last executing test programs: 2m57.857241774s ago: executing program 3 (id=1477): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x12, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x4, 0x339, &(0x7f0000000140)="$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") landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mprotect(&(0x7f000027f000/0x3000)=nil, 0x3000, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000d00)=ANY=[], 0x3, 0xaae, &(0x7f00000013c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl(r4, 0x8b21, &(0x7f0000000040)) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000001f40), 0x0, 0x10020, 0x0) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x48804, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2m56.513661414s ago: executing program 3 (id=1479): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r2, 0x0, 0x0) pwritev2(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000b40)={0x17c04, r0, 0x800, 0x40eca, 0x7, 0x10003}) 2m55.603132648s ago: executing program 3 (id=1481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @link_local}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14004801}, 0x800) 2m55.155468604s ago: executing program 3 (id=1483): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000907000/0x1000)=nil, 0x1000, 0xb) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x80fe, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="2e000300010000", 0x7) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2m50.733971989s ago: executing program 3 (id=1492): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000001340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@grpid}, {@errors_remount}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x60a, &(0x7f0000001c40)="$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") r1 = fspick(0xffffffffffffff9c, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 2m44.649130737s ago: executing program 3 (id=1503): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x22020400) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[], 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) r3 = io_uring_setup(0x5f2c, &(0x7f00000002c0)={0x0, 0x698c, 0x80, 0xfffffffd, 0xfffffffe}) close_range(r3, r3, 0x200000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2000000e, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x66, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900"], 0x34}}, 0x0) 2m28.643698241s ago: executing program 32 (id=1503): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x22020400) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[], 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) r3 = io_uring_setup(0x5f2c, &(0x7f00000002c0)={0x0, 0x698c, 0x80, 0xfffffffd, 0xfffffffe}) close_range(r3, r3, 0x200000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2000000e, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x66, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900"], 0x34}}, 0x0) 16.284243483s ago: executing program 1 (id=2035): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x19, 0x0, @thr={0x0, &(0x7f0000000440)}}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 11.348425735s ago: executing program 1 (id=2060): syz_open_dev$evdev(0x0, 0x0, 0xab42) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 9.378358153s ago: executing program 2 (id=2066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 8.966598659s ago: executing program 1 (id=2067): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x4, [@enum={0xe, 0x7, 0x0, 0x6, 0x4, [{0xc, 0x2}, {0xa, 0xffbe}, {0x8, 0x9}, {0xc, 0x9}, {0x0, 0x88}, {}, {0xe}]}, @fwd={0x10}, @restrict={0x8, 0x0, 0x0, 0xb, 0x3}, @enum={0xb}, @volatile={0x2, 0x0, 0x0, 0x9, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x4}}, @func={0xa, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f0000000000)=""/112, 0xb4, 0x70, 0x0, 0x7fff, 0x0, @void, @value}, 0x28) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0x6) 8.714321273s ago: executing program 2 (id=2071): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x19, 0x0, @thr={0x0, &(0x7f0000000440)}}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 8.636525314s ago: executing program 1 (id=2072): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8.356067788s ago: executing program 5 (id=2074): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 8.114670212s ago: executing program 5 (id=2075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x98c2, &(0x7f0000000700)="$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") 5.846979725s ago: executing program 5 (id=2079): syz_open_dev$evdev(0x0, 0x0, 0xab42) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x40}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 5.153436985s ago: executing program 4 (id=2081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 4.876752549s ago: executing program 2 (id=2083): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000000000008504000000000000"]) 4.733831931s ago: executing program 4 (id=2084): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x4}, {0x7b, 0xe, 0x3, 0x2}]}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 4.652799562s ago: executing program 4 (id=2085): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) sched_setscheduler(0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x4000000000000045, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000040), &(0x7f0000000600)=[r3], &(0x7f0000000200)}) 4.561582914s ago: executing program 0 (id=2086): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="b70200000b000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f7a80d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001e8c76bbe7ff988a28ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4522bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b9fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabfd50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd1389a0963de85dd2b189774450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f326df86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c39b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa525235da0000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc32a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f8293cf83bceaf6c9eda1f83166aa1e2093d626870510e6cd176d501fe01e4a752fc30134073188e3f826f695e4e14fca6596943467c7df154493023f77c107b3db20ea75b493b4b38dc43986d94748cbfab954edae20982b6d212a44f4b40387876bc9eb73900"/3112], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x1, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 4.468090335s ago: executing program 5 (id=2087): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@noacl}]}, 0x1, 0x5599, &(0x7f0000005680)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) link(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x100, 0x0, 0x3) 4.411149826s ago: executing program 4 (id=2088): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xc0060, &(0x7f0000000e80)={[{@mode}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4000000000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x4800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000b002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}}, 0x0) 4.287288388s ago: executing program 2 (id=2089): socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$phonet_pipe(0x23, 0x5, 0x2) chdir(0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x9782, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x8680, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, &(0x7f0000000180)) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x7, 0xffffffff, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x65, 0x4, 0x0, 0x0, 0x0, @empty}}}}) socket(0x2c, 0x6, 0x100004) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read$qrtrtun(r6, 0x0, 0xeffd) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') unlinkat(r7, 0x0, 0x200) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) 3.660616147s ago: executing program 1 (id=2090): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setreuid(0xee01, 0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0x8001) r8 = getpgid(0x0) fcntl$setownex(r7, 0xf, &(0x7f0000000140)={0x0, r8}) sendmmsg$unix(r6, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x20040001) r9 = fcntl$dupfd(r5, 0x0, r5) readv(r9, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 3.156038654s ago: executing program 4 (id=2091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x8, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 2.696467141s ago: executing program 2 (id=2092): syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x1c802, &(0x7f0000000300)=ANY=[], 0x51, 0x5fbc, &(0x7f0000003100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.157049649s ago: executing program 1 (id=2093): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x19, 0x0, @thr={0x0, &(0x7f0000000440)}}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 2.0902831s ago: executing program 0 (id=2094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x85, 0x1}, {0x4002, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) 1.868692813s ago: executing program 4 (id=2095): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r5, 0x31f, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) 1.624610927s ago: executing program 0 (id=2096): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 1.40815763s ago: executing program 0 (id=2097): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x4, [@enum={0xe, 0x7, 0x0, 0x6, 0x4, [{0xc, 0x2}, {0xa, 0xffbe}, {0x8, 0x9}, {0xc, 0x9}, {0x0, 0x88}, {}, {0xe}]}, @fwd={0x10}, @restrict={0x8, 0x0, 0x0, 0xb, 0x3}, @enum={0xb}, @volatile={0x2, 0x0, 0x0, 0x9, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x4}}, @func={0xa, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f0000000000)=""/112, 0xb4, 0x70, 0x0, 0x7fff, 0x0, @void, @value}, 0x28) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0x6) 1.130993964s ago: executing program 0 (id=2098): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_create(0xe9) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1400, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x13, 0x84, 0x47}, 0x2c) 1.046734555s ago: executing program 5 (id=2099): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) sched_setscheduler(0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x4000000000000045, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000040), &(0x7f0000000600)=[r3], &(0x7f0000000200)}) 627.595481ms ago: executing program 0 (id=2100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 204.527717ms ago: executing program 2 (id=2101): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xc0060, &(0x7f0000000e80)={[{@mode}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4000000000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x4800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000b002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}}, 0x0) 0s ago: executing program 5 (id=2102): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121002, 0x0) linkat(r0, &(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') kernel console output (not intermixed with test programs): EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 264.033872][ T7904] EXT4-fs (loop3): Remounting filesystem read-only [ 264.041157][ T7912] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.060069][ T7904] EXT4-fs error (device loop3): ext4_ext_truncate:4453: inode #15: comm syz.3.1349: mark_inode_dirty error [ 264.073200][ T7904] EXT4-fs (loop3): Remounting filesystem read-only [ 264.077098][ T7912] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 3: comm syz.4.1351: lblock 3 mapped to illegal pblock 3 (length 1) [ 264.085577][ T7904] EXT4-fs error (device loop3): __ext4_get_inode_loc:4507: comm syz.3.1349: Invalid inode table block 0 in block_group 0 [ 264.107416][ T7904] EXT4-fs (loop3): Remounting filesystem read-only [ 264.114416][ T7904] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 264.129662][ T7904] EXT4-fs (loop3): Remounting filesystem read-only [ 264.136230][ T7904] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 264.173611][ T7904] EXT4-fs (loop3): Remounting filesystem read-only [ 264.182864][ T7912] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 264.191335][ T7904] EXT4-fs error (device loop3): __ext4_get_inode_loc:4507: comm syz.3.1349: Invalid inode table block 0 in block_group 0 [ 264.227569][ T7904] EXT4-fs (loop3): Remounting filesystem read-only [ 264.233963][ T7912] EXT4-fs (loop4): This should not happen!! Data will be lost [ 264.233963][ T7912] [ 264.243307][ T7904] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 264.265374][ T7904] EXT4-fs (loop3): Remounting filesystem read-only [ 264.277617][ T7904] EXT4-fs error (device loop3): ext4_truncate:4312: inode #15: comm syz.3.1349: mark_inode_dirty error [ 264.307663][ T7904] EXT4-fs (loop3): Remounting filesystem read-only [ 264.326874][ T7904] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 264.346718][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 264.357491][ T7904] EXT4-fs (loop3): Remounting filesystem read-only [ 264.377372][ T7904] EXT4-fs (loop3): 1 truncate cleaned up [ 264.387839][ T7904] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 264.486286][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 264.576197][ T7920] hub 6-0:1.0: USB hub found [ 264.581826][ T7920] hub 6-0:1.0: 1 port detected [ 265.454543][ T7928] loop3: detected capacity change from 0 to 764 [ 265.480666][ T7928] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 265.856818][ T4244] pegasus 2-1:0.0: can't reset MAC [ 265.862617][ T4244] pegasus: probe of 2-1:0.0 failed with error -5 [ 266.083282][ T7937] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 267.227725][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 267.287654][ T7943] IPVS: Error joining to the multicast group [ 267.836248][ T4244] usb 2-1: USB disconnect, device number 3 [ 268.632841][ T7958] netlink: 'syz.3.1360': attribute type 4 has an invalid length. [ 269.441349][ T7972] hub 6-0:1.0: USB hub found [ 269.448053][ T7972] hub 6-0:1.0: 1 port detected [ 270.100910][ T7978] netlink: 'syz.0.1373': attribute type 3 has an invalid length. [ 270.413846][ T7950] loop4: detected capacity change from 0 to 32768 [ 271.044959][ T7974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.368947][ T7999] netlink: 'syz.0.1380': attribute type 4 has an invalid length. [ 271.955734][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1384'. [ 271.967500][ T8013] IPVS: Error joining to the multicast group [ 272.318049][ T14] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 272.539603][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 272.578089][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.601886][ T14] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 272.631500][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.726148][ T14] usb 3-1: config 0 descriptor?? [ 273.166021][ T14] isku 0003:1E7D:319C.0002: unknown main item tag 0x0 [ 273.183879][ T14] isku 0003:1E7D:319C.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 273.574231][ T14] usb 3-1: USB disconnect, device number 3 [ 273.632565][ T8031] loop4: detected capacity change from 0 to 4096 [ 273.659246][ T8038] netlink: 'syz.0.1393': attribute type 4 has an invalid length. [ 273.705534][ T8031] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 273.962046][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1395'. [ 273.997233][ T8042] IPVS: Error joining to the multicast group [ 274.007012][ T8044] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1396'. [ 274.774847][ T8060] loop2: detected capacity change from 0 to 512 [ 274.843599][ T8060] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 275.139881][ T8060] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 275.177260][ T8060] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 275.241449][ T8065] netlink: 'syz.3.1404': attribute type 4 has an invalid length. [ 277.797223][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 277.830222][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 277.843331][ T8093] IPVS: Error joining to the multicast group [ 278.417793][ T8108] hub 6-0:1.0: USB hub found [ 278.423302][ T8108] hub 6-0:1.0: 1 port detected [ 278.849235][ T8106] loop3: detected capacity change from 0 to 764 [ 278.899696][ T8106] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 279.156016][ T8114] netlink: 'syz.1.1416': attribute type 4 has an invalid length. [ 279.208925][ T8118] loop3: detected capacity change from 0 to 1024 [ 279.296756][ T8118] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 279.314029][ T8118] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.368054][ T4267] Bluetooth: hci4: command 0x0405 tx timeout [ 279.413506][ T8118] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 3: comm syz.3.1418: lblock 3 mapped to illegal pblock 3 (length 1) [ 279.470187][ T8118] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 279.533990][ T8118] EXT4-fs (loop3): This should not happen!! Data will be lost [ 279.533990][ T8118] [ 279.605625][ T8127] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.1418: Freeing blocks not in datazone - block = 3, count = 1 [ 280.233971][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 281.289310][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'. [ 281.484594][ T8149] IPVS: Error joining to the multicast group [ 282.399114][ T8156] hub 6-0:1.0: USB hub found [ 282.404657][ T8156] hub 6-0:1.0: 1 port detected [ 283.216358][ T8172] loop4: detected capacity change from 0 to 1024 [ 283.302742][ T8172] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 283.315019][ T8172] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.347197][ T8172] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 3: comm syz.4.1434: lblock 3 mapped to illegal pblock 3 (length 1) [ 283.436055][ T8172] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 283.483899][ T8172] EXT4-fs (loop4): This should not happen!! Data will be lost [ 283.483899][ T8172] [ 283.561161][ T8181] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.1434: Freeing blocks not in datazone - block = 3, count = 1 [ 283.745840][ T8184] loop3: detected capacity change from 0 to 1024 [ 283.789191][ T8184] EXT4-fs: inline encryption not supported [ 283.829676][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 283.862393][ T8184] EXT4-fs: Mount option(s) incompatible with ext2 [ 284.032766][ T8165] loop2: detected capacity change from 0 to 32768 [ 284.123625][ T8165] XFS (loop2): Mounting V5 Filesystem [ 284.201369][ T8165] XFS (loop2): Ending clean mount [ 284.357688][ T8165] overlayfs: missing 'lowerdir' [ 284.421221][ T8165] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 284.484413][ T8165] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 284.529228][ T8165] XFS (loop2): Unmount and run xfs_repair [ 284.546606][ T8165] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 284.609894][ T8165] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 284.637174][ T8165] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 284.656791][ T8165] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 284.691142][ T8165] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01 ....lK.......... [ 284.711404][ T8165] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 284.733735][ T8165] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 284.759110][ T8165] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 284.793153][ T8165] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 284.806542][ T8165] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x14 len 4 error 74 [ 284.825986][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1443'. [ 284.843568][ T8203] IPVS: Error joining to the multicast group [ 284.868655][ T8165] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x54e/0x9a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 284.932222][ T8165] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 284.983186][ T4722] loop2: writeback error on inode 6150, offset 0, sector 12252 [ 285.511010][ T8205] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 286.296059][ T8217] hub 6-0:1.0: USB hub found [ 286.301830][ T8217] hub 6-0:1.0: 1 port detected [ 287.053144][ T8219] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1448'. [ 287.111388][ T8219] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 287.130044][ T4253] XFS (loop2): Unmounting Filesystem [ 287.356758][ T8229] loop3: detected capacity change from 0 to 764 [ 287.396302][ T8229] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 287.939378][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1455'. [ 288.198674][ T8241] IPVS: Error joining to the multicast group [ 289.936471][ T8251] loop2: detected capacity change from 0 to 1024 [ 290.021233][ T8251] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 290.048234][ T8232] loop3: detected capacity change from 0 to 32768 [ 290.061335][ T8232] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1453 (8232) [ 290.077057][ T8251] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.088029][ T4722] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 290.156128][ T8232] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 290.156378][ T8251] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 1: comm syz.2.1459: lblock 1 mapped to illegal pblock 1 (length 15) [ 290.242949][ T8251] EXT4-fs error (device loop2): ext4_ext_remove_space:2929: inode #15: comm syz.2.1459: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 290.264402][ T8232] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 290.297177][ T8232] BTRFS info (device loop3): enabling disk space caching [ 290.312282][ T4722] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.336642][ T4722] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 290.338502][ T8232] BTRFS info (device loop3): enabling auto defrag [ 290.379034][ T4722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.420531][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 290.431972][ T4722] usb 2-1: config 0 descriptor?? [ 290.473303][ T4722] pwc: Askey VC010 type 2 USB webcam detected. [ 290.525489][ T8232] BTRFS info (device loop3): doing ref verification [ 290.533641][ T8232] BTRFS info (device loop3): use no compression [ 290.540147][ T8232] BTRFS info (device loop3): force clearing of disk cache [ 290.547344][ T8232] BTRFS info (device loop3): disabling disk space caching [ 291.377849][ T8285] loop2: detected capacity change from 0 to 1024 [ 291.441466][ T8232] BTRFS error (device loop3): open_ctree failed: -12 [ 291.482071][ T4272] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (4272) [ 291.573482][ T8293] Bluetooth: MGMT ver 1.22 [ 291.710546][ T8285] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 291.883396][ T8285] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.192607][ T4722] pwc: recv_control_msg error -32 req 02 val 2b00 [ 292.223214][ T8285] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 3: comm syz.2.1464: lblock 3 mapped to illegal pblock 3 (length 1) [ 292.549317][ T8285] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 292.779739][ T8285] EXT4-fs (loop2): This should not happen!! Data will be lost [ 292.779739][ T8285] [ 292.849926][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 293.280378][ T4722] pwc: recv_control_msg error -71 req 02 val 2700 [ 293.290611][ T4722] pwc: recv_control_msg error -71 req 02 val 2c00 [ 293.348135][ T4723] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 293.383299][ T4722] pwc: recv_control_msg error -71 req 04 val 1000 [ 293.425248][ T4722] pwc: recv_control_msg error -71 req 04 val 1300 [ 293.450261][ T4722] pwc: recv_control_msg error -71 req 04 val 1400 [ 293.467355][ T4722] pwc: recv_control_msg error -71 req 02 val 2000 [ 293.477499][ T4722] pwc: recv_control_msg error -71 req 02 val 2100 [ 293.495021][ T4722] pwc: recv_control_msg error -71 req 04 val 1500 [ 293.505573][ T4722] pwc: recv_control_msg error -71 req 02 val 2500 [ 293.522966][ T4722] pwc: recv_control_msg error -71 req 02 val 2400 [ 293.558468][ T4722] pwc: recv_control_msg error -71 req 02 val 2600 [ 293.573368][ T4723] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.594036][ T4722] pwc: recv_control_msg error -71 req 02 val 2900 [ 293.600681][ T4723] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.619107][ T4722] pwc: recv_control_msg error -71 req 02 val 2800 [ 293.626349][ T4723] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 293.704181][ T4723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 293.713089][ T4722] pwc: recv_control_msg error -71 req 04 val 1100 [ 293.723863][ T4723] usb 4-1: SerialNumber: syz [ 293.732552][ T4722] pwc: recv_control_msg error -71 req 04 val 1200 [ 293.767686][ T4722] pwc: Registered as video103. [ 293.784915][ T8314] loop1: detected capacity change from 0 to 1024 [ 293.795113][ T4722] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 293.886585][ T4722] usb 2-1: USB disconnect, device number 4 [ 293.901030][ T8314] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 293.984119][ T4723] usb 4-1: 0:2 : does not exist [ 294.018256][ T8314] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.145937][ T8314] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 1: comm syz.1.1474: lblock 1 mapped to illegal pblock 1 (length 15) [ 294.161985][ T4723] usb 4-1: USB disconnect, device number 4 [ 294.301959][ T8314] EXT4-fs error (device loop1): ext4_ext_remove_space:2929: inode #15: comm syz.1.1474: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 294.463270][ T8304] loop4: detected capacity change from 0 to 32768 [ 294.638472][ T4262] EXT4-fs (loop1): unmounting filesystem. [ 294.671411][ T8304] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 294.733031][ T8327] loop3: detected capacity change from 0 to 64 [ 294.860405][ T8304] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 294.937637][ T8330] loop1: detected capacity change from 0 to 1024 [ 295.006627][ T8330] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 295.084088][ T8330] EXT4-fs (loop1): orphan cleanup on readonly fs [ 295.618942][ T8330] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm syz.1.1476: Invalid inode table block 0 in block_group 0 [ 295.700208][ T8330] EXT4-fs (loop1): Remounting filesystem read-only [ 295.767786][ T8330] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 295.851894][ T8330] EXT4-fs (loop1): Remounting filesystem read-only [ 295.900630][ T8330] EXT4-fs error (device loop1): ext4_quota_write:7226: inode #3: comm syz.1.1476: mark_inode_dirty error [ 295.931383][ T8330] EXT4-fs (loop1): Remounting filesystem read-only [ 295.938696][ T8330] __quota_error: 102 callbacks suppressed [ 295.938711][ T8330] Quota error (device loop1): write_blk: dquota write failed [ 295.942441][ T4260] ocfs2: Unmounting device (7,4) on (node local) [ 295.968753][ T8330] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 296.048559][ T8330] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.1476: Failed to acquire dquot type 0 [ 296.087474][ T8330] EXT4-fs (loop1): Remounting filesystem read-only [ 296.111989][ T8330] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm syz.1.1476: Invalid inode table block 0 in block_group 0 [ 296.188283][ T8330] EXT4-fs (loop1): Remounting filesystem read-only [ 296.226984][ T8338] loop3: detected capacity change from 0 to 1024 [ 296.233718][ T8330] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 296.271325][ T8330] EXT4-fs (loop1): Remounting filesystem read-only [ 296.303713][ T8330] EXT4-fs error (device loop1): ext4_ext_truncate:4453: inode #15: comm syz.1.1476: mark_inode_dirty error [ 296.304666][ T8338] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 296.328448][ T8338] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.370237][ T8330] EXT4-fs (loop1): Remounting filesystem read-only [ 296.457997][ T8330] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm syz.1.1476: Invalid inode table block 0 in block_group 0 [ 296.479052][ T8338] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 3: comm syz.3.1479: lblock 3 mapped to illegal pblock 3 (length 1) [ 296.490734][ T8330] EXT4-fs (loop1): Remounting filesystem read-only [ 296.539838][ T8330] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 296.568540][ T8330] EXT4-fs (loop1): Remounting filesystem read-only [ 296.568614][ T8338] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 296.575083][ T8330] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 296.606953][ T8330] EXT4-fs (loop1): Remounting filesystem read-only [ 296.613974][ T8330] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm syz.1.1476: Invalid inode table block 0 in block_group 0 [ 296.632021][ T8330] EXT4-fs (loop1): Remounting filesystem read-only [ 296.638885][ T8330] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 296.651767][ T8330] EXT4-fs (loop1): Remounting filesystem read-only [ 296.665935][ T8330] EXT4-fs error (device loop1): ext4_truncate:4312: inode #15: comm syz.1.1476: mark_inode_dirty error [ 296.668108][ T8338] EXT4-fs (loop3): This should not happen!! Data will be lost [ 296.668108][ T8338] [ 296.693490][ T8330] EXT4-fs (loop1): Remounting filesystem read-only [ 296.702798][ T8330] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 296.716505][ T8330] EXT4-fs (loop1): Remounting filesystem read-only [ 296.729218][ T8342] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.1479: Freeing blocks not in datazone - block = 3, count = 1 [ 296.752857][ T8330] EXT4-fs (loop1): 1 truncate cleaned up [ 296.768217][ T8330] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 296.892777][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 296.951275][ T4262] EXT4-fs (loop1): unmounting filesystem. [ 297.552840][ T8346] loop4: detected capacity change from 0 to 32768 [ 297.588904][ T8346] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 297.596083][ T8346] gfs2: fsid=.: Now mounting FS (format 1801)... [ 297.642725][ T8346] gfs2: fsid=..0: journal 0 mapped with 16 extents in 0ms [ 297.660358][ T4720] gfs2: fsid=..0: jid=0, already locked for use [ 297.666687][ T4720] gfs2: fsid=..0: jid=0: Looking at journal... [ 297.708054][ T130] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 297.768284][ T4720] gfs2: fsid=..0: jid=0: Journal head lookup took 101ms [ 297.796373][ T4720] gfs2: fsid=..0: jid=0: Done [ 297.805377][ T8346] gfs2: fsid=..0: first mount done, others may mount [ 298.259991][ T130] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.623737][ T130] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 298.658685][ T130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.725777][ T130] usb 4-1: config 0 descriptor?? [ 298.741925][ T130] pwc: Askey VC010 type 2 USB webcam detected. [ 300.164818][ T130] pwc: recv_control_msg error -32 req 02 val 2b00 [ 301.570910][ T130] pwc: recv_control_msg error -71 req 02 val 2700 [ 301.783599][ T130] pwc: recv_control_msg error -71 req 02 val 2c00 [ 301.953390][ T130] pwc: recv_control_msg error -71 req 04 val 1000 [ 302.107399][ T130] pwc: recv_control_msg error -71 req 04 val 1300 [ 302.206723][ T130] pwc: recv_control_msg error -71 req 04 val 1400 [ 302.238644][ T130] pwc: recv_control_msg error -71 req 02 val 2000 [ 302.263169][ T130] pwc: recv_control_msg error -71 req 02 val 2100 [ 302.346406][ T130] pwc: recv_control_msg error -71 req 04 val 1500 [ 302.383224][ T8389] loop3: detected capacity change from 0 to 1024 [ 302.400267][ T130] pwc: recv_control_msg error -71 req 02 val 2500 [ 302.409867][ T8391] loop2: detected capacity change from 0 to 1024 [ 302.414156][ T130] pwc: recv_control_msg error -71 req 02 val 2400 [ 302.436864][ T130] pwc: recv_control_msg error -71 req 02 val 2600 [ 302.454161][ T130] pwc: recv_control_msg error -71 req 02 val 2900 [ 302.474184][ T130] pwc: recv_control_msg error -71 req 02 val 2800 [ 302.497981][ T130] pwc: recv_control_msg error -71 req 04 val 1100 [ 302.523665][ T130] pwc: recv_control_msg error -71 req 04 val 1200 [ 302.558550][ T130] pwc: Registered as video103. [ 302.565891][ T130] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 302.627721][ T130] usb 4-1: USB disconnect, device number 5 [ 302.669020][ T8391] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 302.702240][ T8389] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 302.779913][ T8402] autofs4:pid:8402:autofs_fill_super: called with bogus options [ 302.821794][ T8391] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.850377][ T8389] EXT4-fs (loop3): orphan cleanup on readonly fs [ 303.063274][ T8389] EXT4-fs error (device loop3): __ext4_get_inode_loc:4507: comm syz.3.1492: Invalid inode table block 0 in block_group 0 [ 303.389729][ T8391] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 3: comm syz.2.1493: lblock 3 mapped to illegal pblock 3 (length 1) [ 303.407099][ T8389] EXT4-fs (loop3): Remounting filesystem read-only [ 303.472475][ T8389] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 303.482019][ T8391] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 303.494622][ T8391] EXT4-fs (loop2): This should not happen!! Data will be lost [ 303.494622][ T8391] [ 303.512484][ T8389] EXT4-fs (loop3): Remounting filesystem read-only [ 303.521359][ T8389] EXT4-fs error (device loop3): ext4_quota_write:7226: inode #3: comm syz.3.1492: mark_inode_dirty error [ 303.534395][ T8391] EXT4-fs error (device loop2): ext4_free_blocks:6210: comm syz.2.1493: Freeing blocks not in datazone - block = 3, count = 1 [ 303.568702][ T8389] EXT4-fs (loop3): Remounting filesystem read-only [ 303.575289][ T8389] Quota error (device loop3): write_blk: dquota write failed [ 303.627848][ T8406] netlink: 'syz.1.1496': attribute type 4 has an invalid length. [ 303.637721][ T8389] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 303.698588][ T8389] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.1492: Failed to acquire dquot type 0 [ 303.711728][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 303.767974][ T8389] EXT4-fs (loop3): Remounting filesystem read-only [ 303.774572][ T8389] EXT4-fs error (device loop3): __ext4_get_inode_loc:4507: comm syz.3.1492: Invalid inode table block 0 in block_group 0 [ 303.845324][ T8389] EXT4-fs (loop3): Remounting filesystem read-only [ 303.860142][ T8389] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 303.928826][ T8389] EXT4-fs (loop3): Remounting filesystem read-only [ 303.964647][ T8389] EXT4-fs error (device loop3): ext4_ext_truncate:4453: inode #15: comm syz.3.1492: mark_inode_dirty error [ 304.112095][ T8389] EXT4-fs (loop3): Remounting filesystem read-only [ 304.230850][ T8389] EXT4-fs error (device loop3): __ext4_get_inode_loc:4507: comm syz.3.1492: Invalid inode table block 0 in block_group 0 [ 304.419760][ T8389] EXT4-fs (loop3): Remounting filesystem read-only [ 304.438460][ T4720] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 304.537387][ T8389] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 304.652479][ T4720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 304.712096][ T8389] EXT4-fs (loop3): Remounting filesystem read-only [ 304.761286][ T4720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.860388][ T8389] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 304.967219][ T4720] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 305.025148][ T8389] EXT4-fs (loop3): Remounting filesystem read-only [ 305.135203][ T4720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.154465][ T8389] EXT4-fs error (device loop3): __ext4_get_inode_loc:4507: comm syz.3.1492: Invalid inode table block 0 in block_group 0 [ 305.319104][ T4720] usb 2-1: config 0 descriptor?? [ 305.363286][ T8389] EXT4-fs (loop3): Remounting filesystem read-only [ 305.489027][ T8389] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 305.659349][ T8389] EXT4-fs (loop3): Remounting filesystem read-only [ 305.774801][ T8389] EXT4-fs error (device loop3): ext4_truncate:4312: inode #15: comm syz.3.1492: mark_inode_dirty error [ 306.657488][ T8389] EXT4-fs (loop3): Remounting filesystem read-only [ 306.727670][ T8389] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 306.852697][ T8389] EXT4-fs (loop3): Remounting filesystem read-only [ 306.934280][ T8389] EXT4-fs (loop3): 1 truncate cleaned up [ 307.014700][ T8389] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 307.868371][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 307.869374][ T8424] loop4: detected capacity change from 0 to 764 [ 307.908030][ T8424] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 308.365881][ T4720] usbhid 2-1:0.0: can't add hid device: -71 [ 308.377476][ T4720] usbhid: probe of 2-1:0.0 failed with error -71 [ 308.419033][ T4720] usb 2-1: USB disconnect, device number 5 [ 308.527786][ T8438] loop1: detected capacity change from 0 to 1024 [ 308.547528][ T8440] netlink: 'syz.0.1508': attribute type 4 has an invalid length. [ 308.615267][ T8438] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 308.632484][ T8438] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.684517][ T8438] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 1: comm syz.1.1507: lblock 1 mapped to illegal pblock 1 (length 15) [ 308.742937][ T8438] EXT4-fs error (device loop1): ext4_ext_remove_space:2929: inode #15: comm syz.1.1507: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 308.845848][ T8451] netlink: 'syz.0.1519': attribute type 4 has an invalid length. [ 308.864376][ T8451] netlink: 'syz.0.1519': attribute type 4 has an invalid length. [ 308.949135][ T4262] EXT4-fs (loop1): unmounting filesystem. [ 309.016168][ T8452] loop4: detected capacity change from 0 to 4096 [ 309.088460][ T8452] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 309.527760][ T4260] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 309.626364][ T8454] loop2: detected capacity change from 0 to 32768 [ 310.180439][ T8464] loop1: detected capacity change from 0 to 764 [ 310.187134][ T8454] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 310.209180][ T26] audit: type=1326 audit(1749317860.542:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.4.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fc58e929 code=0x7ffc0000 [ 310.235392][ T8464] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 310.238227][ T8454] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 310.377516][ T26] audit: type=1326 audit(1749317860.582:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.4.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67fc58e929 code=0x7ffc0000 [ 310.425452][ T8472] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 310.514364][ T26] audit: type=1326 audit(1749317860.582:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.4.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fc58e929 code=0x7ffc0000 [ 310.587418][ T4253] ocfs2: Unmounting device (7,2) on (node local) [ 310.624560][ T26] audit: type=1326 audit(1749317860.582:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.4.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fc58e929 code=0x7ffc0000 [ 310.682657][ T26] audit: type=1326 audit(1749317860.592:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.4.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67fc58e929 code=0x7ffc0000 [ 311.143625][ T4720] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 311.736339][ T4720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 311.798149][ T4722] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 312.316845][ T4720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.335206][ T26] audit: type=1326 audit(1749317860.592:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.4.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fc58e929 code=0x7ffc0000 [ 312.363079][ T4722] usb 3-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 312.440802][ T4722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.535144][ T4720] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 312.682743][ T4722] usb 3-1: config 0 descriptor?? [ 312.729535][ T4720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.804926][ T26] audit: type=1326 audit(1749317860.602:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.4.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fc58e929 code=0x7ffc0000 [ 312.975542][ T4720] usb 1-1: config 0 descriptor?? [ 314.393448][ T26] audit: type=1326 audit(1749317860.602:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.4.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67fc58e929 code=0x7ffc0000 [ 314.421448][ T26] audit: type=1326 audit(1749317860.612:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.4.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fc58e929 code=0x7ffc0000 [ 314.465686][ T26] audit: type=1326 audit(1749317860.612:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.4.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fc58e929 code=0x7ffc0000 [ 314.546587][ T4720] usbhid 1-1:0.0: can't add hid device: -71 [ 314.562277][ T4720] usbhid: probe of 1-1:0.0 failed with error -71 [ 314.628030][ T4720] usb 1-1: USB disconnect, device number 6 [ 314.802726][ T8489] loop1: detected capacity change from 0 to 32768 [ 314.916679][ T8489] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 314.955102][ T8489] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 315.705170][ T130] usb 3-1: USB disconnect, device number 4 [ 315.830658][ T8489] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 510ms [ 315.876819][ T8496] netlink: 'syz.2.1523': attribute type 4 has an invalid length. [ 315.885231][ T8496] netlink: 'syz.2.1523': attribute type 4 has an invalid length. [ 316.001295][ T8489] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 316.238069][ T4720] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 316.880208][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.895904][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.230054][ T4720] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.247946][ T4720] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 317.257064][ T4720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.289598][ T4720] usb 5-1: config 0 descriptor?? [ 317.297401][ T4720] pwc: Askey VC010 type 2 USB webcam detected. [ 317.551847][ T8514] loop2: detected capacity change from 0 to 764 [ 317.668073][ T8514] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 318.622158][ T4720] pwc: recv_control_msg error -32 req 02 val 2b00 [ 319.613303][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 319.622728][ T8529] IPVS: Error joining to the multicast group [ 319.694176][ T8531] netlink: 'syz.2.1535': attribute type 4 has an invalid length. [ 319.727582][ T8531] netlink: 'syz.2.1535': attribute type 4 has an invalid length. [ 320.579594][ T4720] pwc: recv_control_msg error -71 req 02 val 2700 [ 320.660364][ T4720] pwc: recv_control_msg error -71 req 02 val 2c00 [ 320.705009][ T4720] pwc: recv_control_msg error -71 req 04 val 1000 [ 320.724517][ T4720] pwc: recv_control_msg error -71 req 04 val 1300 [ 320.753142][ T4720] pwc: recv_control_msg error -71 req 04 val 1400 [ 320.766073][ T4720] pwc: recv_control_msg error -71 req 02 val 2000 [ 320.774504][ T4720] pwc: recv_control_msg error -71 req 02 val 2100 [ 320.786187][ T4720] pwc: recv_control_msg error -71 req 04 val 1500 [ 320.803161][ T4720] pwc: recv_control_msg error -71 req 02 val 2500 [ 320.813272][ T4720] pwc: recv_control_msg error -71 req 02 val 2400 [ 321.154085][ T4720] pwc: recv_control_msg error -71 req 02 val 2600 [ 322.296491][ T4720] pwc: recv_control_msg error -71 req 02 val 2900 [ 322.376011][ T4720] pwc: recv_control_msg error -71 req 02 val 2800 [ 322.510631][ T4720] pwc: recv_control_msg error -71 req 04 val 1100 [ 322.584197][ T4720] pwc: recv_control_msg error -71 req 04 val 1200 [ 322.704419][ T4720] pwc: Registered as video103. [ 322.827783][ T4720] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 323.141014][ T4720] usb 5-1: USB disconnect, device number 5 [ 323.777981][ T4720] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 323.984974][ T4720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 324.007995][ T4720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.051810][ T4720] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 324.087926][ T4720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.133115][ T4720] usb 5-1: config 0 descriptor?? [ 325.096191][ T4720] usb 5-1: can't set config #0, error -71 [ 325.134591][ T4720] usb 5-1: USB disconnect, device number 6 [ 325.442777][ T4270] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 325.453208][ T4270] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 325.461385][ T4270] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 325.479463][ T4270] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 325.492328][ T4270] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 325.501209][ T8551] loop2: detected capacity change from 0 to 32768 [ 325.508348][ T4270] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 325.717943][ T8551] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 325.787624][ T8551] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 325.814555][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1545'. [ 325.823681][ T8574] IPVS: Error joining to the multicast group [ 326.657749][ T8578] netlink: 'syz.1.1546': attribute type 4 has an invalid length. [ 326.728576][ T8578] netlink: 'syz.1.1546': attribute type 4 has an invalid length. [ 326.788181][ T130] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 326.838393][ T4253] ocfs2: Unmounting device (7,2) on (node local) [ 326.932268][ T8561] chnl_net:caif_netlink_parms(): no params data found [ 326.998020][ T130] usb 1-1: Using ep0 maxpacket: 8 [ 327.006899][ T130] usb 1-1: unable to get BOS descriptor or descriptor too short [ 327.048668][ T130] usb 1-1: config 0 has an invalid interface number: 125 but max is 2 [ 327.090923][ T8586] loop2: detected capacity change from 0 to 128 [ 327.111834][ T130] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.156427][ T130] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 327.166290][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 327.166304][ T26] audit: type=1326 audit(1749317877.502:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 327.194904][ T130] usb 1-1: config 0 has no interface number 0 [ 327.195141][ T26] audit: type=1326 audit(1749317877.502:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 327.201458][ T130] usb 1-1: config 0 interface 125 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 327.233517][ T26] audit: type=1326 audit(1749317877.502:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 327.238580][ T130] usb 1-1: config 0 interface 125 has no altsetting 0 [ 327.272802][ T26] audit: type=1326 audit(1749317877.502:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 327.283315][ T130] usb 1-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 327.302515][ T26] audit: type=1326 audit(1749317877.502:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 327.317643][ T130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.341942][ T8586] bio_check_eod: 1525 callbacks suppressed [ 327.341958][ T8586] syz.2.1547: attempt to access beyond end of device [ 327.341958][ T8586] loop2: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 327.347693][ T8589] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 327.372810][ T130] usb 1-1: Product: syz [ 327.376891][ T26] audit: type=1326 audit(1749317877.502:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 327.377081][ T130] usb 1-1: Manufacturer: syz [ 327.405398][ T130] usb 1-1: SerialNumber: syz [ 327.428088][ T26] audit: type=1326 audit(1749317877.502:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 327.436115][ T130] usb 1-1: config 0 descriptor?? [ 327.451096][ T26] audit: type=1326 audit(1749317877.502:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 327.478764][ T26] audit: type=1326 audit(1749317877.502:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 327.501468][ T26] audit: type=1326 audit(1749317877.502:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.1.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 327.549449][ T8586] syz.2.1547: attempt to access beyond end of device [ 327.549449][ T8586] loop2: rw=2049, sector=241, nr_sectors = 296 limit=128 [ 327.576501][ T8586] syz.2.1547: attempt to access beyond end of device [ 327.576501][ T8586] loop2: rw=524288, sector=241, nr_sectors = 256 limit=128 [ 327.591084][ T8586] syz.2.1547: attempt to access beyond end of device [ 327.591084][ T8586] loop2: rw=0, sector=241, nr_sectors = 8 limit=128 [ 327.605475][ T4270] Bluetooth: hci5: command 0x0409 tx timeout [ 327.616200][ T8586] syz.2.1547: attempt to access beyond end of device [ 327.616200][ T8586] loop2: rw=0, sector=241, nr_sectors = 8 limit=128 [ 327.631835][ T8586] syz.2.1547: attempt to access beyond end of device [ 327.631835][ T8586] loop2: rw=0, sector=241, nr_sectors = 8 limit=128 [ 327.646315][ T8592] syz.2.1547: attempt to access beyond end of device [ 327.646315][ T8592] loop2: rw=0, sector=241, nr_sectors = 1 limit=128 [ 327.704020][ T5280] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.819866][ T8586] syz.2.1547: attempt to access beyond end of device [ 327.819866][ T8586] loop2: rw=0, sector=241, nr_sectors = 1 limit=128 [ 327.843285][ T8586] buffer_io_error: 1518 callbacks suppressed [ 327.843328][ T8586] Buffer I/O error on dev loop2, logical block 241, async page read [ 327.861796][ T8586] syz.2.1547: attempt to access beyond end of device [ 327.861796][ T8586] loop2: rw=0, sector=242, nr_sectors = 1 limit=128 [ 327.875269][ T8586] Buffer I/O error on dev loop2, logical block 242, async page read [ 327.883510][ T8586] syz.2.1547: attempt to access beyond end of device [ 327.883510][ T8586] loop2: rw=0, sector=243, nr_sectors = 1 limit=128 [ 327.896974][ T8586] Buffer I/O error on dev loop2, logical block 243, async page read [ 327.906071][ T8586] Buffer I/O error on dev loop2, logical block 244, async page read [ 327.915319][ T8586] Buffer I/O error on dev loop2, logical block 245, async page read [ 327.923660][ T8586] Buffer I/O error on dev loop2, logical block 246, async page read [ 327.936383][ T8586] Buffer I/O error on dev loop2, logical block 247, async page read [ 327.946051][ T8586] Buffer I/O error on dev loop2, logical block 248, async page read [ 327.956785][ T8586] Buffer I/O error on dev loop2, logical block 241, async page read [ 327.966492][ T8586] Buffer I/O error on dev loop2, logical block 242, async page read [ 328.508436][ T5280] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.636474][ T8561] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.664367][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.701348][ T8561] device bridge_slave_0 entered promiscuous mode [ 328.792300][ T5280] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.849478][ T130] hub 1-1:0.125: bad descriptor, ignoring hub [ 328.861956][ T130] hub: probe of 1-1:0.125 failed with error -5 [ 328.897412][ T130] usb 1-1: Found UVC 15.ff device syz (17dc:0202) [ 328.938883][ T130] usb 1-1: No valid video chain found. [ 328.958348][ T8561] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.965670][ T8561] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.989155][ T8561] device bridge_slave_1 entered promiscuous mode [ 329.000483][ T130] usb 1-1: USB disconnect, device number 7 [ 329.131033][ T8605] loop1: detected capacity change from 0 to 4096 [ 329.164037][ T5280] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.241925][ T8561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.265974][ T8561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.303090][ T8605] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 329.315412][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1555'. [ 329.347617][ T8610] IPVS: Error joining to the multicast group [ 329.460082][ T8561] team0: Port device team_slave_0 added [ 329.526893][ T8561] team0: Port device team_slave_1 added [ 329.655033][ T4262] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 329.673323][ T8561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.680917][ T4270] Bluetooth: hci5: command 0x041b tx timeout [ 329.734629][ T8561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.140024][ T8624] hub 6-0:1.0: USB hub found [ 330.145281][ T8624] hub 6-0:1.0: 1 port detected [ 330.903384][ T8561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.953312][ T5280] tipc: Disabling bearer [ 330.966326][ T5280] tipc: Left network mode [ 331.003589][ T8561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.060998][ T8561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.180963][ T8561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.195332][ T8626] netlink: 'syz.2.1559': attribute type 4 has an invalid length. [ 331.238695][ T8627] netlink: 'syz.2.1559': attribute type 4 has an invalid length. [ 331.576186][ T8561] device hsr_slave_0 entered promiscuous mode [ 331.615265][ T8561] device hsr_slave_1 entered promiscuous mode [ 331.650870][ T8561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.687807][ T8561] Cannot create hsr debugfs directory [ 331.758188][ T4270] Bluetooth: hci5: command 0x040f tx timeout [ 332.332682][ T26] kauditd_printk_skb: 176 callbacks suppressed [ 332.332698][ T26] audit: type=1326 audit(1749317882.662:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 334.214247][ T4270] Bluetooth: hci5: command 0x0419 tx timeout [ 334.241961][ T8659] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 334.531627][ T26] audit: type=1326 audit(1749317882.662:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 334.578021][ T4720] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 334.647803][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1565'. [ 334.771622][ T26] audit: type=1326 audit(1749317882.662:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 334.796113][ T8662] IPVS: Error joining to the multicast group [ 334.818232][ T4720] usb 3-1: Using ep0 maxpacket: 8 [ 334.831288][ T4720] usb 3-1: unable to get BOS descriptor or descriptor too short [ 334.857791][ T26] audit: type=1326 audit(1749317882.692:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 334.881351][ T4720] usb 3-1: config 0 has an invalid interface number: 125 but max is 2 [ 334.894757][ T4720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.925805][ T4720] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 334.942888][ T26] audit: type=1326 audit(1749317882.692:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 334.977280][ T4720] usb 3-1: config 0 has no interface number 0 [ 334.998768][ T4720] usb 3-1: config 0 interface 125 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 335.029854][ T4720] usb 3-1: config 0 interface 125 has no altsetting 0 [ 335.044998][ T26] audit: type=1326 audit(1749317882.692:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 335.087472][ T4720] usb 3-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 335.113284][ T4720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.136693][ T4720] usb 3-1: Product: syz [ 335.145946][ T4720] usb 3-1: Manufacturer: syz [ 335.175769][ T4720] usb 3-1: SerialNumber: syz [ 335.193950][ T26] audit: type=1326 audit(1749317882.692:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 335.204604][ T4720] usb 3-1: config 0 descriptor?? [ 335.267031][ T4720] usb 3-1: can't set config #0, error -71 [ 335.287667][ T4720] usb 3-1: USB disconnect, device number 5 [ 335.363626][ T26] audit: type=1326 audit(1749317882.692:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 335.505894][ T26] audit: type=1326 audit(1749317882.692:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 335.622678][ T26] audit: type=1326 audit(1749317882.702:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.1.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 335.656453][ T8561] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 335.776722][ T8561] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 335.786911][ T8676] loop2: detected capacity change from 0 to 4096 [ 335.965617][ T8681] hub 6-0:1.0: USB hub found [ 335.971175][ T8681] hub 6-0:1.0: 1 port detected [ 336.073172][ T8561] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 336.728298][ T8676] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 336.914065][ T8684] netlink: 'syz.1.1570': attribute type 4 has an invalid length. [ 336.947274][ T8561] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 336.978451][ T4253] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 336.988648][ T8685] netlink: 'syz.1.1570': attribute type 4 has an invalid length. [ 337.401889][ T5280] device hsr_slave_0 left promiscuous mode [ 337.419969][ T5280] device hsr_slave_1 left promiscuous mode [ 337.644920][ T5280] device veth1_macvtap left promiscuous mode [ 337.660570][ T5280] device veth0_macvtap left promiscuous mode [ 337.667448][ T5280] device veth1_vlan left promiscuous mode [ 337.673646][ T5280] device veth0_vlan left promiscuous mode [ 339.541808][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 339.541823][ T26] audit: type=1326 audit(1749317889.872:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8711 comm="syz.4.1575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67fc58e929 code=0x0 [ 339.577995][ T4721] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 339.780126][ T4721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.808193][ T4721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.838168][ T4721] usb 1-1: New USB device found, idVendor=256c, idProduct=ff6c, bcdDevice=f9.ff [ 339.867551][ T4721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.891721][ T4721] usb 1-1: config 0 descriptor?? [ 340.291290][ T26] audit: type=1326 audit(1749317890.612:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c1d8e929 code=0x7ffc0000 [ 340.325259][ T4721] hid-generic 0003:256C:FF6C.0003: hidraw0: USB HID v0.00 Device [HID 256c:ff6c] on usb-dummy_hcd.0-1/input0 [ 340.367323][ T26] audit: type=1326 audit(1749317890.622:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85c1d8e929 code=0x7ffc0000 [ 340.401957][ T8732] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 340.415129][ T26] audit: type=1326 audit(1749317890.622:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c1d8e929 code=0x7ffc0000 [ 340.446884][ T26] audit: type=1326 audit(1749317890.622:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85c1d8e929 code=0x7ffc0000 [ 340.471313][ T26] audit: type=1326 audit(1749317890.622:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c1d8e929 code=0x7ffc0000 [ 340.495236][ T26] audit: type=1326 audit(1749317890.622:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85c1d8e929 code=0x7ffc0000 [ 340.518639][ T26] audit: type=1326 audit(1749317890.622:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c1d8e929 code=0x7ffc0000 [ 340.541238][ T4723] usb 1-1: USB disconnect, device number 8 [ 340.552080][ T26] audit: type=1326 audit(1749317890.622:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85c1d8e929 code=0x7ffc0000 [ 340.577762][ T26] audit: type=1326 audit(1749317890.622:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8731 comm="syz.2.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c1d8e929 code=0x7ffc0000 [ 341.136276][ T5280] bond0 (unregistering): Released all slaves [ 341.171570][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 341.181177][ T8712] batman_adv: batadv0: Interface deactivated: dummy0 [ 341.188508][ T8712] batman_adv: batadv0: Removing interface: dummy0 [ 341.197782][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 341.210028][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 341.217529][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 341.336695][ T8561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.421138][ T8561] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.494557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 341.504546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.533362][ T8742] netlink: 'syz.1.1580': attribute type 4 has an invalid length. [ 341.591660][ T8739] netlink: 'syz.1.1580': attribute type 4 has an invalid length. [ 341.600465][ T8745] loop4: detected capacity change from 0 to 764 [ 341.624803][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.640053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.648892][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.656868][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.714222][ T8745] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 341.741251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 341.758950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.793419][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.800644][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.894158][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 341.922556][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 341.961427][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.973871][ T8747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 342.003787][ T8747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.041888][ T8747] device dummy0 entered promiscuous mode [ 342.062592][ T8747] device erspan0 entered promiscuous mode [ 342.082678][ T8757] loop4: detected capacity change from 0 to 256 [ 342.098764][ T8757] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc5dfab67, utbl_chksum : 0xe619d30d) [ 342.114867][ T8747] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 342.352782][ T8747] Cannot create hsr debugfs directory [ 344.004397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 344.018721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 344.079138][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.143959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.232364][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.266196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.297800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.300601][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'. [ 344.334249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.376685][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.395782][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.420697][ T8561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.467353][ T8561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.494225][ T8774] IPVS: Error joining to the multicast group [ 344.512648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.549500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 345.520464][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.548287][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.574027][ T26] kauditd_printk_skb: 251 callbacks suppressed [ 345.574041][ T26] audit: type=1326 audit(1749317895.902:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c1d8e929 code=0x7ffc0000 [ 345.653398][ T8561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.664808][ T8793] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 345.706295][ T26] audit: type=1326 audit(1749317895.952:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85c1d8e929 code=0x7ffc0000 [ 345.755234][ T8777] loop1: detected capacity change from 0 to 32768 [ 345.767937][ T26] audit: type=1326 audit(1749317895.952:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c1d8e929 code=0x7ffc0000 [ 345.846049][ T8777] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 345.886577][ T8777] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 345.917398][ T26] audit: type=1326 audit(1749317895.952:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c1d8e929 code=0x7ffc0000 [ 345.965734][ T8777] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 346.054014][ T26] audit: type=1326 audit(1749317895.952:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85c1d8e929 code=0x7ffc0000 [ 346.122848][ T8777] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 346.160621][ T26] audit: type=1326 audit(1749317895.952:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c1d8e929 code=0x7ffc0000 [ 346.249448][ T26] audit: type=1326 audit(1749317895.952:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c1d8e929 code=0x7ffc0000 [ 346.308149][ T26] audit: type=1326 audit(1749317895.952:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85c1d8e929 code=0x7ffc0000 [ 346.426704][ T26] audit: type=1326 audit(1749317895.952:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c1d8e929 code=0x7ffc0000 [ 346.493263][ T26] audit: type=1326 audit(1749317895.952:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8792 comm="syz.2.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c1d8e929 code=0x7ffc0000 [ 346.798226][ T65] af_packet: tpacket_rcv: packet too big, clamped from 68 to 4294967272. macoff=96 [ 347.504420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 347.622867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 347.773119][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 347.868925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 347.900485][ T8561] device veth0_vlan entered promiscuous mode [ 347.908904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 347.916814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 347.945167][ T8561] device veth1_vlan entered promiscuous mode [ 347.966633][ T7244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.978846][ T7244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.006641][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 348.051347][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 348.064479][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 348.076776][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 348.107450][ T8561] device veth0_macvtap entered promiscuous mode [ 348.121312][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 348.139938][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 348.161547][ T8561] device veth1_macvtap entered promiscuous mode [ 348.216281][ T8830] netlink: 'syz.0.1600': attribute type 4 has an invalid length. [ 348.289068][ T8830] netlink: 'syz.0.1600': attribute type 4 has an invalid length. [ 348.369737][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.395847][ T8836] loop1: detected capacity change from 0 to 764 [ 348.412503][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.455305][ T8836] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 348.481646][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.546145][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.614440][ T8561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.634913][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.681899][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.694300][ T8561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.710563][ T8561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.740814][ T8561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.764317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 348.789081][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'. [ 348.795356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 348.839658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 348.849239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 348.859331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 348.899909][ T8561] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.910409][ T8561] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.920497][ T8561] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.930335][ T8561] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.956374][ T8846] IPVS: Error joining to the multicast group [ 349.204785][ T4471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.290983][ T4471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.359360][ T8856] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 349.669703][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 349.935066][ T4471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.946312][ T4471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.997605][ T7244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 350.102867][ T8860] loop1: detected capacity change from 0 to 256 [ 350.195968][ T8860] FAT-fs (loop1): Directory bread(block 64) failed [ 350.202812][ T8860] FAT-fs (loop1): Directory bread(block 65) failed [ 350.209800][ T8860] FAT-fs (loop1): Directory bread(block 66) failed [ 350.216642][ T8860] FAT-fs (loop1): Directory bread(block 67) failed [ 350.223593][ T8860] FAT-fs (loop1): Directory bread(block 68) failed [ 350.230291][ T8860] FAT-fs (loop1): Directory bread(block 69) failed [ 350.237203][ T8860] FAT-fs (loop1): Directory bread(block 70) failed [ 350.244135][ T8860] FAT-fs (loop1): Directory bread(block 71) failed [ 350.251234][ T8860] FAT-fs (loop1): Directory bread(block 72) failed [ 350.258512][ T8860] FAT-fs (loop1): Directory bread(block 73) failed [ 352.682554][ T8870] loop1: detected capacity change from 0 to 32768 [ 352.697278][ T8890] loop4: detected capacity change from 0 to 764 [ 352.852627][ T8897] netlink: 'syz.2.1616': attribute type 4 has an invalid length. [ 352.858450][ T8870] XFS (loop1): Mounting V5 Filesystem [ 352.875317][ T8890] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 352.877052][ T8897] netlink: 'syz.2.1616': attribute type 4 has an invalid length. [ 353.053643][ T8870] XFS (loop1): Ending clean mount [ 353.104176][ T8870] XFS (loop1): Quotacheck needed: Please wait. [ 353.233563][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1617'. [ 353.248405][ T8870] XFS (loop1): Quotacheck: Done. [ 353.284027][ T8909] IPVS: Error joining to the multicast group [ 353.374222][ T8870] XFS (loop1): User initiated shutdown received. [ 353.412101][ T8870] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 353.457987][ T8870] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 354.357898][ T4712] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 354.441730][ T4262] XFS (loop1): Unmounting Filesystem [ 354.585175][ T4712] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 354.616702][ T4712] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 354.656267][ T4712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.754282][ T4712] usb 6-1: config 0 descriptor?? [ 354.760719][ T8911] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 355.555039][ T4712] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 355.600664][ T4712] usb 6-1: USB disconnect, device number 2 [ 355.722029][ T8939] loop2: detected capacity change from 0 to 256 [ 355.774640][ T8939] FAT-fs (loop2): Directory bread(block 64) failed [ 355.781396][ T8939] FAT-fs (loop2): Directory bread(block 65) failed [ 355.788813][ T8939] FAT-fs (loop2): Directory bread(block 66) failed [ 355.795609][ T8939] FAT-fs (loop2): Directory bread(block 67) failed [ 355.802724][ T8939] FAT-fs (loop2): Directory bread(block 68) failed [ 355.809422][ T8939] FAT-fs (loop2): Directory bread(block 69) failed [ 355.816296][ T8939] FAT-fs (loop2): Directory bread(block 70) failed [ 355.822995][ T8939] FAT-fs (loop2): Directory bread(block 71) failed [ 355.829952][ T8939] FAT-fs (loop2): Directory bread(block 72) failed [ 355.836590][ T8939] FAT-fs (loop2): Directory bread(block 73) failed [ 356.974338][ T8940] fido_id[8940]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 357.045794][ T8950] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 358.773008][ T8968] netlink: 'syz.2.1629': attribute type 4 has an invalid length. [ 358.804764][ T8969] autofs4:pid:8969:autofs_fill_super: called with bogus options [ 358.834877][ T8968] netlink: 'syz.2.1629': attribute type 4 has an invalid length. [ 358.879103][ T8963] loop1: detected capacity change from 0 to 4096 [ 358.919883][ T8963] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 360.365559][ T8995] loop1: detected capacity change from 0 to 256 [ 360.423131][ T8995] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 360.629685][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1649'. [ 360.656334][ T8978] sctp: failed to load transform for md5: -2 [ 360.678212][ T9002] IPVS: Error joining to the multicast group [ 360.736470][ T9010] loop5: detected capacity change from 0 to 512 [ 360.778575][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 360.778589][ T26] audit: type=1326 audit(1749317911.112:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 360.808742][ T9011] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1639'. [ 360.879613][ T9010] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 360.963044][ T26] audit: type=1326 audit(1749317911.152:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 360.986626][ T9010] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1640: bg 0: block 425: padding at end of block bitmap is not set [ 360.997992][ T26] audit: type=1326 audit(1749317911.152:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 361.030177][ T9010] EXT4-fs (loop5): Remounting filesystem read-only [ 361.088085][ T9010] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 361.113966][ T9010] EXT4-fs (loop5): Remounting filesystem read-only [ 361.210895][ T9028] netlink: 'syz.2.1642': attribute type 4 has an invalid length. [ 361.239151][ T26] audit: type=1326 audit(1749317911.152:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8994 comm="syz.1.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 361.307180][ T9031] netlink: 'syz.2.1642': attribute type 4 has an invalid length. [ 361.308566][ T8561] EXT4-fs (loop5): unmounting filesystem. [ 361.319469][ T9032] autofs4:pid:9032:autofs_fill_super: called with bogus options [ 362.887671][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'. [ 362.928562][ T9059] IPVS: Error joining to the multicast group [ 363.105724][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1653'. [ 363.304553][ T9072] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.698556][ T9076] netlink: 'syz.5.1657': attribute type 4 has an invalid length. [ 364.028238][ T9077] netlink: 'syz.5.1657': attribute type 4 has an invalid length. [ 364.730685][ T9090] loop1: detected capacity change from 0 to 256 [ 364.751826][ T9090] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc5dfab67, utbl_chksum : 0xe619d30d) [ 367.247098][ T9112] loop4: detected capacity change from 0 to 256 [ 367.317659][ T9112] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 368.294477][ T9131] netlink: 'syz.4.1670': attribute type 4 has an invalid length. [ 368.380208][ T9131] netlink: 'syz.4.1670': attribute type 4 has an invalid length. [ 368.630080][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 368.708347][ T9138] IPVS: Error joining to the multicast group [ 368.918048][ T26] audit: type=1326 audit(1749317919.226:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9143 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 368.986639][ T9145] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 369.046929][ T26] audit: type=1326 audit(1749317919.236:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9143 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 369.089962][ T9141] loop4: detected capacity change from 0 to 40427 [ 369.108754][ T9141] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 369.117591][ T9141] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 369.129753][ T9141] F2FS-fs (loop4): invalid crc value [ 369.157984][ T26] audit: type=1326 audit(1749317919.236:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9143 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 369.187919][ T26] audit: type=1326 audit(1749317919.236:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9143 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 369.213478][ T9141] F2FS-fs (loop4): Found nat_bits in checkpoint [ 369.273685][ T9141] F2FS-fs (loop4): Start checkpoint disabled! [ 369.331739][ T26] audit: type=1326 audit(1749317919.246:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9143 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 369.354654][ T9141] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 369.387986][ T26] audit: type=1326 audit(1749317919.246:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9143 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 369.468315][ T26] audit: type=1326 audit(1749317919.246:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9143 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 369.551379][ T26] audit: type=1326 audit(1749317919.246:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9143 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 370.925179][ T4270] Bluetooth: hci5: link tx timeout [ 370.931136][ T4270] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 370.992318][ T26] audit: type=1326 audit(1749317919.276:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9143 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 371.112370][ T4270] Bluetooth: hci5: link tx timeout [ 371.117553][ T4270] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 371.146531][ T26] audit: type=1326 audit(1749317919.276:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9143 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd196d8e929 code=0x7ffc0000 [ 371.283017][ T4688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.372804][ T4688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.629955][ T9172] netlink: 'syz.1.1684': attribute type 4 has an invalid length. [ 371.683082][ T9177] netlink: 'syz.1.1684': attribute type 4 has an invalid length. [ 372.008399][ T4270] Bluetooth: hci5: link tx timeout [ 372.014184][ T4270] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 372.803675][ T9188] loop2: detected capacity change from 0 to 1024 [ 372.959329][ T4270] Bluetooth: hci5: command 0x0406 tx timeout [ 375.108709][ T9200] sctp: failed to load transform for md5: -2 [ 375.941819][ T9222] autofs4:pid:9222:autofs_fill_super: called with bogus options [ 376.478627][ T4411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.547596][ T9229] netlink: 'syz.5.1696': attribute type 4 has an invalid length. [ 376.682256][ T9235] netlink: 'syz.5.1696': attribute type 4 has an invalid length. [ 376.822525][ T9203] loop4: detected capacity change from 0 to 32768 [ 377.085700][ T7673] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.537387][ T9203] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 377.701783][ T9203] JBD2: recovery failed [ 377.706185][ T9203] (syz.4.1688,9203,0):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 377.761869][ T9203] (syz.4.1688,9203,0):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5 [ 377.838080][ T9203] (syz.4.1688,9203,1):ocfs2_check_volume:2489 ERROR: status = -5 [ 377.908766][ T9203] (syz.4.1688,9203,1):ocfs2_mount_volume:1821 ERROR: status = -5 [ 378.081250][ T9203] (syz.4.1688,9203,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 378.321357][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.327722][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.546765][ T9272] autofs4:pid:9272:autofs_fill_super: called with bogus options [ 379.148726][ T9286] loop1: detected capacity change from 0 to 512 [ 379.216881][ T9286] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 379.252478][ T9257] loop2: detected capacity change from 0 to 32768 [ 379.294272][ T9286] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1710: bg 0: block 425: padding at end of block bitmap is not set [ 379.299783][ T9257] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 379.316872][ T9257] gfs2: fsid=.: Now mounting FS (format 1801)... [ 379.331913][ T9257] gfs2: fsid=..0: journal 0 mapped with 16 extents in 4ms [ 379.341566][ T4712] gfs2: fsid=..0: jid=0, already locked for use [ 379.351976][ T4712] gfs2: fsid=..0: jid=0: Looking at journal... [ 379.372198][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 379.372212][ T26] audit: type=1326 audit(1749317929.656:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fc58e929 code=0x7fc00000 [ 379.409450][ T9286] EXT4-fs (loop1): Remounting filesystem read-only [ 379.443994][ T9286] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 379.458151][ T26] audit: type=1326 audit(1749317929.656:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67fc58e929 code=0x7fc00000 [ 379.489024][ T9286] EXT4-fs (loop1): Remounting filesystem read-only [ 379.606569][ T4712] gfs2: fsid=..0: jid=0: Journal head lookup took 254ms [ 379.631196][ T4262] EXT4-fs (loop1): unmounting filesystem. [ 379.656485][ T4712] gfs2: fsid=..0: jid=0: Done [ 379.690820][ T9257] gfs2: fsid=..0: first mount done, others may mount [ 382.121420][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1722'. [ 382.151090][ T9334] IPVS: Error joining to the multicast group [ 382.161621][ T4361] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.386766][ T9300] loop1: detected capacity change from 0 to 32768 [ 382.412578][ T9300] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 382.451466][ T9300] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 382.634125][ T9300] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 382.669215][ T4714] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 382.676697][ T4714] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 382.910280][ T7673] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 383.471100][ T4714] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 794ms [ 383.510832][ T4714] gfs2: fsid=syz:syz.0: jid=0: Done [ 383.516126][ T9300] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 383.552623][ T9300] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 383.565712][ T9346] loop5: detected capacity change from 0 to 512 [ 383.758059][ T9346] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 383.857720][ T9346] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1725: bg 0: block 425: padding at end of block bitmap is not set [ 383.896005][ T9353] loop2: detected capacity change from 0 to 256 [ 383.964823][ T9346] EXT4-fs (loop5): Remounting filesystem read-only [ 383.991564][ T9353] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 384.032113][ T9346] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 384.162780][ T9346] EXT4-fs (loop5): Remounting filesystem read-only [ 384.335023][ T8561] EXT4-fs (loop5): unmounting filesystem. [ 384.666186][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1735'. [ 384.695490][ T9375] IPVS: Error joining to the multicast group [ 386.025225][ T9397] loop2: detected capacity change from 0 to 256 [ 386.178120][ T9397] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 386.209777][ T9403] loop4: detected capacity change from 0 to 512 [ 386.262983][ T9403] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 386.352118][ T9403] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1744: bg 0: block 425: padding at end of block bitmap is not set [ 386.452824][ T9403] EXT4-fs (loop4): Remounting filesystem read-only [ 386.467954][ T9403] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 386.507330][ T9403] EXT4-fs (loop4): Remounting filesystem read-only [ 387.511206][ T9418] hub 6-0:1.0: USB hub found [ 387.516175][ T9418] hub 6-0:1.0: 1 port detected [ 387.602674][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 387.805772][ T9398] loop5: detected capacity change from 0 to 32768 [ 387.841225][ T9391] loop1: detected capacity change from 0 to 32768 [ 387.862721][ T9398] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 387.919070][ T4361] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 387.946606][ T9391] XFS (loop1): Mounting V5 Filesystem [ 387.994237][ T9398] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 388.045642][ T9391] XFS (loop1): Ending clean mount [ 388.137056][ T9391] overlayfs: missing 'lowerdir' [ 388.205193][ T8561] ocfs2: Unmounting device (7,5) on (node local) [ 388.208205][ T9391] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 388.281876][ T4723] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 388.303752][ T4723] XFS (loop1): Unmount and run xfs_repair [ 388.334152][ T4723] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 388.399077][ T4723] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 388.443986][ T4723] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 388.493652][ T4723] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 388.508121][ T4723] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01 ....lK.......... [ 388.537612][ T4723] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 388.567995][ T4723] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 388.655447][ T4723] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 389.489520][ T4723] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 389.498131][ T4471] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 389.498996][ T9391] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x14 len 4 error 74 [ 389.524167][ T9391] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x54e/0x9a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 389.538922][ T9391] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 389.552248][ T4723] loop1: writeback error on inode 6150, offset 0, sector 12252 [ 389.667432][ T9455] loop2: detected capacity change from 0 to 256 [ 389.734488][ T4262] XFS (loop1): Unmounting Filesystem [ 389.970041][ T9455] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 390.741002][ T9442] loop4: detected capacity change from 0 to 32768 [ 390.758674][ T9442] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 390.765838][ T9442] gfs2: fsid=.: Now mounting FS (format 1801)... [ 390.894457][ T9442] gfs2: fsid=..0: journal 0 mapped with 16 extents in 0ms [ 390.965417][ T4723] gfs2: fsid=..0: jid=0, already locked for use [ 390.977910][ T4723] gfs2: fsid=..0: jid=0: Looking at journal... [ 391.080288][ T26] audit: type=1326 audit(1749317941.416:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9477 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 391.188120][ T26] audit: type=1326 audit(1749317941.446:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9477 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 391.210822][ T9478] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 391.275510][ T9471] hub 6-0:1.0: USB hub found [ 391.280976][ T9471] hub 6-0:1.0: 1 port detected [ 391.435133][ T4723] gfs2: fsid=..0: jid=0: Journal head lookup took 457ms [ 391.446504][ T26] audit: type=1326 audit(1749317941.446:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9477 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 391.480507][ T4723] gfs2: fsid=..0: jid=0: Done [ 391.519276][ T9442] gfs2: fsid=..0: first mount done, others may mount [ 391.565354][ T26] audit: type=1326 audit(1749317941.446:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9477 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 391.595658][ T26] audit: type=1326 audit(1749317941.446:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9477 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 391.643249][ T26] audit: type=1326 audit(1749317941.446:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9477 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 391.717328][ T26] audit: type=1326 audit(1749317941.446:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9477 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 391.761168][ T26] audit: type=1326 audit(1749317941.446:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9477 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 391.921007][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1765'. [ 391.930320][ T9490] IPVS: Error joining to the multicast group [ 391.957965][ T26] audit: type=1326 audit(1749317941.446:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9477 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 392.083720][ T26] audit: type=1326 audit(1749317941.446:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9477 comm="syz.0.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 394.196786][ T8518] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 394.867413][ T9493] loop4: detected capacity change from 0 to 32768 [ 394.936797][ T9493] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 394.958283][ T6439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 394.979059][ T9493] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 395.225375][ T4260] ocfs2: Unmounting device (7,4) on (node local) [ 395.370635][ T9540] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 395.621866][ T9545] hub 6-0:1.0: USB hub found [ 395.626704][ T9545] hub 6-0:1.0: 1 port detected [ 395.851146][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1777'. [ 395.882326][ T9555] IPVS: Error joining to the multicast group [ 400.378382][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 400.917242][ T9634] hub 6-0:1.0: USB hub found [ 400.922250][ T9634] hub 6-0:1.0: 1 port detected [ 401.172095][ T9635] vivid-005: kernel_thread() failed [ 401.279404][ T7673] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 401.409856][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1800'. [ 401.474860][ T9641] IPVS: Error joining to the multicast group [ 401.971192][ T9665] netlink: 'syz.2.1806': attribute type 4 has an invalid length. [ 402.037581][ T9667] netlink: 'syz.2.1806': attribute type 4 has an invalid length. [ 402.056617][ T9662] loop1: detected capacity change from 0 to 4096 [ 402.132439][ T9662] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 402.351741][ T4262] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 402.540390][ T9681] hub 6-0:1.0: USB hub found [ 402.545233][ T9681] hub 6-0:1.0: 1 port detected [ 404.039481][ T9716] netlink: 'syz.0.1819': attribute type 4 has an invalid length. [ 404.133498][ T9720] netlink: 'syz.0.1819': attribute type 4 has an invalid length. [ 404.603063][ T9735] hub 6-0:1.0: USB hub found [ 404.608342][ T9735] hub 6-0:1.0: 1 port detected [ 404.824392][ T9742] autofs4:pid:9742:autofs_fill_super: called with bogus options [ 405.879869][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 406.992434][ T9788] loop4: detected capacity change from 0 to 256 [ 407.119360][ T4471] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 407.994698][ T9788] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 408.256913][ T9808] hub 6-0:1.0: USB hub found [ 408.262401][ T9808] hub 6-0:1.0: 1 port detected [ 410.399138][ T9839] loop2: detected capacity change from 0 to 4096 [ 410.508219][ T9839] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 410.831268][ T4253] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 411.061212][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 411.688348][ T9857] hub 6-0:1.0: USB hub found [ 411.709341][ T9857] hub 6-0:1.0: 1 port detected [ 411.867051][ T9869] batman_adv: batadv0: Adding interface: dummy0 [ 411.914020][ T9869] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.032905][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 412.032922][ T26] audit: type=1326 audit(1749317962.366:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9871 comm="syz.0.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 412.095367][ T9872] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 412.137343][ T26] audit: type=1326 audit(1749317962.406:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9871 comm="syz.0.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 412.178435][ T9869] batman_adv: batadv0: Interface activated: dummy0 [ 412.235905][ T26] audit: type=1326 audit(1749317962.406:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9871 comm="syz.0.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 412.271811][ T9874] batadv0: mtu less than device minimum [ 412.299891][ T9874] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 412.312291][ T9874] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 412.324588][ T9874] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 412.336977][ T9874] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 412.349472][ T9874] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 412.361908][ T9874] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 412.374234][ T9874] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 412.386532][ T9874] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 412.454834][ T26] audit: type=1326 audit(1749317962.406:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9871 comm="syz.0.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 412.508042][ T26] audit: type=1326 audit(1749317962.406:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9871 comm="syz.0.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 412.577988][ T26] audit: type=1326 audit(1749317962.406:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9871 comm="syz.0.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 412.721082][ T26] audit: type=1326 audit(1749317962.406:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9871 comm="syz.0.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 412.735543][ T9858] loop1: detected capacity change from 0 to 32768 [ 412.813573][ T9858] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 412.833584][ T26] audit: type=1326 audit(1749317962.406:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9871 comm="syz.0.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 412.845106][ T9858] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 412.855950][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.879720][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 412.959414][ T26] audit: type=1326 audit(1749317962.406:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9871 comm="syz.0.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 413.055685][ T26] audit: type=1326 audit(1749317962.406:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9871 comm="syz.0.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 413.067392][ T4262] ocfs2: Unmounting device (7,1) on (node local) [ 413.241454][ T9891] loop1: detected capacity change from 0 to 256 [ 413.343080][ T9891] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 413.600359][ T9876] loop2: detected capacity change from 0 to 32768 [ 413.825654][ T9876] XFS (loop2): Mounting V5 Filesystem [ 414.065393][ T9876] XFS (loop2): Ending clean mount [ 414.272127][ T9876] XFS (loop2): Quotacheck needed: Please wait. [ 415.621923][ T9876] XFS (loop2): Quotacheck: Done. [ 415.714578][ T4253] XFS (loop2): Unmounting Filesystem [ 416.561867][ T9942] loop1: detected capacity change from 0 to 256 [ 416.613237][ T9942] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 416.720818][ T8466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.018775][ T9939] loop4: detected capacity change from 0 to 32768 [ 417.047085][ T9939] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 417.078601][ T9939] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 417.468152][ T4260] ocfs2: Unmounting device (7,4) on (node local) [ 419.030784][ T6439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 419.282276][ T9961] hub 6-0:1.0: USB hub found [ 419.298193][ T9961] hub 6-0:1.0: 1 port detected [ 419.728120][ T4714] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 419.979837][ T4714] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 420.007930][ T4714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.105240][ T4714] usb 1-1: config 0 descriptor?? [ 421.677126][ T4714] pegasus 1-1:0.0: can't reset MAC [ 421.992981][ T4714] pegasus: probe of 1-1:0.0 failed with error -5 [ 422.002232][ T4714] usb 1-1: USB disconnect, device number 9 [ 422.076480][ T9998] loop5: detected capacity change from 0 to 256 [ 422.223022][ T9998] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 422.272379][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'. [ 422.284290][T10002] IPVS: Error joining to the multicast group [ 422.479407][ T5280] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.356390][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 425.372114][T10037] hub 6-0:1.0: USB hub found [ 425.388022][T10037] hub 6-0:1.0: 1 port detected [ 425.461115][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1902'. [ 425.479321][T10042] IPVS: Error joining to the multicast group [ 425.550958][T10025] loop5: detected capacity change from 0 to 32768 [ 425.657872][T10025] XFS (loop5): Mounting V5 Filesystem [ 425.881579][T10025] XFS (loop5): Ending clean mount [ 425.914706][T10025] XFS (loop5): Quotacheck needed: Please wait. [ 426.014403][T10025] XFS (loop5): Quotacheck: Done. [ 426.100022][ T8561] XFS (loop5): Unmounting Filesystem [ 427.608286][ T8518] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 428.076415][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'. [ 428.116816][T10087] IPVS: Error joining to the multicast group [ 428.334365][T10090] netlink: 'syz.5.1910': attribute type 2 has an invalid length. [ 428.372951][T10090] netlink: 'syz.5.1910': attribute type 1 has an invalid length. [ 428.615012][T10091] 9pnet: Could not find request transport: 0xffffffffffffffff [ 429.070054][T10102] loop1: detected capacity change from 0 to 512 [ 429.261005][T10102] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 429.519697][ T6439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 429.578633][T10102] EXT4-fs (loop1): orphan cleanup on readonly fs [ 429.587221][T10102] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:511: comm syz.1.1918: Block bitmap for bg 0 marked uninitialized [ 429.606316][T10102] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 429.616667][T10102] EXT4-fs (loop1): 1 orphan inode deleted [ 429.622523][T10102] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 429.975556][ T4262] EXT4-fs (loop1): unmounting filesystem. [ 430.258910][T10085] loop2: detected capacity change from 0 to 32768 [ 430.343490][T10085] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 430.464679][T10085] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 431.412523][ T4253] ocfs2: Unmounting device (7,2) on (node local) [ 431.502568][T10134] overlayfs: failed to resolve './file0': -2 [ 431.550632][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1926'. [ 431.652257][T10137] IPVS: Error joining to the multicast group [ 432.617269][T10151] net_ratelimit: 11 callbacks suppressed [ 432.617287][T10151] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.829712][ T6439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.972438][T10174] overlayfs: failed to resolve './file0': -2 [ 434.151606][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'. [ 434.168188][T10179] IPVS: Error joining to the multicast group [ 435.279264][ T8466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 435.799589][T10196] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 436.153669][T10209] overlayfs: failed to resolve './file1': -2 [ 436.840702][T10212] loop2: detected capacity change from 0 to 512 [ 436.906185][T10212] EXT4-fs: Ignoring removed oldalloc option [ 437.033239][T10212] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1953: Parent and EA inode have the same ino 15 [ 437.142598][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 437.158019][T10212] EXT4-fs (loop2): Remounting filesystem read-only [ 437.184972][T10212] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 437.208447][T10216] IPVS: Error joining to the multicast group [ 437.253315][T10212] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1953: Parent and EA inode have the same ino 15 [ 437.298809][T10212] EXT4-fs (loop2): Remounting filesystem read-only [ 437.345453][T10212] EXT4-fs (loop2): 1 orphan inode deleted [ 437.369077][T10212] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 437.574036][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 438.128954][T10231] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 438.232632][T10232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 438.274042][T10236] lo speed is unknown, defaulting to 1000 [ 438.287950][T10236] lo speed is unknown, defaulting to 1000 [ 438.354335][T10236] lo speed is unknown, defaulting to 1000 [ 438.407777][T10236] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 438.518225][T10246] overlayfs: failed to resolve './file1': -2 [ 438.629558][T10236] lo speed is unknown, defaulting to 1000 [ 438.772862][T10236] lo speed is unknown, defaulting to 1000 [ 438.812279][T10236] lo speed is unknown, defaulting to 1000 [ 438.889616][T10236] lo speed is unknown, defaulting to 1000 [ 439.366883][T10236] lo speed is unknown, defaulting to 1000 [ 439.760930][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.762696][ T6439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.767255][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.852946][T10280] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 440.902405][T10280] overlayfs: missing 'lowerdir' [ 441.039173][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.887268][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1987'. [ 443.896551][T10311] IPVS: Error joining to the multicast group [ 444.864997][T10332] overlayfs: failed to resolve './file1': -2 [ 447.452560][ T4723] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 447.462767][ T4314] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 447.488273][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 447.737944][ T4723] usb 2-1: Using ep0 maxpacket: 32 [ 447.897214][ T4723] usb 2-1: device descriptor read/all, error -71 [ 448.600447][T10364] overlayfs: failed to resolve './file0': -2 [ 449.903561][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2015'. [ 449.918361][T10383] IPVS: Error joining to the multicast group [ 450.401541][T10397] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2019'. [ 450.651859][T10400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2020'. [ 450.676502][T10400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2020'. [ 450.751226][T10402] hub 6-0:1.0: USB hub found [ 450.757621][T10402] hub 6-0:1.0: 1 port detected [ 451.121365][T10405] overlayfs: failed to resolve './file0': -2 [ 456.294885][T10449] loop2: detected capacity change from 0 to 512 [ 456.378867][T10449] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 456.425052][T10449] ext4 filesystem being mounted at /438/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 456.455190][T10452] overlayfs: failed to resolve './file0': -2 [ 456.634016][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 456.634031][ T26] audit: type=1326 audit(1749318006.966:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10460 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 456.745501][T10461] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 456.750524][ T26] audit: type=1326 audit(1749318006.976:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10460 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 456.783401][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 456.820962][ T26] audit: type=1326 audit(1749318006.976:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10460 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 456.927718][ T26] audit: type=1326 audit(1749318006.976:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10460 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 456.960756][ T26] audit: type=1326 audit(1749318006.976:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10460 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 456.984128][ T26] audit: type=1326 audit(1749318006.976:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10460 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 457.007267][ T26] audit: type=1326 audit(1749318006.976:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10460 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 457.039573][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 457.045459][ T26] audit: type=1326 audit(1749318006.976:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10460 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 457.128852][ T26] audit: type=1326 audit(1749318006.986:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10460 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 457.733079][ T26] audit: type=1326 audit(1749318006.986:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10460 comm="syz.5.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 458.224417][T10491] loop4: detected capacity change from 0 to 128 [ 458.253830][T10491] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 458.278535][ T4722] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 459.138391][ T33] bio_check_eod: 7477 callbacks suppressed [ 459.138410][ T33] kworker/u4:2: attempt to access beyond end of device [ 459.138410][ T33] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 459.179527][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2049'. [ 459.200050][ T4722] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 459.208254][T10497] IPVS: Error joining to the multicast group [ 459.215844][ T33] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00000000 (sector = 1) [ 459.218056][ T4722] usb 6-1: config 0 has no interface number 0 [ 459.287941][ T4722] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 459.398425][ T4722] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 459.407533][ T4722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.459123][ T4722] usb 6-1: Product: syz [ 459.470970][ T4722] usb 6-1: Manufacturer: syz [ 459.511806][ T4722] usb 6-1: SerialNumber: syz [ 459.545543][ T4722] usb 6-1: config 0 descriptor?? [ 460.562926][ T4722] usbtouchscreen 6-1:0.214: Failed to read FW rev: 0 [ 460.579604][ T4722] usbtouchscreen: probe of 6-1:0.214 failed with error -5 [ 460.627884][ T4719] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 460.768155][ T4722] usb 6-1: USB disconnect, device number 3 [ 460.807914][ T4719] usb 1-1: Using ep0 maxpacket: 16 [ 460.814921][ T4719] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 460.842049][ T4719] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 460.861221][ T4719] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 460.878476][ T4719] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 460.897041][ T4719] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 460.916401][ T4719] usb 1-1: config 0 has no interface number 0 [ 460.928160][ T4719] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 460.956841][ T4719] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 460.975537][ T4719] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 460.995812][ T4719] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 461.027941][ T4719] usb 1-1: config 0 interface 125 has no altsetting 0 [ 461.045055][ T4719] usb 1-1: config 0 interface 125 has no altsetting 2 [ 461.065039][ T4719] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 461.084521][ T4719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.101919][ T4719] usb 1-1: Product: syz [ 461.116551][ T4719] usb 1-1: Manufacturer: syz [ 461.148003][ T4719] usb 1-1: SerialNumber: syz [ 461.168923][ T4719] usb 1-1: config 0 descriptor?? [ 461.183719][ T4719] usb 1-1: selecting invalid altsetting 2 [ 461.475327][T10526] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 461.550386][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2062'. [ 461.595887][T10518] loop2: detected capacity change from 0 to 40427 [ 461.602808][T10529] IPVS: Error joining to the multicast group [ 461.627359][T10518] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7 [ 461.638963][T10518] F2FS-fs (loop2): Unrecognized mount option "barrier" or missing value [ 462.003238][T10533] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2057'. [ 462.522641][ C0] usb 1-1: async_complete: urb error -71 [ 462.528894][ T4719] get_1284_register: usb error -71 [ 462.534104][ T4719] uss720: probe of 1-1:0.125 failed with error -71 [ 462.544533][ T4719] usb 1-1: USB disconnect, device number 10 [ 463.170674][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 463.976345][ T26] kauditd_printk_skb: 67 callbacks suppressed [ 463.976360][ T26] audit: type=1326 audit(1749318014.306:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.5.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 464.024678][T10563] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 464.053990][ T26] audit: type=1326 audit(1749318014.346:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.5.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 464.076434][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.152953][ T26] audit: type=1326 audit(1749318014.346:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.5.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 464.175419][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.226432][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2074'. [ 464.243216][ T26] audit: type=1326 audit(1749318014.346:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.5.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 464.272647][T10567] IPVS: Error joining to the multicast group [ 464.315063][ T26] audit: type=1326 audit(1749318014.346:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.5.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 464.409710][ T26] audit: type=1326 audit(1749318014.346:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.5.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 464.645946][T10569] loop5: detected capacity change from 0 to 32768 [ 464.703836][ T26] audit: type=1326 audit(1749318014.346:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.5.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 464.882317][ T26] audit: type=1326 audit(1749318014.346:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.5.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 464.927913][ T26] audit: type=1326 audit(1749318014.346:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.5.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 464.931767][T10569] XFS (loop5): Mounting V5 Filesystem [ 465.422326][ T26] audit: type=1326 audit(1749318014.346:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.5.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f887d38e929 code=0x7ffc0000 [ 465.444834][ C1] vkms_vblank_simulate: vblank timer overrun [ 465.785932][T10569] XFS (loop5): Starting recovery (logdev: internal) [ 465.810208][T10569] XFS (loop5): Corruption warning: Metadata has LSN (8192:16) ahead of current LSN (1:48). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 465.825301][T10569] XFS (loop5): Metadata corruption detected at xfs_agi_verify+0x211/0x4f0, xfs_agi block 0x2 [ 465.836182][T10569] XFS (loop5): Unmount and run xfs_repair [ 465.841984][T10569] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 465.849395][T10569] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 20 00 XAGI.......... . [ 465.858358][T10569] 00000010: 00 00 00 40 00 00 00 03 00 00 00 01 00 00 00 37 ...@...........7 [ 465.867639][T10569] 00000020: 00 00 18 00 ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 465.876667][T10569] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 465.885616][T10569] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 465.894535][T10569] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 465.903475][T10569] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 465.912369][T10569] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 465.921565][T10569] XFS (loop5): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x1ff/0x670 (fs/xfs/xfs_buf.c:1553). Shutting down filesystem. [ 465.936164][T10569] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 465.944875][T10569] XFS (loop5): log mount/recovery failed: error -117 [ 465.967303][T10569] XFS (loop5): log mount failed [ 466.826654][T10558] hub 6-0:1.0: USB hub found [ 466.921464][T10558] hub 6-0:1.0: 1 port detected [ 467.045155][ T4314] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 468.588531][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 470.389770][T10610] loop5: detected capacity change from 0 to 32768 [ 470.408133][T10610] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.2087 (10610) [ 470.443880][T10628] xt_CT: You must specify a L4 protocol and not use inversions on it [ 470.475786][T10610] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 470.522238][T10610] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 470.552417][T10610] BTRFS info (device loop5): using free space tree [ 470.901006][T10610] BTRFS info (device loop5): enabling ssd optimizations [ 470.991178][T10655] hub 6-0:1.0: USB hub found [ 471.008034][T10655] hub 6-0:1.0: 1 port detected [ 471.091281][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 471.091296][ T26] audit: type=1800 audit(1749318021.426:4007): pid=10656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2087" name="file1" dev="loop5" ino=261 res=0 errno=0 [ 471.296081][T10625] loop2: detected capacity change from 0 to 32768 [ 471.529724][ T26] audit: type=1326 audit(1749318021.866:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10662 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 471.552169][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.581650][T10663] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 471.639499][ T26] audit: type=1326 audit(1749318021.906:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10662 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 471.707481][ T8561] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 471.726491][T10665] ERROR: (device loop2): dtSearch: stack overrun! [ 471.726491][T10665] [ 471.727913][ T26] audit: type=1326 audit(1749318021.906:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10662 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 471.827688][T10665] ERROR: (device loop2): remounting filesystem as read-only [ 471.858372][ T26] audit: type=1326 audit(1749318021.906:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10662 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 471.886411][T10665] btstack dump: [ 471.911298][T10665] bn = 0, index = 0 [ 471.925383][T10665] bn = 0, index = 0 [ 471.948590][T10665] bn = 0, index = 0 [ 471.952460][T10665] bn = 0, index = 0 [ 471.982977][T10665] bn = 0, index = 0 [ 471.986128][ T26] audit: type=1326 audit(1749318021.906:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10662 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 472.017916][T10665] bn = 0, index = 0 [ 472.032105][T10665] bn = 0, index = 0 [ 472.035961][T10665] bn = 0, index = 0 [ 472.051855][T10665] jfs_rename did not expect dtDelete to return rc = -5 [ 472.076480][T10665] ERROR: (device loop2): jfs_rename: [ 472.076480][T10665] [ 472.106545][ T26] audit: type=1326 audit(1749318021.906:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10662 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 472.163137][ T26] audit: type=1326 audit(1749318021.906:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10662 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 472.185587][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.248382][ T26] audit: type=1326 audit(1749318021.906:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10662 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 472.270835][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.317868][ T26] audit: type=1326 audit(1749318021.906:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10662 comm="syz.0.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2cb8e929 code=0x7ffc0000 [ 472.398646][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 472.467762][ T4253] ------------[ cut here ]------------ [ 472.474224][ T4253] kernel BUG at fs/jfs/inode.c:169! [ 472.479976][ T4253] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 472.486077][ T4253] CPU: 0 PID: 4253 Comm: syz-executor Not tainted 6.1.141-syzkaller #0 [ 472.494339][ T4253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.504414][ T4253] RIP: 0010:jfs_evict_inode+0x42d/0x430 [ 472.509998][ T4253] Code: ea fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 17 fe ff ff 4c 89 f7 e8 ed 79 ea fe e9 0a fe ff ff e8 33 01 99 fe <0f> 0b 90 41 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff [ 472.529642][ T4253] RSP: 0018:ffffc90003e27ac0 EFLAGS: 00010293 [ 472.535736][ T4253] RAX: ffffffff82e7d53d RBX: ffff888040ca3bb0 RCX: ffff88802f131dc0 [ 472.543724][ T4253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888040ca3bb0 [ 472.551704][ T4253] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff2117084 [ 472.559770][ T4253] R10: fffffbfff2117084 R11: 1ffffffff2117083 R12: dffffc0000000000 [ 472.568355][ T4253] R13: dffffc0000000000 R14: ffff888040ca3838 R15: ffff888040ca3d80 [ 472.576331][ T4253] FS: 000055555faf5500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 472.585298][ T4253] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.591876][ T4253] CR2: 0000001b3261eff8 CR3: 000000005d77d000 CR4: 00000000003526f0 [ 472.599849][ T4253] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 472.607824][ T4253] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 472.615796][ T4253] Call Trace: [ 472.619075][ T4253] [ 472.622005][ T4253] ? evict+0x47f/0x870 [ 472.626080][ T4253] ? jfs_write_inode+0x220/0x220 [ 472.631029][ T4253] evict+0x485/0x870 [ 472.635451][ T4253] ? proc_nr_inodes+0x2f0/0x2f0 [ 472.640305][ T4253] ? do_raw_spin_unlock+0x11d/0x230 [ 472.645510][ T4253] ? _raw_spin_unlock+0x24/0x40 [ 472.650359][ T4253] ? do_raw_spin_unlock+0x11d/0x230 [ 472.655564][ T4253] evict_inodes+0x604/0x690 [ 472.660075][ T4253] ? clear_inode+0x150/0x150 [ 472.664669][ T4253] ? dput+0x1c9/0x1d0 [ 472.668657][ T4253] ? sync_filesystem+0x103/0x220 [ 472.673685][ T4253] generic_shutdown_super+0x93/0x340 [ 472.678979][ T4253] kill_block_super+0x7c/0xe0 [ 472.683667][ T4253] deactivate_locked_super+0x93/0xf0 [ 472.688955][ T4253] cleanup_mnt+0x463/0x4f0 [ 472.693385][ T4253] ? lockdep_hardirqs_on+0x94/0x140 [ 472.698582][ T4253] task_work_run+0x1ca/0x250 [ 472.703176][ T4253] ? task_work_cancel+0x230/0x230 [ 472.708206][ T4253] ? exit_to_user_mode_loop+0x3b/0x110 [ 472.713680][ T4253] exit_to_user_mode_loop+0xe6/0x110 [ 472.718972][ T4253] exit_to_user_mode_prepare+0xb1/0x140 [ 472.724524][ T4253] syscall_exit_to_user_mode+0x16/0x40 [ 472.729974][ T4253] do_syscall_64+0x58/0xa0 [ 472.734401][ T4253] ? clear_bhb_loop+0x60/0xb0 [ 472.739087][ T4253] ? clear_bhb_loop+0x60/0xb0 [ 472.743773][ T4253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.749684][ T4253] RIP: 0033:0x7f85c1d8fc57 [ 472.754112][ T4253] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 472.773894][ T4253] RSP: 002b:00007ffe52bc92a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 472.782326][ T4253] RAX: 0000000000000000 RBX: 00007f85c1e10925 RCX: 00007f85c1d8fc57 [ 472.790313][ T4253] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe52bc9360 [ 472.798287][ T4253] RBP: 00007ffe52bc9360 R08: 0000000000000000 R09: 0000000000000000 [ 472.806267][ T4253] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe52bca3f0 [ 472.814240][ T4253] R13: 00007f85c1e10925 R14: 00000000000732c6 R15: 00007ffe52bca430 [ 472.822223][ T4253] [ 472.825263][ T4253] Modules linked in: [ 472.829177][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.868215][ T4253] ---[ end trace 0000000000000000 ]--- [ 472.881984][ T4253] RIP: 0010:jfs_evict_inode+0x42d/0x430 [ 472.898569][ T4253] Code: ea fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 17 fe ff ff 4c 89 f7 e8 ed 79 ea fe e9 0a fe ff ff e8 33 01 99 fe <0f> 0b 90 41 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff [ 472.918476][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.941073][ T4253] RSP: 0018:ffffc90003e27ac0 EFLAGS: 00010293 [ 472.947218][ T4253] RAX: ffffffff82e7d53d RBX: ffff888040ca3bb0 RCX: ffff88802f131dc0 [ 472.957536][ T4253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888040ca3bb0 [ 472.965859][ T4253] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff2117084 [ 472.975470][ T4253] R10: fffffbfff2117084 R11: 1ffffffff2117083 R12: dffffc0000000000 [ 472.983683][ T4253] R13: dffffc0000000000 R14: ffff888040ca3838 R15: ffff888040ca3d80 [ 472.993550][ T4253] FS: 000055555faf5500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 473.003488][ T4253] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.011630][ T4253] CR2: 00007f887d57e2d8 CR3: 000000005d77d000 CR4: 00000000003506e0 [ 473.020108][ T4253] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 473.029732][ T4253] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 473.039115][ T4253] Kernel panic - not syncing: Fatal exception [ 473.045586][ T4253] Kernel Offset: disabled [ 473.049907][ T4253] Rebooting in 86400 seconds..