last executing test programs: 16.493194597s ago: executing program 2 (id=176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002240)={0x34, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 15.796315905s ago: executing program 2 (id=179): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00160c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000980)={0x20, 0x10, 0x28, "9fc5dc18d3d62dd6760c820eec0442783438994c31e7a5f8c48b9eafcc596196f2fa0d34daa1def8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x0, 0x30, 0x48, "4c00ce8cc058413c2f6eaaaa5c38902adafd0fe5c616647db5bb2a18309b7a8fb6dc6d86f7ebd342b42bfb5e4cd37f8031b21a7d62b741a31a429b96a1da193441e72bafba095c49"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.716491808s ago: executing program 2 (id=199): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe955, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001340)={0x0, 0x6, 0x0, 0x9}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) keyctl$link(0x8, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x3, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x404c0d5}, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r8, 0x0, 0x0, 0x0, 0x0) 7.775634534s ago: executing program 2 (id=219): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000000f40)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@noadinicb}, {@adinicb}, {@volume={'volume', 0x3d, 0x7}}, {@uid_forget}, {@umask={'umask', 0x3d, 0x3}}, {@longad}, {@gid}, {@iocharset={'iocharset', 0x3d, 'utf8'}}]}, 0xfe, 0xc22, &(0x7f00000002c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sync() ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff) 6.854405175s ago: executing program 2 (id=225): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='.\x00', &(0x7f0000000000)='ext4\x00', 0x0, 0x0) 6.361508304s ago: executing program 1 (id=226): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x2000, &(0x7f0000000300)='/'}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, &(0x7f00000021c0)={0x20, 0x10, 0x83, {0x83, 0x31, "8acfcd0eeb520bd583eba17389b56b59386f8bdd85d4c95ee6dff54db364de4a26ec3c6dcf0506a1150a7eb0af7b482fe261973650073143111bc4969b66c046b73febe2329a5f276ab0e58f5999588f9ef4b2003c705038e8e3b56063c89c7d75f276984f113187f153e541ec236e06fb73dc58ce7e9538ca9096b810ea5c6880"}}, 0x0}, 0x0) 5.913014038s ago: executing program 0 (id=229): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000780)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000380)='x', 0x1, 0x480c1, 0x0, 0x0) 5.818366757s ago: executing program 2 (id=230): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe955, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001340)={0x0, 0x6, 0x0, 0x9}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) keyctl$link(0x8, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x3, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x10000000, 0x6}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c0d5}, 0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, 0x0) preadv(r8, 0x0, 0x0, 0x0, 0x0) 5.658581063s ago: executing program 0 (id=231): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000540)=@v2={0x2, @aes256, 0x10, '\x00', @a}) 5.183650229s ago: executing program 0 (id=234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, r1, 0x1b, 0x0, 0x3, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) 4.757794972s ago: executing program 0 (id=237): r0 = open$dir(&(0x7f0000002140)='./file0\x00', 0x440, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000002240)) 4.575975139s ago: executing program 0 (id=239): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f"], 0x44}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 4.575508579s ago: executing program 1 (id=240): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x30, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@local]}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 4.342365912s ago: executing program 1 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x3, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) 3.75364448s ago: executing program 1 (id=242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x75}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.693240906s ago: executing program 3 (id=243): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) r1 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x39) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='bcachefs\x00', r1) 3.001839064s ago: executing program 3 (id=244): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000540)=@v2={0x2, @aes256, 0x10, '\x00', @a}) 2.932800891s ago: executing program 0 (id=245): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) listen(0xffffffffffffffff, 0x8) socket$inet(0xa, 0x801, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r2, 0x107, 0x8, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000e00)=""/4096, 0x100b}, {&(0x7f0000000600)=""/91, 0x5b}], 0x2, &(0x7f0000000780)=""/50, 0x32}, 0x9}], 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000004c0)={{r1}, 0x6196, 0x5, 0x2}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0104000000000000000002000004140004801000018008000100647570000400028009000100739b7a30000000000c000640000000000000000105000740df000000140000001100010000000000000000000000000a820a265fff6e72bf970e662707d376801918b3db852a2ab32d99810d82cd253e6064be02704bb12e6b835169bdb9109a7b236282eb9d1bb745bc4c120a3c0887c0e2563b635008509ab4a3cc984706dc4d69b1db05260b3e81528e98170ab9286da0628df6f52d0a46f9253bcd12111a54b8"], 0x70}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x6}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x6}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="3cf6123f", 0x4}], 0x1}, 0x24000000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x190, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@rand_addr=0x64010102, {0x8000000000000004, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x1}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x98, 0x3, {{'deflate\x00'}, 0x280, "091e0f914b3905802b3fb6c10c0e5294abca19fbf88cf87183b0c64ce3829de876691936c005979a7338dd3cf5801839fa1bbc64caac3b0af8be410fd30664332ad47dca5973baeeb52941619752246c"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x190}}, 0x844) 2.352500758s ago: executing program 1 (id=246): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000140)='./file0\x00', 0x6010000, &(0x7f0000000000)={[{@filestreams}, {@pqnoenforce}, {@sysvgroups}, {@qnoenforce}, {@inode32}, {@gquota}, {@prjquota}, {@usrquota}, {@filestreams}, {@nolargeio}]}, 0x1, 0x97e7, &(0x7f0000012f00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2) 2.105517762s ago: executing program 3 (id=247): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TCSETS(r1, 0x5402, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x103) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) tee(0xffffffffffffffff, r0, 0x8, 0x4) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.589557563s ago: executing program 3 (id=248): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x11, r0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0) 1.206465371s ago: executing program 3 (id=250): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) 690.482612ms ago: executing program 4 (id=251): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = fsmount(0xffffffffffffffff, 0x0, 0xf0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000090) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = getpid() syz_pidfd_open(r3, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0) setreuid(0x0, 0xee01) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x400, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) 533.166977ms ago: executing program 4 (id=252): prlimit64(0x0, 0xc, &(0x7f0000000340)={0x3, 0x1000}, 0x0) r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x5) fchdir(r1) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) 404.64175ms ago: executing program 1 (id=253): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000000f40)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@noadinicb}, {@adinicb}, {@volume={'volume', 0x3d, 0x7}}, {@uid_forget}, {@umask={'umask', 0x3d, 0x3}}, {@longad}, {@gid}, {@iocharset={'iocharset', 0x3d, 'utf8'}}]}, 0xfe, 0xc22, &(0x7f00000002c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sync() ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff) 346.438606ms ago: executing program 4 (id=254): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) r1 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x39) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='bcachefs\x00', r1) 280.651532ms ago: executing program 4 (id=255): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x38) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000019e000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f00000000c0)="48b801000000000000000f23c00f21f835020000000f23f80f20d835080000000f22d866baf80cb8068f518bef66bafc0c66edc423fd0a0e48b85e000000000000000f23d00f21f8350000000f0f23f8440fc76d00b8010000000f01d9470f01c4b9710b0000b800000080ba000000000f300f23e3", 0x75}], 0x1, 0x1b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x104) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x81, 0x7, 0x63, 0x0, 0x7, 0xa, 0x0, 0x3, 0x7, 0x92, 0x60, 0x7, 0x0, 0x7f, 0x5ab, 0x2, 0xc9, 0x9, 0x1, '\x00', 0x8, 0x1}) 166.477473ms ago: executing program 4 (id=256): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x3, 0x100001, 0x1, 0x4, 0x1, 0xa4, 0xffc, 0x7, 0xb69, 0xc1, 0x0, 0x1, 0x8, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x401, 0x6, 0x9, 0x81, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x429f, 0xe, 0x2b14, 0x5, 0x6, 0x1e00, 0xb, 0x40, 0xbed4, 0x8, 0xff, 0x5, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x4, 0xa7, 0x20081, 0x2, 0xd6f, 0xd, 0x8c, 0x5, 0x2af, 0xf7, 0x8, 0x1, 0x6, 0x6, 0x3, 0x7, 0x4009, 0x800000, 0x204, 0x1, 0x8, 0x8000, 0x400000, 0x800003, 0x0, 0xbd, 0x7, 0xffffffff, 0x6, 0x1, 0x9, 0x80000000, 0x2, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x5b, 0x81, 0x80000000, 0x8, 0x20006, 0x5, 0x2, 0xa, 0x2, 0xd9a, 0xf, 0x29e, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x7, 0x7, 0x40, 0x8, 0x4, 0xffffff01, 0x401, 0x9e, 0x8, 0x8, 0x1, 0xfffffffe, 0xc5c, 0xffffffff]}}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 139.523866ms ago: executing program 3 (id=257): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000040)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28a, &(0x7f00000008c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {0xfff, 0x7dde, 0x1, 0x9}, 0x36, [0x100, 0x5, 0x1, 0x80000001, 0xdc2, 0x0, 0x6, 0x4, 0x8, 0x8, 0x1ff, 0x0, 0x3, 0x5, 0x80000001, 0x7ff, 0x7, 0xf880, 0x0, 0x0, 0x9, 0x0, 0x7, 0x0, 0x1, 0x7, 0xb, 0x5a8b, 0x9, 0x4, 0x9, 0x7, 0x9, 0x9, 0x9, 0x7ff, 0x0, 0x7ff, 0xa, 0x4, 0x6, 0x4, 0x7ff, 0x1ff, 0x2, 0x1602, 0x6, 0x4, 0xffff8000, 0x5, 0x8, 0x5, 0x8, 0x3, 0x7ff, 0xfffffffb, 0x7, 0x10001, 0x23, 0x2, 0x1, 0x200020, 0x800, 0x4], [0x6, 0x3c6, 0x101, 0x6, 0x900, 0xfff, 0xfffffe19, 0x8, 0x80, 0x7, 0x9, 0x1000, 0x1, 0x189, 0x1, 0x8, 0xffffffec, 0x80000001, 0x401, 0x7fff, 0x9cb5, 0x400, 0x1, 0x1, 0xd7b, 0x9, 0x1, 0x4, 0x0, 0x7, 0x7, 0xd27, 0x7ff, 0x8, 0xfffff800, 0x8, 0x81, 0x6, 0x3, 0x5, 0xab27, 0x3, 0xffff, 0x7, 0x80, 0x6, 0x8000, 0x26e2, 0x9, 0xffff, 0x2, 0x1, 0x4, 0xe, 0x1, 0x3, 0xfffffe00, 0xdd9e, 0x1000, 0x80000000, 0x4, 0x8, 0x327, 0x5], [0x1, 0x7, 0xd, 0x6, 0x8, 0x2, 0x9, 0x3, 0x400, 0x7, 0x1, 0x4, 0x40, 0x9, 0x3a67, 0x0, 0xffffffff, 0xa, 0xe, 0x4, 0x5, 0x827d, 0x0, 0x2, 0x2, 0x8, 0x2, 0x1, 0xfffff000, 0x7, 0x8001, 0x3, 0x7ff, 0xffffffff, 0xdb56, 0x9, 0x5, 0x6, 0x5, 0x9, 0x7892, 0x7fffffff, 0x1, 0x8, 0x4, 0x5, 0x1, 0x6, 0x3, 0x0, 0xb, 0x6, 0x8, 0x5, 0x8, 0x4, 0x0, 0x0, 0x9, 0x1, 0x8, 0xfffffffa, 0x1ff, 0x4de], [0x6, 0x2, 0x2, 0x6, 0x4, 0x0, 0x1, 0x3, 0x1, 0x7ff, 0x2, 0x78c7, 0xa, 0x8, 0x7, 0x2, 0x2, 0x3, 0x1000, 0x9, 0x8, 0x3, 0x9, 0xf, 0x4, 0x4, 0x5, 0xfffffffd, 0x0, 0x7, 0x3000000, 0x8, 0x0, 0xffffffcd, 0xc, 0x6, 0x6, 0x2, 0xc, 0x4, 0xfffffffe, 0x6, 0xff, 0xfff, 0xb, 0x0, 0x3, 0x10, 0x9, 0x5, 0xad0f, 0xa1, 0xfffff559, 0x6, 0xc, 0x4, 0xe7, 0x3, 0x7ff, 0x0, 0x2, 0x4, 0x9, 0xf]}, 0x45c) 0s ago: executing program 4 (id=258): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TCSETS(r1, 0x5402, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x103) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000280)={[{@discard}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") tee(r2, r0, 0x8, 0x4) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts. [ 72.043297][ T4254] cgroup: Unknown subsys name 'net' [ 72.149772][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.650675][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.811509][ T4273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.819709][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.832249][ T4277] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.853858][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.875544][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.882270][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.884684][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.891407][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.897944][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.905527][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.914267][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.925623][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.925653][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.934247][ T4278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.946756][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.948442][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.955643][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.961486][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.970668][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.976147][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.982710][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.989636][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.996990][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.003710][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.017474][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.024820][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.056493][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.063906][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.086698][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.094158][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.516646][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 76.583569][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 76.664920][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 76.709586][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 76.781911][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.789303][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.798027][ T4279] device bridge_slave_0 entered promiscuous mode [ 76.810516][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.820421][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.828470][ T4279] device bridge_slave_1 entered promiscuous mode [ 76.866404][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 76.915704][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.958524][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.976219][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.983635][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.991618][ T4269] device bridge_slave_0 entered promiscuous mode [ 77.006626][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.014626][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.022831][ T4264] device bridge_slave_0 entered promiscuous mode [ 77.042770][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.050112][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.059108][ T4269] device bridge_slave_1 entered promiscuous mode [ 77.066657][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.075033][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.082958][ T4266] device bridge_slave_0 entered promiscuous mode [ 77.090956][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.098539][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.106479][ T4264] device bridge_slave_1 entered promiscuous mode [ 77.132997][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.140356][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.148889][ T4266] device bridge_slave_1 entered promiscuous mode [ 77.166172][ T4279] team0: Port device team_slave_0 added [ 77.178155][ T4279] team0: Port device team_slave_1 added [ 77.229012][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.248923][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.276785][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.296781][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.307957][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.328819][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.335875][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.361860][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.373719][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.380836][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.389183][ T4265] device bridge_slave_0 entered promiscuous mode [ 77.415953][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.427637][ T4264] team0: Port device team_slave_0 added [ 77.434224][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.441203][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.467339][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.482606][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.490632][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.498974][ T4265] device bridge_slave_1 entered promiscuous mode [ 77.508978][ T4269] team0: Port device team_slave_0 added [ 77.540075][ T4264] team0: Port device team_slave_1 added [ 77.565621][ T4269] team0: Port device team_slave_1 added [ 77.582888][ T4266] team0: Port device team_slave_0 added [ 77.600036][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.619808][ T4266] team0: Port device team_slave_1 added [ 77.633760][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.640741][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.667061][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.687584][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.722664][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.729806][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.756554][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.776008][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.783009][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.809199][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.832958][ T4279] device hsr_slave_0 entered promiscuous mode [ 77.840192][ T4279] device hsr_slave_1 entered promiscuous mode [ 77.859865][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.867104][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.893383][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.905862][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.912858][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.939158][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.968048][ T4265] team0: Port device team_slave_0 added [ 77.978628][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.985787][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.011971][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.050940][ T4265] team0: Port device team_slave_1 added [ 78.086326][ T4264] device hsr_slave_0 entered promiscuous mode [ 78.093832][ T4264] device hsr_slave_1 entered promiscuous mode [ 78.100511][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.108919][ T4264] Cannot create hsr debugfs directory [ 78.116143][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.123194][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.149738][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.161602][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 78.161638][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 78.167973][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 78.174244][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 78.180491][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 78.224716][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.231714][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.258806][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.285663][ T4266] device hsr_slave_0 entered promiscuous mode [ 78.293257][ T4266] device hsr_slave_1 entered promiscuous mode [ 78.300292][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.308164][ T4266] Cannot create hsr debugfs directory [ 78.325871][ T4269] device hsr_slave_0 entered promiscuous mode [ 78.333019][ T4269] device hsr_slave_1 entered promiscuous mode [ 78.339848][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.348512][ T4269] Cannot create hsr debugfs directory [ 78.414706][ T4265] device hsr_slave_0 entered promiscuous mode [ 78.422008][ T4265] device hsr_slave_1 entered promiscuous mode [ 78.429115][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.437048][ T4265] Cannot create hsr debugfs directory [ 78.762622][ T4279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.775118][ T4279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.788294][ T4279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.801992][ T4279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.860531][ T4264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.872054][ T4264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.901282][ T4264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.926699][ T4264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.974313][ T4269] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.008989][ T4269] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.031713][ T4269] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.045189][ T4269] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.097440][ T4266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.107352][ T4266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.132981][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.161498][ T4266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.208492][ T4266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.218132][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.229132][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.247201][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.262264][ T4265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.274201][ T4265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.287491][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.297343][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.307926][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.315319][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.332015][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.344849][ T4265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.359570][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.376974][ T4265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.406477][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.417712][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.448017][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.459869][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.469054][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.478507][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.485676][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.494347][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.533013][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.542015][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.554333][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.563018][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.572433][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.581697][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.588871][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.597613][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.606740][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.616261][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.623455][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.632318][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.641676][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.649902][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.687930][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.697809][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.710870][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.720946][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.730425][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.739309][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.750397][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.760290][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.769434][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.778519][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.794900][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.802327][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.812039][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.828666][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.840729][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.869594][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.882636][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.896576][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.911763][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.929446][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.945626][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.964089][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.000119][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.012668][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.049612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.069371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.089232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.111853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.121669][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.129225][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.158324][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.167658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.182605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.194067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.202774][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.210541][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.233644][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 80.239818][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 80.246031][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 80.246048][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 80.252044][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 80.267930][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.306037][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.319106][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.351368][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.383093][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.392064][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.399267][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.409258][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.419196][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.427929][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.435098][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.443031][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.454713][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.506072][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.522474][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.539921][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.549297][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.560629][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.571530][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.579709][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.587888][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.597066][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.605608][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.614724][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.625025][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.634175][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.642969][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.653954][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.662077][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.671441][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.680475][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.708717][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.718790][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.729887][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.738992][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.747735][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.754992][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.763912][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.772375][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.781281][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.790909][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.799936][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.807125][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.815371][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.822908][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.833290][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.858975][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.868500][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.886955][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.897242][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.952474][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.962362][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.993603][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.013961][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.041898][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.070338][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.090254][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.116602][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.187777][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.197737][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.216947][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.241193][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.254333][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.275425][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.291087][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.328795][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.341192][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.372432][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.400390][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.419146][ T4264] device veth0_vlan entered promiscuous mode [ 81.431592][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.459816][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.482935][ T4264] device veth1_vlan entered promiscuous mode [ 81.567022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.579936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.614115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.644197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.674528][ T4264] device veth0_macvtap entered promiscuous mode [ 81.717199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.728115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.739697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.751757][ T4264] device veth1_macvtap entered promiscuous mode [ 81.784409][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.794468][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.802042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.821383][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.857109][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.903322][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.920502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.944209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.959315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.971232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.998639][ T4264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.008107][ T4264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.018697][ T4264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.028420][ T4264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.066403][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.078655][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.088158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.098103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.127817][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.137289][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.147234][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.156552][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.165178][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.174313][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.183081][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.192063][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.201349][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.210496][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.219495][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.227920][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.241714][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.255325][ T4279] device veth0_vlan entered promiscuous mode [ 82.291880][ T4269] device veth0_vlan entered promiscuous mode [ 82.313754][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 82.319957][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 82.321980][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 82.327135][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 82.332666][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 82.356157][ T4279] device veth1_vlan entered promiscuous mode [ 82.370048][ T4269] device veth1_vlan entered promiscuous mode [ 82.421773][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.430885][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.439639][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.448269][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.458638][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.479893][ T4266] device veth0_vlan entered promiscuous mode [ 82.508732][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.520115][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.529770][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.539685][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.548213][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.574724][ T4266] device veth1_vlan entered promiscuous mode [ 82.612174][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.622096][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.631170][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.646647][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.658819][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.674730][ T4279] device veth0_macvtap entered promiscuous mode [ 82.687090][ T4269] device veth0_macvtap entered promiscuous mode [ 82.700129][ T4265] device veth0_vlan entered promiscuous mode [ 82.711016][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.720948][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.728977][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.737901][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.747388][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.759412][ T4279] device veth1_macvtap entered promiscuous mode [ 82.774729][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.782914][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.788132][ T4265] device veth1_vlan entered promiscuous mode [ 82.806670][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.815512][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.824044][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.832152][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.841184][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.852907][ T4269] device veth1_macvtap entered promiscuous mode [ 82.871911][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.898956][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.912227][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.958372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.967269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.977551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.986454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.997725][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.008833][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.020792][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.044749][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.054637][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.063782][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.072526][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.083855][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.092709][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.110050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.120923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.134965][ T4266] device veth0_macvtap entered promiscuous mode [ 83.146349][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.158778][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.168496][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.179131][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.179911][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.190525][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.209270][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.222579][ T4265] device veth0_macvtap entered promiscuous mode [ 83.244397][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.252648][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.261599][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.276409][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.295988][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.307934][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.319269][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.330178][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.341423][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.352815][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.361639][ T4266] device veth1_macvtap entered promiscuous mode [ 83.387285][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.397256][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.407011][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.419367][ T4265] device veth1_macvtap entered promiscuous mode [ 83.446708][ T4269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.460033][ T4269] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.469966][ T4269] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.478807][ T4269] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.497469][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.508431][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.522859][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.534780][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.544714][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.555378][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.569764][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.616244][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.643664][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.658122][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.675711][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.691494][ T4388] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.692302][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.721441][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.732192][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.742915][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.755328][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.768783][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.781588][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.802459][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.813770][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.825448][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.837070][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.848233][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.858493][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.869397][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.881938][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.897910][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.912687][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.922931][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.932386][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.947990][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.958030][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.968622][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.988296][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.024245][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.035521][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.045787][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.057580][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.068361][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.080198][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.091139][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.102158][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.114863][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.128174][ T4265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.137084][ T4265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.146361][ T4265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.155520][ T4265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.177436][ T4392] netlink: 'syz.1.6': attribute type 1 has an invalid length. [ 84.186559][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.197010][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.238221][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.246623][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.300440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.353626][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.361690][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.393803][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 84.399895][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 84.403925][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 84.406805][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 84.411948][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 84.468161][ T4396] loop1: detected capacity change from 0 to 128 [ 84.482758][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.491762][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.501742][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.526183][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.544242][ T4396] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 84.572560][ T4396] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.581104][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.601671][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.625062][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.640281][ T4396] fscrypt (loop1, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop1' because it doesn't have stable inode numbers [ 84.684741][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.701805][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.744159][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.750758][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.783252][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.798006][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.846577][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 84.870687][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.872622][ T4401] loop4: detected capacity change from 0 to 1024 [ 84.899514][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.926827][ T4401] EXT4-fs: Ignoring removed bh option [ 84.932316][ T4401] EXT4-fs: inline encryption not supported [ 84.985111][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.030217][ T4401] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 85.044496][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.118405][ T4401] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.5: lblock 2 mapped to illegal pblock 2 (length 1) [ 85.148650][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.184332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.192701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.201103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 85.209433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 85.217764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 85.252923][ T4401] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 85.317379][ T4335] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 85.337379][ T4401] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.5: lblock 0 mapped to illegal pblock 48 (length 1) [ 85.354902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 85.363276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 85.371739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 85.380058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 85.443702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.550723][ T4414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 85.721064][ T4335] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 85.784623][ T4401] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 85.958557][ T4401] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.5: Failed to acquire dquot type 0 [ 86.181968][ T4401] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5921: Corrupt filesystem [ 86.205007][ T4406] loop1: detected capacity change from 0 to 2048 [ 86.222373][ T4406] EXT4-fs: quotafile must be on filesystem root [ 86.235310][ T4401] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.5: mark_inode_dirty error [ 86.247313][ T4416] loop3: detected capacity change from 0 to 1024 [ 86.263819][ T4416] ======================================================= [ 86.263819][ T4416] WARNING: The mand mount option has been deprecated and [ 86.263819][ T4416] and is ignored by this kernel. Remove the mand [ 86.263819][ T4416] option from the mount to silence this warning. [ 86.263819][ T4416] ======================================================= [ 86.290322][ T4401] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 86.299425][ T4416] EXT4-fs: Ignoring removed bh option [ 86.325256][ T4401] EXT4-fs (loop4): 1 orphan inode deleted [ 86.331065][ T4401] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.358870][ T9] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 86.398568][ T4416] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.408346][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.453713][ T9] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 86.462811][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6852: comm kworker/u4:0: Failed to release dquot type 0 [ 86.476696][ T4422] fido_id[4422]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 86.510560][ T4401] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 16: comm syz.4.5: lblock 0 mapped to illegal pblock 16 (length 1) [ 86.532812][ T4401] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.5: Invalid inode table block 1 in block_group 0 [ 86.796041][ T129] cfg80211: failed to load regulatory.db [ 86.891427][ T4401] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5921: Corrupt filesystem [ 86.934030][ T4401] EXT4-fs error (device loop4): ext4_dirty_inode:6125: inode #2: comm syz.4.5: mark_inode_dirty error [ 86.970860][ T4433] loop2: detected capacity change from 0 to 256 [ 86.993085][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 87.041092][ T4427] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 16: comm syz.4.5: lblock 0 mapped to illegal pblock 16 (length 1) [ 87.064338][ T4363] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm kworker/u4:6: Invalid inode table block 1 in block_group 0 [ 87.092711][ T4431] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 16: comm syz.4.5: lblock 0 mapped to illegal pblock 16 (length 1) [ 87.110034][ T4433] exFAT-fs (loop2): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 87.140563][ T4434] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 16: comm syz.4.5: lblock 0 mapped to illegal pblock 16 (length 1) [ 87.250734][ T4437] xt_connbytes: Forcing CT accounting to be enabled [ 87.274286][ T4437] Cannot find set identified by id 0 to match [ 87.440893][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 87.843361][ T129] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.881655][ T4448] loop4: detected capacity change from 0 to 32768 [ 87.910507][ T4448] (syz.4.14,4448,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 87.931809][ T4448] (syz.4.14,4448,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 87.975559][ T4448] JBD2: Ignoring recovery information on journal [ 88.047806][ T129] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.049244][ T4448] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 88.099170][ T129] usb 2-1: config 0 has no interface number 0 [ 88.195557][ T129] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 88.225755][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.240547][ T129] usb 2-1: Product: syz [ 88.265545][ T129] usb 2-1: Manufacturer: syz [ 88.278192][ T129] usb 2-1: SerialNumber: syz [ 88.315979][ T129] usb 2-1: config 0 descriptor?? [ 88.501165][ T4279] ocfs2: Unmounting device (7,4) on (node local) [ 88.544049][ T129] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 88.655917][ T129] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 88.684542][ T4467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 88.701510][ T129] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 88.878914][ T4444] loop1: detected capacity change from 0 to 512 [ 88.891152][ T4467] loop3: detected capacity change from 0 to 512 [ 88.930447][ T4469] loop0: detected capacity change from 0 to 2048 [ 88.949084][ T4444] ext4: Unknown parameter 'seclabel' [ 89.016449][ T4467] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.065820][ T4470] loop4: detected capacity change from 0 to 32768 [ 89.077651][ T129] usb 2-1: media controller created [ 89.086139][ T4470] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 89.094892][ T4470] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 89.119472][ T129] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 89.147253][ T4469] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 89.195636][ T4470] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 1ms [ 89.199012][ T4467] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.204700][ T129] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 89.229581][ T4328] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 89.237070][ T4328] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 89.305052][ T4469] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.346375][ T129] usb 2-1: USB disconnect, device number 2 [ 89.355997][ T4328] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 118ms [ 89.366449][ T4328] gfs2: fsid=syz:syz.0: jid=0: Done [ 89.375075][ T4470] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 89.404965][ T4467] EXT4-fs (loop3): 1 truncate cleaned up [ 89.456675][ T4467] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 89.506063][ T4467] EXT4-fs (loop3): unmounting filesystem. [ 89.629249][ T4470] gfs2: fsid=syz:syz.0: found 1 quota changes [ 89.752859][ T4469] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 89.752859][ T4469] inode = 11 2339 [ 89.752859][ T4469] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 89.847336][ T4469] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 89.900440][ T4469] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4469 [syz.0.23] gfs2_quota_sync+0x32c/0x6f0 [ 89.933319][ T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.950360][ T4469] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 89.973378][ T4469] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 90.006350][ T4469] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 90.031212][ T4469] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 90.042199][ T4469] gfs2: fsid=syz:syz.0: File system withdrawn [ 90.052155][ T4469] CPU: 1 PID: 4469 Comm: syz.0.23 Not tainted syzkaller #0 [ 90.059435][ T4469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.069557][ T4469] Call Trace: [ 90.072873][ T4469] [ 90.075846][ T4469] dump_stack_lvl+0x168/0x22e [ 90.080572][ T4469] ? kobject_uevent_env+0x35f/0x8a0 [ 90.085869][ T4469] ? show_regs_print_info+0x12/0x12 [ 90.091118][ T4469] ? load_image+0x3b0/0x3b0 [ 90.095680][ T4469] ? kobject_uevent_env+0x35f/0x8a0 [ 90.100942][ T4469] gfs2_withdraw+0x143f/0x1780 [ 90.105790][ T4469] ? gfs2_lm+0x220/0x220 [ 90.110557][ T4469] ? gfs2_consist_inode_i+0xf1/0x110 [ 90.115914][ T4469] gfs2_inode_refresh+0xb5e/0xfc0 [ 90.121006][ T4469] ? gfs2_inode_metasync+0xf0/0xf0 [ 90.126191][ T4469] ? gfs2_glock_nq+0xcf0/0x14e0 [ 90.131127][ T4469] gfs2_instantiate+0x15e/0x210 [ 90.136031][ T4469] gfs2_glock_wait+0x1d0/0x2a0 [ 90.140915][ T4469] do_sync+0x49a/0xc00 [ 90.145012][ T4469] ? gfs2_quota_sync+0x32c/0x6f0 [ 90.149978][ T4469] ? slot_put+0x1e0/0x1e0 [ 90.154371][ T4469] ? gfs2_quota_sync+0x32c/0x6f0 [ 90.159345][ T4469] ? do_raw_spin_unlock+0x11d/0x230 [ 90.164581][ T4469] gfs2_quota_sync+0x32c/0x6f0 [ 90.169478][ T4469] gfs2_sync_fs+0x48/0xb0 [ 90.173845][ T4469] ? sync_inodes_one_sb+0x60/0x60 [ 90.178895][ T4469] iterate_supers+0x11e/0x1d0 [ 90.183596][ T4469] ksys_sync+0xa0/0x150 [ 90.187865][ T4469] ? sync_filesystem+0x220/0x220 [ 90.192828][ T4469] ? syscall_enter_from_user_mode+0x21/0x80 [ 90.198749][ T4469] ? lockdep_hardirqs_on+0x94/0x140 [ 90.203987][ T4469] __ia32_sys_sync+0xa/0x10 [ 90.208518][ T4469] do_syscall_64+0x4c/0xa0 [ 90.212952][ T4469] ? clear_bhb_loop+0x60/0xb0 [ 90.217689][ T4469] ? clear_bhb_loop+0x60/0xb0 [ 90.222386][ T4469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.228386][ T4469] RIP: 0033:0x7f972c58efc9 [ 90.232835][ T4469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.252474][ T4469] RSP: 002b:00007f972d4f0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 90.260912][ T4469] RAX: ffffffffffffffda RBX: 00007f972c7e5fa0 RCX: 00007f972c58efc9 [ 90.268903][ T4469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.276893][ T4469] RBP: 00007f972c7e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 90.284973][ T4469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.292967][ T4469] R13: 00007f972c7e6038 R14: 00007f972c7e5fa0 R15: 00007ffc16e61578 [ 90.300997][ T4469] [ 90.324669][ T4279] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 90.339432][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 90.346783][ T22] usb 3-1: config 0 has no interfaces? [ 90.363082][ T4279] CPU: 1 PID: 4279 Comm: syz-executor Not tainted syzkaller #0 [ 90.370711][ T4279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.380830][ T4279] Call Trace: [ 90.384168][ T4279] [ 90.387141][ T4279] dump_stack_lvl+0x168/0x22e [ 90.391870][ T4279] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 90.397047][ T4279] ? show_regs_print_info+0x12/0x12 [ 90.402302][ T4279] ? load_image+0x3b0/0x3b0 [ 90.406870][ T4279] ? preempt_schedule+0xa7/0xb0 [ 90.411780][ T4279] ? schedule_preempt_disabled+0x20/0x20 [ 90.417466][ T4279] ? do_raw_spin_unlock+0x11d/0x230 [ 90.422730][ T4279] gfs2_assert_warn_i+0x18f/0x2c0 [ 90.427822][ T4279] gfs2_quota_cleanup+0x4b4/0x6a0 [ 90.432903][ T4279] gfs2_put_super+0x22f/0x8c0 [ 90.437615][ T4279] ? gfs2_evict_inode+0x1170/0x1170 [ 90.442836][ T4279] generic_shutdown_super+0x130/0x340 [ 90.448227][ T4279] kill_block_super+0x7c/0xe0 [ 90.452944][ T4279] deactivate_locked_super+0x93/0xf0 [ 90.458289][ T4279] cleanup_mnt+0x463/0x4f0 [ 90.462743][ T4279] ? lockdep_hardirqs_on+0x94/0x140 [ 90.467981][ T4279] task_work_run+0x1ca/0x250 [ 90.472605][ T4279] ? task_work_cancel+0x230/0x230 [ 90.477654][ T4279] ? exit_to_user_mode_loop+0x3b/0x110 [ 90.483143][ T4279] exit_to_user_mode_loop+0xe6/0x110 [ 90.488480][ T4279] exit_to_user_mode_prepare+0xee/0x180 [ 90.494137][ T4279] syscall_exit_to_user_mode+0x16/0x40 [ 90.499619][ T4279] do_syscall_64+0x58/0xa0 [ 90.504231][ T4279] ? clear_bhb_loop+0x60/0xb0 [ 90.508928][ T4279] ? clear_bhb_loop+0x60/0xb0 [ 90.513637][ T4279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.519560][ T4279] RIP: 0033:0x7f17de5902f7 [ 90.523991][ T4279] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 90.543696][ T4279] RSP: 002b:00007fff7fd083c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 90.552132][ T4279] RAX: 0000000000000000 RBX: 00007f17de611d7d RCX: 00007f17de5902f7 [ 90.560124][ T4279] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7fd08480 [ 90.568118][ T4279] RBP: 00007fff7fd08480 R08: 0000000000000000 R09: 0000000000000000 [ 90.576195][ T4279] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7fd09510 [ 90.584179][ T4279] R13: 00007f17de611d7d R14: 0000000000015ef4 R15: 00007fff7fd09550 [ 90.592176][ T4279] [ 90.607447][ T22] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 90.631098][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.631806][ T4489] loop3: detected capacity change from 0 to 4096 [ 90.653244][ T22] usb 3-1: Product: syz [ 90.653291][ T22] usb 3-1: Manufacturer: syz [ 90.653307][ T22] usb 3-1: SerialNumber: syz [ 90.662826][ T22] usb 3-1: config 0 descriptor?? [ 90.898281][ T22] usb 3-1: USB disconnect, device number 2 [ 91.028363][ T4494] loop1: detected capacity change from 0 to 128 [ 91.106036][ T4494] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 91.188799][ T4494] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.339488][ T4503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.32'. [ 91.401057][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 91.593867][ T4420] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.638911][ T4509] loop1: detected capacity change from 0 to 2048 [ 91.651672][ T4509] EXT4-fs: quotafile must be on filesystem root [ 91.793605][ T4420] usb 4-1: Using ep0 maxpacket: 8 [ 91.805506][ T4420] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.132026][ T4514] loop0: detected capacity change from 0 to 40427 [ 92.142985][ T4420] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.153317][ T4420] usb 4-1: config 0 interface 0 has no altsetting 0 [ 92.163378][ T4420] usb 4-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 92.172788][ T4420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.185687][ T4420] usb 4-1: config 0 descriptor?? [ 92.401863][ T4514] F2FS-fs (loop0): Found nat_bits in checkpoint [ 92.434387][ T4521] loop1: detected capacity change from 0 to 32768 [ 92.447627][ T4521] (syz.1.42,4521,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 92.461339][ T4521] (syz.1.42,4521,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 92.485255][ T4521] JBD2: Ignoring recovery information on journal [ 92.499833][ T4514] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 92.535583][ T4521] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 92.574554][ T4420] usbhid 4-1:0.0: can't add hid device: -71 [ 92.580707][ T4420] usbhid: probe of 4-1:0.0 failed with error -71 [ 92.607239][ T4521] ocfs2: Unmounting device (7,1) on (node local) [ 92.657831][ T4420] usb 4-1: USB disconnect, device number 2 [ 92.728153][ T4266] syz-executor: attempt to access beyond end of device [ 92.728153][ T4266] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.823474][ T4394] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.080059][ T4538] loop2: detected capacity change from 0 to 2048 [ 93.160605][ T4538] EXT4-fs: quotafile must be on filesystem root [ 93.269797][ T4546] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 93.283202][ T4484] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.326487][ T4544] device syzkaller0 entered promiscuous mode [ 93.496934][ T4551] loop0: detected capacity change from 0 to 128 [ 93.608289][ T4551] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 93.651575][ T4551] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.921084][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 94.227316][ T4576] capability: warning: `syz.1.63' uses deprecated v2 capabilities in a way that may be insecure [ 94.270662][ T4573] loop3: detected capacity change from 0 to 1024 [ 94.296572][ T4577] loop2: detected capacity change from 0 to 2048 [ 94.301991][ T4577] EXT4-fs: quotafile must be on filesystem root [ 94.315876][ T4573] EXT4-fs: inline encryption not supported [ 94.347941][ T4573] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.424015][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.452615][ T4573] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 94.623524][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 94.632956][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 94.643074][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 94.696311][ T22] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 94.761901][ T4591] loop0: detected capacity change from 0 to 1024 [ 94.767664][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.807421][ T22] usb 5-1: Product: syz [ 94.831378][ T22] usb 5-1: Manufacturer: syz [ 94.843702][ T22] usb 5-1: SerialNumber: syz [ 94.893956][ T22] usb 5-1: config 0 descriptor?? [ 94.922094][ T22] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 95.193372][ T4596] loop1: detected capacity change from 0 to 32768 [ 95.202939][ T22] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 95.210216][ T4596] (syz.1.70,4596,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.223823][ T4596] (syz.1.70,4596,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.275372][ T4596] JBD2: Ignoring recovery information on journal [ 95.359985][ T4596] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 95.484326][ T4264] ocfs2: Unmounting device (7,1) on (node local) [ 95.644198][ T4601] device syzkaller0 entered promiscuous mode [ 95.650953][ T22] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 96.288156][ T22] em28xx 5-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 96.387657][ T4674] hfsplus: b-tree write err: -5, ino 4 [ 96.497006][ T22] em28xx 5-1:0.0: board has no eeprom [ 96.703227][ T22] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 96.843325][ T22] em28xx 5-1:0.0: dvb set to bulk mode. [ 96.896690][ T4349] em28xx 5-1:0.0: Binding DVB extension [ 96.955323][ T22] usb 5-1: USB disconnect, device number 2 [ 97.049250][ T22] em28xx 5-1:0.0: Disconnecting em28xx [ 97.216310][ T4685] loop0: detected capacity change from 0 to 128 [ 97.290516][ T4685] EXT4-fs (loop0): Test dummy encryption mode enabled [ 97.351858][ T4686] loop2: detected capacity change from 0 to 32768 [ 97.396566][ T4685] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 97.465190][ T4349] em28xx 5-1:0.0: Registering input extension [ 97.472124][ T22] em28xx 5-1:0.0: Closing input extension [ 97.472193][ T4696] loop4: detected capacity change from 0 to 128 [ 97.497656][ T4685] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.521356][ T4686] XFS (loop2): Mounting V5 Filesystem [ 97.529374][ T22] em28xx 5-1:0.0: Freeing device [ 97.654352][ T4696] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 97.681350][ T4685] EXT4-fs (loop0): resizing filesystem from 64 to 1 blocks [ 97.731496][ T4685] EXT4-fs warning (device loop0): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 97.758097][ T4696] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.833330][ T4686] XFS (loop2): Ending clean mount [ 97.889102][ T4701] loop1: detected capacity change from 0 to 32768 [ 97.927204][ T4701] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 97.936173][ T4701] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 97.952401][ T4701] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 97.962207][ T4420] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 97.970270][ T4420] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 98.036200][ T4420] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 65ms [ 98.067276][ T4420] gfs2: fsid=syz:syz.0: jid=0: Done [ 98.072594][ T4701] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 98.114013][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 98.186156][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 98.241700][ T4265] XFS (loop2): Unmounting Filesystem [ 98.304083][ T4701] gfs2: fsid=syz:syz.0: found 1 quota changes [ 98.543892][ T4264] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 98.543892][ T4264] inode = 11 2339 [ 98.543892][ T4264] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 98.702250][ T4264] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 98.740482][ T4714] loop3: detected capacity change from 0 to 32768 [ 98.759725][ T4264] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4264 [syz-executor] gfs2_quota_sync+0x32c/0x6f0 [ 98.777012][ T4264] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 98.785371][ T4264] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 98.820614][ T4712] loop4: detected capacity change from 0 to 4096 [ 98.822400][ T4264] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 98.838814][ T4264] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 98.847004][ T4264] gfs2: fsid=syz:syz.0: File system withdrawn [ 98.854480][ T4264] CPU: 1 PID: 4264 Comm: syz-executor Not tainted syzkaller #0 [ 98.862125][ T4264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.866324][ T4712] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 98.872196][ T4264] Call Trace: [ 98.872209][ T4264] [ 98.872219][ T4264] dump_stack_lvl+0x168/0x22e [ 98.892462][ T4264] ? kobject_uevent_env+0x35f/0x8a0 [ 98.897695][ T4264] ? show_regs_print_info+0x12/0x12 [ 98.902910][ T4264] ? load_image+0x3b0/0x3b0 [ 98.907451][ T4264] ? kobject_uevent_env+0x35f/0x8a0 [ 98.912690][ T4264] gfs2_withdraw+0x143f/0x1780 [ 98.917489][ T4264] ? gfs2_lm+0x220/0x220 [ 98.921758][ T4264] ? gfs2_consist_inode_i+0xf1/0x110 [ 98.927078][ T4264] gfs2_inode_refresh+0xb5e/0xfc0 [ 98.932127][ T4264] ? gfs2_inode_metasync+0xf0/0xf0 [ 98.937260][ T4264] ? gfs2_glock_nq+0xcf0/0x14e0 [ 98.942172][ T4264] gfs2_instantiate+0x15e/0x210 [ 98.947154][ T4264] gfs2_glock_wait+0x1d0/0x2a0 [ 98.951953][ T4264] do_sync+0x49a/0xc00 [ 98.956060][ T4264] ? gfs2_quota_sync+0x32c/0x6f0 [ 98.961022][ T4264] ? slot_put+0x1e0/0x1e0 [ 98.965382][ T4264] ? gfs2_quota_sync+0x32c/0x6f0 [ 98.970344][ T4264] ? do_raw_spin_unlock+0x11d/0x230 [ 98.975573][ T4264] gfs2_quota_sync+0x32c/0x6f0 [ 98.980366][ T4264] gfs2_sync_fs+0x48/0xb0 [ 98.984717][ T4264] sync_filesystem+0xe6/0x220 [ 98.989504][ T4264] generic_shutdown_super+0x6b/0x340 [ 98.994810][ T4264] kill_block_super+0x7c/0xe0 [ 98.999518][ T4264] deactivate_locked_super+0x93/0xf0 [ 99.004821][ T4264] cleanup_mnt+0x463/0x4f0 [ 99.009254][ T4264] ? lockdep_hardirqs_on+0x94/0x140 [ 99.014477][ T4264] task_work_run+0x1ca/0x250 [ 99.019091][ T4264] ? task_work_cancel+0x230/0x230 [ 99.024137][ T4264] ? exit_to_user_mode_loop+0x3b/0x110 [ 99.029621][ T4264] exit_to_user_mode_loop+0xe6/0x110 [ 99.034936][ T4264] exit_to_user_mode_prepare+0xee/0x180 [ 99.040506][ T4264] syscall_exit_to_user_mode+0x16/0x40 [ 99.045988][ T4264] do_syscall_64+0x58/0xa0 [ 99.050425][ T4264] ? clear_bhb_loop+0x60/0xb0 [ 99.055125][ T4264] ? clear_bhb_loop+0x60/0xb0 [ 99.059817][ T4264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.065742][ T4264] RIP: 0033:0x7f4a7bd902f7 [ 99.070173][ T4264] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 99.089796][ T4264] RSP: 002b:00007ffd86d8b7a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 99.098321][ T4264] RAX: 0000000000000000 RBX: 00007f4a7be11d7d RCX: 00007f4a7bd902f7 [ 99.106391][ T4264] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd86d8b860 [ 99.114377][ T4264] RBP: 00007ffd86d8b860 R08: 0000000000000000 R09: 0000000000000000 [ 99.122391][ T4264] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd86d8c8f0 [ 99.130379][ T4264] R13: 00007f4a7be11d7d R14: 0000000000018010 R15: 00007ffd86d8c930 [ 99.138383][ T4264] [ 99.160253][ T4264] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 99.174878][ T4714] XFS (loop3): Mounting V5 Filesystem [ 99.223214][ T4264] CPU: 1 PID: 4264 Comm: syz-executor Not tainted syzkaller #0 [ 99.230848][ T4264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.240947][ T4264] Call Trace: [ 99.244261][ T4264] [ 99.247232][ T4264] dump_stack_lvl+0x168/0x22e [ 99.251973][ T4264] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 99.252823][ T4714] XFS (loop3): Ending clean mount [ 99.257126][ T4264] ? show_regs_print_info+0x12/0x12 [ 99.257177][ T4264] ? load_image+0x3b0/0x3b0 [ 99.257216][ T4264] ? do_raw_spin_unlock+0x11d/0x230 [ 99.257254][ T4264] gfs2_assert_warn_i+0x18f/0x2c0 [ 99.257294][ T4264] gfs2_quota_cleanup+0x4b4/0x6a0 [ 99.257324][ T4264] gfs2_put_super+0x22f/0x8c0 [ 99.257356][ T4264] ? gfs2_evict_inode+0x1170/0x1170 [ 99.279239][ T4714] XFS (loop3): Quotacheck needed: Please wait. [ 99.282332][ T4264] generic_shutdown_super+0x130/0x340 [ 99.294292][ T4328] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.297259][ T4264] kill_block_super+0x7c/0xe0 [ 99.321032][ T4264] deactivate_locked_super+0x93/0xf0 [ 99.326363][ T4264] cleanup_mnt+0x463/0x4f0 [ 99.330832][ T4264] ? lockdep_hardirqs_on+0x94/0x140 [ 99.336078][ T4264] task_work_run+0x1ca/0x250 [ 99.340692][ T4264] ? task_work_cancel+0x230/0x230 [ 99.345741][ T4264] ? exit_to_user_mode_loop+0x3b/0x110 [ 99.351226][ T4264] exit_to_user_mode_loop+0xe6/0x110 [ 99.356532][ T4264] exit_to_user_mode_prepare+0xee/0x180 [ 99.362107][ T4264] syscall_exit_to_user_mode+0x16/0x40 [ 99.367589][ T4264] do_syscall_64+0x58/0xa0 [ 99.372117][ T4264] ? clear_bhb_loop+0x60/0xb0 [ 99.376822][ T4264] ? clear_bhb_loop+0x60/0xb0 [ 99.381516][ T4264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.387427][ T4264] RIP: 0033:0x7f4a7bd902f7 [ 99.391854][ T4264] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 99.411478][ T4264] RSP: 002b:00007ffd86d8b7a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 99.419948][ T4264] RAX: 0000000000000000 RBX: 00007f4a7be11d7d RCX: 00007f4a7bd902f7 [ 99.427938][ T4264] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd86d8b860 [ 99.435918][ T4264] RBP: 00007ffd86d8b860 R08: 0000000000000000 R09: 0000000000000000 [ 99.443899][ T4264] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd86d8c8f0 [ 99.451935][ T4264] R13: 00007f4a7be11d7d R14: 0000000000018010 R15: 00007ffd86d8c930 [ 99.459935][ T4264] [ 99.586427][ T4714] XFS (loop3): Quotacheck: Done. [ 99.673290][ T4328] usb 1-1: Using ep0 maxpacket: 32 [ 99.684663][ T4419] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 99.703670][ T4328] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 99.711820][ T4328] usb 1-1: config 0 has no interface number 0 [ 99.732168][ T4419] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 99.742258][ T4328] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 99.779439][ T4328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.784143][ T4279] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22. [ 99.806394][ T4328] usb 1-1: Product: syz [ 99.806851][ T4269] XFS (loop3): Unmounting Filesystem [ 99.810652][ T4328] usb 1-1: Manufacturer: syz [ 99.874968][ T4328] usb 1-1: SerialNumber: syz [ 99.915681][ T4328] usb 1-1: config 0 descriptor?? [ 100.003961][ T4328] smsc95xx v2.0.0 [ 100.200333][ T4340] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.249021][ T4340] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.326895][ T4733] loop1: detected capacity change from 0 to 2048 [ 100.335173][ T4328] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 100.383172][ T4328] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 100.424291][ T4731] loop2: detected capacity change from 0 to 32768 [ 100.439262][ T4733] EXT4-fs: quotafile must be on filesystem root [ 100.443653][ T4735] device syzkaller0 entered promiscuous mode [ 100.459397][ T4731] (syz.2.82,4731,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 100.473021][ T4731] (syz.2.82,4731,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 100.515629][ T4731] JBD2: Ignoring recovery information on journal [ 100.575947][ T4731] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 100.668732][ T4736] fido_id[4736]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 100.680429][ T4328] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 100.766234][ T4328] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 100.790402][ T4328] usb 1-1: USB disconnect, device number 2 [ 100.855221][ T4265] ocfs2: Unmounting device (7,2) on (node local) [ 101.330598][ T4744] loop2: detected capacity change from 0 to 40427 [ 101.339936][ T4744] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x3ffff [ 101.386283][ T4328] hid-generic 0000:0003:0001.0003: unknown main item tag 0x0 [ 101.424362][ T4328] hid-generic 0000:0003:0001.0003: unknown main item tag 0x0 [ 101.453861][ T4328] hid-generic 0000:0003:0001.0003: hidraw0: HID v0.03 Device [syz0] on syz1 [ 101.961658][ T4752] loop0: detected capacity change from 0 to 32768 [ 101.971820][ T4752] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 101.980159][ T4752] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 101.998728][ T4752] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 102.007857][ T4420] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 102.014870][ T4420] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 102.065513][ T4420] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 50ms [ 102.083232][ T4420] gfs2: fsid=syz:syz.0: jid=0: Done [ 102.088548][ T4752] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 102.237268][ T4753] fido_id[4753]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 102.350250][ T4759] loop2: detected capacity change from 0 to 32768 [ 102.432936][ T4752] gfs2: fsid=syz:syz.0: found 1 quota changes [ 102.498293][ T4766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 102.498293][ T4766] inode = 11 2339 [ 102.498293][ T4766] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 102.574812][ T4759] XFS (loop2): Mounting V5 Filesystem [ 102.591346][ T4766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 102.644372][ T4759] XFS (loop2): Ending clean mount [ 102.652167][ T4759] XFS (loop2): Quotacheck needed: Please wait. [ 102.674882][ T4766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4766 [gfs2_quotad] gfs2_quota_sync+0x32c/0x6f0 [ 102.764054][ T4766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 102.769705][ T4759] XFS (loop2): Quotacheck: Done. [ 102.772278][ T4766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 102.891556][ T4766] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 103.172947][ T4265] XFS (loop2): Unmounting Filesystem [ 103.227247][ T4766] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 103.389708][ T4766] gfs2: fsid=syz:syz.0: File system withdrawn [ 103.573229][ T4766] CPU: 0 PID: 4766 Comm: gfs2_quotad Not tainted syzkaller #0 [ 103.580767][ T4766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 103.590869][ T4766] Call Trace: [ 103.594184][ T4766] [ 103.597146][ T4766] dump_stack_lvl+0x168/0x22e [ 103.601864][ T4766] ? kobject_uevent_env+0x35f/0x8a0 [ 103.607119][ T4766] ? show_regs_print_info+0x12/0x12 [ 103.612372][ T4766] ? load_image+0x3b0/0x3b0 [ 103.616930][ T4766] ? kobject_uevent_env+0x35f/0x8a0 [ 103.622195][ T4766] gfs2_withdraw+0x143f/0x1780 [ 103.627042][ T4766] ? gfs2_lm+0x220/0x220 [ 103.631352][ T4766] ? gfs2_consist_inode_i+0xf1/0x110 [ 103.636701][ T4766] gfs2_inode_refresh+0xb5e/0xfc0 [ 103.641789][ T4766] ? gfs2_inode_metasync+0xf0/0xf0 [ 103.646954][ T4766] ? gfs2_glock_nq+0xcf0/0x14e0 [ 103.651876][ T4766] gfs2_instantiate+0x15e/0x210 [ 103.656790][ T4766] gfs2_glock_wait+0x1d0/0x2a0 [ 103.661628][ T4766] do_sync+0x49a/0xc00 [ 103.665749][ T4766] ? gfs2_quota_sync+0x32c/0x6f0 [ 103.670759][ T4766] ? slot_put+0x1e0/0x1e0 [ 103.675160][ T4766] ? gfs2_quota_sync+0x32c/0x6f0 [ 103.680155][ T4766] ? do_raw_spin_unlock+0x11d/0x230 [ 103.685449][ T4766] gfs2_quota_sync+0x32c/0x6f0 [ 103.690271][ T4766] gfs2_quotad+0x413/0x670 [ 103.694753][ T4766] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 103.699905][ T4766] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 103.705856][ T4766] ? wake_bit_function+0x200/0x200 [ 103.711018][ T4766] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 103.716963][ T4766] ? __kthread_parkme+0x162/0x1c0 [ 103.722047][ T4766] kthread+0x29d/0x330 [ 103.726166][ T4766] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 103.731320][ T4766] ? kthread_blkcg+0xd0/0xd0 [ 103.735970][ T4766] ret_from_fork+0x1f/0x30 [ 103.740548][ T4766] [ 104.225415][ T4831] device syzkaller0 entered promiscuous mode [ 104.432298][ T4755] loop3: detected capacity change from 0 to 32768 [ 104.522665][ T4755] (syz.3.95,4755,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 104.561348][ T4834] loop1: detected capacity change from 0 to 8192 [ 104.587165][ T4836] loop2: detected capacity change from 0 to 2048 [ 104.592177][ T4755] (syz.3.95,4755,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 104.626321][ T4836] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 104.638719][ T4834] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.662314][ T4266] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 104.679763][ T4836] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.709158][ T4266] CPU: 0 PID: 4266 Comm: syz-executor Not tainted syzkaller #0 [ 104.716778][ T4266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.726883][ T4266] Call Trace: [ 104.730198][ T4266] [ 104.733165][ T4266] dump_stack_lvl+0x168/0x22e [ 104.737887][ T4266] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 104.743222][ T4266] ? show_regs_print_info+0x12/0x12 [ 104.748473][ T4266] ? load_image+0x3b0/0x3b0 [ 104.753115][ T4266] ? do_raw_spin_unlock+0x11d/0x230 [ 104.758448][ T4266] gfs2_assert_warn_i+0x18f/0x2c0 [ 104.763698][ T4266] gfs2_quota_cleanup+0x4b4/0x6a0 [ 104.768869][ T4266] gfs2_put_super+0x22f/0x8c0 [ 104.773604][ T4266] ? gfs2_evict_inode+0x1170/0x1170 [ 104.778847][ T4266] generic_shutdown_super+0x130/0x340 [ 104.784264][ T4266] kill_block_super+0x7c/0xe0 [ 104.788984][ T4266] deactivate_locked_super+0x93/0xf0 [ 104.794312][ T4266] cleanup_mnt+0x463/0x4f0 [ 104.798768][ T4266] ? lockdep_hardirqs_on+0x94/0x140 [ 104.804011][ T4266] task_work_run+0x1ca/0x250 [ 104.808656][ T4266] ? task_work_cancel+0x230/0x230 [ 104.813905][ T4266] ? exit_to_user_mode_loop+0x3b/0x110 [ 104.819419][ T4266] exit_to_user_mode_loop+0xe6/0x110 [ 104.824758][ T4266] exit_to_user_mode_prepare+0xee/0x180 [ 104.830450][ T4266] syscall_exit_to_user_mode+0x16/0x40 [ 104.835959][ T4266] do_syscall_64+0x58/0xa0 [ 104.840422][ T4266] ? clear_bhb_loop+0x60/0xb0 [ 104.845139][ T4266] ? clear_bhb_loop+0x60/0xb0 [ 104.849845][ T4266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.855776][ T4266] RIP: 0033:0x7f972c5902f7 [ 104.860224][ T4266] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 104.879957][ T4266] RSP: 002b:00007ffc16e60808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 104.888430][ T4266] RAX: 0000000000000000 RBX: 00007f972c611d7d RCX: 00007f972c5902f7 [ 104.896558][ T4266] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc16e608c0 [ 104.904580][ T4266] RBP: 00007ffc16e608c0 R08: 0000000000000000 R09: 0000000000000000 [ 104.912594][ T4266] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc16e61950 [ 104.920628][ T4266] R13: 00007f972c611d7d R14: 000000000001906c R15: 00007ffc16e61990 [ 104.928637][ T4266] [ 104.947120][ T4755] JBD2: Ignoring recovery information on journal [ 104.977099][ T26] audit: type=1804 audit(1761258838.290:2): pid=4841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.104" name="/newroot/26/file2/bus" dev="loop1" ino=1048597 res=1 errno=0 [ 105.046566][ T4755] JBD2: recovery failed [ 105.050939][ T4755] (syz.3.95,4755,0):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 105.094956][ T4755] (syz.3.95,4755,1):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5 [ 105.184986][ T4755] (syz.3.95,4755,1):ocfs2_check_volume:2489 ERROR: status = -5 [ 105.192622][ T4755] (syz.3.95,4755,1):ocfs2_mount_volume:1821 ERROR: status = -5 [ 105.291042][ T4755] (syz.3.95,4755,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 106.084032][ T4858] loop0: detected capacity change from 0 to 32768 [ 106.092803][ T4858] (syz.0.101,4858,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 106.106548][ T4858] (syz.0.101,4858,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 106.159613][ T4858] JBD2: Ignoring recovery information on journal [ 106.188742][ T4858] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 106.202891][ T4862] loop2: detected capacity change from 0 to 1024 [ 106.305453][ T4266] ocfs2: Unmounting device (7,0) on (node local) [ 106.403628][ T4862] process 'syz.2.113' launched './file0' with NULL argv: empty string added [ 106.669711][ T4867] loop3: detected capacity change from 0 to 32768 [ 106.735340][ T4867] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 106.743609][ T4867] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 106.761506][ T4867] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 106.770743][ T4328] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 106.794537][ T4328] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 106.826755][ T51] hfsplus: b-tree write err: -5, ino 4 [ 106.952286][ T4873] loop1: detected capacity change from 0 to 32768 [ 106.964347][ T4873] gfs2: not a GFS2 filesystem [ 107.086279][ T4328] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 291ms [ 107.149737][ T4328] gfs2: fsid=syz:syz.0: jid=0: Done [ 107.172821][ T4867] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 107.343386][ T4879] loop2: detected capacity change from 0 to 2048 [ 107.370760][ T4867] gfs2: fsid=syz:syz.0: found 1 quota changes [ 107.406573][ T4879] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 107.425300][ T4879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.587081][ T4269] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 107.587081][ T4269] inode = 11 2339 [ 107.587081][ T4269] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 107.647383][ T4269] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 107.688181][ T4269] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4269 [syz-executor] gfs2_quota_sync+0x32c/0x6f0 [ 107.709610][ T4269] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 107.739962][ T4269] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 107.783703][ T4269] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 107.835435][ T4269] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 107.862313][ T4269] gfs2: fsid=syz:syz.0: File system withdrawn [ 107.892691][ T4269] CPU: 1 PID: 4269 Comm: syz-executor Not tainted syzkaller #0 [ 107.900337][ T4269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.910438][ T4269] Call Trace: [ 107.913749][ T4269] [ 107.916719][ T4269] dump_stack_lvl+0x168/0x22e [ 107.921441][ T4269] ? kobject_uevent_env+0x35f/0x8a0 [ 107.926694][ T4269] ? show_regs_print_info+0x12/0x12 [ 107.932027][ T4269] ? load_image+0x3b0/0x3b0 [ 107.936594][ T4269] ? kobject_uevent_env+0x35f/0x8a0 [ 107.942200][ T4269] gfs2_withdraw+0x143f/0x1780 [ 107.947038][ T4269] ? gfs2_lm+0x220/0x220 [ 107.951435][ T4269] ? gfs2_consist_inode_i+0xf1/0x110 [ 107.956778][ T4269] gfs2_inode_refresh+0xb5e/0xfc0 [ 107.961861][ T4269] ? gfs2_inode_metasync+0xf0/0xf0 [ 107.967030][ T4269] ? gfs2_glock_nq+0xcf0/0x14e0 [ 107.972035][ T4269] gfs2_instantiate+0x15e/0x210 [ 107.976950][ T4269] gfs2_glock_wait+0x1d0/0x2a0 [ 107.981772][ T4269] do_sync+0x49a/0xc00 [ 107.985879][ T4269] ? gfs2_quota_sync+0x32c/0x6f0 [ 107.991031][ T4269] ? slot_put+0x1e0/0x1e0 [ 107.995417][ T4269] ? gfs2_quota_sync+0x32c/0x6f0 [ 108.000423][ T4269] ? do_raw_spin_unlock+0x11d/0x230 [ 108.005672][ T4269] gfs2_quota_sync+0x32c/0x6f0 [ 108.010480][ T4269] gfs2_sync_fs+0x48/0xb0 [ 108.014851][ T4269] sync_filesystem+0xe6/0x220 [ 108.019579][ T4269] generic_shutdown_super+0x6b/0x340 [ 108.024907][ T4269] kill_block_super+0x7c/0xe0 [ 108.030140][ T4269] deactivate_locked_super+0x93/0xf0 [ 108.035458][ T4269] cleanup_mnt+0x463/0x4f0 [ 108.039911][ T4269] ? lockdep_hardirqs_on+0x94/0x140 [ 108.045155][ T4269] task_work_run+0x1ca/0x250 [ 108.049787][ T4269] ? task_work_cancel+0x230/0x230 [ 108.054875][ T4269] ? exit_to_user_mode_loop+0x3b/0x110 [ 108.060422][ T4269] exit_to_user_mode_loop+0xe6/0x110 [ 108.065751][ T4269] exit_to_user_mode_prepare+0xee/0x180 [ 108.071350][ T4269] syscall_exit_to_user_mode+0x16/0x40 [ 108.076862][ T4269] do_syscall_64+0x58/0xa0 [ 108.081313][ T4269] ? clear_bhb_loop+0x60/0xb0 [ 108.086032][ T4269] ? clear_bhb_loop+0x60/0xb0 [ 108.090748][ T4269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.096679][ T4269] RIP: 0033:0x7f26c89902f7 [ 108.101128][ T4269] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 108.120783][ T4269] RSP: 002b:00007ffc0bdde8d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 108.129249][ T4269] RAX: 0000000000000000 RBX: 00007f26c8a11d7d RCX: 00007f26c89902f7 [ 108.137257][ T4269] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0bdde990 [ 108.145277][ T4269] RBP: 00007ffc0bdde990 R08: 0000000000000000 R09: 0000000000000000 [ 108.153325][ T4269] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc0bddfa20 [ 108.161332][ T4269] R13: 00007f26c8a11d7d R14: 000000000001a3a6 R15: 00007ffc0bddfa60 [ 108.169362][ T4269] [ 108.242426][ T4892] loop1: detected capacity change from 0 to 32768 [ 108.251875][ T4269] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 108.266365][ T4269] CPU: 0 PID: 4269 Comm: syz-executor Not tainted syzkaller #0 [ 108.273973][ T4269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.284334][ T4269] Call Trace: [ 108.287640][ T4269] [ 108.290646][ T4269] dump_stack_lvl+0x168/0x22e [ 108.295380][ T4269] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 108.300536][ T4269] ? show_regs_print_info+0x12/0x12 [ 108.305782][ T4269] ? load_image+0x3b0/0x3b0 [ 108.310344][ T4269] ? do_raw_spin_unlock+0x11d/0x230 [ 108.315605][ T4269] gfs2_assert_warn_i+0x18f/0x2c0 [ 108.320691][ T4269] gfs2_quota_cleanup+0x4b4/0x6a0 [ 108.325781][ T4269] gfs2_put_super+0x22f/0x8c0 [ 108.330505][ T4269] ? gfs2_evict_inode+0x1170/0x1170 [ 108.335733][ T4269] generic_shutdown_super+0x130/0x340 [ 108.341644][ T4269] kill_block_super+0x7c/0xe0 [ 108.346343][ T4269] deactivate_locked_super+0x93/0xf0 [ 108.351726][ T4269] cleanup_mnt+0x463/0x4f0 [ 108.356155][ T4269] ? lockdep_hardirqs_on+0x94/0x140 [ 108.361377][ T4269] task_work_run+0x1ca/0x250 [ 108.365987][ T4269] ? task_work_cancel+0x230/0x230 [ 108.371034][ T4269] ? exit_to_user_mode_loop+0x3b/0x110 [ 108.376528][ T4269] exit_to_user_mode_loop+0xe6/0x110 [ 108.381837][ T4269] exit_to_user_mode_prepare+0xee/0x180 [ 108.387409][ T4269] syscall_exit_to_user_mode+0x16/0x40 [ 108.393061][ T4269] do_syscall_64+0x58/0xa0 [ 108.397491][ T4269] ? clear_bhb_loop+0x60/0xb0 [ 108.402181][ T4269] ? clear_bhb_loop+0x60/0xb0 [ 108.406879][ T4269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.412786][ T4269] RIP: 0033:0x7f26c89902f7 [ 108.417214][ T4269] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 108.436838][ T4269] RSP: 002b:00007ffc0bdde8d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 108.445260][ T4269] RAX: 0000000000000000 RBX: 00007f26c8a11d7d RCX: 00007f26c89902f7 [ 108.453242][ T4269] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0bdde990 [ 108.461231][ T4269] RBP: 00007ffc0bdde990 R08: 0000000000000000 R09: 0000000000000000 [ 108.469211][ T4269] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc0bddfa20 [ 108.477196][ T4269] R13: 00007f26c8a11d7d R14: 000000000001a3a6 R15: 00007ffc0bddfa60 [ 108.485196][ T4269] [ 108.495634][ T4892] (syz.1.125,4892,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.510289][ T4892] (syz.1.125,4892,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.545732][ T4892] JBD2: Ignoring recovery information on journal [ 108.562100][ T4340] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.624216][ T4892] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 108.729410][ T4885] loop0: detected capacity change from 0 to 32768 [ 108.765477][ T4340] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.789176][ T4340] usb 5-1: config 0 has no interface number 0 [ 108.801477][ T4885] (syz.0.121,4885,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.808539][ T4264] ocfs2: Unmounting device (7,1) on (node local) [ 108.825725][ T4340] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 108.855932][ T4340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.855971][ T4885] (syz.0.121,4885,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.877522][ T4340] usb 5-1: Product: syz [ 108.881771][ T4340] usb 5-1: Manufacturer: syz [ 108.898808][ T4340] usb 5-1: SerialNumber: syz [ 108.930663][ T4340] usb 5-1: config 0 descriptor?? [ 108.971109][ T4885] JBD2: Ignoring recovery information on journal [ 109.056610][ T4885] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 109.151956][ T4340] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 109.184651][ T4340] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 109.234298][ T4885] ocfs2: Unmounting device (7,0) on (node local) [ 109.252596][ T4340] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 109.323322][ T4340] usb 5-1: media controller created [ 109.362232][ T4908] loop2: detected capacity change from 0 to 1024 [ 109.380096][ T4340] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.505635][ T4340] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 109.552742][ T4904] netlink: 'syz.3.128': attribute type 13 has an invalid length. [ 109.577578][ T4904] netlink: 'syz.3.128': attribute type 17 has an invalid length. [ 109.618566][ T4373] hfsplus: b-tree write err: -5, ino 4 [ 109.657300][ T4340] usb 5-1: USB disconnect, device number 3 [ 109.699471][ T4913] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.868912][ T4328] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.878681][ T4916] loop2: detected capacity change from 0 to 2048 [ 109.896038][ T4328] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.911288][ T4916] EXT4-fs: quotafile must be on filesystem root [ 110.421665][ T4924] loop1: detected capacity change from 0 to 40427 [ 110.434096][ T4924] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x3ffff [ 110.460997][ T4922] fido_id[4922]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 110.482416][ T4928] loop0: detected capacity change from 0 to 2048 [ 110.527028][ T4928] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 110.643357][ T4928] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.831029][ T26] audit: type=1326 audit(1761258844.150:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17de58efc9 code=0x7ffc0000 [ 110.903517][ T26] audit: type=1326 audit(1761258844.180:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17de58efc9 code=0x7ffc0000 [ 111.021922][ T26] audit: type=1326 audit(1761258844.180:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17de58efc9 code=0x7ffc0000 [ 111.173583][ T26] audit: type=1326 audit(1761258844.180:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f17de58efc9 code=0x7ffc0000 [ 111.280814][ T26] audit: type=1326 audit(1761258844.220:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17de58efc9 code=0x7ffc0000 [ 111.398024][ T26] audit: type=1326 audit(1761258844.230:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4937 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f17de58efc9 code=0x7ffc0000 [ 112.293999][ T4904] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.302758][ T4904] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.355804][ T5022] loop4: detected capacity change from 0 to 2048 [ 113.416698][ T5022] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 113.444401][ T5022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.933984][ T5027] loop1: detected capacity change from 0 to 32768 [ 113.966339][ T5027] syz.1.153: attempt to access beyond end of device [ 113.966339][ T5027] loop1: rw=0, sector=4398046541832, nr_sectors = 8 limit=32768 [ 113.980959][ T5027] lbmIODone: I/O error in JFS log [ 113.986786][ T5027] *** Log Format Error ! *** [ 113.992032][ T5027] lmLogInit: exit(-22) [ 113.996235][ T5027] lmLogOpen: exit(-22) [ 114.000337][ T5027] jfs_mount_rw failed, return code = -22 [ 114.286040][ T4420] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 114.323066][ T4420] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.354598][ T5038] loop0: detected capacity change from 0 to 2048 [ 114.401310][ T5038] EXT4-fs: quotafile must be on filesystem root [ 114.670668][ T5039] fido_id[5039]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 114.741146][ T5032] loop4: detected capacity change from 0 to 32768 [ 114.787466][ T5032] (syz.4.154,5032,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 114.865302][ T5032] (syz.4.154,5032,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 114.902984][ T4904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.905806][ T5032] JBD2: Ignoring recovery information on journal [ 115.017064][ T5032] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 115.153718][ T4904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.265509][ T4279] ocfs2: Unmounting device (7,4) on (node local) [ 115.684108][ T4335] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.873416][ T129] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.885132][ T4335] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 115.893346][ T4335] usb 5-1: config 0 has no interface number 0 [ 115.915615][ T4335] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 115.928385][ T4335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.936586][ T4335] usb 5-1: Product: syz [ 115.940805][ T4335] usb 5-1: Manufacturer: syz [ 115.945533][ T4335] usb 5-1: SerialNumber: syz [ 115.963317][ T4335] usb 5-1: config 0 descriptor?? [ 115.963379][ T4904] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.977539][ T4904] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.990354][ T4904] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.001073][ T4904] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.083331][ T129] usb 2-1: Using ep0 maxpacket: 32 [ 116.091495][ T129] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 116.105740][ T129] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 116.116754][ T129] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 116.129308][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.142221][ T129] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 116.166035][ T129] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 116.179409][ T129] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 116.184914][ T4335] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 116.192291][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.207825][ T4335] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 116.218015][ T129] usb 2-1: config 0 descriptor?? [ 116.228663][ T4335] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 116.237564][ T4335] usb 5-1: media controller created [ 116.259620][ T4335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.349477][ T5047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.159'. [ 116.390360][ T4335] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 116.435993][ T129] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 116.477679][ T129] usb 2-1: USB disconnect, device number 3 [ 116.563053][ T4335] usb 5-1: USB disconnect, device number 4 [ 116.716013][ T5073] device syzkaller0 entered promiscuous mode [ 116.767559][ T5069] loop2: detected capacity change from 0 to 32768 [ 116.777923][ T5069] Only 4K block size supported! [ 116.782846][ T5069] Mount JFS Failure: -22 [ 116.817084][ T129] usblp0: removed [ 116.853331][ T41] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.043327][ T41] usb 4-1: Using ep0 maxpacket: 16 [ 117.054776][ T41] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.103928][ T41] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.125934][ T41] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.153249][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.161311][ T41] usb 4-1: Product: syz [ 117.183577][ T41] usb 4-1: Manufacturer: syz [ 117.188327][ T41] usb 4-1: SerialNumber: syz [ 117.193398][ T129] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.403429][ T129] usb 2-1: Using ep0 maxpacket: 32 [ 117.408799][ T4340] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 117.425605][ T129] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 117.428588][ T41] usb 4-1: 0:2 : does not exist [ 117.445582][ T129] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 117.457216][ T41] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 117.459426][ T129] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 117.474693][ T5083] loop0: detected capacity change from 0 to 128 [ 117.488764][ T5083] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.495752][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.506405][ T129] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 117.516815][ T5083] EXT4-fs (loop0): Test dummy encryption mode enabled [ 117.529298][ T129] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 117.548812][ T5083] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 117.558014][ T5083] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.568760][ T129] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 117.577992][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.590690][ T129] usb 2-1: config 0 descriptor?? [ 117.610086][ T41] usb 4-1: USB disconnect, device number 3 [ 117.625253][ T4340] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.635819][ T4340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 117.647110][ T4340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 117.656936][ T4340] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 117.671601][ T4340] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 117.689457][ T4340] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 117.699292][ T4340] usb 5-1: Manufacturer: syz [ 117.717384][ T4340] usb 5-1: config 0 descriptor?? [ 117.782712][ T5075] loop2: detected capacity change from 0 to 32768 [ 117.820451][ T129] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 117.888776][ T5075] XFS (loop2): Mounting V5 Filesystem [ 117.949173][ T5075] XFS (loop2): Ending clean mount [ 118.006153][ T5075] XFS (loop2): Quotacheck needed: Please wait. [ 118.128041][ T5075] XFS (loop2): Quotacheck: Done. [ 118.214594][ T4340] rc_core: IR keymap rc-hauppauge not found [ 118.221209][ T4340] Registered IR keymap rc-empty [ 118.252592][ T4340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.283729][ T4265] XFS (loop2): Unmounting Filesystem [ 118.291198][ T5083] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 118.304281][ T4340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.344948][ T4340] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 118.369905][ T4340] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 118.385135][ T22] usb 2-1: USB disconnect, device number 4 [ 118.412633][ T4340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.444093][ T22] usblp0: removed [ 118.458060][ T4340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.496477][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 118.514888][ T4340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.573468][ T4340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.613375][ T4340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.644204][ T4340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.693303][ T4340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.733279][ T4340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.773551][ T4340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.813327][ T4340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.813597][ T5115] netlink: 'syz.3.178': attribute type 13 has an invalid length. [ 118.850516][ T5115] netlink: 'syz.3.178': attribute type 17 has an invalid length. [ 118.863413][ T4340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 118.907093][ T5115] ieee802154 phy0 wpan0: encryption failed: -22 [ 118.916385][ T4340] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 118.948290][ T4340] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 118.971005][ T4340] usb 5-1: USB disconnect, device number 5 [ 119.166966][ T3653] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 119.190126][ T3653] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.341451][ T5129] device syzkaller0 entered promiscuous mode [ 119.363179][ T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.464848][ T5128] fido_id[5128]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 119.553323][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 119.564393][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 119.567284][ T5168] loop1: detected capacity change from 0 to 128 [ 119.711246][ T5168] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.787191][ T22] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 119.842021][ T5168] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.973240][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.981490][ T22] usb 3-1: Product: syz [ 120.075433][ T22] usb 3-1: Manufacturer: syz [ 120.080113][ T22] usb 3-1: SerialNumber: syz [ 120.183990][ T22] usb 3-1: config 0 descriptor?? [ 120.470576][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 120.750510][ T22] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 121.140689][ T5190] netlink: 'syz.3.191': attribute type 13 has an invalid length. [ 121.173857][ T5190] netlink: 'syz.3.191': attribute type 17 has an invalid length. [ 121.217908][ T5190] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.362661][ T22] usb 3-1: USB disconnect, device number 3 [ 121.689592][ T5198] loop4: detected capacity change from 0 to 32768 [ 121.755029][ T5198] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 121.759473][ T5203] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 122.390840][ T5193] loop1: detected capacity change from 0 to 32768 [ 122.432567][ T4279] ocfs2: Unmounting device (7,4) on (node local) [ 122.465857][ T5193] (syz.1.192,5193,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.534105][ T5193] (syz.1.192,5193,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.629616][ T5226] device syzkaller0 entered promiscuous mode [ 122.639480][ T5193] JBD2: Ignoring recovery information on journal [ 122.871392][ T5193] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 123.141862][ T4264] ocfs2: Unmounting device (7,1) on (node local) [ 124.446773][ T22] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 124.479379][ T22] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.499264][ T5283] loop0: detected capacity change from 0 to 128 [ 124.512710][ T5281] loop1: detected capacity change from 0 to 2048 [ 124.547030][ T5280] loop3: detected capacity change from 0 to 2048 [ 124.594534][ T5280] EXT4-fs: quotafile must be on filesystem root [ 124.630931][ T5283] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 124.641109][ T5283] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.641150][ T5281] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 124.676680][ T5281] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.934615][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 124.973273][ T4340] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.992218][ T5284] fido_id[5284]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 125.186136][ T4340] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.220046][ T4340] usb 5-1: config 0 has no interface number 0 [ 125.258621][ T4340] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 125.280630][ T4340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.297529][ T4340] usb 5-1: Product: syz [ 125.310339][ T4340] usb 5-1: Manufacturer: syz [ 125.330719][ T4340] usb 5-1: SerialNumber: syz [ 125.368571][ T4340] usb 5-1: config 0 descriptor?? [ 125.596376][ T4340] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 125.633640][ T4340] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 125.664831][ T4340] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 125.672938][ T4340] usb 5-1: media controller created [ 125.679256][ T4321] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.764404][ T4340] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.855536][ T4340] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 125.864167][ T4321] usb 4-1: Using ep0 maxpacket: 32 [ 125.872395][ T4321] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 125.914840][ T5310] loop1: detected capacity change from 0 to 128 [ 125.921675][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.954038][ T4321] usb 4-1: config 0 descriptor?? [ 125.963458][ T4340] usb 5-1: USB disconnect, device number 6 [ 125.998280][ T5310] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 126.039359][ T5310] hpfs: filesystem error: improperly stopped [ 126.071971][ T5310] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 126.081899][ T5310] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 126.104092][ T5310] hpfs: You really don't want any checks? You are crazy... [ 126.112995][ T5310] hpfs: hpfs_map_sector(): read error [ 126.138776][ T5310] hpfs: code page support is disabled [ 126.146815][ T5312] device syzkaller0 entered promiscuous mode [ 126.154909][ T5310] hpfs: hpfs_map_4sectors(): unaligned read [ 126.172425][ T5310] hpfs: hpfs_map_4sectors(): unaligned read [ 126.200491][ T5310] hpfs: filesystem error: unable to find root dir [ 126.442074][ T4321] hid-generic 0003:0458:5016.0008: hidraw0: USB HID v1.05 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 126.598988][ T4321] usb 4-1: USB disconnect, device number 4 [ 126.745840][ T5325] loop1: detected capacity change from 0 to 128 [ 126.909121][ T5325] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 126.941468][ T5325] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.029485][ T5318] fido_id[5318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 127.090850][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 127.240087][ T5335] loop2: detected capacity change from 0 to 2048 [ 127.299209][ T5335] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 127.324121][ T22] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 127.371270][ T22] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 127.395540][ T5335] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.214746][ T5343] fido_id[5343]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 128.460259][ T5379] loop2: detected capacity change from 0 to 128 [ 128.537636][ T5379] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 128.591267][ T5379] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.803179][ T3653] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.921254][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 129.005211][ T3653] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.023800][ T3653] usb 2-1: config 0 has no interface number 0 [ 129.056208][ T3653] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 129.088240][ T3653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.131571][ T3653] usb 2-1: Product: syz [ 129.144967][ T3653] usb 2-1: Manufacturer: syz [ 129.154200][ T3653] usb 2-1: SerialNumber: syz [ 129.177371][ T3653] usb 2-1: config 0 descriptor?? [ 129.197379][ T5341] loop3: detected capacity change from 0 to 32768 [ 129.239576][ T5401] loop0: detected capacity change from 0 to 128 [ 129.302412][ T5341] XFS (loop3): Mounting V5 Filesystem [ 129.385351][ T5401] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 129.398533][ T3653] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 129.412891][ T3653] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 129.424124][ T3653] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 129.432532][ T3653] usb 2-1: media controller created [ 129.455472][ T3653] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.473994][ T5401] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.497598][ T5341] XFS (loop3): Ending clean mount [ 129.537623][ T5341] XFS (loop3): Quotacheck needed: Please wait. [ 129.613747][ T3653] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 129.635425][ T5341] XFS (loop3): Quotacheck: Done. [ 129.669735][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 129.787827][ T4269] XFS (loop3): Unmounting Filesystem [ 129.831519][ T3653] usb 2-1: USB disconnect, device number 5 [ 130.481306][ T5430] loop3: detected capacity change from 0 to 2048 [ 130.659235][ T5433] loop1: detected capacity change from 0 to 32768 [ 130.674899][ T5433] (syz.1.241,5433,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 130.675443][ T5430] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 130.700018][ T5433] (syz.1.241,5433,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 130.720244][ T5433] JBD2: Ignoring recovery information on journal [ 130.745970][ T5433] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 130.906125][ T5430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.041009][ T4264] ocfs2: Unmounting device (7,1) on (node local) [ 131.522628][ T5468] tipc: Enabling of bearer rejected, failed to enable media [ 131.596529][ T5471] device syzkaller0 entered promiscuous mode [ 132.212719][ T5473] loop3: detected capacity change from 0 to 128 [ 132.292018][ T5473] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 132.309167][ T5473] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.429744][ T5475] netlink: 'syz.0.245': attribute type 13 has an invalid length. [ 132.463633][ T5475] netlink: 'syz.0.245': attribute type 17 has an invalid length. [ 132.534738][ T5477] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.652024][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 132.876647][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.883539][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.939274][ T4328] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 132.968680][ T4328] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.386709][ T5484] fido_id[5484]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.846867][ T5480] loop1: detected capacity change from 0 to 32768 [ 134.011706][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.020648][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.051581][ T5480] XFS (loop1): Mounting V5 Filesystem [ 134.118936][ T5480] XFS (loop1): Ending clean mount [ 134.140823][ T5480] XFS (loop1): Quotacheck needed: Please wait. [ 134.248035][ T5480] XFS (loop1): Quotacheck: Done. [ 134.320632][ T4264] XFS (loop1): Unmounting Filesystem [ 134.682105][ T5512] loop3: detected capacity change from 0 to 64 [ 134.798973][ T4766] ================================================================== [ 134.807102][ T4766] BUG: KASAN: use-after-free in __lock_acquire+0xf7/0x7c50 [ 134.814360][ T4766] Read of size 8 at addr ffff888076840bb0 by task gfs2_quotad/4766 [ 134.822318][ T4766] [ 134.824688][ T4766] CPU: 0 PID: 4766 Comm: gfs2_quotad Not tainted syzkaller #0 [ 134.832215][ T4766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.842309][ T4766] Call Trace: [ 134.845606][ T4766] [ 134.848548][ T4766] dump_stack_lvl+0x168/0x22e [ 134.853239][ T4766] ? __lock_acquire+0x7c50/0x7c50 [ 134.858292][ T4766] ? show_regs_print_info+0x12/0x12 [ 134.863500][ T4766] ? load_image+0x3b0/0x3b0 [ 134.868034][ T4766] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 134.873427][ T4766] ? __virt_addr_valid+0x188/0x540 [ 134.878553][ T4766] ? __virt_addr_valid+0x465/0x540 [ 134.883950][ T4766] ? __lock_acquire+0xf7/0x7c50 [ 134.888814][ T4766] print_report+0xa8/0x210 [ 134.893251][ T4766] kasan_report+0x10b/0x140 [ 134.897780][ T4766] ? __lock_acquire+0xf7/0x7c50 [ 134.902646][ T4766] __lock_acquire+0xf7/0x7c50 [ 134.907357][ T4766] ? verify_lock_unused+0x140/0x140 [ 134.912582][ T4766] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 134.918585][ T4766] ? lock_chain_count+0x20/0x20 [ 134.923461][ T4766] ? __free_object+0x203/0x9d0 [ 134.928241][ T4766] ? lockdep_hardirqs_on+0x94/0x140 [ 134.933581][ T4766] ? verify_lock_unused+0x140/0x140 [ 134.938804][ T4766] ? alloc_object+0x650/0x650 [ 134.943495][ T4766] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 134.949576][ T4766] ? lock_chain_count+0x20/0x20 [ 134.954443][ T4766] lock_acquire+0x1b4/0x490 [ 134.958968][ T4766] ? finish_wait+0xb8/0x1d0 [ 134.963495][ T4766] ? timer_delete_sync+0x1f8/0x2a0 [ 134.968633][ T4766] ? try_to_del_timer_sync+0x1b0/0x1b0 [ 134.974140][ T4766] ? read_lock_is_recursive+0x10/0x10 [ 134.979566][ T4766] _raw_spin_lock_irqsave+0xa4/0xf0 [ 134.984798][ T4766] ? finish_wait+0xb8/0x1d0 [ 134.989322][ T4766] ? _raw_spin_lock+0x40/0x40 [ 134.994040][ T4766] ? update_process_times+0x1b0/0x1b0 [ 134.999434][ T4766] finish_wait+0xb8/0x1d0 [ 135.003782][ T4766] gfs2_quotad+0x4e6/0x670 [ 135.008219][ T4766] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 135.013369][ T4766] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 135.019282][ T4766] ? wake_bit_function+0x200/0x200 [ 135.024411][ T4766] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 135.030360][ T4766] ? __kthread_parkme+0x162/0x1c0 [ 135.035410][ T4766] kthread+0x29d/0x330 [ 135.039498][ T4766] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 135.044620][ T4766] ? kthread_blkcg+0xd0/0xd0 [ 135.049228][ T4766] ret_from_fork+0x1f/0x30 [ 135.053666][ T4766] [ 135.056690][ T4766] [ 135.059017][ T4766] Allocated by task 4419: [ 135.063347][ T4766] kasan_set_track+0x4b/0x70 [ 135.067951][ T4766] __kasan_kmalloc+0x8e/0xa0 [ 135.072556][ T4766] __kmalloc_node_track_caller+0xae/0x230 [ 135.078293][ T4766] __alloc_skb+0x22a/0x7e0 [ 135.082722][ T4766] nsim_dev_trap_report_work+0x28f/0xaf0 [ 135.088390][ T4766] process_one_work+0x898/0x1160 [ 135.093337][ T4766] worker_thread+0xaa2/0x1250 [ 135.098125][ T4766] kthread+0x29d/0x330 [ 135.102255][ T4766] ret_from_fork+0x1f/0x30 [ 135.106786][ T4766] [ 135.109122][ T4766] Freed by task 4419: [ 135.113114][ T4766] kasan_set_track+0x4b/0x70 [ 135.117726][ T4766] kasan_save_free_info+0x2d/0x50 [ 135.122772][ T4766] ____kasan_slab_free+0x126/0x1e0 [ 135.127899][ T4766] slab_free_freelist_hook+0x131/0x1a0 [ 135.133394][ T4766] __kmem_cache_free+0xb6/0x1f0 [ 135.138249][ T4766] skb_release_data+0x5db/0x7c0 [ 135.143117][ T4766] consume_skb+0xa2/0x100 [ 135.147457][ T4766] nsim_dev_trap_report_work+0x76b/0xaf0 [ 135.153108][ T4766] process_one_work+0x898/0x1160 [ 135.158060][ T4766] worker_thread+0xaa2/0x1250 [ 135.162754][ T4766] kthread+0x29d/0x330 [ 135.166843][ T4766] ret_from_fork+0x1f/0x30 [ 135.171277][ T4766] [ 135.173613][ T4766] The buggy address belongs to the object at ffff888076840000 [ 135.173613][ T4766] which belongs to the cache kmalloc-4k of size 4096 [ 135.187673][ T4766] The buggy address is located 2992 bytes inside of [ 135.187673][ T4766] 4096-byte region [ffff888076840000, ffff888076841000) [ 135.201142][ T4766] [ 135.203473][ T4766] The buggy address belongs to the physical page: [ 135.209908][ T4766] page:ffffea0001da1000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76840 [ 135.220071][ T4766] head:ffffea0001da1000 order:3 compound_mapcount:0 compound_pincount:0 [ 135.228509][ T4766] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 135.236527][ T4766] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017442140 [ 135.245116][ T4766] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 135.253703][ T4766] page dumped because: kasan: bad access detected [ 135.260124][ T4766] page_owner tracks the page as allocated [ 135.265924][ T4766] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4419, tgid 4419 (kworker/u4:12), ts 131110803625, free_ts 131052351296 [ 135.288351][ T4766] post_alloc_hook+0x173/0x1a0 [ 135.293138][ T4766] get_page_from_freelist+0x1a26/0x1ac0 [ 135.298702][ T4766] __alloc_pages+0x1df/0x4e0 [ 135.303306][ T4766] alloc_slab_page+0x5d/0x160 [ 135.307993][ T4766] new_slab+0x87/0x2c0 [ 135.312076][ T4766] ___slab_alloc+0xbc6/0x1230 [ 135.316774][ T4766] __kmem_cache_alloc_node+0x1a0/0x260 [ 135.322243][ T4766] __kmalloc_node_track_caller+0x9e/0x230 [ 135.327984][ T4766] __alloc_skb+0x22a/0x7e0 [ 135.332419][ T4766] nsim_dev_trap_report_work+0x28f/0xaf0 [ 135.338067][ T4766] process_one_work+0x898/0x1160 [ 135.343017][ T4766] worker_thread+0xaa2/0x1250 [ 135.347720][ T4766] kthread+0x29d/0x330 [ 135.351804][ T4766] ret_from_fork+0x1f/0x30 [ 135.356239][ T4766] page last free stack trace: [ 135.360917][ T4766] free_unref_page_prepare+0x8b4/0x9a0 [ 135.366407][ T4766] free_unref_page+0x2e/0x3f0 [ 135.371099][ T4766] qlist_free_all+0x76/0xe0 [ 135.375609][ T4766] kasan_quarantine_reduce+0x144/0x160 [ 135.381077][ T4766] __kasan_slab_alloc+0x1e/0x80 [ 135.385938][ T4766] slab_post_alloc_hook+0x4b/0x480 [ 135.391085][ T4766] kmem_cache_alloc_bulk+0x3ba/0x4e0 [ 135.396394][ T4766] mas_alloc_nodes+0x449/0x890 [ 135.401176][ T4766] mas_preallocate+0x161/0x3c0 [ 135.405967][ T4766] __vma_adjust+0x2e2/0x1c60 [ 135.410585][ T4766] vma_merge+0x8fe/0x9c0 [ 135.414841][ T4766] mprotect_fixup+0x418/0x7f0 [ 135.419538][ T4766] do_mprotect_pkey+0x754/0xa40 [ 135.424409][ T4766] __x64_sys_mprotect+0x7c/0x90 [ 135.429287][ T4766] do_syscall_64+0x4c/0xa0 [ 135.433713][ T4766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.439620][ T4766] [ 135.441989][ T4766] Memory state around the buggy address: [ 135.447628][ T4766] ffff888076840a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.455695][ T4766] ffff888076840b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.463759][ T4766] >ffff888076840b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.471819][ T4766] ^ [ 135.477453][ T4766] ffff888076840c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.485541][ T4766] ffff888076840c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.493604][ T4766] ================================================================== [ 135.501684][ T4766] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 135.508907][ T4766] CPU: 0 PID: 4766 Comm: gfs2_quotad Not tainted syzkaller #0 [ 135.516373][ T4766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 135.526442][ T4766] Call Trace: [ 135.529730][ T4766] [ 135.532676][ T4766] dump_stack_lvl+0x168/0x22e [ 135.537375][ T4766] ? memcpy+0x3c/0x60 [ 135.541378][ T4766] ? show_regs_print_info+0x12/0x12 [ 135.546587][ T4766] ? load_image+0x3b0/0x3b0 [ 135.551108][ T4766] panic+0x2c9/0x710 [ 135.555021][ T4766] ? __lock_acquire+0x7c50/0x7c50 [ 135.560065][ T4766] ? bpf_jit_dump+0xd0/0xd0 [ 135.564594][ T4766] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 135.570591][ T4766] ? _raw_spin_unlock+0x40/0x40 [ 135.575460][ T4766] check_panic_on_warn+0x80/0xa0 [ 135.580414][ T4766] ? __lock_acquire+0xf7/0x7c50 [ 135.585364][ T4766] end_report+0x66/0x110 [ 135.589624][ T4766] kasan_report+0x118/0x140 [ 135.594148][ T4766] ? __lock_acquire+0xf7/0x7c50 [ 135.599018][ T4766] __lock_acquire+0xf7/0x7c50 [ 135.603712][ T4766] ? verify_lock_unused+0x140/0x140 [ 135.608931][ T4766] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 135.614943][ T4766] ? lock_chain_count+0x20/0x20 [ 135.619807][ T4766] ? __free_object+0x203/0x9d0 [ 135.624587][ T4766] ? lockdep_hardirqs_on+0x94/0x140 [ 135.629800][ T4766] ? verify_lock_unused+0x140/0x140 [ 135.635015][ T4766] ? alloc_object+0x650/0x650 [ 135.639700][ T4766] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 135.645696][ T4766] ? lock_chain_count+0x20/0x20 [ 135.650560][ T4766] lock_acquire+0x1b4/0x490 [ 135.655162][ T4766] ? finish_wait+0xb8/0x1d0 [ 135.659680][ T4766] ? timer_delete_sync+0x1f8/0x2a0 [ 135.664812][ T4766] ? try_to_del_timer_sync+0x1b0/0x1b0 [ 135.670386][ T4766] ? read_lock_is_recursive+0x10/0x10 [ 135.675778][ T4766] _raw_spin_lock_irqsave+0xa4/0xf0 [ 135.681605][ T4766] ? finish_wait+0xb8/0x1d0 [ 135.686122][ T4766] ? _raw_spin_lock+0x40/0x40 [ 135.690812][ T4766] ? update_process_times+0x1b0/0x1b0 [ 135.696206][ T4766] finish_wait+0xb8/0x1d0 [ 135.700549][ T4766] gfs2_quotad+0x4e6/0x670 [ 135.704980][ T4766] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 135.710097][ T4766] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 135.716006][ T4766] ? wake_bit_function+0x200/0x200 [ 135.721231][ T4766] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 135.727320][ T4766] ? __kthread_parkme+0x162/0x1c0 [ 135.732458][ T4766] kthread+0x29d/0x330 [ 135.736548][ T4766] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 135.741689][ T4766] ? kthread_blkcg+0xd0/0xd0 [ 135.746398][ T4766] ret_from_fork+0x1f/0x30 [ 135.750837][ T4766] [ 135.754165][ T4766] Kernel Offset: disabled [ 135.758579][ T4766] Rebooting in 86400 seconds.. Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.