 orphan inode deleted [ 187.293971][ T6963] R13: ffff888024980168 R14: 0000000000003202 R15: dffffc0000000000 [ 187.294751][ T6989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 187.305959][ T6963] FS: 00007f4319dbd6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 187.328362][ T6963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.330582][ T6989] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 187.335311][ T6963] CR2: 00007f65d9def2f8 CR3: 000000002f57a000 CR4: 00000000003506f0 [ 187.353044][ T6963] Kernel panic - not syncing: Fatal exception [ 187.359375][ T6963] Kernel Offset: disabled [ 187.363692][ T6963] Rebooting in 86400 seconds..