last executing test programs: 31.496866494s ago: executing program 0 (id=440): creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) dup(r3) pipe2(0x0, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x8) connect$inet6(r4, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) 29.976404843s ago: executing program 0 (id=433): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x40804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x104) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x14) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r6, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r7}, 0x3f) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, 0x0) 23.953191527s ago: executing program 2 (id=441): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) r2 = socket$tipc(0x1e, 0x5, 0x0) socket(0x200000000000011, 0x2, 0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$tipc(r2, 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x1000000}) openat$dlm_monitor(0xffffff9c, &(0x7f0000000280), 0x103880, 0x0) setpriority(0x2, 0x0, 0x1ff) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) 22.299866271s ago: executing program 3 (id=443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="fdfc19f52a929e03000000000000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000bc0)={0x112c, 0x3f, 0x100, 0x70bd2c, 0x25dfdbfb, {0x6}, [@generic="7a1762d696d9c3156d8d65d5b7cd6a04c1f472e2941b72e79f6ad6733f64fbf168fcaa2da22dfccab76e61dde0b6ac421281b1b580786cac8dfde7bb0fa49b4e97e064d49809511b3f8cb9b11bf012a01755322c4fe11466e8bd368fe51a403d35ca7a157e970bf912bc8a98f2b2357189a211b1dafd48a517a31f7bcdd123af57383c417c", @nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x8a}]}, @nested={0x2b, 0xdf, 0x0, 0x1, [@generic="c9d17abf30840ddc5381d1e9f914a01e3f9d5d7e6d737ffd6cfc17ace667ce69f090c6146bc43a"]}, @generic="bf7d0c6910a484b73ba4fdb3b9e84a3be89b0057572cd4e4fea0514a0bc2f6d9789f7b440599cb29df485106f1f1f7c248cd6233dab5b43bd10708bb24494b6eb204792b23eecd70e59fa52da97bcd68c80dbd6444af90d9984f77f8152c65", @generic="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"]}, 0x112c}, 0x1, 0x0, 0x0, 0x2010}, 0x8000) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r2, r3, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) sendto(r4, 0x0, 0x0, 0x24008861, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket(0x80000000000000a, 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 16.939036364s ago: executing program 1 (id=445): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r0, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "694ce11ab02c8109da9e78ad768c321c95b3298ecd"}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket(0x200000000000011, 0x2, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2142, 0x18c) io_submit(r5, 0x1, &(0x7f00000008c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x1ff, r6, &(0x7f0000000240), 0x0, 0x6}]) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x8, 0xa0000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r7, 0x917, 0x70bd24, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 16.850479176s ago: executing program 2 (id=446): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) timer_create(0x3, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0xb, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0xc, 0x59565955, 0x2, 0x6, 0x6, 0x5, 0xa6e, 0x0, 0x2, 0x2, 0x5}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x16f, @time={0x6, 0x800}}) 15.153594541s ago: executing program 0 (id=447): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x2000884, &(0x7f00000005c0)=ANY=[@ANYBLOB='shortname=winnt,iocharset=cp850,shname=win95,shortname=win95,shortname=lower,shortname=win95,shortname=winnt,uni_xlate=0,utf8=1,utf8=1,tz=UTC,shortname=lower,iocharset=cp775,shortname=winnt,check=strict,nnonumtail=1,\x00\x00\x00\x00'], 0x1, 0x289, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e2, &(0x7f0000000140)) r4 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14, 0x453}, [], {0x14, 0x3f4}}, 0x28}, 0x1, 0x0, 0x0, 0x24801}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r6 = socket$inet(0x2, 0xa, 0x2) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e29, @multicast1}, 0x10, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0x60000000}, 0x20000004) fcntl$setlease(r5, 0x400, 0x0) unlink(&(0x7f0000000140)='./file1\x00') 14.903982229s ago: executing program 3 (id=448): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) r2 = socket$tipc(0x1e, 0x5, 0x0) socket(0x200000000000011, 0x2, 0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$tipc(r2, 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x1000000}) openat$dlm_monitor(0xffffff9c, 0x0, 0x103880, 0x0) setpriority(0x2, 0x0, 0x1ff) 14.318441758s ago: executing program 2 (id=449): r0 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000002980)={{}, {0x1, 0x2}, [], {}, [], {}, {0x20, 0x4}}, 0x24, 0x3) flistxattr(r0, &(0x7f0000000040)=""/33, 0x21) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(r2, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) getpgid(r2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x310) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query]}, 0x0, 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000800, &(0x7f0000000240)={[{@usrquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@data_journal}]}, 0x1, 0x781, &(0x7f0000000800)="$eJzs2M1rXOUeB/DfOZnkpm1uJ733Lm7vphcrtCCdvLWhqSCtC0EQLBRcqRjsJA2ZNCWToskqxaUuXAgqImg3LkSahdCN1IjgH6Ab+y8IoqILF8LImUxeSCcv1qQPTT8feGaelzn5/p4kc5hnAnhk/b94yCJ6IqI/Isqt+Twiupq97oiF5dfdGlq8UrQsGo1LP2XFZXFzaPHKys/KWs+HonlJnIyIp5/J4t9v3Jtbn5ufHK3VqjOtcd/s1LW++tz8qYmp0fHqePXq4ODZMyOnB4aHR3ZtrwN98fLXn59/YeHC9c/6X5yeLOrtaa2t38duytrMlSLipb0IS6CjtZ+OdXNZKWFBAABsqfic/6+IeKz5Ga4cHbH24a0cd79MWhwAAACwKxrHGgAAAMA+l/r7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg6NRhYNAAAAYF9L/f0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl5tDi1dW2oPM/fFCRPQu599qteWVUiw0n7ujMyIO/ppFad11WUT070L+wo2I+G+7/WfN/N7obo425ucRcTFx/iu7kA+PsqXi/nO+3fsvX73/RJv3X2n5sr9t5f53657731p+xyb3v2s7zPjku+ff2jT/RsT/Su3ys9X8bH1+51r+wg7z7zx39P3N1hofR5yI9vkril7f7NS1vvrc/KmJqdHx6nj16uDg2TMjpweGh0f6xiZq1f7lx7YZH3765jdb7f/gZvlZbPn7f3uH+z9+5MkvPtoi/+Txrf/+WZv8oqbFotPYPv+Xbw//sdlakX95k/1vlV/MLW0f3fTs7Yu3d/hSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2iTwieiLLK6v9PK9UIg5FxH/iYF6brs8+MTZ9/erlYi2iNzrzsYlatT8iysvjrBgPNPtr48EN46GIOBIR75QPNMeVV6drl1NvHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFWHIqInsrwSEXlE/FbO80oldVUAAADArutNXQAAAACw55z/AQAAYP/b9vx/56kHUwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD71ZFjS3eziFg4d6DZCl2ttc6klQF7LU9dAJBMR+oCgGRKqQsAknHGB7Jt1rvvYwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/efE0aW7WUQsnDvQbIWu1lpn0sqAvZanLgBIpiN1AUAypdQFAMk44wPZNuvd97ECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP7T02xZXomIvNnP80ol4p8R0Rud2dhErdofEYcj4vty5z+K8UDqogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANh19bn5ydFarTqjo/NwdL7yT/sgOqnvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApFCfm58crdWqM/XUlQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJBW/kMWEUU7UX68Z+NqV/Z7ufkcEa99cOnd10dnZ2cGivmfV+dn32vND6aoHwAAANho5Zy+co4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYqfrc/ORorVad2cNO6j0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/NnwEAAP//hsSitA==") 12.802020087s ago: executing program 1 (id=450): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x2000884, &(0x7f00000005c0)=ANY=[@ANYBLOB='shortname=winnt,iocharset=cp850,shname=win95,shortname=win95,shortname=lower,shortname=win95,shortname=winnt,uni_xlate=0,utf8=1,utf8=1,tz=UTC,shortname=lower,iocharset=cp775,shortname=winnt,check=strict,nnonumtail=1,\x00\x00\x00\x00'], 0x1, 0x289, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e2, &(0x7f0000000140)) r4 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14, 0x453}, [], {0x14, 0x3f4}}, 0x28}, 0x1, 0x0, 0x0, 0x24801}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r6 = socket$inet(0x2, 0xa, 0x2) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e29, @multicast1}, 0x10, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0x60000000}, 0x20000004) fcntl$setlease(r5, 0x400, 0x0) unlink(&(0x7f0000000140)='./file1\x00') 12.005457323s ago: executing program 3 (id=451): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 11.566676327s ago: executing program 1 (id=452): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x884) 11.434290121s ago: executing program 2 (id=453): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0x0, &(0x7f0000000080)=@rnullb, r1, &(0x7f0000000200)={0x5, 0x9, 0xfff, 0x6, 0x8001, 0x4, 0x0, 0x4, 0xd}) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x800, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000080)=0x8001, 0x4) sendmmsg$inet(r2, &(0x7f0000001700)=[{{&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, 0x0}}], 0x1, 0x24000800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000002380)='./file0\x00', 0x40, &(0x7f00000000c0)={[{@grpquota}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x9}}]}, 0x1, 0xbbf, &(0x7f00000010c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, 0x0) pipe(0x0) r5 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x68}]}, 0x24}, 0x1, 0x0, 0x0, 0x4011}, 0x4000050) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x82}, 'port0\x00', 0x25, 0xe0021, 0x8000, 0xfffffffe, 0x8, 0xffff, 0x1, 0x0, 0xcdb81099ccdfef48, 0x9}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x3) 10.442506923s ago: executing program 0 (id=454): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) r2 = socket$tipc(0x1e, 0x5, 0x0) socket(0x200000000000011, 0x2, 0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$tipc(r2, 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x1000000}) openat$dlm_monitor(0xffffff9c, &(0x7f0000000280), 0x103880, 0x0) setpriority(0x2, 0x0, 0x1ff) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) 10.350047306s ago: executing program 3 (id=455): landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), 0x0, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) syz_open_dev$vcsn(0x0, 0x200, 0x420400) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@local, 0x2, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 7.503275538s ago: executing program 1 (id=456): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r10, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001000)=@ublk_del_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) 6.335583715s ago: executing program 0 (id=457): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000100)={0x5152, 0x0, 0x0, 0x0, 0x132, 0x3}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x1, 0xfffd, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000002300)=0x4) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x20020600) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r6, 0x0, 0x0}, 0x10) 6.277548937s ago: executing program 2 (id=458): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x8d) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x4, 0x7}, 0x50) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 6.134438502s ago: executing program 3 (id=459): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) r2 = socket$tipc(0x1e, 0x5, 0x0) socket(0x200000000000011, 0x2, 0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$tipc(r2, 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x1000000}) openat$dlm_monitor(0xffffff9c, 0x0, 0x103880, 0x0) setpriority(0x2, 0x0, 0x1ff) 1.942763357s ago: executing program 1 (id=460): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x2000884, &(0x7f00000005c0)=ANY=[@ANYBLOB='shortname=winnt,iocharset=cp850,shname=win95,shortname=win95,shortname=lower,shortname=win95,shortname=winnt,uni_xlate=0,utf8=1,utf8=1,tz=UTC,shortname=lower,iocharset=cp775,shortname=winnt,check=strict,nnonumtail=1,\x00\x00\x00\x00'], 0x1, 0x289, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e2, &(0x7f0000000140)) r4 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14, 0x453}, [], {0x14, 0x3f4}}, 0x28}, 0x1, 0x0, 0x0, 0x24801}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r6 = socket$inet(0x2, 0xa, 0x2) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e29, @multicast1}, 0x10, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0x60000000}, 0x20000004) fcntl$setlease(r5, 0x400, 0x0) unlink(&(0x7f0000000140)='./file1\x00') 1.86601153s ago: executing program 2 (id=461): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) pwritev2(r0, &(0x7f0000000740)=[{&(0x7f0000000100)="3f6c5b761046b0a77db63c34e13408e27fcea6c7605a226d926b187e4d85c6dc144795bcb7eb57aa924187b4915c60848ced868e669e7383365c1b98ccdf87f4db91bf74c981a25caf0102470956f6b38a96d397cb995a13c9f1c474091c01e8c3c09a356e7dac9e7405acd7d332ba3fbb177cd8b2ffba8cc8d01264085fa41b35c651a946b8f2034baaa01bc5c5b1179e2e6e82dc3f059c5245", 0x9a}, {0x0}, {&(0x7f00000005c0)="f92c1e79acd0f7cdc8d83328244f9958c71163a4241e65d197e16cc0f83b426f50b2e198556fb3093a6c773014485fa3d250498d3c37886f01e28967891c211476", 0x41}], 0x3, 0x9, 0x1, 0x1c) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) read$watch_queue(r3, &(0x7f0000000780)=""/221, 0xfdef) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB=',wfdno=']) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) r6 = syz_open_pts(0xffffffffffffffff, 0x61c0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4000) 1.594210288s ago: executing program 0 (id=462): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x2000884, &(0x7f00000005c0)=ANY=[@ANYBLOB='shortname=winnt,iocharset=cp850,shname=win95,shortname=win95,shortname=lower,shortname=win95,shortname=winnt,uni_xlate=0,utf8=1,utf8=1,tz=UTC,shortname=lower,iocharset=cp775,shortname=winnt,check=strict,nnonumtail=1,\x00\x00\x00\x00'], 0x1, 0x289, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e2, &(0x7f0000000140)) r4 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14, 0x453}, [], {0x14, 0x3f4}}, 0x28}, 0x1, 0x0, 0x0, 0x24801}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r6 = socket$inet(0x2, 0xa, 0x2) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e29, @multicast1}, 0x10, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0x60000000}, 0x20000004) fcntl$setlease(r5, 0x400, 0x0) unlink(&(0x7f0000000140)='./file1\x00') 1.481513102s ago: executing program 3 (id=463): sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002) sendmsg(r0, &(0x7f0000000b40)={&(0x7f0000000000)=@ll={0x11, 0x18, r4, 0x1, 0x81, 0x6, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000800)=[{0xc8, 0x10f, 0xa75, "ee2732f84dd9bf1accc5d48afb2f606afa19b671723f81b9391f364c22cfd9f420050895cbe68057ccd13bdf50939d3cf277dd72c1062e3c26ccec365d99fbcded82d5b048063428f2c286e1dfd26e75ae4f455db6fffd009d667ba25c9284fc14b7a3626948627d9607506edb5988ca8901bd57fc12c7f0f75ae90ef98477cfa164f6c13f2c81be9ecf703e7cc66bf3a3eb44a7f631b1852f5503a800abff475548a40fa72657c7adcce3564fbf87fade43e0e6"}, {0x30, 0x2, 0x357cfe31, "4d47a93d7b15bc403bc0ef3a38a81ed874160e01e3af8857546cedf691120d70"}, {0xf8, 0x10c, 0xd, "08b3cf810833b614ca132432cb8e55e0c0e5b9f6f08e8e1fb598af6edbb5582a4e28cf477f5468d1622b2cb8a54dbbbde624460dea0a2d12211f45e489c445ba0735b51a4bc4e7f5d027d0e1557ad7cb676bf1e844f04fd41dee44281713abf596ab0d34362f703e1e8832923164497ed5d4444a473cd8287770ea33598e9fb159b28f0c84cd63376c250e8a1c8e38f5deecdc9dba821d186b5865532fb0e1d68ad86c8015bc857533449770084ab5277690c3ad2d3cd2f6e498b71ad0d6047858d4655a6fe547683be7edf55997aa17dcd9f1189b2346e66fa36bf356ce3acfea1fe09331506e"}, {0xa0, 0x10f, 0x4, "977bcc814f99fe5d78558b9b05b83da02d39d6cc2873f96dec8dd2af403d8e809934540e123347b7280d918c78256fc9d99fb10e42bafdb75d0486c89c8aab25be6dcf262a83ae99a144a54b9d09327981775c0643478c24e85399ad37472c06479d9b7a86adccb198fdc49104edd5798f7c3e9c331881cd6ac70343e3d87f7f92da6d9f314926b090c8b34c"}, {0x58, 0x116, 0x3, "e0bd42576a8b2660db90aa452d49774541a92e2c3cc6435a252c3c85d86aa705f3c8b35e9a7c227267b76aabdbf5c30ccbd3ea439571a6b031cad22247aa42f37659"}, {0x40, 0x101, 0x5, "ed25f9e605bf38fab5e650f29425d55d69e73d873da8aecfedb1f49daa0d66e54b87d53bb2431425d5a934"}, {0x10, 0x108, 0x8fa}], 0x338}, 0x4000004) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, &(0x7f00000003c0)={{0x2, @multicast2, 0xdffd, 0x800002, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x8, 0x2000050}}, 0x44) getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000040)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0xffffff86, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty, 0x1b}, 0x1c) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 0s ago: executing program 1 (id=464): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r2, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000012}, 0x40004) r3 = socket$inet(0x2, 0x3, 0x9) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4, @broadcast}, {0x1, @broadcast}, 0x4a, {0x2, 0x102, @initdev={0xac, 0x1e, 0x2, 0x0}}, 'ip6gretap0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000600)={0x0, 0x8}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x401c404) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) kernel console output (not intermixed with test programs): [ 55.484536][ T5437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.510515][ T5437] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK [ 55.952876][ T5518] ssh-keygen (5518) used greatest stack depth: 20912 bytes left Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. syzkaller login: [ 78.679228][ T5763] cgroup: Unknown subsys name 'net' [ 78.815921][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.465343][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.874651][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.882800][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.893709][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.898166][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.909452][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.918499][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.919588][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.933438][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.934410][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.942381][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.956444][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.964157][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.971647][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.988645][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.997164][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.998573][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.010309][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.017720][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.026300][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.033874][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.037438][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.047428][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.071689][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.079962][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.568506][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 83.681277][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 83.735453][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 83.777822][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 83.792202][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.800476][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.808280][ T5777] bridge_slave_0: entered allmulticast mode [ 83.815840][ T5777] bridge_slave_0: entered promiscuous mode [ 83.872959][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.880197][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.887484][ T5777] bridge_slave_1: entered allmulticast mode [ 83.894957][ T5777] bridge_slave_1: entered promiscuous mode [ 83.966725][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.974173][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.981581][ T5778] bridge_slave_0: entered allmulticast mode [ 83.989079][ T5778] bridge_slave_0: entered promiscuous mode [ 83.998179][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.005420][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.012691][ T5778] bridge_slave_1: entered allmulticast mode [ 84.020067][ T5778] bridge_slave_1: entered promiscuous mode [ 84.054139][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.131042][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.184359][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.201235][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.245448][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.252880][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.260413][ T5775] bridge_slave_0: entered allmulticast mode [ 84.267814][ T5775] bridge_slave_0: entered promiscuous mode [ 84.286493][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.294609][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.302348][ T5775] bridge_slave_1: entered allmulticast mode [ 84.310100][ T5775] bridge_slave_1: entered promiscuous mode [ 84.330054][ T5777] team0: Port device team_slave_0 added [ 84.348204][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.355472][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.363347][ T5776] bridge_slave_0: entered allmulticast mode [ 84.371201][ T5776] bridge_slave_0: entered promiscuous mode [ 84.392619][ T5777] team0: Port device team_slave_1 added [ 84.410856][ T5778] team0: Port device team_slave_0 added [ 84.423699][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.431229][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.438906][ T5776] bridge_slave_1: entered allmulticast mode [ 84.446081][ T5776] bridge_slave_1: entered promiscuous mode [ 84.475715][ T5778] team0: Port device team_slave_1 added [ 84.495529][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.506331][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.513933][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.540049][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.554078][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.561188][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.587353][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.625270][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.656038][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.670155][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.701818][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.709345][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.735479][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.748341][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.755340][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.781510][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.839081][ T5776] team0: Port device team_slave_0 added [ 84.866790][ T5775] team0: Port device team_slave_0 added [ 84.879562][ T5777] hsr_slave_0: entered promiscuous mode [ 84.886240][ T5777] hsr_slave_1: entered promiscuous mode [ 84.895661][ T5776] team0: Port device team_slave_1 added [ 84.927380][ T5775] team0: Port device team_slave_1 added [ 84.950297][ T5778] hsr_slave_0: entered promiscuous mode [ 84.956662][ T5778] hsr_slave_1: entered promiscuous mode [ 84.963636][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.971720][ T5778] Cannot create hsr debugfs directory [ 85.024035][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.031175][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.058199][ T5785] Bluetooth: hci0: command tx timeout [ 85.064106][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.084399][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.091498][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.117507][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.130528][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.137802][ T5785] Bluetooth: hci1: command tx timeout [ 85.143546][ T5785] Bluetooth: hci2: command tx timeout [ 85.149794][ T51] Bluetooth: hci3: command tx timeout [ 85.155636][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.182776][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.201761][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.209688][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.237132][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.416140][ T5775] hsr_slave_0: entered promiscuous mode [ 85.422831][ T5775] hsr_slave_1: entered promiscuous mode [ 85.430695][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.438474][ T5775] Cannot create hsr debugfs directory [ 85.466307][ T5776] hsr_slave_0: entered promiscuous mode [ 85.473330][ T5776] hsr_slave_1: entered promiscuous mode [ 85.479955][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.488068][ T5776] Cannot create hsr debugfs directory [ 85.808786][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.829698][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.851644][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.863161][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.936551][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.962509][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.974766][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.005128][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.079944][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.091848][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.103718][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.117497][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.211633][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.224116][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.248371][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.262289][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.361750][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.405807][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.439616][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.466359][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.473835][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.505760][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.513068][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.532801][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.543980][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.572857][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.580088][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.614580][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.641902][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.649159][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.679139][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.686311][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.698960][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.706261][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.748015][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.810677][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.870088][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.946682][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.953918][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.990488][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.997743][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.150675][ T5785] Bluetooth: hci0: command tx timeout [ 87.217393][ T5785] Bluetooth: hci2: command tx timeout [ 87.222888][ T5785] Bluetooth: hci3: command tx timeout [ 87.229358][ T5789] Bluetooth: hci1: command tx timeout [ 87.346191][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.535358][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.591757][ T5778] veth0_vlan: entered promiscuous mode [ 87.650144][ T5778] veth1_vlan: entered promiscuous mode [ 87.680251][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.803667][ T5778] veth0_macvtap: entered promiscuous mode [ 87.903295][ T5778] veth1_macvtap: entered promiscuous mode [ 87.962614][ T5775] veth0_vlan: entered promiscuous mode [ 88.002278][ T5775] veth1_vlan: entered promiscuous mode [ 88.023474][ T5777] veth0_vlan: entered promiscuous mode [ 88.035775][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.055539][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.081324][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.110277][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.122556][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.132447][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.141666][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.158188][ T5777] veth1_vlan: entered promiscuous mode [ 88.280766][ T5776] veth0_vlan: entered promiscuous mode [ 88.293436][ T5775] veth0_macvtap: entered promiscuous mode [ 88.316261][ T5777] veth0_macvtap: entered promiscuous mode [ 88.332996][ T5775] veth1_macvtap: entered promiscuous mode [ 88.361297][ T5777] veth1_macvtap: entered promiscuous mode [ 88.383297][ T5776] veth1_vlan: entered promiscuous mode [ 88.409919][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.428921][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.442748][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.455126][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.465716][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.477720][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.520670][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.531452][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.532708][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.542807][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.564260][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.578646][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.589502][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.601284][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.610790][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.619892][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.629316][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.680959][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.692558][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.702972][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.713531][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.725006][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.750318][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.759038][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.775227][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.784476][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.795800][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.805643][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.845458][ T5776] veth0_macvtap: entered promiscuous mode [ 88.911623][ T5776] veth1_macvtap: entered promiscuous mode [ 89.056089][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.079240][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.089418][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.100216][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.111368][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.123103][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.135657][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.145093][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.160948][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.179336][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.195545][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.205702][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.217285][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.228340][ T5785] Bluetooth: hci0: command tx timeout [ 89.232566][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.277371][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.355518][ T51] Bluetooth: hci1: command tx timeout [ 89.362080][ T5789] Bluetooth: hci2: command tx timeout [ 89.369020][ T5785] Bluetooth: hci3: command tx timeout [ 89.672330][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.160559][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.176280][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.185751][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.194951][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.204234][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.221441][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.265900][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.293706][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.325078][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.363124][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.825855][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.969771][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.094327][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.163620][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.426408][ T51] Bluetooth: hci0: command tx timeout [ 91.432204][ T51] Bluetooth: hci3: command tx timeout [ 91.437769][ T51] Bluetooth: hci2: command tx timeout [ 91.468472][ T5785] Bluetooth: hci1: command tx timeout [ 91.491794][ T5864] syz.3.4[5864]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.509101][ T5864] loop3: detected capacity change from 0 to 512 [ 93.121463][ T27] cfg80211: failed to load regulatory.db [ 93.142122][ T5855] sched: RT throttling activated [ 94.040386][ T5870] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5871] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[5870] [ 95.361288][ T5864] fscrypt: Error allocating hmac(sha512): -2 [ 95.991661][ T5877] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.229586][ T5884] loop3: detected capacity change from 0 to 128 [ 96.379946][ T5884] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 96.630171][ T5886] loop0: detected capacity change from 0 to 40427 [ 96.690091][ T5884] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.711817][ T5886] F2FS-fs (loop0): invalid crc value [ 96.746424][ T5886] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.808828][ T5886] F2FS-fs (loop0): Start checkpoint disabled! [ 96.841999][ T5886] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 96.997225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 97.406926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.145667][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 99.258195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 99.564788][ T5777] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.795821][ T5901] netlink: 'syz.3.10': attribute type 12 has an invalid length. [ 99.859301][ T5901] netlink: 'syz.3.10': attribute type 29 has an invalid length. [ 99.911661][ T995] kworker/u4:5: attempt to access beyond end of device [ 99.911661][ T995] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 99.923120][ T5901] netlink: 'syz.3.10': attribute type 7 has an invalid length. [ 99.949829][ T995] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 100.066479][ T5905] ======================================================= [ 100.066479][ T5905] WARNING: The mand mount option has been deprecated and [ 100.066479][ T5905] and is ignored by this kernel. Remove the mand [ 100.066479][ T5905] option from the mount to silence this warning. [ 100.066479][ T5905] ======================================================= [ 100.103173][ T5905] tmpfs: Bad value for 'mpol' [ 100.218210][ T5901] netlink: 'syz.3.10': attribute type 37 has an invalid length. [ 100.260459][ T995] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 100.281450][ T5820] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.326520][ T5901] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10'. [ 100.364557][ T995] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 100.826656][ T5820] usb 4-1: Using ep0 maxpacket: 32 [ 101.102889][ T5909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.582181][ T5820] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 101.602026][ T5820] usb 4-1: config 0 has no interface number 0 [ 101.618574][ T5820] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 101.629005][ T5820] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 101.639799][ T5820] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 101.663920][ T5820] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 101.673734][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.681930][ T5820] usb 4-1: Product: syz [ 101.686140][ T5820] usb 4-1: Manufacturer: syz [ 101.697017][ T5820] usb 4-1: SerialNumber: syz [ 101.718420][ T5820] usb 4-1: config 0 descriptor?? [ 101.739580][ T5903] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.776884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 101.836873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.884483][ T5918] loop2: detected capacity change from 0 to 8 [ 103.946171][ T5820] usb-storage 4-1:0.20: USB Mass Storage device detected [ 104.004781][ T5820] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 104.024807][ T5820] scsi host1: usb-storage 4-1:0.20 [ 104.923797][ T5927] loop3: detected capacity change from 0 to 128 [ 105.333878][ T5929] process 'syz.2.16' launched './file0' with NULL argv: empty string added [ 105.826086][ T5820] usb 4-1: USB disconnect, device number 2 [ 106.571915][ T5933] loop2: detected capacity change from 0 to 1024 [ 106.613689][ T5931] Zero length message leads to an empty skb [ 106.907865][ T5935] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.251465][ T5939] bridge1: entered promiscuous mode [ 107.779887][ T5943] loop3: detected capacity change from 0 to 512 [ 107.835668][ T5943] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.573797][ T5943] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c019, mo2=0002] [ 108.582179][ T5943] System zones: 1-12 [ 108.611949][ T5943] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.21: ea_inode file size=0 entry size=6 [ 108.625335][ T5943] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 108.638931][ T5943] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.21: iget: bad extra_isize 90 (inode size 256) [ 108.662582][ T5943] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.21: error while reading EA inode 11 err=-117 [ 108.679090][ T5943] EXT4-fs (loop3): 1 orphan inode deleted [ 108.686277][ T5943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.706518][ T5943] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.451252][ T5974] random: crng reseeded on system resumption [ 118.909037][ T5996] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5997] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[5996] [ 120.664015][ T6006] loop0: detected capacity change from 0 to 512 [ 120.679369][ T6006] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.707722][ T6006] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c019, mo2=0002] [ 120.715928][ T6006] System zones: 1-12 [ 120.998743][ T6006] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.33: ea_inode file size=0 entry size=6 [ 121.011866][ T6006] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.33: iget: bad extra_isize 90 (inode size 256) [ 121.027438][ T6006] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.33: error while reading EA inode 11 err=-117 [ 121.041089][ T6006] EXT4-fs (loop0): 1 orphan inode deleted [ 121.048207][ T6006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.079252][ T6006] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.182835][ T6010] loop2: detected capacity change from 0 to 512 [ 121.771002][ T6010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.855893][ T6010] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.282791][ T6022] loop0: detected capacity change from 0 to 512 [ 122.451481][ T6025] syz.2.36 uses obsolete (PF_INET,SOCK_PACKET) [ 123.918589][ T6024] syz.2.36 (6024) used greatest stack depth: 20688 bytes left [ 124.121460][ T28] audit: type=1107 audit(1780026018.603:2): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 124.471460][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.733513][ T6022] EXT4-fs (loop0): Test dummy encryption mode enabled [ 124.740960][ T6022] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 124.755336][ T6022] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.781651][ T6022] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.37: bad orphan inode 131083 [ 124.802006][ T6022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.042498][ T6037] random: crng reseeded on system resumption [ 126.016530][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.213257][ T6045] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 126.705214][ T6047] tmpfs: Bad value for 'mpol' [ 126.715943][ T51] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 127.257014][ T6052] 9pnet_fd: Insufficient options for proto=fd [ 127.473621][ T6056] loop3: detected capacity change from 0 to 512 [ 127.533839][ T6056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.696045][ T6056] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.893811][ T6052] netlink: 'syz.1.42': attribute type 10 has an invalid length. [ 128.016747][ T28] audit: type=1107 audit(1780026024.223:3): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 128.325235][ T6060] syz.3.43 (6060) used greatest stack depth: 20240 bytes left [ 128.537743][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.551574][ T6052] team0: Port device netdevsim0 added [ 128.600507][ T6048] macvlan2: entered promiscuous mode [ 128.607397][ T6048] macvlan2: entered allmulticast mode [ 128.639735][ T6044] warning: `syz.1.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.901013][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 129.854288][ T6073] loop1: detected capacity change from 0 to 512 [ 129.980847][ T6073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.017576][ T6073] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.143598][ T6081] loop2: detected capacity change from 0 to 512 [ 130.236537][ T6081] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 130.360008][ T6081] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.48: bad orphan inode 131083 [ 130.447675][ T6081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.988691][ T28] audit: type=1107 audit(1780026027.453:4): pid=6072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 132.123389][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.243346][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.459211][ T6093] sctp: failed to load transform for md5: -2 [ 133.537966][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.544666][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.825602][ T6108] loop0: detected capacity change from 0 to 512 [ 133.930254][ T6108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.958960][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'. [ 133.983431][ T6108] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.177386][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'. [ 134.483694][ T28] audit: type=1107 audit(1780026030.683:5): pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 135.002157][ T6121] 9pnet_fd: Insufficient options for proto=fd [ 135.068654][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.623623][ T6118] netlink: 'syz.2.54': attribute type 10 has an invalid length. [ 135.664867][ T6118] team0: Port device netdevsim0 added [ 135.688085][ T6123] loop3: detected capacity change from 0 to 512 [ 136.219832][ T6128] syz.0.55 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 137.359890][ T6123] EXT4-fs: Ignoring removed i_version option [ 137.366068][ T6123] EXT4-fs: Ignoring removed nobh option [ 137.412534][ T6127] loop1: detected capacity change from 0 to 1024 [ 137.429605][ T6123] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 137.461555][ T6123] EXT4-fs (loop3): 1 truncate cleaned up [ 137.473222][ T6123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.360523][ T6136] bridge1: entered promiscuous mode [ 138.525190][ T6134] loop2: detected capacity change from 0 to 512 [ 138.532963][ T6134] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 138.668874][ T6134] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.59: bad orphan inode 131083 [ 138.685574][ T6134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.734435][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.859787][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.116174][ T6152] loop1: detected capacity change from 0 to 512 [ 140.258333][ T6154] tmpfs: Bad value for 'mpol' [ 140.555591][ T6152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.673807][ T6152] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.337970][ T28] audit: type=1107 audit(1780026037.543:6): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 142.082574][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.994371][ T6180] loop0: detected capacity change from 0 to 512 [ 143.355026][ T6180] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 143.476181][ T6180] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.58: bad orphan inode 131083 [ 143.547215][ T6180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.794237][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.835014][ T6183] loop1: detected capacity change from 0 to 8 [ 143.932565][ T6185] loop0: detected capacity change from 0 to 1024 [ 145.061964][ T6193] loop1: detected capacity change from 0 to 512 [ 145.079951][ T6193] EXT4-fs: Ignoring removed i_version option [ 145.101979][ T6193] EXT4-fs: Ignoring removed nobh option [ 145.152047][ T6193] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 145.248354][ T6193] EXT4-fs (loop1): 1 truncate cleaned up [ 147.118062][ T6193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.300426][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.324903][ T6208] loop2: detected capacity change from 0 to 512 [ 149.508922][ T6212] loop1: detected capacity change from 0 to 2048 [ 149.542456][ T6208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.579106][ T6212] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 149.611414][ T6208] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.850775][ T6220] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.895478][ T6212] syz.1.76: attempt to access beyond end of device [ 149.895478][ T6212] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 151.197004][ T28] audit: type=1107 audit(1780026046.753:7): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 151.524060][ T28] audit: type=1800 audit(1780026047.593:8): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.74" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 151.569630][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.561194][ T6231] loop0: detected capacity change from 0 to 8 [ 153.026503][ T6233] loop3: detected capacity change from 0 to 40427 [ 153.183784][ T6233] F2FS-fs (loop3): invalid crc value [ 153.234345][ T6233] F2FS-fs (loop3): Found nat_bits in checkpoint [ 153.306945][ T6233] F2FS-fs (loop3): Start checkpoint disabled! [ 153.339120][ T6233] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 153.578208][ T6238] block device autoloading is deprecated and will be removed. [ 154.363808][ T59] kworker/u4:4: attempt to access beyond end of device [ 154.363808][ T59] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 154.399618][ T59] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 154.426978][ T59] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 154.439464][ T59] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 155.368987][ T6250] loop1: detected capacity change from 0 to 128 [ 155.534885][ T6252] loop0: detected capacity change from 0 to 512 [ 155.713357][ T6253] 9pnet_fd: Insufficient options for proto=fd [ 155.796479][ T6252] EXT4-fs: Ignoring removed i_version option [ 155.856100][ T6252] EXT4-fs: Ignoring removed nobh option [ 156.059236][ T6253] netlink: 'syz.3.87': attribute type 10 has an invalid length. [ 156.610234][ T6254] loop2: detected capacity change from 0 to 512 [ 156.648936][ T6252] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 156.661156][ T6253] team0: Port device netdevsim0 added [ 156.717496][ T6252] EXT4-fs (loop0): 1 truncate cleaned up [ 156.755093][ T6254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.766478][ T6252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.864919][ T6254] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.876461][ T6263] netlink: 'syz.1.88': attribute type 1 has an invalid length. [ 157.610531][ T28] audit: type=1107 audit(1780026053.793:9): pid=6251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 157.653952][ T6264] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 157.669325][ T6264] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 157.732690][ T6263] bond1: (slave gretap1): making interface the new active one [ 157.750059][ T6263] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 157.768375][ T6268] macvlan2: entered promiscuous mode [ 157.866944][ T6268] macvlan2: entered allmulticast mode [ 157.873404][ T6268] bond1: entered promiscuous mode [ 157.881718][ T6268] gretap1: entered promiscuous mode [ 157.890528][ T6268] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 157.914332][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.951152][ T6268] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 157.965975][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.978708][ T6268] bond1: left promiscuous mode [ 157.983637][ T6268] gretap1: left promiscuous mode [ 158.488341][ T6275] loop2: detected capacity change from 0 to 4096 [ 158.549707][ T6279] PKCS7: Unknown OID: [4] 0.0 [ 158.554631][ T6279] PKCS7: Only support pkcs7_signedData type [ 158.603674][ T6279] netlink: 452 bytes leftover after parsing attributes in process `syz.3.89'. [ 158.668255][ T6268] syz.1.88 (6268) used greatest stack depth: 19696 bytes left [ 158.790055][ T28] audit: type=1800 audit(1780026055.003:10): pid=6276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.90" name="file2" dev="loop2" ino=31 res=0 errno=0 [ 159.082510][ T6263] syz.1.88 (6263) used greatest stack depth: 17712 bytes left [ 159.154076][ T6281] loop0: detected capacity change from 0 to 8192 [ 159.178766][ T6281] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 159.192240][ T6281] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 159.202184][ T6281] REISERFS (device loop0): using ordered data mode [ 159.210003][ T6281] reiserfs: using flush barriers [ 159.219315][ T6281] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 159.238144][ T6281] REISERFS (device loop0): checking transaction log (loop0) [ 159.260969][ T6281] REISERFS (device loop0): Using r5 hash to sort names [ 159.324790][ T6281] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 159.408829][ T6284] netlink: 'syz.1.93': attribute type 12 has an invalid length. [ 159.495973][ T6284] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 160.871495][ T6296] loop1: detected capacity change from 0 to 512 [ 161.457992][ T6308] PKCS7: Unknown OID: [4] 0.0 [ 161.462773][ T6308] PKCS7: Only support pkcs7_signedData type [ 161.486631][ T6308] netlink: 452 bytes leftover after parsing attributes in process `syz.0.96'. [ 161.907070][ T6296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.954623][ T6304] loop2: detected capacity change from 0 to 512 [ 161.977094][ T6296] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.940685][ T28] audit: type=1107 audit(1780026058.533:11): pid=6295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 164.150855][ T28] audit: type=1800 audit(1780026060.183:12): pid=6314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.97" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 164.195595][ T6304] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 165.592438][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.262060][ T6400] netlink: 36 bytes leftover after parsing attributes in process `syz.1.106'. [ 173.797622][ T6418] PKCS7: Unknown OID: [4] 0.0 [ 173.802394][ T6418] PKCS7: Only support pkcs7_signedData type [ 173.935772][ T6415] netlink: 452 bytes leftover after parsing attributes in process `syz.0.108'. [ 174.275534][ T6426] loop3: detected capacity change from 0 to 512 [ 174.450170][ T6426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.467175][ T6426] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.997251][ T28] audit: type=1107 audit(1780026071.193:13): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 175.446208][ T6435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.533893][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.634239][ T6455] loop1: detected capacity change from 0 to 1024 [ 179.066351][ T6463] loop3: detected capacity change from 0 to 2048 [ 179.200073][ T6463] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 181.484254][ T6463] NILFS (loop3): error -4 creating segctord thread [ 182.703021][ T6478] loop3: detected capacity change from 0 to 512 [ 182.748158][ T6478] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 183.403802][ T6478] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.124: bad orphan inode 131083 [ 183.543431][ T6478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.773559][ T6482] loop2: detected capacity change from 0 to 512 [ 183.913777][ T6482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.951023][ T6482] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.227716][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.324324][ T28] audit: type=1107 audit(1780026080.463:14): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 184.934127][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.953518][ T6499] loop3: detected capacity change from 0 to 8 [ 185.066532][ T6500] loop1: detected capacity change from 0 to 512 [ 185.079033][ T6500] ext4: Unknown parameter 'seclabel' [ 185.985207][ T6507] loop1: detected capacity change from 0 to 256 [ 186.762274][ T6511] vxcan0: tx address claim with dest, not broadcast [ 187.134900][ T6512] loop0: detected capacity change from 0 to 512 [ 187.350907][ T6512] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 187.468344][ T6512] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.134: bad orphan inode 131083 [ 187.527748][ T6512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.949876][ T6520] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 189.149287][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.623466][ T6535] veth0: entered promiscuous mode [ 190.217710][ T6532] veth0: left promiscuous mode [ 190.429987][ T6540] loop0: detected capacity change from 0 to 512 [ 190.556495][ T6540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.573685][ T6540] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.133231][ T6552] loop3: detected capacity change from 0 to 8 [ 194.701196][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.707593][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.993263][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 195.064797][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.862874][ T6562] loop0: detected capacity change from 0 to 512 [ 196.873411][ T6562] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 196.900402][ T6562] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.143: bad orphan inode 131083 [ 196.935078][ T6562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.165175][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.517747][ T6575] hub 8-0:1.0: USB hub found [ 197.524635][ T6575] hub 8-0:1.0: 1 port detected [ 197.543390][ T6575] No such timeout policy "syz1" [ 197.551255][ T6575] loop2: detected capacity change from 0 to 16 [ 199.027267][ T6571] loop1: detected capacity change from 0 to 8192 [ 199.057007][ T6575] erofs: (device loop2): mounted with root inode @ nid 36. [ 199.108011][ T6574] syz.2.142: attempt to access beyond end of device [ 199.108011][ T6574] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 199.117464][ T6571] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 199.134635][ T6574] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 199.138582][ T28] audit: type=1800 audit(1780026095.343:15): pid=6574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.142" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 199.165741][ T6574] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 199.206938][ T6571] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 199.239275][ T6571] REISERFS (device loop1): using ordered data mode [ 199.250178][ T6571] reiserfs: using flush barriers [ 199.261460][ T6571] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 199.286131][ T6578] netlink: 'syz.0.146': attribute type 1 has an invalid length. [ 199.295549][ T6571] REISERFS (device loop1): checking transaction log (loop1) [ 199.331916][ T6571] REISERFS (device loop1): Using r5 hash to sort names [ 199.395252][ T6571] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 201.296914][ T6596] nfs4: Unknown parameter 'noa' [ 202.343428][ T6600] loop2: detected capacity change from 0 to 512 [ 202.417693][ T6600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.487742][ T6600] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.979229][ T6610] PKCS7: Unknown OID: [4] 0.0 [ 202.985141][ T6610] PKCS7: Only support pkcs7_signedData type [ 203.041307][ T6610] netlink: 452 bytes leftover after parsing attributes in process `syz.3.152'. [ 203.770784][ T6617] loop3: detected capacity change from 0 to 512 [ 203.900571][ T28] audit: type=1107 audit(1780026100.103:16): pid=6599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 204.514726][ T6618] loop1: detected capacity change from 0 to 512 [ 204.539705][ T6618] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 204.648629][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.754506][ T6617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.779238][ T6617] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.931395][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 206.938332][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 206.944477][ T28] audit: type=1107 audit(1780026101.483:17): pid=6616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 207.364624][ T6625] syz.0.153 (6625): drop_caches: 2 [ 207.465719][ T6618] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.154: bad orphan inode 131083 [ 207.487954][ T6618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.075533][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.091919][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.474788][ T6646] loop3: detected capacity change from 0 to 8192 [ 209.505624][ T6646] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 209.528147][ T6646] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 209.589985][ T6646] REISERFS (device loop3): using ordered data mode [ 209.597891][ T6646] reiserfs: using flush barriers [ 209.618156][ T6646] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 209.664315][ T6651] loop1: detected capacity change from 0 to 512 [ 209.671927][ T6646] REISERFS (device loop3): checking transaction log (loop3) [ 209.702869][ T6646] REISERFS (device loop3): Using r5 hash to sort names [ 209.724223][ T6651] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 209.734616][ T6651] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 209.767267][ T6651] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.160: Invalid inode table block 1 in block_group 0 [ 209.795086][ T6651] EXT4-fs (loop1): get root inode failed [ 209.797021][ T6646] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 209.801648][ T6651] EXT4-fs (loop1): mount failed [ 211.101018][ T6657] netlink: 43 bytes leftover after parsing attributes in process `syz.2.161'. [ 211.905018][ T5785] Bluetooth: hci2: unexpected event for opcode 0x007f [ 212.174911][ T6675] loop0: detected capacity change from 0 to 512 [ 212.201683][ T6673] loop3: detected capacity change from 0 to 256 [ 212.214463][ T6675] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 212.401390][ T6673] FAT-fs (loop3): Unrecognized mount option "shname=win95" or missing value [ 212.707178][ T6675] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.166: bad orphan inode 131083 [ 213.076015][ T6675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.294360][ T28] audit: type=1107 audit(1780026109.493:18): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 213.905161][ T6683] loop3: detected capacity change from 0 to 512 [ 213.917817][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.991662][ T6683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.010530][ T6683] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.535207][ T6688] loop1: detected capacity change from 0 to 32768 [ 214.616290][ T28] audit: type=1107 audit(1780026110.763:19): pid=6682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 214.735917][ T6688] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.169 (6688) [ 214.827027][ T6692] PKCS7: Unknown OID: [4] 0.0 [ 214.839766][ T6692] PKCS7: Only support pkcs7_signedData type [ 214.966242][ T6688] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.977253][ T6688] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 214.986067][ T6688] BTRFS info (device loop1): turning on sync discard [ 214.993903][ T6688] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 215.003818][ T6688] BTRFS info (device loop1): use zstd compression, level 3 [ 215.011129][ T6688] BTRFS info (device loop1): turning on async discard [ 215.018249][ T6688] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 215.028949][ T6688] BTRFS info (device loop1): trying to use backup root at mount time [ 215.037104][ T6688] BTRFS info (device loop1): enabling auto defrag [ 215.042766][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.043578][ T6688] BTRFS info (device loop1): using free space tree [ 215.114077][ T6355] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 215.159112][ T6688] BTRFS error (device loop1): failed to load root extent [ 215.167325][ T6688] BTRFS warning (device loop1): try to load backup roots slot 1 [ 215.176685][ T49] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 215.208713][ T6692] netlink: 452 bytes leftover after parsing attributes in process `syz.2.163'. [ 215.240669][ T6688] BTRFS warning (device loop1): couldn't read tree root [ 215.247790][ T6688] BTRFS warning (device loop1): try to load backup roots slot 2 [ 215.258742][ T6374] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 215.285414][ T6688] BTRFS warning (device loop1): couldn't read tree root [ 215.292527][ T6688] BTRFS warning (device loop1): try to load backup roots slot 3 [ 215.455968][ T6688] BTRFS info (device loop1): enabling ssd optimizations [ 215.464345][ T6688] BTRFS info (device loop1): rebuilding free space tree [ 215.553892][ T6688] BTRFS info (device loop1): checking UUID tree [ 217.711895][ T5776] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 219.490774][ T6731] loop3: detected capacity change from 0 to 512 [ 219.618698][ T6731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.677447][ T6731] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.769105][ T6729] loop2: detected capacity change from 0 to 8192 [ 219.943596][ T6729] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 220.977546][ T28] audit: type=1107 audit(1780026116.513:20): pid=6730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 221.045166][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 221.133883][ T6729] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 221.358428][ T6729] REISERFS (device loop2): using ordered data mode [ 221.439439][ T9] usb 2-1: no configurations [ 221.474720][ T6729] reiserfs: using flush barriers [ 221.503240][ T9] usb 2-1: can't read configurations, error -22 [ 221.562187][ T6729] REISERFS warning (device loop2): journal-1256 journal_init: unable to get memory for journal structure [ 221.845893][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 222.153625][ T9] usb 2-1: no configurations [ 222.223112][ T9] usb 2-1: can't read configurations, error -22 [ 222.359044][ T9] usb usb2-port1: attempt power cycle [ 223.007877][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 223.042700][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.267100][ T9] usb 2-1: device not accepting address 4, error -71 [ 225.936431][ T787] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 225.997341][ T6773] PKCS7: Unknown OID: [4] 0.0 [ 226.022593][ T6773] PKCS7: Only support pkcs7_signedData type [ 226.159559][ T6773] netlink: 452 bytes leftover after parsing attributes in process `syz.1.183'. [ 226.181648][ T787] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 226.201156][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.225943][ T787] usb 3-1: Product: syz [ 226.271796][ T787] usb 3-1: Manufacturer: syz [ 226.284104][ T787] usb 3-1: SerialNumber: syz [ 227.616814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 227.636811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 227.836804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 228.166874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 228.286815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 229.074386][ T787] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 229.116639][ T787] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 229.138206][ T787] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 229.179985][ T787] lan78xx: probe of 3-1:1.0 failed with error -32 [ 229.271875][ T6782] loop1: detected capacity change from 0 to 512 [ 229.356563][ T6782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.430005][ T6782] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.748630][ T6788] loop0: detected capacity change from 0 to 512 [ 229.859852][ T28] audit: type=1107 audit(1780026126.063:21): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 230.055161][ T6788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.178271][ T6788] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.226325][ T8] usb 3-1: USB disconnect, device number 2 [ 230.465440][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.061043][ T28] audit: type=1107 audit(1780026127.273:22): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 231.456624][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.700301][ T6825] tmpfs: Bad value for 'mpol' [ 237.939720][ T6838] PKCS7: Unknown OID: [4] 0.0 [ 237.975033][ T6838] PKCS7: Only support pkcs7_signedData type [ 238.018482][ T6838] netlink: 452 bytes leftover after parsing attributes in process `syz.3.195'. [ 238.595231][ T6846] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 240.167297][ T6857] PKCS7: Unknown OID: [4] 0.0 [ 240.172050][ T6857] PKCS7: Only support pkcs7_signedData type [ 240.246583][ T6857] netlink: 452 bytes leftover after parsing attributes in process `syz.2.201'. [ 244.364976][ T6869] loop0: detected capacity change from 0 to 512 [ 244.488690][ T6869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.548711][ T6869] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.032274][ T28] audit: type=1107 audit(1780026141.163:23): pid=6868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 245.671815][ T6880] loop3: detected capacity change from 0 to 512 [ 245.917532][ T6880] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 245.957092][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.031277][ T6880] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.206: bad orphan inode 131083 [ 246.066372][ T28] audit: type=1800 audit(1780026141.413:24): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.199" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 246.150613][ T6880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.585864][ T6885] netlink: 'syz.0.207': attribute type 1 has an invalid length. [ 246.618497][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.011206][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.208'. [ 251.294791][ T6919] loop0: detected capacity change from 0 to 512 [ 251.425435][ T6919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.501458][ T6919] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.551077][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.680431][ T6933] PKCS7: Unknown OID: [4] 0.0 [ 252.685190][ T6933] PKCS7: Only support pkcs7_signedData type [ 252.692958][ T6933] netlink: 452 bytes leftover after parsing attributes in process `syz.2.214'. [ 252.992604][ T6935] loop1: detected capacity change from 0 to 512 [ 253.127790][ T6935] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 253.429547][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 253.596867][ T6935] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.216: bad orphan inode 131083 [ 253.777293][ T6935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.183931][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.280510][ T6956] netlink: 'syz.1.218': attribute type 1 has an invalid length. [ 256.303193][ T28] audit: type=1800 audit(1780026152.093:25): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.220" name="file0" dev="overlay" ino=339 res=0 errno=0 [ 256.305180][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.351697][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.774648][ T6974] loop0: detected capacity change from 0 to 512 [ 256.824784][ T6974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.837760][ T6974] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.524717][ T6985] PKCS7: Unknown OID: [4] 0.0 [ 257.529679][ T6985] PKCS7: Only support pkcs7_signedData type [ 257.547031][ T6985] netlink: 452 bytes leftover after parsing attributes in process `syz.1.224'. [ 257.811916][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.917306][ T6997] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 260.765258][ T6992] loop3: detected capacity change from 0 to 512 [ 260.887689][ T6992] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 261.672365][ T6992] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.226: bad orphan inode 131083 [ 261.794761][ T6992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.057424][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.527084][ T7015] netlink: 'syz.3.232': attribute type 1 has an invalid length. [ 263.965029][ T7021] loop0: detected capacity change from 0 to 512 [ 263.972796][ T7021] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 264.002092][ T7021] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.235: bad orphan inode 131083 [ 264.029917][ T7021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.212690][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.061865][ T7040] loop0: detected capacity change from 0 to 512 [ 268.324479][ T7040] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 268.701212][ T7040] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.240: bad orphan inode 131083 [ 268.878953][ T7040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.601912][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.101243][ T7064] netlink: 'syz.3.245': attribute type 1 has an invalid length. [ 274.054050][ T7066] netlink: 'syz.2.246': attribute type 1 has an invalid length. [ 274.380586][ T7069] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 274.482380][ T7069] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 274.811144][ T7075] bond2: (slave gretap1): making interface the new active one [ 274.906934][ T7075] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 275.102418][ T7064] macvlan2: entered promiscuous mode [ 275.116836][ T7064] macvlan2: entered allmulticast mode [ 275.167965][ T7064] bond2: entered promiscuous mode [ 275.173562][ T7064] gretap1: entered promiscuous mode [ 275.206374][ T7064] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 275.245446][ T7064] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 275.283247][ T7064] bond2: left promiscuous mode [ 275.303348][ T7064] gretap1: left promiscuous mode [ 275.806110][ T7085] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 275.815097][ T7085] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 275.823732][ T7085] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 276.685413][ T7090] loop2: detected capacity change from 0 to 512 [ 276.832357][ T7090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.888562][ T7090] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.584470][ T7099] xt_TPROXY: Can be used only with -p tcp or -p udp [ 281.199169][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.782915][ T7113] syz.0.253 (7113): drop_caches: 2 [ 285.788734][ T28] audit: type=1800 audit(1780026180.734:26): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.259" name="file0" dev="overlay" ino=362 res=0 errno=0 [ 285.828817][ T7128] netlink: 'syz.2.258': attribute type 1 has an invalid length. [ 288.298252][ T7140] netlink: 'syz.1.260': attribute type 1 has an invalid length. [ 296.250646][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 297.763086][ T7186] loop0: detected capacity change from 0 to 512 [ 297.835977][ T7186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.893960][ T7186] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.005489][ T7192] netlink: 'syz.3.273': attribute type 1 has an invalid length. [ 299.191209][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.435828][ T7197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.443613][ T7197] IPv6: NLM_F_CREATE should be set when creating new route [ 299.760728][ T7199] netlink: 'syz.0.274': attribute type 1 has an invalid length. [ 299.912320][ T7201] bond3: (slave vxcan7): The slave device specified does not support setting the MAC address [ 300.033716][ T7201] bond3: (slave vxcan7): Error -95 calling set_mac_address [ 302.533799][ T7199] bond3: (slave gretap1): making interface the new active one [ 302.568126][ T7199] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 302.658102][ T7204] macvlan2: entered promiscuous mode [ 302.684749][ T7204] macvlan2: entered allmulticast mode [ 302.708878][ T7204] bond3: entered promiscuous mode [ 302.736671][ T7204] gretap1: entered promiscuous mode [ 302.754841][ T7204] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 302.796866][ T7204] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 302.820312][ T7209] loop3: detected capacity change from 0 to 512 [ 302.827473][ T7204] bond3: left promiscuous mode [ 302.837674][ T7204] gretap1: left promiscuous mode [ 302.854628][ T7209] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 302.914278][ T7209] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 303.063480][ T7209] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.275: Invalid inode table block 1 in block_group 0 [ 303.104955][ T7209] EXT4-fs (loop3): get root inode failed [ 303.123640][ T7209] EXT4-fs (loop3): mount failed [ 305.762959][ T7221] netlink: 36 bytes leftover after parsing attributes in process `syz.3.277'. [ 312.334449][ T7252] loop2: detected capacity change from 0 to 512 [ 312.358793][ T7252] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 312.394353][ T7252] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 312.429815][ T7252] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.286: Invalid inode table block 1 in block_group 0 [ 312.569536][ T7252] EXT4-fs (loop2): get root inode failed [ 312.575264][ T7252] EXT4-fs (loop2): mount failed [ 314.037260][ T5785] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 317.833596][ T7278] ceph: No mds server is up or the cluster is laggy [ 317.843927][ T9] libceph: connect (1)[c::]:6789 error -101 [ 317.873542][ T7277] syz.0.291 (7277): drop_caches: 2 [ 317.882853][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 318.414096][ T5785] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 318.423364][ T5785] Bluetooth: hci3: Injecting HCI hardware error event [ 318.434106][ T5785] Bluetooth: hci3: hardware error 0x00 [ 320.524004][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.530451][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.633629][ T5785] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 321.028632][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.296'. [ 321.050733][ T7291] netlink: 48 bytes leftover after parsing attributes in process `syz.2.296'. [ 321.075155][ T7291] loop2: detected capacity change from 0 to 8 [ 321.150157][ T28] audit: type=1326 audit(1780026214.563:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.2.296" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c95f9ce59 code=0x0 [ 321.516261][ T7294] SQUASHFS error: Failed to read block 0x4de: -5 [ 321.527884][ T7294] SQUASHFS error: Failed to read block 0x4de: -5 [ 321.555282][ T7294] SQUASHFS error: Failed to read block 0x4de: -5 [ 321.565110][ T7294] SQUASHFS error: Failed to read block 0x4de: -5 [ 321.573751][ T7294] SQUASHFS error: Failed to read block 0x4de: -5 [ 321.582049][ T7294] SQUASHFS error: Failed to read block 0x4de: -5 [ 321.602145][ T28] audit: type=1800 audit(1780026214.919:28): pid=7294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.296" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 322.325999][ T7297] syz_tun: entered allmulticast mode [ 324.347130][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 324.653415][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 324.685266][ T9] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 324.696316][ T9] usb 3-1: config 0 has no interface number 0 [ 324.714027][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 324.724499][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.734311][ T9] usb 3-1: Product: syz [ 324.740035][ T9] usb 3-1: Manufacturer: syz [ 324.744784][ T9] usb 3-1: SerialNumber: syz [ 324.766915][ T9] usb 3-1: config 0 descriptor?? [ 325.314455][ T9] usb 3-1: USB disconnect, device number 3 [ 326.487633][ T7317] loop0: detected capacity change from 0 to 512 [ 326.630532][ T7317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.647891][ T7317] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.709016][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.244996][ T7337] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 332.056569][ T7329] syz.2.302 (7329): drop_caches: 2 [ 332.726093][ T7346] loop2: detected capacity change from 0 to 512 [ 332.967622][ T7346] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.307: bad orphan inode 15 [ 332.978806][ T7346] ext4_test_bit(bit=14, block=18) = 1 [ 332.984306][ T7346] is_bad_inode(inode)=0 [ 332.988616][ T7346] NEXT_ORPHAN(inode)=1023 [ 332.992995][ T7346] max_ino=32 [ 332.996299][ T7346] i_nlink=0 [ 333.002827][ T7346] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2971: inode #15: comm syz.2.307: corrupted xattr block 19: invalid header [ 333.017410][ T7346] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 333.033023][ T7346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 333.050998][ T7346] ext4 filesystem being mounted at /77/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.168408][ T7346] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.307: Directory hole found for htree leaf block 0 [ 334.525027][ T7353] loop3: detected capacity change from 0 to 512 [ 335.134175][ T7348] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set [ 335.809698][ T7353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.041566][ T7353] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.532541][ T28] audit: type=1107 audit(1780026229.115:29): pid=7351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 337.706083][ T7363] syz.0.305 (7363): drop_caches: 2 [ 338.361847][ T28] audit: type=1800 audit(1780026229.939:30): pid=7361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.308" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 338.419154][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.581428][ T7379] loop1: detected capacity change from 0 to 256 [ 341.785840][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 343.141159][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 343.328307][ T7379] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 346.048426][ T28] audit: type=1326 audit(1780026237.856:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7390 comm="syz.3.316" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f824979ce59 code=0x0 [ 346.157478][ T7397] loop3: detected capacity change from 0 to 16 [ 346.388414][ T5853] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 346.693727][ T5853] usb 3-1: no configurations [ 346.938140][ T5853] usb 3-1: can't read configurations, error -22 [ 348.559501][ T5853] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 348.574988][ T7408] loop1: detected capacity change from 0 to 512 [ 348.747517][ T7408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.873461][ T7408] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.681201][ T28] audit: type=1107 audit(1780026241.112:32): pid=7407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 349.702456][ T7419] loop2: detected capacity change from 0 to 512 [ 349.823330][ T28] audit: type=1800 audit(1780026241.346:33): pid=7422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.318" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 350.002677][ T7340] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 350.034356][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.341665][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'. [ 351.443649][ T7437] loop0: detected capacity change from 0 to 512 [ 351.480413][ T7437] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 351.640277][ T7437] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.324: bad orphan inode 131083 [ 351.774064][ T7437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.076400][ T7442] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.086052][ T7442] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.095376][ T7442] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.104581][ T7442] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.115875][ T7442] vxlan0: entered promiscuous mode [ 352.129902][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.198783][ T7448] loop0: detected capacity change from 0 to 512 [ 352.304578][ T7448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.337340][ T7448] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.112361][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 355.093694][ T28] audit: type=1107 audit(1780026245.305:34): pid=7447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 357.001408][ T7462] syz.2.327 (7462): drop_caches: 2 [ 359.601766][ T7471] loop2: detected capacity change from 0 to 512 [ 359.661536][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.934647][ T7471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.952115][ T7471] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.069829][ T28] audit: type=1107 audit(1780026251.780:35): pid=7470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 362.194622][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.977056][ T7498] loop3: detected capacity change from 0 to 512 [ 364.145872][ T7498] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 364.417613][ T7498] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.334: bad orphan inode 131083 [ 364.577192][ T7498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.600420][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.988306][ T7518] loop0: detected capacity change from 0 to 512 [ 369.597345][ T7518] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 369.889946][ T7518] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.346: bad orphan inode 131083 [ 369.934215][ T7518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.263824][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.490629][ T7529] syz_tun: entered allmulticast mode [ 370.627852][ T7530] loop3: detected capacity change from 0 to 16 [ 370.638689][ T7530] erofs: (device loop3): mounted with root inode @ nid 36. [ 370.653769][ T7530] syz.3.348: attempt to access beyond end of device [ 370.653769][ T7530] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 370.680841][ T7530] syz.3.348: attempt to access beyond end of device [ 370.680841][ T7530] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 370.698702][ T7530] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 370.722034][ T28] audit: type=1800 audit(1780026260.942:36): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.348" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 371.661447][ T5820] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 371.792090][ T7533] loop2: detected capacity change from 0 to 512 [ 372.033479][ T5820] usb 1-1: Using ep0 maxpacket: 8 [ 372.040868][ T5820] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 372.041285][ T7533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.063800][ T5820] usb 1-1: config 0 has no interface number 0 [ 372.087633][ T7533] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.180138][ T7540] qrtr: Invalid version 0 [ 374.026175][ T28] audit: type=1107 audit(1780026262.879:37): pid=7532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 374.206907][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.234988][ T28] audit: type=1800 audit(1780026263.955:38): pid=7542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.340" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 374.346388][ T5820] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 374.393547][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.454216][ T5820] usb 1-1: Product: syz [ 374.632490][ T5820] usb 1-1: config 0 descriptor?? [ 374.638673][ T5820] usb 1-1: can't set config #0, error -71 [ 374.648073][ T5820] usb 1-1: USB disconnect, device number 2 [ 379.460609][ T7571] loop1: detected capacity change from 0 to 512 [ 381.395918][ T7571] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 381.509463][ T7571] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.349: bad orphan inode 131083 [ 381.576987][ T7571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.722002][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.111246][ T7579] virt_wifi0 speed is unknown, defaulting to 1000 [ 382.118478][ T7579] virt_wifi0 speed is unknown, defaulting to 1000 [ 382.145175][ T7579] virt_wifi0 speed is unknown, defaulting to 1000 [ 382.165211][ T7580] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 382.218139][ T7579] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 382.277690][ T7579] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 382.427474][ T7579] virt_wifi0 speed is unknown, defaulting to 1000 [ 382.444254][ T7579] virt_wifi0 speed is unknown, defaulting to 1000 [ 382.460919][ T7579] virt_wifi0 speed is unknown, defaulting to 1000 [ 382.478847][ T7579] virt_wifi0 speed is unknown, defaulting to 1000 [ 386.642471][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.655024][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.923127][ T7601] loop0: detected capacity change from 0 to 512 [ 388.039662][ T7601] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.347: bad orphan inode 15 [ 388.080697][ T7601] ext4_test_bit(bit=14, block=18) = 1 [ 388.086400][ T7601] is_bad_inode(inode)=0 [ 388.091197][ T7601] NEXT_ORPHAN(inode)=1023 [ 388.095701][ T7601] max_ino=32 [ 388.098963][ T7601] i_nlink=0 [ 388.128870][ T7601] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2971: inode #15: comm syz.0.347: corrupted xattr block 19: invalid header [ 388.213655][ T7601] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 388.230835][ T7601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 388.300456][ T7601] ext4 filesystem being mounted at /85/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.389132][ T7601] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz.0.347: Directory hole found for htree leaf block 0 [ 390.281343][ T7603] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set [ 392.035815][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 392.884202][ T7623] loop2: detected capacity change from 0 to 128 [ 393.188285][ T7623] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 393.222018][ T7623] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 394.201294][ T7629] loop0: detected capacity change from 0 to 512 [ 394.214654][ T7629] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 394.327283][ T7629] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.358: bad orphan inode 131083 [ 394.378293][ T7629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.870574][ T28] audit: type=1326 audit(1780026283.551:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643119ce59 code=0x7ffc0000 [ 394.897457][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.944407][ T28] audit: type=1326 audit(1780026283.579:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643119ce59 code=0x7ffc0000 [ 394.991234][ T7636] loop1: detected capacity change from 0 to 8 [ 395.052306][ T7636] SQUASHFS error: lzo decompression failed, data probably corrupt [ 395.060686][ T7636] SQUASHFS error: Failed to read block 0x144: -5 [ 395.071834][ T28] audit: type=1326 audit(1780026283.579:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f643119ce59 code=0x7ffc0000 [ 396.687057][ T7636] SQUASHFS error: Unable to read metadata cache entry [142] [ 396.701483][ T7636] SQUASHFS error: Unable to read inode 0x11f [ 396.738627][ T28] audit: type=1326 audit(1780026283.579:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643119ce59 code=0x7ffc0000 [ 396.762502][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.778913][ T28] audit: type=1326 audit(1780026283.579:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643119ce59 code=0x7ffc0000 [ 396.848925][ T7644] syz.3.363 (7644): drop_caches: 2 [ 396.875823][ T28] audit: type=1326 audit(1780026283.579:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f643119ce59 code=0x7ffc0000 [ 396.899666][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.982512][ T28] audit: type=1326 audit(1780026283.579:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643119ce59 code=0x7ffc0000 [ 397.006746][ T28] audit: type=1326 audit(1780026283.588:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f643119ce59 code=0x7ffc0000 [ 397.031085][ T28] audit: type=1326 audit(1780026283.588:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643119ce59 code=0x7ffc0000 [ 397.056044][ T28] audit: type=1326 audit(1780026283.588:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7635 comm="syz.1.362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f643119ce59 code=0x7ffc0000 [ 398.126377][ T7636] loop1: detected capacity change from 0 to 256 [ 398.151594][ T7636] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 399.981873][ T7653] loop1: detected capacity change from 0 to 1024 [ 400.219042][ T7653] hfsplus: failed to load catalog file [ 404.675558][ T7667] loop1: detected capacity change from 0 to 512 [ 404.708522][ T7667] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 405.368241][ T7667] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.371: bad orphan inode 131083 [ 405.424650][ T7667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.891214][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.254334][ T7673] loop1: detected capacity change from 0 to 2048 [ 406.466217][ T7677] loop0: detected capacity change from 0 to 512 [ 406.627397][ T7677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.685828][ T7677] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.796033][ T7676] syz.2.364 (7676): drop_caches: 2 [ 407.458299][ T7581] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 407.693807][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.644881][ T7704] x_tables: duplicate underflow at hook 1 [ 411.131600][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 411.928909][ T7711] loop3: detected capacity change from 0 to 4096 [ 412.520813][ T7711] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 412.735537][ T7711] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c019, mo2=0003] [ 412.751736][ T7711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.152835][ T7719] loop1: detected capacity change from 0 to 1024 [ 414.366836][ T7719] EXT4-fs: Ignoring removed mblk_io_submit option [ 414.392563][ T7719] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 414.402278][ T7719] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 414.420571][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.479777][ T7719] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 414.517384][ T7725] syz.2.381 (7725): drop_caches: 2 [ 416.490512][ T7737] set match dimension is over the limit! [ 416.720713][ T7733] loop3: detected capacity change from 0 to 512 [ 416.813569][ T7733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.881640][ T7743] syz.1.385 (7743): drop_caches: 2 [ 416.928216][ T7744] usb usb7: usbfs: process 7744 (syz.0.384) did not claim interface 0 before use [ 416.938265][ T7733] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.954186][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 417.954204][ T28] audit: type=1107 audit(1780026304.569:104): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 418.122448][ T28] audit: type=1800 audit(1780026305.168:105): pid=7748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.382" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 418.309231][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.330147][ T7751] loop2: detected capacity change from 0 to 512 [ 418.465401][ T7751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.508361][ T7751] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.828211][ T28] audit: type=1107 audit(1780026305.991:106): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 420.173127][ T7763] sg_write: data in/out 764/14 bytes for SCSI command 0x0-- guessing data in; [ 420.173127][ T7763] program syz.3.386 not setting count and/or reply_len properly [ 420.318619][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.666176][ T7774] syz.3.391 (7774): drop_caches: 2 [ 427.784070][ T7790] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 427.800269][ T7791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.522840][ T7804] syz.2.398 (7804): drop_caches: 2 [ 429.530686][ T7800] netlink: 68 bytes leftover after parsing attributes in process `syz.3.399'. [ 431.058389][ T7818] loop2: detected capacity change from 0 to 512 [ 431.508615][ T7818] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 432.172305][ T7818] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.402: bad orphan inode 131083 [ 432.336297][ T7818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.679305][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.442083][ T7843] loop1: detected capacity change from 0 to 128 [ 437.473049][ T7843] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 437.486592][ T7843] hpfs: filesystem error: improperly stopped [ 437.492656][ T7843] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 437.500488][ T7843] hpfs: You really don't want any checks? You are crazy... [ 437.508629][ T7843] hpfs: hpfs_map_sector(): read error [ 437.514058][ T7843] hpfs: code page support is disabled [ 437.522339][ T7843] hpfs: hpfs_map_4sectors(): unaligned read [ 437.528679][ T7843] hpfs: hpfs_map_4sectors(): unaligned read [ 437.534675][ T7843] hpfs: filesystem error: unable to find root dir [ 438.134025][ T7853] sg_write: data in/out 764/14 bytes for SCSI command 0x0-- guessing data in; [ 438.134025][ T7853] program syz.0.410 not setting count and/or reply_len properly [ 438.872535][ T7856] syz.0.411 (7856): drop_caches: 2 [ 440.749374][ T7864] loop2: detected capacity change from 0 to 512 [ 440.976156][ T7864] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 441.465149][ T7864] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.413: bad orphan inode 131083 [ 441.614306][ T7864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.186075][ T7869] loop1: detected capacity change from 0 to 512 [ 442.199572][ T7869] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 443.825545][ T7869] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.414: bad orphan inode 131083 [ 443.836727][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.847407][ T7869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.045438][ T7877] block device autoloading is deprecated and will be removed. [ 445.803301][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.085086][ T7892] syz.3.419 (7892) used greatest stack depth: 16752 bytes left [ 447.919992][ T7911] bridge_slave_0: left allmulticast mode [ 447.925798][ T7911] bridge_slave_0: left promiscuous mode [ 447.933549][ T7911] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.982830][ T7911] bridge_slave_1: left allmulticast mode [ 447.988579][ T7911] bridge_slave_1: left promiscuous mode [ 447.994567][ T7911] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.013267][ T7911] bond0: (slave bond_slave_0): Releasing backup interface [ 451.294905][ T7911] bond0: (slave bond_slave_1): Releasing backup interface [ 451.525043][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 451.543360][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.267916][ T7911] team0: Port device team_slave_0 removed [ 452.426768][ T7923] loop0: detected capacity change from 0 to 512 [ 453.481652][ T7923] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 453.992488][ T7923] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.425: bad orphan inode 131083 [ 454.089507][ T7923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.364042][ T7911] team0: Port device team_slave_1 removed [ 454.371476][ T7911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.378930][ T7911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.523983][ T7911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.532163][ T7911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.884520][ T7911] team0: Port device netdevsim0 removed [ 455.993396][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.376157][ T7954] sg_write: data in/out 764/14 bytes for SCSI command 0x0-- guessing data in; [ 462.376157][ T7954] program syz.1.431 not setting count and/or reply_len properly [ 468.255015][ T7984] loop3: detected capacity change from 0 to 512 [ 468.659789][ T7984] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 468.769526][ T7984] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.437: bad orphan inode 131083 [ 468.843621][ T7984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.122724][ T7993] set match dimension is over the limit! [ 472.837041][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.051844][ T7995] loop1: detected capacity change from 0 to 128 [ 473.291689][ T7997] Illegal XDP return value 4294967282 on prog (id 22) dev N/A, expect packet loss! [ 479.356403][ T8024] loop2: detected capacity change from 0 to 2048 [ 479.381239][ T8030] loop1: detected capacity change from 0 to 512 [ 479.522665][ T8030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.588582][ T8024] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 479.641612][ T8030] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.764729][ T8024] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 480.304801][ T28] audit: type=1107 audit(1780026363.290:107): pid=8029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 480.467807][ T8038] loop3: detected capacity change from 0 to 64 [ 480.501131][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.661941][ T8040] loop0: detected capacity change from 0 to 512 [ 480.799013][ T8040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.860365][ T8042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.452'. [ 480.875000][ T8046] loop2: detected capacity change from 0 to 256 [ 480.886850][ T8040] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.180090][ T8046] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 481.287602][ T28] audit: type=1107 audit(1780026364.413:108): pid=8039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 481.630327][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.085332][ T8141] Bluetooth: MGMT ver 1.22 [ 490.267553][ T8143] loop1: detected capacity change from 0 to 512 [ 490.412522][ T8143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.536876][ T8143] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.810775][ T8154] loop0: detected capacity change from 0 to 512 [ 491.836554][ T28] audit: type=1107 audit(1780026374.071:109): pid=8142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 491.969607][ T8154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.071320][ T8154] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.139369][ T23] ================================================================== [ 492.147496][ T23] BUG: KASAN: slab-use-after-free in __io_req_complete_post+0x797/0x10a0 [ 492.155953][ T23] Read of size 8 at addr ffff8880241322d8 by task kworker/1:0/23 [ 492.163691][ T23] [ 492.166058][ T23] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 [ 492.173363][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 492.183452][ T23] Workqueue: events ublk_stop_work_fn [ 492.188873][ T23] Call Trace: [ 492.192169][ T23] [ 492.195126][ T23] dump_stack_lvl+0x18c/0x250 [ 492.199845][ T23] ? __lock_acquire+0x7d40/0x7d40 [ 492.204891][ T23] ? show_regs_print_info+0x20/0x20 [ 492.210121][ T23] ? load_image+0x420/0x420 [ 492.214682][ T23] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 492.220172][ T23] ? __virt_addr_valid+0x18c/0x540 [ 492.225353][ T23] ? __virt_addr_valid+0x469/0x540 [ 492.230506][ T23] print_report+0xa8/0x210 [ 492.234950][ T23] ? __io_req_complete_post+0x797/0x10a0 [ 492.240609][ T23] kasan_report+0x117/0x150 [ 492.245165][ T23] ? __io_req_complete_post+0x797/0x10a0 [ 492.250829][ T23] __io_req_complete_post+0x797/0x10a0 [ 492.256315][ T23] io_uring_cmd_done+0x247/0x370 [ 492.261282][ T23] ? io_uring_cmd_do_in_task_lazy+0x70/0x70 [ 492.267287][ T23] ? do_raw_spin_unlock+0x121/0x230 [ 492.272506][ T23] ublk_cancel_dev+0x1f5/0x3a0 [ 492.277305][ T23] ublk_stop_dev+0x36e/0x410 [ 492.281933][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.287158][ T23] ? process_scheduled_works+0x96f/0x15d0 [ 492.292906][ T23] ? process_scheduled_works+0x96f/0x15d0 [ 492.298641][ T23] process_scheduled_works+0xa5d/0x15d0 [ 492.304251][ T23] ? worker_attach_to_pool+0x380/0x380 [ 492.309753][ T23] ? assign_work+0x3d2/0x5d0 [ 492.314368][ T23] worker_thread+0xa55/0xfc0 [ 492.318995][ T23] kthread+0x2fa/0x390 [ 492.323090][ T23] ? pr_cont_work+0x560/0x560 [ 492.327794][ T23] ? kthread_blkcg+0xd0/0xd0 [ 492.332433][ T23] ret_from_fork+0x48/0x80 [ 492.336885][ T23] ? kthread_blkcg+0xd0/0xd0 [ 492.341511][ T23] ret_from_fork_asm+0x11/0x20 [ 492.346317][ T23] [ 492.349350][ T23] [ 492.351687][ T23] Allocated by task 8080: [ 492.356025][ T23] kasan_set_track+0x4e/0x70 [ 492.360648][ T23] __kasan_kmalloc+0x8f/0xa0 [ 492.365256][ T23] io_ring_ctx_alloc+0x54/0xc10 [ 492.370139][ T23] io_uring_create+0x2de/0x1320 [ 492.375014][ T23] __se_sys_io_uring_setup+0x29f/0x2b0 [ 492.380488][ T23] do_syscall_64+0x55/0xb0 [ 492.384924][ T23] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.390849][ T23] [ 492.393212][ T23] Freed by task 6348: [ 492.397211][ T23] kasan_set_track+0x4e/0x70 [ 492.401823][ T23] kasan_save_free_info+0x2e/0x50 [ 492.406889][ T23] ____kasan_slab_free+0x126/0x1e0 [ 492.412043][ T23] slab_free_freelist_hook+0x130/0x1a0 [ 492.417525][ T23] __kmem_cache_free+0xba/0x1e0 [ 492.422404][ T23] io_ring_exit_work+0x795/0x820 [ 492.427368][ T23] process_scheduled_works+0xa5d/0x15d0 [ 492.432939][ T23] worker_thread+0xa55/0xfc0 [ 492.437562][ T23] kthread+0x2fa/0x390 [ 492.441661][ T23] ret_from_fork+0x48/0x80 [ 492.446105][ T23] ret_from_fork_asm+0x11/0x20 [ 492.450905][ T23] [ 492.453246][ T23] Last potentially related work creation: [ 492.458979][ T23] kasan_save_stack+0x3e/0x60 [ 492.463684][ T23] __kasan_record_aux_stack+0xaf/0xc0 [ 492.469079][ T23] insert_work+0x3d/0x310 [ 492.473435][ T23] __queue_work+0xc39/0x1020 [ 492.478038][ T23] queue_work_on+0x128/0x1f0 [ 492.482645][ T23] io_ring_ctx_wait_and_kill+0x256/0x2b0 [ 492.488304][ T23] io_uring_release+0x42/0x50 [ 492.493007][ T23] __fput+0x234/0x970 [ 492.497003][ T23] task_work_run+0x1d4/0x260 [ 492.501618][ T23] do_exit+0x95a/0x2460 [ 492.505825][ T23] do_group_exit+0x21b/0x2d0 [ 492.510469][ T23] get_signal+0x12fc/0x13f0 [ 492.515003][ T23] arch_do_signal_or_restart+0xc2/0x800 [ 492.520582][ T23] exit_to_user_mode_loop+0x70/0x110 [ 492.525892][ T23] exit_to_user_mode_prepare+0xee/0x180 [ 492.531459][ T23] syscall_exit_to_user_mode+0x1a/0x50 [ 492.536942][ T23] do_syscall_64+0x61/0xb0 [ 492.541385][ T23] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.547308][ T23] [ 492.549649][ T23] The buggy address belongs to the object at ffff888024132000 [ 492.549649][ T23] which belongs to the cache kmalloc-4k of size 4096 [ 492.563727][ T23] The buggy address is located 728 bytes inside of [ 492.563727][ T23] freed 4096-byte region [ffff888024132000, ffff888024133000) [ 492.577633][ T23] [ 492.579979][ T23] The buggy address belongs to the physical page: [ 492.586411][ T23] page:ffffea0000904c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24130 [ 492.596967][ T23] head:ffffea0000904c00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 492.605910][ T23] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 492.614340][ T23] page_type: 0xffffffff() [ 492.618684][ T23] raw: 00fff00000000840 ffff888017c42140 0000000000000000 dead000000000001 [ 492.627306][ T23] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 492.635928][ T23] page dumped because: kasan: bad access detected [ 492.642370][ T23] page_owner tracks the page as allocated [ 492.648092][ T23] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9583704758, free_ts 0 [ 492.667744][ T23] post_alloc_hook+0x1c1/0x200 [ 492.672554][ T23] get_page_from_freelist+0x1951/0x19e0 [ 492.678111][ T23] __alloc_pages+0x1f0/0x460 [ 492.682707][ T23] alloc_page_interleave+0x24/0x1e0 [ 492.687923][ T23] alloc_slab_page+0x5d/0x160 [ 492.692610][ T23] new_slab+0x87/0x2d0 [ 492.696699][ T23] ___slab_alloc+0xc5d/0x12f0 [ 492.701405][ T23] __kmem_cache_alloc_node+0x19e/0x250 [ 492.706890][ T23] kmalloc_trace+0x2a/0xe0 [ 492.711330][ T23] kobject_uevent_env+0x274/0x8b0 [ 492.716381][ T23] driver_register+0x2d4/0x310 [ 492.721165][ T23] usb_register_driver+0x206/0x3d0 [ 492.726295][ T23] ath9k_htc_init+0x10/0x50 [ 492.730828][ T23] do_one_initcall+0x242/0x790 [ 492.735623][ T23] do_initcall_level+0x137/0x1f0 [ 492.740581][ T23] do_initcalls+0x69/0xd0 [ 492.744923][ T23] page_owner free stack trace missing [ 492.750296][ T23] [ 492.752627][ T23] Memory state around the buggy address: [ 492.758268][ T23] ffff888024132180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 492.766353][ T23] ffff888024132200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 492.774453][ T23] >ffff888024132280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 492.782540][ T23] ^ [ 492.789489][ T23] ffff888024132300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 492.797565][ T23] ffff888024132380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 492.805637][ T23] ================================================================== [ 492.873710][ T23] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 492.881004][ T23] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 [ 492.888327][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 492.898426][ T23] Workqueue: events ublk_stop_work_fn [ 492.903859][ T23] Call Trace: [ 492.907163][ T23] [ 492.910115][ T23] dump_stack_lvl+0x18c/0x250 [ 492.914852][ T23] ? show_regs_print_info+0x20/0x20 [ 492.920088][ T23] ? load_image+0x420/0x420 [ 492.924629][ T23] panic+0x2dc/0x730 [ 492.928565][ T23] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 492.934761][ T23] ? bpf_jit_dump+0xd0/0xd0 [ 492.939300][ T23] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 492.945305][ T23] ? _raw_spin_unlock+0x40/0x40 [ 492.950182][ T23] ? __io_req_complete_post+0x797/0x10a0 [ 492.955866][ T23] check_panic_on_warn+0x84/0xa0 [ 492.960853][ T23] ? __io_req_complete_post+0x797/0x10a0 [ 492.966510][ T23] end_report+0x6f/0x130 [ 492.970788][ T23] kasan_report+0x128/0x150 [ 492.975350][ T23] ? __io_req_complete_post+0x797/0x10a0 [ 492.981002][ T23] __io_req_complete_post+0x797/0x10a0 [ 492.986492][ T23] io_uring_cmd_done+0x247/0x370 [ 492.991458][ T23] ? io_uring_cmd_do_in_task_lazy+0x70/0x70 [ 492.997378][ T23] ? do_raw_spin_unlock+0x121/0x230 [ 493.002597][ T23] ublk_cancel_dev+0x1f5/0x3a0 [ 493.007394][ T23] ublk_stop_dev+0x36e/0x410 [ 493.012013][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.017236][ T23] ? process_scheduled_works+0x96f/0x15d0 [ 493.022978][ T23] ? process_scheduled_works+0x96f/0x15d0 [ 493.028715][ T23] process_scheduled_works+0xa5d/0x15d0 [ 493.034289][ T23] ? worker_attach_to_pool+0x380/0x380 [ 493.039774][ T23] ? assign_work+0x3d2/0x5d0 [ 493.044397][ T23] worker_thread+0xa55/0xfc0 [ 493.049032][ T23] kthread+0x2fa/0x390 [ 493.053121][ T23] ? pr_cont_work+0x560/0x560 [ 493.057834][ T23] ? kthread_blkcg+0xd0/0xd0 [ 493.062444][ T23] ret_from_fork+0x48/0x80 [ 493.066875][ T23] ? kthread_blkcg+0xd0/0xd0 [ 493.071491][ T23] ret_from_fork_asm+0x11/0x20 [ 493.076288][ T23] [ 493.079904][ T23] Kernel Offset: disabled [ 493.084241][ T23] Rebooting in 86400 seconds..