last executing test programs: 7m11.285870478s ago: executing program 2 (id=297): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) sendmsg$netlink(r0, 0x0, 0x40040) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m10.809181059s ago: executing program 2 (id=299): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) add_key$user(0x0, 0x0, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x4c}}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x40, r0, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7m3.580771399s ago: executing program 2 (id=309): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) sendmsg$netlink(r0, 0x0, 0x40040) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m14.684835914s ago: executing program 2 (id=309): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) sendmsg$netlink(r0, 0x0, 0x40040) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m14.444926572s ago: executing program 2 (id=631): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x6, 0x3, 0x6, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x3, 0x3}, {0x1, 0x7, 0x7, 0x0, 0x8, 0x7, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m10.621295905s ago: executing program 2 (id=642): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x2915048, 0x0, 0x0, 0x0, &(0x7f00000002c0)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x51852, 0x0, 0x1, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x4) openat$dir(0xffffffffffffff9c, 0x0, 0x204040, 0x2c) getdents64(r5, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @random="1a0e2c5ffd4d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty=0x2000000, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 19.63662957s ago: executing program 3 (id=1088): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, 0x0, 0xca000, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) gettid() r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, &(0x7f0000000140), 0x0}, 0x20) r6 = epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x0, 0xbf1, 0x0, 0xffff7ffffffffffa, 0x8}, 0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r7) socketpair$unix(0x1, 0x2, 0x0, 0x0) fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') read$FUSE(r8, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x2004}) 13.182950372s ago: executing program 0 (id=1093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000040)={r7, 0x0, 0xffffffffffffffff}) r9 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r8}) close_range(r3, 0xffffffffffffffff, 0x0) 12.673217827s ago: executing program 3 (id=1094): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 10.211661086s ago: executing program 1 (id=1098): r0 = inotify_init() close_range(r0, 0xffffffffffffffff, 0x0) 9.884792466s ago: executing program 1 (id=1100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 8.673514161s ago: executing program 1 (id=1101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 8.381657264s ago: executing program 0 (id=1102): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000526) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x9600006f) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0xee01, 0x1000) 7.471935033s ago: executing program 1 (id=1104): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x240400c4}, 0x4040) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000340)={[{@test_dummy_encryption}, {@nodioread_nolock}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x6, 0x3, 0x6, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x3, 0x3}, {0x1, 0x7, 0x7, 0x0, 0x8, 0x7, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.164904179s ago: executing program 3 (id=1106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) 6.990293724s ago: executing program 0 (id=1107): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x101581, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$inet6(0xa, 0x80001, 0x0) io_uring_setup(0x11a4, &(0x7f0000000080)={0x0, 0xd3e8, 0x80, 0x3, 0x7}) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r3 = syz_mount_image$erofs(&(0x7f00000008c0), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xf5, 0x210, &(0x7f00000001c0)="$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") write(r3, &(0x7f0000000400), 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 6.110291051s ago: executing program 3 (id=1109): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.813810475s ago: executing program 4 (id=1110): r0 = inotify_init() close_range(r0, 0xffffffffffffffff, 0x0) 3.692784586s ago: executing program 0 (id=1111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 3.577945093s ago: executing program 4 (id=1112): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a2c001280"], 0x60}, 0x1, 0x0, 0x0, 0x240400c4}, 0x4040) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000340)={[{@test_dummy_encryption}, {@nodioread_nolock}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x6, 0x3, 0x6, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x3, 0x3}, {0x1, 0x7, 0x7, 0x0, 0x8, 0x7, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.275621095s ago: executing program 0 (id=1113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 2.215584437s ago: executing program 1 (id=1114): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x10012, &(0x7f00000004c0)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d2ffd5dbc39d475a3efbcc5666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7aa4c585f22f2390962cca0f041113b93687bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db3927438000000040023", @ANYRES8], 0x4, 0x337, &(0x7f0000000140)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f18a1, 0x0, 0x83, 0x0, &(0x7f0000000480)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42042, 0x14a) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000006c0)='./file1\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cpuset.effective_mems\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 916.469355ms ago: executing program 0 (id=1115): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x6) 746.701914ms ago: executing program 4 (id=1116): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b", 0x2b}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/67, 0x43}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x10000) 403.180289ms ago: executing program 3 (id=1117): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000526) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x9600006f) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0xee01, 0x1000) 379.907528ms ago: executing program 4 (id=1118): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e22, 0x3, 'nq\x00', 0x2, 0x4, 0x38}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 326.959429ms ago: executing program 1 (id=1119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) 222.011924ms ago: executing program 4 (id=1120): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 8.657745ms ago: executing program 3 (id=1121): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000140)=[{r0, 0x40}, {r1, 0xa180}, {r2, 0x110}], 0x3, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) 0s ago: executing program 4 (id=1122): ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000080)={[{@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7ff}}, {@inlinecrypt}, {@mblk_io_submit}, {@minixdf}, {@bh}, {@nodiscard}, {@nodiscard}]}, 0x81, 0xbe0, &(0x7f0000000440)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aGQXAMW8soIrX8gKTiSBVkl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDkqVd/bBWGln+fOBp3ps3M+/71Ug778HuBvDMGsh+pBFHI+JSElGo708jorta642o1I5bmJ8d+WF+diSJxcXnvk0iiYhH87MjjWsl9e2heqM3Ij77dxK/fXXtuJPTM+PD5XJpot4+OXX1xsnJ6Zm/jV0dvlK6Urp26sw/hk4PnRk8O9S2XH/86vzd7//0368rP7338+3v3ngnifPRV+9bmUc9620biIGl38lKnREx3Ibr7wUd9XxW5pl0bnBSusNBAQDQUrpiDvf7KERHLE/eCvHx57kGBwAAALTFYkfEIgAAALDPJdb/AAAAsM813gfwaH52pFHyfUfC7np4ISL6a/kv1EutpzMq1W1vdEXEwUdJrPxYa1I7bdsGIuLBl2c/zEo0+RzyTqvMRcQfmt3/pJp/f/2T0KvzTyNisA3jD6xqP035n2/D+HnnD8Cz6d6F2oNs7fMvXZr/RJPnX2eTZ9eTyPv515j/LayZ/y3n39Fi/vf/TY5x6923brbqy/L/593/fNAo2fjZdltJbcHDuYg/djbLP1nKP2mR/6UNrp1E7RKFX26WWh2Td/6Lb0ccj+b5NyTrfz/RydGxcmmw9rPpGHOfDr3favy888/u/8EW+a9z/3uzfTceu1LrL/V54eLFO636Ns4//aY7eb5a667veWl4amriVER38r+1+0+vn2/jmMY10rmIE39e//+/2d9/9ppQqf9tZJnP1bdZ+5VVY/7r9q2P1ss/W/vlef8vb/3+V/e9tskx/vLJ6yda9a1c/2YlG/9BUlsLN3F404kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsK+kEdEXSVqMiKRaT9NiMeJQRPwuDqbl65NTfx29/uK1y1lfRH90paNj5dJgRBRq7SRrn6rWl9unV7X/HhFHIuLNwoFquzhyvXw57+QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYcigi+iJJixGRRsRCIU2LxbyjAgAAANquP+8AAAAAgB1n/Q8AAAD7n/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+zIsXv3k4ionDtQLZnuel9XrpEBOy3NOwAgNx15BwDkpjPvAIDcbHGNb7oA+1CyQX9vy56etscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN51/Oi9+0lEVM4dqJZMd72vq+kZx3YxOmAnpXkHAOSmY73Ozt2LA9h9T/wvfri9cQC7r/kaH3iWJBv09y4fU3m8p2ftwesuKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4mvVVS5IWIyKt1tO0WIw4HBH90ZWMjpVLgxHxm4j4otDVk7V78g4aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtpucnhkfLpdLE09SSbZ3erNKJdp8QZWnsvLy3ghjdyvJ3gijVsn7lQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDxMTs+MD5fLpYnJvCMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8jY5PTM+XC6XJjZRubOVg1dU8s4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID8/BoAAP//YD0Mhw==") setxattr$system_posix_acl(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x24, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, 0x0) r4 = fsmount(r3, 0x0, 0x80) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) accept4(r5, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): nmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.935863][ T4934] Bluetooth: hci5: command tx timeout [ 327.945812][ T7726] loop5: detected capacity change from 0 to 7 [ 327.960879][ T7726] Dev loop5: unable to read RDB block 7 [ 327.960921][ T7726] loop5: unable to read partition table [ 327.961130][ T7726] loop5: partition table beyond EOD, truncated [ 327.961147][ T7726] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 328.492479][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.657243][ T7743] loop0: detected capacity change from 0 to 512 [ 328.688533][ T7743] EXT4-fs (loop0): Test dummy encryption mode enabled [ 328.688555][ T7743] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 328.731337][ T7743] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.431: bad orphan inode 131083 [ 328.731367][ T7743] loop0: lost filesystem error report for type 5 error -117 [ 328.733230][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 328.733250][ C0] EXT4-fs (loop0): initial error at time 1779312428: ext4_orphan_get:1423 [ 328.733272][ C0] EXT4-fs (loop0): last error at time 1779312428: ext4_orphan_get:1423 [ 328.805913][ T7743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.972527][ T7748] loop4: detected capacity change from 0 to 512 [ 329.066746][ T7748] EXT4-fs (loop4): Test dummy encryption mode enabled [ 329.066769][ T7748] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 329.135932][ T7748] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.434: bad orphan inode 131083 [ 329.135971][ T7748] loop4: lost filesystem error report for type 5 error -117 [ 329.142862][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 329.142887][ C0] EXT4-fs (loop4): initial error at time 1779312428: ext4_orphan_get:1423 [ 329.142910][ C0] EXT4-fs (loop4): last error at time 1779312428: ext4_orphan_get:1423 [ 329.210809][ T7748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.595252][ T7768] loop1: detected capacity change from 0 to 256 [ 329.616637][ T7768] exfat: Bad value for 'gid' [ 329.616656][ T7768] exfat: Bad value for 'gid' [ 329.692809][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.914657][ T4934] Bluetooth: hci5: command tx timeout [ 330.355678][ T5350] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 330.494930][ T7786] loop3: detected capacity change from 0 to 256 [ 330.515090][ T7786] exfat: Bad value for 'gid' [ 330.515109][ T7786] exfat: Bad value for 'gid' [ 330.517829][ T5350] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 330.517854][ T5350] usb 2-1: config 0 has no interface number 0 [ 330.517897][ T5350] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 330.517921][ T5350] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 330.527029][ T5350] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 330.527058][ T5350] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 330.527076][ T5350] usb 2-1: Product: syz [ 330.527088][ T5350] usb 2-1: Manufacturer: syz [ 330.527100][ T5350] usb 2-1: SerialNumber: syz [ 330.548185][ T5350] usb 2-1: config 0 descriptor?? [ 330.614872][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.674214][ T5350] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 330.674544][ T5350] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 330.681950][ T5350] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 330.691054][ T7789] loop0: detected capacity change from 0 to 256 [ 330.692291][ T7789] exfat: Bad value for 'gid' [ 330.692307][ T7789] exfat: Bad value for 'gid' [ 330.708588][ T5350] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 330.725202][ T5350] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 330.737498][ T5350] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 330.740639][ T5350] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 330.821991][ T5350] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 330.892976][ T5350] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 330.898707][ T5350] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 331.048099][ T5607] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 331.050615][ T5741] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 331.190147][ T5350] usb 2-1: USB disconnect, device number 10 [ 331.204148][ T5741] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 331.204174][ T5741] usb 1-1: config 0 has no interface number 0 [ 331.204215][ T5741] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 331.204239][ T5741] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 331.239946][ T5741] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 331.239975][ T5741] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 331.239994][ T5741] usb 1-1: Product: syz [ 331.240007][ T5741] usb 1-1: Manufacturer: syz [ 331.240019][ T5741] usb 1-1: SerialNumber: syz [ 331.255212][ T5607] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 331.255237][ T5607] usb 4-1: config 0 has no interface number 0 [ 331.255297][ T5607] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 331.255321][ T5607] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 331.258175][ T5607] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 331.258202][ T5607] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 331.258220][ T5607] usb 4-1: Product: syz [ 331.258233][ T5607] usb 4-1: Manufacturer: syz [ 331.258245][ T5607] usb 4-1: SerialNumber: syz [ 331.528740][ T5607] usb 4-1: config 0 descriptor?? [ 331.563879][ T5741] usb 1-1: config 0 descriptor?? [ 331.571115][ T5350] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 331.596485][ T5741] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 331.596843][ T5741] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 331.597861][ T5607] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 331.598160][ T5607] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 331.640987][ T5350] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 331.643512][ T5607] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 331.655107][ T5741] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 331.668416][ T5741] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 331.694007][ T5350] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 331.753945][ T7804] loop1: detected capacity change from 0 to 512 [ 331.760157][ T7804] EXT4-fs (loop1): Test dummy encryption mode enabled [ 331.760177][ T7804] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 331.760468][ T5741] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 331.796792][ T7804] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.440: bad orphan inode 131083 [ 331.796820][ T7804] loop1: lost filesystem error report for type 5 error -117 [ 331.798100][ T5607] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB8 [ 331.875296][ T5607] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 331.895244][ T5741] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB5 [ 331.896255][ T4934] Bluetooth: hci5: command tx timeout [ 332.040366][ T7810] hub 8-0:1.0: USB hub found [ 332.043282][ T7810] hub 8-0:1.0: 1 port detected [ 332.123098][ T7811] loop4: detected capacity change from 0 to 16 [ 332.256912][ T7811] erofs (device loop4): mounted with root inode @ nid 36. [ 332.357102][ T5350] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 332.377202][ T5607] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB9 [ 332.386263][ T5741] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 332.404144][ T7804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.407076][ T5607] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 332.413306][ T5741] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB6 [ 332.431727][ T5350] keyspan 2-1:0.107: device disconnected [ 332.562675][ T5607] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB10 [ 332.583472][ T5741] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 332.682152][ T5607] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 332.712879][ T5741] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB7 [ 332.730282][ T5607] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB11 [ 332.877183][ T5741] usb 1-1: USB disconnect, device number 11 [ 332.893682][ T5607] usb 4-1: USB disconnect, device number 11 [ 332.977268][ T5607] keyspan_4 ttyUSB8: Keyspan 4 port adapter converter now disconnected from ttyUSB8 [ 332.979803][ T5741] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 332.996099][ T5607] keyspan_4 ttyUSB9: Keyspan 4 port adapter converter now disconnected from ttyUSB9 [ 333.031677][ T5607] keyspan_4 ttyUSB10: Keyspan 4 port adapter converter now disconnected from ttyUSB10 [ 333.114816][ T5741] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 333.298387][ T5607] keyspan_4 ttyUSB11: Keyspan 4 port adapter converter now disconnected from ttyUSB11 [ 333.304028][ T5741] keyspan_4 ttyUSB6: Keyspan 4 port adapter converter now disconnected from ttyUSB6 [ 333.306074][ T4934] Bluetooth: hci4: unexpected event for opcode 0x007f [ 333.310884][ T5607] keyspan 4-1:0.107: device disconnected [ 334.033865][ T5741] keyspan_4 ttyUSB7: Keyspan 4 port adapter converter now disconnected from ttyUSB7 [ 334.371445][ T5741] keyspan 1-1:0.107: device disconnected [ 334.665836][ T7837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.834459][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 335.420330][ T7839] loop3: detected capacity change from 0 to 16 [ 336.193500][ T7839] erofs (device loop3): mounted with root inode @ nid 36. [ 336.432083][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.063625][ T7856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.209839][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'. [ 337.687883][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'. [ 343.750057][ T7875] loop4: detected capacity change from 0 to 40427 [ 343.758817][ T7875] F2FS-fs: heap/no_heap options were deprecated [ 344.824609][ T7875] F2FS-fs (loop4): build fault injection rate: 19 [ 344.824703][ T7875] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 345.669565][ T7883] loop0: detected capacity change from 0 to 1024 [ 345.737752][ T7875] F2FS-fs (loop4): invalid crc value [ 347.987155][ T7883] hfsplus: failed to load extents file [ 348.128661][ T7875] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1850 [ 348.206229][ T7875] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 348.215588][ T7875] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 348.363888][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.456'. [ 348.679986][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 348.745282][ T7905] loop1: detected capacity change from 0 to 256 [ 348.810355][ T7905] vfat: Unknown parameter 'iocharsetiso8859-3' [ 348.824971][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 348.827999][ T10] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 348.828024][ T10] usb 1-1: config 0 has no interface number 0 [ 348.828065][ T10] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 348.828110][ T10] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 348.828130][ T10] usb 1-1: config 0 interface 85 has no altsetting 0 [ 349.117179][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 349.117206][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.117220][ T10] usb 1-1: Product: syz [ 349.117230][ T10] usb 1-1: Manufacturer: syz [ 349.117240][ T10] usb 1-1: SerialNumber: syz [ 349.994872][ T10] usb 1-1: config 0 descriptor?? [ 350.262239][ T5607] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 350.345878][ T10] appletouch 1-1:0.85: Failed to read mode from device. [ 350.346080][ T10] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 350.372147][ T10] usb 1-1: USB disconnect, device number 12 [ 350.381861][ T5885] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 350.409233][ T5607] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 350.409260][ T5607] usb 2-1: config 0 has no interface number 0 [ 350.409302][ T5607] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 350.409326][ T5607] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 350.414332][ T5607] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 350.414360][ T5607] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.414378][ T5607] usb 2-1: Product: syz [ 350.414390][ T5607] usb 2-1: Manufacturer: syz [ 350.414402][ T5607] usb 2-1: SerialNumber: syz [ 350.585277][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 350.602063][ T5885] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 350.602090][ T5885] usb 4-1: config 0 has no interface number 0 [ 350.602132][ T5885] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 350.602156][ T5885] usb 4-1: config 0 interface 85 has no altsetting 0 [ 350.654076][ T5885] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 350.654104][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.654122][ T5885] usb 4-1: Product: syz [ 350.654134][ T5885] usb 4-1: Manufacturer: syz [ 350.654146][ T5885] usb 4-1: SerialNumber: syz [ 350.717693][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 350.770897][ T5607] usb 2-1: config 0 descriptor?? [ 350.770928][ T5885] usb 4-1: config 0 descriptor?? [ 350.771797][ T7913] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 350.779404][ T5607] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 350.790837][ T5607] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 351.075241][ T5885] appletouch 4-1:0.85: Failed to read mode from device. [ 351.075471][ T5885] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 351.145353][ T5885] usb 4-1: USB disconnect, device number 12 [ 351.190224][ T166] bridge_slave_1: left allmulticast mode [ 351.190303][ T166] bridge_slave_1: left promiscuous mode [ 351.190751][ T166] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.500642][ T7925] syz.0.464 (7925) used greatest stack depth: 17856 bytes left [ 351.668202][ T166] bridge_slave_0: left allmulticast mode [ 351.668227][ T166] bridge_slave_0: left promiscuous mode [ 351.700749][ T166] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.848672][ T5350] usb 2-1: USB disconnect, device number 11 [ 352.959210][ T5350] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 352.959747][ T5350] cyberjack 2-1:0.69: device disconnected [ 354.084643][ T4934] Bluetooth: hci0: unexpected event for opcode 0x007f [ 354.976444][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 356.150746][ T166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.585545][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 357.492261][ T7959] loop3: detected capacity change from 0 to 1024 [ 357.500108][ T7959] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 357.550636][ T166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.958940][ T166] bond0 (unregistering): Released all slaves [ 358.101502][ T7967] loop0: detected capacity change from 0 to 64 [ 358.896235][ T7971] loop4: detected capacity change from 0 to 512 [ 359.345507][ T7971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.345665][ T7971] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.448977][ T7978] loop3: detected capacity change from 0 to 512 [ 359.856741][ T7978] EXT4-fs (loop3): Test dummy encryption mode enabled [ 359.856762][ T7978] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 359.875506][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.875771][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.876059][ T7665] bridge_slave_0: entered allmulticast mode [ 360.053834][ T7665] bridge_slave_0: entered promiscuous mode [ 360.067961][ T7978] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.476: bad orphan inode 131083 [ 360.067992][ T7978] loop3: lost filesystem error report for type 5 error -117 [ 360.076172][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 360.076198][ C1] EXT4-fs (loop3): initial error at time 1779312461: ext4_orphan_get:1423 [ 360.076220][ C1] EXT4-fs (loop3): last error at time 1779312461: ext4_orphan_get:1423 [ 360.105120][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.105368][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.105652][ T7665] bridge_slave_1: entered allmulticast mode [ 360.131618][ T7665] bridge_slave_1: entered promiscuous mode [ 360.134556][ T7978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.299694][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.435129][ T166] hsr_slave_0: left promiscuous mode [ 360.473693][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.475518][ T166] hsr_slave_1: left promiscuous mode [ 360.476498][ T166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.532255][ T166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.554220][ T7996] loop4: detected capacity change from 0 to 512 [ 360.556926][ T7996] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 360.612630][ T7996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.612751][ T7996] ext4 filesystem being mounted at /102/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.974594][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.637726][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.482'. [ 363.045069][ T166] team0 (unregistering): Port device team_slave_1 removed [ 363.097193][ T166] team0 (unregistering): Port device team_slave_0 removed [ 363.547883][ T7665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.588837][ T7665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.637689][ T8017] loop4: detected capacity change from 0 to 512 [ 363.649780][ T8017] EXT4-fs (loop4): Test dummy encryption mode enabled [ 363.649802][ T8017] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 363.713310][ T8017] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.483: bad orphan inode 131083 [ 363.713340][ T8017] loop4: lost filesystem error report for type 5 error -117 [ 363.720824][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 363.720850][ C0] EXT4-fs (loop4): initial error at time 1779312465: ext4_orphan_get:1423 [ 363.720871][ C0] EXT4-fs (loop4): last error at time 1779312465: ext4_orphan_get:1423 [ 363.735613][ T8017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.846324][ T7665] team0: Port device team_slave_0 added [ 363.851549][ T7665] team0: Port device team_slave_1 added [ 363.862090][ T8022] loop1: detected capacity change from 0 to 512 [ 363.901373][ T8022] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 363.945479][ T8022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.945713][ T8022] ext4 filesystem being mounted at /103/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.276747][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.276763][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.276788][ T7665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.338123][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.338139][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.338163][ T7665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.849133][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.904788][ T7665] hsr_slave_0: entered promiscuous mode [ 364.953224][ T7665] hsr_slave_1: entered promiscuous mode [ 364.954163][ T7665] debugfs: 'hsr0' already exists in 'hsr' [ 364.954184][ T7665] Cannot create hsr debugfs directory [ 365.528673][ T5635] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 365.558501][ T8049] veth3: entered allmulticast mode [ 365.693943][ T5635] usb 1-1: device descriptor read/64, error -71 [ 365.701148][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 365.988302][ T5635] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 366.121439][ T5635] usb 1-1: device descriptor read/64, error -71 [ 366.236388][ T5635] usb usb1-port1: attempt power cycle [ 366.465536][ T8061] loop3: detected capacity change from 0 to 512 [ 366.480288][ T8061] EXT4-fs (loop3): Test dummy encryption mode enabled [ 366.480309][ T8061] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 366.567190][ T8061] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.490: bad orphan inode 131083 [ 366.567221][ T8061] loop3: lost filesystem error report for type 5 error -117 [ 366.605089][ T5635] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 366.615049][ T8061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.618601][ T5635] usb 1-1: device descriptor read/8, error -71 [ 366.852413][ T5635] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 366.886084][ T5635] usb 1-1: device descriptor read/8, error -71 [ 366.974326][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.988719][ T5635] usb usb1-port1: unable to enumerate USB device [ 367.261283][ T8077] loop1: detected capacity change from 0 to 512 [ 367.279376][ T8077] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 367.365289][ T8077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.365424][ T8077] ext4 filesystem being mounted at /104/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.294910][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.518198][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.871480][ T8099] loop4: detected capacity change from 0 to 40427 [ 368.872573][ T8099] F2FS-fs: heap/no_heap options were deprecated [ 368.892878][ T8099] F2FS-fs (loop4): build fault injection rate: 19 [ 368.892902][ T8099] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 368.894958][ T8099] F2FS-fs (loop4): invalid crc value [ 368.990341][ T8099] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1850 [ 369.080865][ T8099] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 369.088830][ T8099] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 369.115460][ T8099] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 369.242817][ T8099] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x91f/0x2020 [ 369.249493][ T8099] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xda0 [ 369.254035][ T38] audit: type=1804 audit(1779312470.820:15): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.495" name="/newroot/108/bus/bus" dev="loop4" ino=13 res=1 errno=0 [ 369.261478][ T8099] F2FS-fs (loop4): inject checkpoint error in f2fs_balance_fs of __write_node_folio+0x1551/0x1c70 [ 369.261674][ T8099] CPU: 0 UID: 0 PID: 8099 Comm: syz.4.495 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 369.261696][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 369.261712][ T8099] Call Trace: [ 369.261720][ T8099] [ 369.261730][ T8099] dump_stack_lvl+0xe8/0x150 [ 369.261756][ T8099] f2fs_stop_checkpoint+0x3cd/0x590 [ 369.261788][ T8099] f2fs_balance_fs+0x346/0x870 [ 369.261811][ T8099] ? __write_node_folio+0x1551/0x1c70 [ 369.261842][ T8099] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 369.261860][ T8099] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 369.261882][ T8099] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 369.261914][ T8099] ? trace_lock_elapsed_time_end+0xf3/0xbc0 [ 369.261932][ T8099] ? f2fs_up_read_trace+0x1b/0x40 [ 369.261952][ T8099] ? folio_unlock+0x101/0x160 [ 369.261977][ T8099] __write_node_folio+0x1551/0x1c70 [ 369.262016][ T8099] ? __pfx___write_node_folio+0x10/0x10 [ 369.262059][ T8099] ? folio_clear_dirty_for_io+0x1d4/0x700 [ 369.262088][ T8099] ? folio_clear_dirty_for_io+0x1d4/0x700 [ 369.262112][ T8099] ? folio_clear_dirty_for_io+0x56a/0x700 [ 369.262137][ T8099] ? folio_clear_dirty_for_io+0x1d4/0x700 [ 369.262165][ T8099] f2fs_fsync_node_pages+0x1620/0x2090 [ 369.262220][ T8099] ? __pfx_f2fs_fsync_node_pages+0x10/0x10 [ 369.262250][ T8099] ? __lock_acquire+0x6b5/0x2d10 [ 369.262294][ T8099] ? __lock_acquire+0x6b5/0x2d10 [ 369.262316][ T8099] ? __lock_acquire+0x6b5/0x2d10 [ 369.262347][ T8099] ? __lock_acquire+0x6b5/0x2d10 [ 369.262371][ T8099] ? do_raw_spin_lock+0x12b/0x2f0 [ 369.262432][ T8099] f2fs_do_sync_file+0x1283/0x19e0 [ 369.262461][ T8099] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 369.262514][ T8099] ? sync_lazytime+0x1ac/0x4c0 [ 369.262538][ T8099] ? vfs_fsync_range+0x143/0x150 [ 369.262556][ T8099] ? f2fs_sync_file+0xec/0x160 [ 369.262576][ T8099] f2fs_file_write_iter+0x746/0x24c0 [ 369.262612][ T8099] ? vfs_write+0x22d/0xba0 [ 369.262631][ T8099] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 369.262668][ T8099] vfs_write+0x629/0xba0 [ 369.262693][ T8099] ? __pfx_vfs_write+0x10/0x10 [ 369.262714][ T8099] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 369.262733][ T8099] ? lockdep_hardirqs_on+0x7a/0x110 [ 369.262755][ T8099] ? mutex_lock_nested+0x152/0x1d0 [ 369.262777][ T8099] ? fdget_pos+0x252/0x320 [ 369.262809][ T8099] ksys_write+0x156/0x270 [ 369.262829][ T8099] ? __pfx_ksys_write+0x10/0x10 [ 369.262855][ T8099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.262876][ T8099] do_syscall_64+0x15f/0x560 [ 369.262894][ T8099] ? trace_irq_disable+0x3b/0x140 [ 369.262912][ T8099] ? clear_bhb_loop+0x40/0x90 [ 369.262933][ T8099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.262951][ T8099] RIP: 0033:0x7f698320ce59 [ 369.262968][ T8099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.262983][ T8099] RSP: 002b:00007f698145e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 369.263002][ T8099] RAX: ffffffffffffffda RBX: 00007f6983485fa0 RCX: 00007f698320ce59 [ 369.263015][ T8099] RDX: 000000000000001c RSI: 0000200000000280 RDI: 0000000000000008 [ 369.263027][ T8099] RBP: 00007f69832a2d6f R08: 0000000000000000 R09: 0000000000000000 [ 369.263038][ T8099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.263048][ T8099] R13: 00007f6983486038 R14: 00007f6983485fa0 R15: 00007fff209f5ce8 [ 369.263078][ T8099] [ 369.263106][ T8099] F2FS-fs (loop4): Stopped filesystem due to reason: 1 [ 369.310064][ T8099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.495'. [ 369.484405][ T8121] loop0: detected capacity change from 0 to 8 [ 370.516546][ T8123] loop3: detected capacity change from 0 to 40427 [ 370.517614][ T8123] F2FS-fs: heap/no_heap options were deprecated [ 371.044459][ T8123] F2FS-fs (loop3): build fault injection rate: 19 [ 371.044480][ T8123] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 371.120567][ T8123] F2FS-fs (loop3): invalid crc value [ 371.139890][ T8122] loop1: detected capacity change from 0 to 512 [ 371.164775][ T8123] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1850 [ 371.189763][ T8122] EXT4-fs (loop1): Test dummy encryption mode enabled [ 371.189783][ T8122] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 371.237876][ T8123] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 371.249375][ T8123] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 371.258866][ T8123] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 371.274950][ T8122] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.494: bad orphan inode 131083 [ 371.274979][ T8122] loop1: lost filesystem error report for type 5 error -117 [ 371.292588][ T8122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.468776][ T8123] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x91f/0x2020 [ 371.475107][ T8123] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xda0 [ 371.483108][ T38] audit: type=1804 audit(1779312473.161:16): pid=8123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.496" name="/newroot/114/bus/bus" dev="loop3" ino=13 res=1 errno=0 [ 371.492056][ T8123] F2FS-fs (loop3): inject checkpoint error in f2fs_balance_fs of __write_node_folio+0x1551/0x1c70 [ 371.492262][ T8123] CPU: 1 UID: 0 PID: 8123 Comm: syz.3.496 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 371.492283][ T8123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 371.492296][ T8123] Call Trace: [ 371.492303][ T8123] [ 371.492311][ T8123] dump_stack_lvl+0xe8/0x150 [ 371.492337][ T8123] f2fs_stop_checkpoint+0x3cd/0x590 [ 371.492369][ T8123] f2fs_balance_fs+0x346/0x870 [ 371.492390][ T8123] ? __write_node_folio+0x1551/0x1c70 [ 371.492415][ T8123] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 371.492432][ T8123] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 371.492452][ T8123] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 371.492482][ T8123] ? trace_lock_elapsed_time_end+0xf3/0xbc0 [ 371.492499][ T8123] ? f2fs_up_read_trace+0x1b/0x40 [ 371.492520][ T8123] ? folio_unlock+0x101/0x160 [ 371.492540][ T8123] __write_node_folio+0x1551/0x1c70 [ 371.492581][ T8123] ? __pfx___write_node_folio+0x10/0x10 [ 371.492626][ T8123] ? folio_clear_dirty_for_io+0x1d4/0x700 [ 371.492657][ T8123] ? folio_clear_dirty_for_io+0x1d4/0x700 [ 371.492681][ T8123] ? folio_clear_dirty_for_io+0x56a/0x700 [ 371.492705][ T8123] ? folio_clear_dirty_for_io+0x1d4/0x700 [ 371.492732][ T8123] f2fs_fsync_node_pages+0x1620/0x2090 [ 371.492785][ T8123] ? __pfx_f2fs_fsync_node_pages+0x10/0x10 [ 371.492807][ T8123] ? __lock_acquire+0x6b5/0x2d10 [ 371.492834][ T8123] ? __lock_acquire+0x6b5/0x2d10 [ 371.492856][ T8123] ? __lock_acquire+0x6b5/0x2d10 [ 371.492877][ T8123] ? __lock_acquire+0x6b5/0x2d10 [ 371.492897][ T8123] ? do_raw_spin_lock+0x12b/0x2f0 [ 371.492953][ T8123] f2fs_do_sync_file+0x1283/0x19e0 [ 371.492978][ T8123] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 371.493032][ T8123] ? sync_lazytime+0x1ac/0x4c0 [ 371.493055][ T8123] ? vfs_fsync_range+0x143/0x150 [ 371.493073][ T8123] ? f2fs_sync_file+0xec/0x160 [ 371.493094][ T8123] f2fs_file_write_iter+0x746/0x24c0 [ 371.493132][ T8123] ? vfs_write+0x22d/0xba0 [ 371.493152][ T8123] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 371.493186][ T8123] vfs_write+0x629/0xba0 [ 371.493211][ T8123] ? __pfx_vfs_write+0x10/0x10 [ 371.493239][ T8123] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 371.493258][ T8123] ? lockdep_hardirqs_on+0x7a/0x110 [ 371.493281][ T8123] ? mutex_lock_nested+0x152/0x1d0 [ 371.493310][ T8123] ? fdget_pos+0x252/0x320 [ 371.493340][ T8123] ksys_write+0x156/0x270 [ 371.493359][ T8123] ? __pfx_ksys_write+0x10/0x10 [ 371.493385][ T8123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.493405][ T8123] do_syscall_64+0x15f/0x560 [ 371.493425][ T8123] ? trace_irq_disable+0x3b/0x140 [ 371.493445][ T8123] ? clear_bhb_loop+0x40/0x90 [ 371.493465][ T8123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.493482][ T8123] RIP: 0033:0x7fc9f922ce59 [ 371.493500][ T8123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.493515][ T8123] RSP: 002b:00007fc9f7486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 371.493533][ T8123] RAX: ffffffffffffffda RBX: 00007fc9f94a5fa0 RCX: 00007fc9f922ce59 [ 371.493547][ T8123] RDX: 000000000000001c RSI: 0000200000000280 RDI: 0000000000000008 [ 371.493559][ T8123] RBP: 00007fc9f92c2d6f R08: 0000000000000000 R09: 0000000000000000 [ 371.493571][ T8123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.493580][ T8123] R13: 00007fc9f94a6038 R14: 00007fc9f94a5fa0 R15: 00007ffc89c040f8 [ 371.493608][ T8123] [ 371.493616][ T8123] F2FS-fs (loop3): Stopped filesystem due to reason: 1 [ 371.542308][ T8123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.496'. [ 372.333339][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.649203][ T8147] loop4: detected capacity change from 0 to 8 [ 372.659805][ T8146] loop1: detected capacity change from 0 to 256 [ 372.660975][ T8146] vfat: Unknown parameter 'iocharsetiso8859-3' [ 375.130927][ T8161] netlink: 48 bytes leftover after parsing attributes in process `syz.0.502'. [ 375.353767][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 375.353856][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 375.648684][ T5607] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 375.803930][ T5607] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 375.803966][ T5607] usb 2-1: config 0 has no interface number 0 [ 375.804019][ T5607] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 375.804042][ T5607] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 375.847299][ T5607] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 375.847317][ T5607] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.847327][ T5607] usb 2-1: Product: syz [ 375.847335][ T5607] usb 2-1: Manufacturer: syz [ 375.847342][ T5607] usb 2-1: SerialNumber: syz [ 375.889488][ T5607] usb 2-1: config 0 descriptor?? [ 375.890259][ T8166] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 375.910752][ T5607] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 375.940545][ T5607] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 377.191654][ T5635] usb 2-1: USB disconnect, device number 12 [ 377.234990][ T5635] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 377.236281][ T5635] cyberjack 2-1:0.69: device disconnected [ 377.869232][ T8197] loop3: detected capacity change from 0 to 8 [ 379.517439][ T8217] hub 8-0:1.0: USB hub found [ 379.521156][ T8217] hub 8-0:1.0: 1 port detected [ 379.596112][ T8217] loop0: detected capacity change from 0 to 16 [ 380.435590][ T8215] loop3: detected capacity change from 0 to 1024 [ 380.539124][ T8217] erofs (device loop0): mounted with root inode @ nid 36. [ 381.176614][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.210232][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.225927][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.238051][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.263872][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.390342][ T8230] loop0: detected capacity change from 0 to 512 [ 381.431727][ T8230] EXT4-fs (loop0): Test dummy encryption mode enabled [ 381.431751][ T8230] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 381.499891][ T8230] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.510: bad orphan inode 131083 [ 381.499922][ T8230] loop0: lost filesystem error report for type 5 error -117 [ 381.550835][ T8230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.683184][ T8248] netlink: 'syz.3.512': attribute type 4 has an invalid length. [ 383.562056][ T5633] Bluetooth: hci1: command tx timeout [ 383.664692][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.753532][ T8252] loop1: detected capacity change from 0 to 8 [ 385.468079][ T5633] Bluetooth: hci1: command tx timeout [ 385.977151][ T8271] loop1: detected capacity change from 0 to 512 [ 386.039724][ T8271] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 386.117221][ T8271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.117347][ T8271] ext4 filesystem being mounted at /111/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.449593][ T5633] Bluetooth: hci1: command tx timeout [ 387.569562][ T8224] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.569711][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.569901][ T8224] bridge_slave_0: entered allmulticast mode [ 387.571798][ T8224] bridge_slave_0: entered promiscuous mode [ 387.631048][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.631198][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.631399][ T8224] bridge_slave_1: entered allmulticast mode [ 387.633410][ T8224] bridge_slave_1: entered promiscuous mode [ 387.864487][ T8224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.919733][ T8224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.053442][ T8224] team0: Port device team_slave_0 added [ 388.062812][ T8224] team0: Port device team_slave_1 added [ 388.109138][ T8300] loop3: detected capacity change from 0 to 512 [ 388.188878][ T8300] EXT4-fs (loop3): Test dummy encryption mode enabled [ 388.188899][ T8300] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 388.212043][ T8300] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.526: bad orphan inode 131083 [ 388.212063][ T8300] loop3: lost filesystem error report for type 5 error -117 [ 388.221102][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 388.221128][ C1] EXT4-fs (loop3): initial error at time 1779312490: ext4_orphan_get:1423 [ 388.221149][ C1] EXT4-fs (loop3): last error at time 1779312490: ext4_orphan_get:1423 [ 388.233506][ T8300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.449924][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.449941][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.449965][ T8224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.462881][ T8224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.462897][ T8224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.462923][ T8224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.703781][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.023196][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.438462][ T5633] Bluetooth: hci1: command tx timeout [ 389.576425][ T8307] loop1: detected capacity change from 0 to 512 [ 389.585305][ T8307] EXT4-fs (loop1): Test dummy encryption mode enabled [ 389.585324][ T8307] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 389.642180][ T8307] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.527: bad orphan inode 131083 [ 389.642211][ T8307] loop1: lost filesystem error report for type 5 error -117 [ 389.651941][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 389.651968][ C1] EXT4-fs (loop1): initial error at time 1779312492: ext4_orphan_get:1423 [ 389.651990][ C1] EXT4-fs (loop1): last error at time 1779312492: ext4_orphan_get:1423 [ 389.690439][ T8307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.915763][ T8318] loop0: detected capacity change from 0 to 512 [ 390.064354][ T8318] EXT4-fs (loop0): Test dummy encryption mode enabled [ 390.064375][ T8318] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 390.104782][ T8318] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.531: bad orphan inode 131083 [ 390.104812][ T8318] loop0: lost filesystem error report for type 5 error -117 [ 390.112980][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 390.113006][ C0] EXT4-fs (loop0): initial error at time 1779312492: ext4_orphan_get:1423 [ 390.113027][ C0] EXT4-fs (loop0): last error at time 1779312492: ext4_orphan_get:1423 [ 390.149618][ T8224] hsr_slave_0: entered promiscuous mode [ 390.152828][ T8224] hsr_slave_1: entered promiscuous mode [ 390.155066][ T8224] debugfs: 'hsr0' already exists in 'hsr' [ 390.155089][ T8224] Cannot create hsr debugfs directory [ 390.168362][ T8318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.630293][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.769019][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.869086][ T1502] bridge_slave_1: left allmulticast mode [ 390.869119][ T1502] bridge_slave_1: left promiscuous mode [ 390.869381][ T1502] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.029229][ T1502] bridge_slave_0: left allmulticast mode [ 392.029263][ T1502] bridge_slave_0: left promiscuous mode [ 392.029559][ T1502] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.042986][ T8339] program syz.0.535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.200774][ T8347] loop0: detected capacity change from 0 to 512 [ 392.274463][ T8347] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 392.326620][ T8347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.326749][ T8347] ext4 filesystem being mounted at /118/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.655259][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.965475][ T1502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.054702][ T1502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.128858][ T1502] bond0 (unregistering): Released all slaves [ 394.311103][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 394.501549][ T8379] loop4: detected capacity change from 0 to 256 [ 394.502544][ T8379] exfat: Bad value for 'gid' [ 394.502559][ T8379] exfat: Bad value for 'gid' [ 395.019711][ T8380] veth3: entered allmulticast mode [ 395.088801][ T5754] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 395.253065][ T5754] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 395.253091][ T5754] usb 5-1: config 0 has no interface number 0 [ 395.253130][ T5754] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 395.253154][ T5754] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 395.295966][ T5754] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 395.295995][ T5754] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 395.296012][ T5754] usb 5-1: Product: syz [ 395.296037][ T5754] usb 5-1: Manufacturer: syz [ 395.296049][ T5754] usb 5-1: SerialNumber: syz [ 395.354571][ T5754] usb 5-1: config 0 descriptor?? [ 395.369002][ T5754] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 395.374232][ T5754] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 395.402480][ T5754] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 395.442910][ T5754] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 395.457813][ T5754] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 395.477533][ T5754] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 395.497569][ T5754] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 395.511991][ T5754] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 395.516269][ T5754] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 395.523547][ T1502] hsr_slave_0: left promiscuous mode [ 395.545723][ T5754] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 395.554872][ T8395] loop1: detected capacity change from 0 to 512 [ 395.588412][ T8395] EXT4-fs (loop1): Test dummy encryption mode enabled [ 395.588434][ T8395] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 395.590247][ T1502] hsr_slave_1: left promiscuous mode [ 395.590889][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.653067][ T8399] program syz.3.545 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.661931][ T5635] usb 5-1: USB disconnect, device number 11 [ 395.673999][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.675896][ T5635] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 395.677335][ T8395] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.544: bad orphan inode 131083 [ 395.677361][ T8395] loop1: lost filesystem error report for type 5 error -117 [ 395.687807][ T8395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.697227][ T5635] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 395.725872][ T5635] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 395.792272][ T5635] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 395.809589][ T5635] keyspan 5-1:0.107: device disconnected [ 396.199845][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.480935][ T1502] team0 (unregistering): Port device team_slave_1 removed [ 398.559691][ T1502] team0 (unregistering): Port device team_slave_0 removed [ 399.158353][ T8420] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 399.197851][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 399.481028][ T8438] loop4: detected capacity change from 0 to 16 [ 399.520456][ T8438] erofs (device loop4): mounted with root inode @ nid 36. [ 399.614150][ T8421] veth3: entered allmulticast mode [ 400.215428][ T8434] bond1: entered promiscuous mode [ 400.215915][ T8434] bond1: entered allmulticast mode [ 400.219676][ T8434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.494602][ T8447] loop0: detected capacity change from 0 to 512 [ 400.497099][ T8439] veth3: entered allmulticast mode [ 400.498129][ T8447] EXT4-fs (loop0): Test dummy encryption mode enabled [ 400.498146][ T8447] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 400.568939][ T8447] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.557: bad orphan inode 131083 [ 400.568968][ T8447] loop0: lost filesystem error report for type 5 error -117 [ 400.575617][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 400.575640][ C1] EXT4-fs (loop0): initial error at time 1779312503: ext4_orphan_get:1423 [ 400.575660][ C1] EXT4-fs (loop0): last error at time 1779312503: ext4_orphan_get:1423 [ 400.660139][ T8447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.217006][ T8457] bond1: entered promiscuous mode [ 402.225926][ T8457] bond1: entered allmulticast mode [ 402.226808][ T8457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.528306][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.281423][ T8471] loop0: detected capacity change from 0 to 512 [ 403.289899][ T8460] veth3: entered allmulticast mode [ 403.300006][ T8471] EXT4-fs (loop0): Test dummy encryption mode enabled [ 403.300029][ T8471] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 403.328681][ T8471] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.563: bad orphan inode 131083 [ 403.328713][ T8471] loop0: lost filesystem error report for type 5 error -117 [ 403.356193][ T8471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.202954][ T8496] loop3: detected capacity change from 0 to 512 [ 404.225779][ T8496] EXT4-fs (loop3): Test dummy encryption mode enabled [ 404.225800][ T8496] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 404.250629][ T8496] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.567: bad orphan inode 131083 [ 404.250659][ T8496] loop3: lost filesystem error report for type 5 error -117 [ 404.253495][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 404.253519][ C0] EXT4-fs (loop3): initial error at time 1779312507: ext4_orphan_get:1423 [ 404.253549][ C0] EXT4-fs (loop3): last error at time 1779312507: ext4_orphan_get:1423 [ 404.269115][ T8496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.344758][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.634144][ T8504] loop0: detected capacity change from 0 to 512 [ 404.716880][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.752360][ T8508] netlink: 'syz.4.570': attribute type 4 has an invalid length. [ 404.801271][ T8509] netlink: 'syz.4.570': attribute type 4 has an invalid length. [ 404.835914][ T8504] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 404.952969][ T8504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.953106][ T8504] ext4 filesystem being mounted at /125/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.299898][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.107158][ T8531] netlink: 'syz.1.574': attribute type 4 has an invalid length. [ 407.166899][ T8532] netlink: 'syz.1.574': attribute type 4 has an invalid length. [ 408.073898][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.573'. [ 411.038655][ T8572] hub 8-0:1.0: USB hub found [ 411.040420][ T8572] hub 8-0:1.0: 1 port detected [ 411.099982][ T8572] loop3: detected capacity change from 0 to 16 [ 411.491235][ T8572] erofs (device loop3): mounted with root inode @ nid 36. [ 412.264884][ T8586] loop0: detected capacity change from 0 to 512 [ 412.304816][ T8586] EXT4-fs (loop0): Test dummy encryption mode enabled [ 412.304838][ T8586] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 412.451708][ T8586] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.587: bad orphan inode 131083 [ 412.451739][ T8586] loop0: lost filesystem error report for type 5 error -117 [ 412.453930][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 412.453953][ C0] EXT4-fs (loop0): initial error at time 1779312516: ext4_orphan_get:1423 [ 412.453973][ C0] EXT4-fs (loop0): last error at time 1779312516: ext4_orphan_get:1423 [ 412.483323][ T8586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.579974][ T8592] fuse: Bad value for 'fd' [ 412.628782][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 412.891663][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.279948][ T8602] loop0: detected capacity change from 0 to 1024 [ 413.290254][ T8602] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 413.600236][ T8224] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 413.777949][ T8224] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.785343][ T8224] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 413.904317][ T8224] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.907086][ T8224] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 414.046602][ T8224] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.109171][ T8224] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 414.199720][ T8224] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 414.486794][ T8622] veth5: entered allmulticast mode [ 415.162323][ T8650] netlink: 'syz.1.599': attribute type 4 has an invalid length. [ 415.295259][ T8653] netlink: 'syz.1.599': attribute type 4 has an invalid length. [ 416.508106][ T8664] loop3: detected capacity change from 0 to 64 [ 416.539601][ T8663] bond1: left promiscuous mode [ 416.539629][ T8663] bond1: left allmulticast mode [ 417.542191][ T8224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.711959][ T8682] loop3: detected capacity change from 0 to 1024 [ 417.716311][ T8682] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 418.753556][ T8224] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.070132][ T1466] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.072315][ T1466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.657914][ T3281] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.658077][ T3281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.271386][ T8708] IPv6: sit1: Disabled Multicast RS [ 422.961467][ T8729] kvm: emulating exchange as write [ 423.370637][ T8744] program syz.4.617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.493600][ T8748] loop3: detected capacity change from 0 to 128 [ 424.379774][ T8224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.667985][ T8748] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 424.765797][ T8224] veth0_vlan: entered promiscuous mode [ 424.794065][ T8224] veth1_vlan: entered promiscuous mode [ 425.319956][ T8224] veth0_macvtap: entered promiscuous mode [ 425.364151][ T8224] veth1_macvtap: entered promiscuous mode [ 425.879088][ T8765] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5620] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[8765] [ 426.618248][ T8224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.715745][ T8224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.108751][ T8748] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 428.214436][ T3397] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.224176][ T3397] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.225345][ T3397] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.225388][ T3397] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.724439][ T3397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.724459][ T3397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.903380][ T1502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.903399][ T1502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.153064][ T8797] program syz.1.628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 430.813531][ T8805] loop3: detected capacity change from 0 to 512 [ 430.860566][ T8805] EXT4-fs (loop3): Test dummy encryption mode enabled [ 430.860589][ T8805] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 430.916836][ T8805] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.629: bad orphan inode 131083 [ 430.916867][ T8805] loop3: lost filesystem error report for type 5 error -117 [ 430.924119][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 430.924142][ C0] EXT4-fs (loop3): initial error at time 1779312535: ext4_orphan_get:1423 [ 430.924162][ C0] EXT4-fs (loop3): last error at time 1779312535: ext4_orphan_get:1423 [ 430.955129][ T8805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.942285][ T8821] IPv6: sit1: Disabled Multicast RS [ 433.384562][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.689821][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.689908][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.547421][ T8847] program syz.0.640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.481888][ T8851] loop0: detected capacity change from 0 to 128 [ 435.590589][ T8851] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 435.636123][ T8854] loop3: detected capacity change from 0 to 256 [ 435.657406][ T8854] vfat: Unknown parameter 'iocharsetiso8859-3' [ 435.757620][ T8852] loop1: detected capacity change from 0 to 512 [ 435.952495][ T8852] EXT4-fs (loop1): Test dummy encryption mode enabled [ 435.952516][ T8852] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 437.275669][ T8852] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.644: bad orphan inode 131083 [ 437.276662][ T8852] loop1: lost filesystem error report for type 5 error -117 [ 437.277744][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 437.277757][ C1] EXT4-fs (loop1): initial error at time 1779312542: ext4_orphan_get:1423 [ 437.277770][ C1] EXT4-fs (loop1): last error at time 1779312542: ext4_orphan_get:1423 [ 437.358545][ T8852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.052120][ T5607] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 438.066107][ T4934] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 438.122107][ T4934] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 438.130603][ T4934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 438.149293][ T4934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 438.151837][ T4934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 438.264044][ T5607] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 438.264061][ T5607] usb 4-1: config 0 has no interface number 0 [ 438.264085][ T5607] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 438.264098][ T5607] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 438.289096][ T8851] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5621] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[8851] [ 438.330607][ T8851] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 438.354943][ T5607] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 438.354961][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.354971][ T5607] usb 4-1: Product: syz [ 438.354979][ T5607] usb 4-1: Manufacturer: syz [ 438.354985][ T5607] usb 4-1: SerialNumber: syz [ 438.482495][ T5607] usb 4-1: config 0 descriptor?? [ 438.483076][ T5607] usb 4-1: can't set config #0, error -71 [ 438.503477][ T5607] usb 4-1: USB disconnect, device number 13 [ 438.661938][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.112108][ T5633] Bluetooth: hci1: command tx timeout [ 440.667265][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.609067][ T8897] loop3: detected capacity change from 0 to 512 [ 441.675125][ T8897] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 441.703061][ T8897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.703211][ T8897] ext4 filesystem being mounted at /150/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.089847][ T5633] Bluetooth: hci1: command tx timeout [ 442.143314][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.856155][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.863355][ T8913] loop1: detected capacity change from 0 to 128 [ 443.446947][ T8913] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 443.543442][ T8917] netlink: 892 bytes leftover after parsing attributes in process `syz.0.657'. [ 443.800532][ T8919] loop4: detected capacity change from 0 to 128 [ 444.051310][ T8920] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5618] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[8920] [ 444.072349][ T5633] Bluetooth: hci1: command tx timeout [ 444.494223][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.496812][ T8919] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 445.328409][ T8913] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 446.872666][ T5633] Bluetooth: hci1: command tx timeout [ 447.931474][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.110206][ T59] bridge_slave_1: left allmulticast mode [ 451.110240][ T59] bridge_slave_1: left promiscuous mode [ 451.112238][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.401596][ T8956] loop0: detected capacity change from 0 to 256 [ 451.420731][ T8956] vfat: Unknown parameter 'iocharsetiso8859-3' [ 453.550050][ T8957] blktrace: Concurrent blktraces are not allowed on loop8 [ 454.178827][ T59] bridge_slave_0: left allmulticast mode [ 454.178859][ T59] bridge_slave_0: left promiscuous mode [ 454.179101][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.405182][ T5350] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 454.562597][ T5350] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 454.562633][ T5350] usb 1-1: config 0 has no interface number 0 [ 454.562676][ T5350] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 454.562699][ T5350] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 454.562722][ T5350] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 454.565509][ T5350] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 454.565535][ T5350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.565552][ T5350] usb 1-1: Product: syz [ 454.565565][ T5350] usb 1-1: Manufacturer: syz [ 454.565577][ T5350] usb 1-1: SerialNumber: syz [ 454.582162][ T5350] usb 1-1: config 0 descriptor?? [ 454.594804][ T8955] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 454.682377][ T8971] netlink: 892 bytes leftover after parsing attributes in process `syz.4.669'. [ 454.682780][ T5350] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 454.711589][ T5350] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 454.715259][ T5350] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 455.958460][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.015690][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.063387][ T59] bond0 (unregistering): Released all slaves [ 456.145903][ T5350] usb 1-1: USB disconnect, device number 17 [ 456.156296][ T5350] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 456.158445][ T5350] cyberjack 1-1:0.69: device disconnected [ 456.835433][ T8864] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.835673][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.836100][ T8864] bridge_slave_0: entered allmulticast mode [ 456.839783][ T8864] bridge_slave_0: entered promiscuous mode [ 458.381341][ T8864] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.381489][ T8864] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.381775][ T8864] bridge_slave_1: entered allmulticast mode [ 458.390325][ T8864] bridge_slave_1: entered promiscuous mode [ 458.740618][ T8864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.264974][ T8864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.002739][ T9014] blktrace: Concurrent blktraces are not allowed on loop8 [ 460.532958][ T9016] netlink: 'syz.1.678': attribute type 4 has an invalid length. [ 460.662702][ T8864] team0: Port device team_slave_0 added [ 460.669729][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 460.733422][ T8864] team0: Port device team_slave_1 added [ 460.797081][ T9021] loop4: detected capacity change from 0 to 1024 [ 460.980000][ T59] hsr_slave_0: left promiscuous mode [ 461.011506][ T9026] fuse: Bad value for 'fd' [ 461.018498][ T59] hsr_slave_1: left promiscuous mode [ 461.019566][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.019587][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.113977][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.114015][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.230468][ T59] veth1_macvtap: left promiscuous mode [ 461.230568][ T59] veth0_macvtap: left promiscuous mode [ 461.248517][ T59] veth1_vlan: left promiscuous mode [ 461.248722][ T59] veth0_vlan: left promiscuous mode [ 461.827237][ T9032] netlink: 892 bytes leftover after parsing attributes in process `syz.4.682'. [ 461.910168][ T9034] loop3: detected capacity change from 0 to 128 [ 461.942269][ T9034] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 463.998128][ T59] team0 (unregistering): Port device team_slave_1 removed [ 464.150465][ T59] team0 (unregistering): Port device team_slave_0 removed [ 464.858140][ T9045] Process accounting resumed [ 465.229931][ T9052] loop3: detected capacity change from 0 to 128 [ 466.473632][ T9056] loop4: detected capacity change from 0 to 128 [ 466.483079][ T9056] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 466.547340][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.547357][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.547381][ T8864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.597218][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.597235][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.597260][ T8864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.793131][ T9056] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5622] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9056] [ 466.802490][ T9056] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 468.179222][ T8864] hsr_slave_0: entered promiscuous mode [ 468.181002][ T8864] hsr_slave_1: entered promiscuous mode [ 468.182097][ T8864] debugfs: 'hsr0' already exists in 'hsr' [ 468.182114][ T8864] Cannot create hsr debugfs directory [ 468.325697][ T9066] veth5: entered allmulticast mode [ 468.579971][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.691'. [ 468.580005][ T9074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.691'. [ 469.022733][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 471.980402][ T9097] veth5: entered allmulticast mode [ 472.816307][ T9113] Process accounting resumed [ 473.249719][ T9121] loop0: detected capacity change from 0 to 128 [ 475.315065][ T9133] blktrace: Concurrent blktraces are not allowed on loop8 [ 477.091786][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 477.091807][ T9153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.704'. [ 477.491539][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 478.740667][ T9164] loop3: detected capacity change from 0 to 512 [ 478.768947][ T9164] EXT4-fs (loop3): Test dummy encryption mode enabled [ 478.775242][ T9164] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 478.800183][ T9164] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.706: bad orphan inode 131083 [ 478.800203][ T9164] loop3: lost filesystem error report for type 5 error -117 [ 478.814117][ T9164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.357479][ T9175] loop1: detected capacity change from 0 to 128 [ 481.556705][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.557462][ T9184] Process accounting resumed [ 483.255976][ T9198] loop3: detected capacity change from 0 to 128 [ 484.881382][ T9211] blktrace: Concurrent blktraces are not allowed on loop0 [ 485.912890][ T9227] loop4: detected capacity change from 0 to 256 [ 486.035262][ T9227] vfat: Unknown parameter 'iocharsetiso8859-3' [ 488.142164][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'. [ 490.636348][ T9283] loop4: detected capacity change from 0 to 128 [ 491.262221][ T9286] netlink: 772 bytes leftover after parsing attributes in process `syz.1.723'. [ 493.217501][ T9302] loop3: detected capacity change from 0 to 128 [ 493.467202][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 493.467307][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 494.011750][ T9294] syz.4.724 (9294) used greatest stack depth: 16568 bytes left [ 494.210320][ T9310] loop4: detected capacity change from 0 to 256 [ 494.893389][ T9310] vfat: Unknown parameter 'iocharsetiso8859-3' [ 495.826895][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 495.861675][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 495.863107][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 495.865424][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 495.867240][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 495.959971][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'. [ 498.276188][ T9345] loop3: detected capacity change from 0 to 128 [ 498.310981][ T5633] Bluetooth: hci5: command tx timeout [ 498.501516][ T9337] loop1: detected capacity change from 0 to 8192 [ 498.689841][ T9337] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 499.069614][ T9358] loop0: detected capacity change from 0 to 128 [ 499.971107][ T9353] loop4: detected capacity change from 0 to 128 [ 499.974035][ T9353] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 500.317751][ T9347] Bluetooth: hci5: command tx timeout [ 500.475324][ T9362] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5622] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9362] [ 500.493522][ T9362] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 500.820765][ T38] audit: type=1800 audit(1779312608.931:17): pid=9337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.731" name="file1" dev="loop1" ino=1048612 res=0 errno=0 [ 500.919074][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.736'. [ 501.746780][ T9382] loop3: detected capacity change from 0 to 1024 [ 502.294391][ T9347] Bluetooth: hci5: command tx timeout [ 502.999257][ T9392] loop4: detected capacity change from 0 to 128 [ 504.447160][ T9347] Bluetooth: hci5: command tx timeout [ 507.306054][ T9416] program syz.1.746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 510.570053][ T9438] loop0: detected capacity change from 0 to 1024 [ 512.519292][ T9438] hfsplus: failed to load catalog file [ 513.787224][ T9444] loop3: detected capacity change from 0 to 512 [ 513.943478][ T9444] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 514.865590][ T9454] Process accounting resumed [ 514.929639][ T9444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.929775][ T9444] ext4 filesystem being mounted at /181/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.445585][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.732361][ T9470] fuse: Unknown parameter 'group_id00000000000000000000' [ 517.249799][ T9471] loop4: detected capacity change from 0 to 128 [ 517.793240][ T9318] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.793625][ T9318] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.793926][ T9318] bridge_slave_0: entered allmulticast mode [ 517.825807][ T9318] bridge_slave_0: entered promiscuous mode [ 518.010533][ T9476] program syz.4.758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 518.040732][ T9318] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.040996][ T9318] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.041294][ T9318] bridge_slave_1: entered allmulticast mode [ 518.059943][ T9318] bridge_slave_1: entered promiscuous mode [ 519.468578][ T9480] loop0: detected capacity change from 0 to 128 [ 519.571867][ T9318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.615332][ T9318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.678055][ T9318] team0: Port device team_slave_0 added [ 520.073749][ T9318] team0: Port device team_slave_1 added [ 520.250505][ T9318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.250521][ T9318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.250546][ T9318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.703369][ T9497] bond1: entered promiscuous mode [ 520.703410][ T9497] bond1: entered allmulticast mode [ 520.704203][ T9497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 521.452241][ T9505] Process accounting resumed [ 521.597328][ T9499] veth3: entered allmulticast mode [ 521.603195][ T9318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.603212][ T9318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.603235][ T9318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.023408][ T9519] loop1: detected capacity change from 0 to 128 [ 524.876691][ T9531] loop4: detected capacity change from 0 to 128 [ 527.122196][ T9318] hsr_slave_0: entered promiscuous mode [ 527.125575][ T9318] hsr_slave_1: entered promiscuous mode [ 527.126991][ T9318] debugfs: 'hsr0' already exists in 'hsr' [ 527.127013][ T9318] Cannot create hsr debugfs directory [ 527.327231][ T9538] bond2: entered promiscuous mode [ 527.327262][ T9538] bond2: entered allmulticast mode [ 527.327793][ T9538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 527.562485][ T9539] veth3: entered allmulticast mode [ 527.610024][ T9347] Bluetooth: hci0: unexpected event for opcode 0x007f [ 527.725170][ T160] bridge_slave_1: left allmulticast mode [ 527.725203][ T160] bridge_slave_1: left promiscuous mode [ 527.725484][ T160] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.980453][ T160] bridge_slave_0: left allmulticast mode [ 527.980512][ T160] bridge_slave_0: left promiscuous mode [ 527.981119][ T160] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.990371][ T9557] loop3: detected capacity change from 0 to 128 [ 529.766094][ T9561] Process accounting resumed [ 530.858462][ T160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.954450][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 530.954483][ T9577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.783'. [ 530.982391][ T160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.040014][ T160] bond0 (unregistering): Released all slaves [ 532.635929][ T9586] bond1: entered promiscuous mode [ 532.635960][ T9586] bond1: entered allmulticast mode [ 532.636742][ T9586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 532.924525][ T9601] loop4: detected capacity change from 0 to 128 [ 533.424111][ T9587] veth5: entered allmulticast mode [ 534.239147][ T9606] loop1: detected capacity change from 0 to 8192 [ 534.267210][ T9606] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 535.069000][ T9612] Process accounting resumed [ 535.292519][ T9618] loop4: detected capacity change from 0 to 128 [ 535.295079][ T9618] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 535.316567][ T160] hsr_slave_0: left promiscuous mode [ 535.365226][ T160] hsr_slave_1: left promiscuous mode [ 535.366266][ T160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.449632][ T160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.508656][ T9621] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5622] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9621] [ 536.173285][ T9628] loop1: detected capacity change from 0 to 128 [ 536.994206][ T9618] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 537.135137][ T160] team0 (unregistering): Port device team_slave_1 removed [ 537.183561][ T160] team0 (unregistering): Port device team_slave_0 removed [ 537.542079][ T9631] loop4: detected capacity change from 0 to 8192 [ 537.632966][ T9631] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 537.900259][ T9634] loop0: detected capacity change from 0 to 8192 [ 538.121487][ T9634] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 539.201975][ T9651] loop4: detected capacity change from 0 to 8192 [ 539.257472][ T9651] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 539.285930][ T9654] netlink: 20 bytes leftover after parsing attributes in process `syz.3.801'. [ 539.884384][ T9663] loop0: detected capacity change from 0 to 128 [ 540.429847][ T9664] loop1: detected capacity change from 0 to 128 [ 540.461756][ T9664] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 540.479757][ T9654] 8021q: adding VLAN 0 to HW filter on device bond3 [ 541.076236][ T9669] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5618] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9669] [ 542.272495][ T9676] Process accounting resumed [ 542.408545][ T9347] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 542.409105][ T9347] Bluetooth: hci2: Injecting HCI hardware error event [ 542.411650][ T4934] Bluetooth: hci2: hardware error 0x00 [ 543.144875][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 543.722842][ T9683] loop3: detected capacity change from 0 to 8192 [ 543.737210][ T9683] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 544.033563][ T9698] loop4: detected capacity change from 0 to 128 [ 544.945707][ T9714] loop0: detected capacity change from 0 to 128 [ 544.978781][ T9714] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 545.570592][ T9719] loop3: detected capacity change from 0 to 128 [ 546.304666][ T4934] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 546.400337][ T9709] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 546.889017][ T9729] program syz.4.814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 547.678227][ T9733] loop1: detected capacity change from 0 to 128 [ 548.906858][ T9318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 549.472205][ T9318] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 549.473697][ T9318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 549.598940][ T9742] Process accounting resumed [ 549.698471][ T9318] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 549.785941][ T9318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 549.858239][ T9318] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 549.874867][ T9318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 549.935138][ T9763] loop1: detected capacity change from 0 to 128 [ 549.943205][ T9761] syz.4.820 uses obsolete (PF_INET,SOCK_PACKET) [ 549.950463][ T9763] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 550.092824][ T9318] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 550.253528][ T9774] loop0: detected capacity change from 0 to 128 [ 550.658423][ T9761] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 550.865142][ T9777] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5618] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9777] [ 551.798158][ T9778] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 553.451913][ T9795] loop1: detected capacity change from 0 to 128 [ 553.845632][ T9347] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 553.929582][ T9347] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 553.935486][ T9347] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 553.956633][ T9347] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 553.976535][ T9347] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 555.419125][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 555.419238][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 555.493292][ T9819] program syz.3.827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 556.094795][ T4934] Bluetooth: hci1: command tx timeout [ 556.405766][ T9834] loop4: detected capacity change from 0 to 128 [ 556.973403][ T9834] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 557.091395][ T9832] Process accounting resumed [ 557.250792][ T9834] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5622] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9834] [ 557.281045][ T9834] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 557.340742][ T9845] trusted_key: encrypted_key: insufficient parameters specified [ 557.906135][ T9850] IPv6: sit1: Disabled Multicast RS [ 558.072476][ T4934] Bluetooth: hci1: command tx timeout [ 558.472600][ T9857] loop4: detected capacity change from 0 to 128 [ 558.477906][ T9857] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 558.567314][ T9859] program syz.1.838 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 558.766287][ T9864] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5622] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9864] [ 558.922937][ T9868] loop0: detected capacity change from 0 to 128 [ 559.014512][ T9787] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.014708][ T9787] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.015137][ T9787] bridge_slave_0: entered allmulticast mode [ 559.017486][ T9787] bridge_slave_0: entered promiscuous mode [ 559.465244][ T9787] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.465520][ T9787] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.465843][ T9787] bridge_slave_1: entered allmulticast mode [ 559.617008][ T9787] bridge_slave_1: entered promiscuous mode [ 559.848879][ T9857] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 560.666467][ T4934] Bluetooth: hci1: command tx timeout [ 560.954449][ T9886] trusted_key: encrypted_key: insufficient parameters specified [ 561.129565][ T9889] loop0: detected capacity change from 0 to 128 [ 562.186262][ T9787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.204134][ T9787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.300620][ T9787] team0: Port device team_slave_0 added [ 562.865561][ T9787] team0: Port device team_slave_1 added [ 562.895073][ T4934] Bluetooth: hci1: command tx timeout [ 562.972313][ T9895] Process accounting resumed [ 563.414744][ T9912] loop3: detected capacity change from 0 to 128 [ 564.492750][ T9919] program syz.0.850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 564.545626][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.851'. [ 564.600553][ T9916] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.620087][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.620103][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.620128][ T9787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.638021][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.638036][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.638060][ T9787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.218900][ T9928] loop3: detected capacity change from 0 to 128 [ 565.534237][ T9787] hsr_slave_0: entered promiscuous mode [ 565.536266][ T9787] hsr_slave_1: entered promiscuous mode [ 565.539865][ T9787] debugfs: 'hsr0' already exists in 'hsr' [ 565.539888][ T9787] Cannot create hsr debugfs directory [ 565.964110][ T9935] loop1: detected capacity change from 0 to 128 [ 568.055759][ T9944] loop3: detected capacity change from 0 to 128 [ 569.458684][ T9952] Process accounting resumed [ 569.804370][ T9961] loop4: detected capacity change from 0 to 128 [ 571.021757][ T9967] program syz.0.863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 571.156225][ T9969] loop0: detected capacity change from 0 to 128 [ 571.182588][ T9969] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 571.445226][ T9973] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5621] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[9973] [ 572.168905][ T9969] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 572.241760][ T9976] loop1: detected capacity change from 0 to 128 [ 572.872264][ T9986] loop0: detected capacity change from 0 to 128 [ 575.248496][T10002] Process accounting resumed [ 575.457464][T10006] program syz.4.875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.537919][ T9347] Bluetooth: hci3: unexpected event for opcode 0x007f [ 575.932003][T10015] fuse: Unknown parameter '0x0000000000000003' [ 577.333787][ T160] bridge_slave_1: left allmulticast mode [ 577.333820][ T160] bridge_slave_1: left promiscuous mode [ 577.334106][ T160] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.783501][ T160] bridge_slave_0: left allmulticast mode [ 577.783534][ T160] bridge_slave_0: left promiscuous mode [ 577.783783][ T160] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.501115][ T160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.641134][ T160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.717162][ T160] bond0 (unregistering): Released all slaves [ 581.250604][ T9347] Bluetooth: hci0: unexpected event for opcode 0x007f [ 581.717686][T10074] program syz.3.886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 581.741354][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 583.514688][T10098] loop4: detected capacity change from 0 to 128 [ 583.889723][ T38] audit: type=1326 audit(1779312696.149:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.3.897" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f922ce59 code=0x7ffc0000 [ 583.966501][ T38] audit: type=1326 audit(1779312696.149:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.3.897" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f922ce59 code=0x7ffc0000 [ 583.966557][ T38] audit: type=1326 audit(1779312696.149:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.3.897" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9f922ce59 code=0x7ffc0000 [ 583.966597][ T38] audit: type=1326 audit(1779312696.149:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.3.897" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f922ce59 code=0x7ffc0000 [ 583.966636][ T38] audit: type=1326 audit(1779312696.149:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.3.897" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f922ce59 code=0x7ffc0000 [ 583.966675][ T38] audit: type=1326 audit(1779312696.149:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.3.897" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fc9f922ce59 code=0x7ffc0000 [ 583.966716][ T38] audit: type=1326 audit(1779312696.149:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.3.897" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f922ce59 code=0x7ffc0000 [ 583.966754][ T38] audit: type=1326 audit(1779312696.149:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.3.897" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f922ce59 code=0x7ffc0000 [ 583.966793][ T38] audit: type=1326 audit(1779312696.149:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.3.897" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc9f922ce59 code=0x7ffc0000 [ 584.114407][ T38] audit: type=1326 audit(1779312696.380:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.3.897" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f922ce59 code=0x7ffc0000 [ 585.208200][T10114] loop3: detected capacity change from 0 to 256 [ 585.212252][T10114] exfat: Bad value for 'gid' [ 585.212269][T10114] exfat: Bad value for 'gid' [ 585.544696][ T5822] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 585.775821][ T5822] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 585.775857][ T5822] usb 4-1: config 0 has no interface number 0 [ 585.775894][ T5822] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 585.775918][ T5822] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 585.778526][ T5822] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 585.778552][ T5822] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 585.778570][ T5822] usb 4-1: Product: syz [ 585.778583][ T5822] usb 4-1: Manufacturer: syz [ 585.778595][ T5822] usb 4-1: SerialNumber: syz [ 585.785635][ T5822] usb 4-1: config 0 descriptor?? [ 585.882385][ T5822] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 585.882822][ T5822] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 585.884943][ T5822] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 586.056030][ T5822] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 586.099356][ T5822] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 586.129354][ T5822] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 586.163774][ T5822] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 586.267002][ T5822] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 586.319682][ T5822] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 586.435643][ T5822] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 586.619962][ T5822] usb 4-1: USB disconnect, device number 14 [ 587.106044][T10130] program syz.3.902 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 587.122605][ T5822] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 587.350156][ T5822] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 587.393297][ T5822] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 588.438309][ T5822] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 588.547942][ T5822] keyspan 4-1:0.107: device disconnected [ 589.874068][T10161] loop0: detected capacity change from 0 to 128 [ 589.903074][T10161] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 590.077192][T10166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.910'. [ 590.460813][T10168] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5621] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[10168] [ 590.921396][ T160] hsr_slave_0: left promiscuous mode [ 590.983740][ T160] hsr_slave_1: left promiscuous mode [ 590.984824][ T160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.027639][ T160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.610559][T10196] program syz.4.915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.973635][ T160] team0 (unregistering): Port device team_slave_1 removed [ 592.713391][ T160] team0 (unregistering): Port device team_slave_0 removed [ 593.652879][ T9787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 593.895393][T10229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.922'. [ 593.942398][ T9787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 593.943643][ T9787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 594.179454][T10240] loop4: detected capacity change from 0 to 128 [ 594.179530][ T9787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 594.316736][ T9787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 594.625019][ T9787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 594.660853][ T9787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 594.810269][ T9787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 595.039963][T10255] loop3: detected capacity change from 0 to 128 [ 595.812280][ T9787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.081881][ T9787] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.115659][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.115900][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.357404][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.357549][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.526426][T10275] loop3: detected capacity change from 0 to 512 [ 596.728469][T10277] loop1: detected capacity change from 0 to 128 [ 596.745302][T10277] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 596.780059][T10275] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 596.780081][T10275] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 597.047707][T10275] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 597.053088][T10275] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 597.075837][T10279] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5618] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[10279] [ 597.088791][T10279] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 597.420346][T10275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.433111][T10295] loop0: detected capacity change from 0 to 128 [ 598.970992][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.538058][T10304] loop3: detected capacity change from 0 to 512 [ 599.577850][T10304] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 599.577872][T10304] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 599.626556][T10304] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 599.630947][T10304] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 599.695073][T10304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.032725][T10308] loop1: detected capacity change from 0 to 256 [ 600.033828][T10308] exfat: Bad value for 'gid' [ 600.033844][T10308] exfat: Bad value for 'gid' [ 600.166157][ T9787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.611912][T10315] loop4: detected capacity change from 0 to 128 [ 601.390070][T10306] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 601.646451][ T5620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.834127][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 601.941930][ T9787] veth0_vlan: entered promiscuous mode [ 601.987001][ T9787] veth1_vlan: entered promiscuous mode [ 602.000038][ T10] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 602.000064][ T10] usb 2-1: config 0 has no interface number 0 [ 602.000104][ T10] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 602.000128][ T10] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 602.005555][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 602.005582][ T10] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 602.005600][ T10] usb 2-1: Product: syz [ 602.005613][ T10] usb 2-1: Manufacturer: syz [ 602.005625][ T10] usb 2-1: SerialNumber: syz [ 602.154968][ T10] usb 2-1: config 0 descriptor?? [ 602.164237][ T10] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 602.164541][ T10] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 602.177059][ T10] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 602.190107][ T10] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 602.201336][ T10] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 602.243368][ T10] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 602.249593][ T10] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 602.259225][ T10] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 602.307452][ T9787] veth0_macvtap: entered promiscuous mode [ 602.335016][ T10] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 602.341208][ T10] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 602.406560][ T5626] usb 2-1: USB disconnect, device number 13 [ 602.592126][ T5626] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 602.663793][ T9787] veth1_macvtap: entered promiscuous mode [ 602.708462][ T5626] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 602.737952][ T5626] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 602.766121][ T5626] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 602.776813][ T5626] keyspan 2-1:0.107: device disconnected [ 602.811810][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.852593][T10325] process 'syz.4.942' launched './file1' with NULL argv: empty string added [ 602.877136][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.054748][ T3281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.070857][ T3281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.080890][ T3281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.144900][ T3281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.786567][T10358] program syz.4.954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 606.942009][ T124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.942029][ T124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.430763][T10370] loop0: detected capacity change from 0 to 128 [ 607.942468][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.942488][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.839163][T10384] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 610.894666][T10387] loop4: detected capacity change from 0 to 64 [ 611.099628][T10384] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.218888][ T4934] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 611.307766][ T4934] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 611.329093][T10384] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.331441][ T4934] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 611.334814][ T4934] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 611.335561][ T4934] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 611.556229][T10387] hfs: request for non-existent node 131072 in B*Tree [ 611.556251][T10387] hfs: request for non-existent node 131072 in B*Tree [ 611.579392][T10398] hfs: request for non-existent node 131072 in B*Tree [ 611.579411][T10398] hfs: request for non-existent node 131072 in B*Tree [ 611.630251][T10387] hfs: request for non-existent node 131072 in B*Tree [ 611.630270][T10387] hfs: request for non-existent node 131072 in B*Tree [ 611.638850][T10387] hfs: request for non-existent node 131072 in B*Tree [ 611.638867][T10387] hfs: request for non-existent node 131072 in B*Tree [ 611.663044][T10384] bridge0: entered allmulticast mode [ 611.663521][T10387] hfs: request for non-existent node 131072 in B*Tree [ 611.663537][T10387] hfs: request for non-existent node 131072 in B*Tree [ 611.671383][T10387] hfs: request for non-existent node 131072 in B*Tree [ 611.671399][T10387] hfs: request for non-existent node 131072 in B*Tree [ 611.678895][T10387] hfs: request for non-existent node 12 in B*Tree [ 611.678912][T10387] hfs: request for non-existent node 12 in B*Tree [ 611.830645][T10403] netlink: 'syz.1.966': attribute type 8 has an invalid length. [ 612.097277][T10410] program syz.0.969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 613.448996][ T4934] Bluetooth: hci5: command tx timeout [ 614.347066][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 614.347242][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 614.528036][T10430] Process accounting resumed [ 615.861267][ T9347] Bluetooth: hci5: command tx timeout [ 616.196289][T10443] loop4: detected capacity change from 0 to 32768 [ 616.256030][T10443] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 616.258531][T10451] loop0: detected capacity change from 0 to 64 [ 616.334024][T10443] XFS (loop4): Ending clean mount [ 616.353797][T10443] XFS (loop4): Quotacheck needed: Please wait. [ 616.481404][T10451] hfs: request for non-existent node 131072 in B*Tree [ 616.481423][T10451] hfs: request for non-existent node 131072 in B*Tree [ 616.504279][T10451] hfs: request for non-existent node 131072 in B*Tree [ 616.504298][T10451] hfs: request for non-existent node 131072 in B*Tree [ 617.162108][T10451] hfs: request for non-existent node 131072 in B*Tree [ 617.162129][T10451] hfs: request for non-existent node 131072 in B*Tree [ 617.163493][T10451] hfs: request for non-existent node 131072 in B*Tree [ 617.163508][T10451] hfs: request for non-existent node 131072 in B*Tree [ 617.181119][T10451] hfs: request for non-existent node 131072 in B*Tree [ 617.181136][T10451] hfs: request for non-existent node 131072 in B*Tree [ 617.204759][T10451] hfs: request for non-existent node 131072 in B*Tree [ 617.204787][T10451] hfs: request for non-existent node 131072 in B*Tree [ 617.504829][T10443] XFS (loop4): Quotacheck: Done. [ 617.574015][ T9347] Bluetooth: hci0: unexpected event for opcode 0x007f [ 618.269648][T10469] program syz.0.980 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 618.356597][ T9347] Bluetooth: hci5: command tx timeout [ 621.634697][T10483] loop3: detected capacity change from 0 to 128 [ 621.644518][ T9347] Bluetooth: hci5: command tx timeout [ 622.790083][T10490] Process accounting resumed [ 624.321088][T10504] 9pnet_virtio: no channels available for device syz [ 624.425313][T10390] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.425655][T10390] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.425930][T10390] bridge_slave_0: entered allmulticast mode [ 624.451572][T10390] bridge_slave_0: entered promiscuous mode [ 624.483850][T10390] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.484060][T10390] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.484333][T10390] bridge_slave_1: entered allmulticast mode [ 624.497794][ T5622] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 624.520817][T10390] bridge_slave_1: entered promiscuous mode [ 624.581258][T10390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.586157][T10390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.652879][T10390] team0: Port device team_slave_0 added [ 624.664424][T10390] team0: Port device team_slave_1 added [ 624.723218][T10390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.723233][T10390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.723254][T10390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.726043][T10390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.726056][T10390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.726077][T10390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.887663][T10390] hsr_slave_0: entered promiscuous mode [ 624.889529][T10390] hsr_slave_1: entered promiscuous mode [ 624.890995][T10390] debugfs: 'hsr0' already exists in 'hsr' [ 624.891017][T10390] Cannot create hsr debugfs directory [ 626.855701][T10517] program syz.1.992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 627.172550][T10519] loop3: detected capacity change from 0 to 32768 [ 627.250139][T10519] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 627.314880][T10519] XFS (loop3): Ending clean mount [ 627.322716][T10519] XFS (loop3): Quotacheck needed: Please wait. [ 627.775470][T10533] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 627.838262][T10533] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.865915][T10533] bridge0: entered allmulticast mode [ 628.316663][T10519] XFS (loop3): Quotacheck: Done. [ 628.317738][T10539] loop0: detected capacity change from 0 to 64 [ 628.660816][T10542] loop1: detected capacity change from 0 to 32768 [ 628.764964][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'. [ 629.194077][T10539] hfs: request for non-existent node 131072 in B*Tree [ 629.194093][T10539] hfs: request for non-existent node 131072 in B*Tree [ 629.197298][T10539] hfs: request for non-existent node 131072 in B*Tree [ 629.197314][T10539] hfs: request for non-existent node 131072 in B*Tree [ 629.227078][T10539] hfs: request for non-existent node 131072 in B*Tree [ 629.227097][T10539] hfs: request for non-existent node 131072 in B*Tree [ 629.230033][T10539] hfs: request for non-existent node 131072 in B*Tree [ 629.231688][T10542] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 629.239714][T10539] hfs: request for non-existent node 131072 in B*Tree [ 629.241866][T10539] hfs: request for non-existent node 131072 in B*Tree [ 629.241882][T10539] hfs: request for non-existent node 131072 in B*Tree [ 629.243023][T10539] hfs: request for non-existent node 131072 in B*Tree [ 629.243037][T10539] hfs: request for non-existent node 131072 in B*Tree [ 629.248380][T10539] hfs: request for non-existent node 12 in B*Tree [ 629.248396][T10539] hfs: request for non-existent node 12 in B*Tree [ 629.338461][T10542] XFS (loop1): Ending clean mount [ 629.341710][T10542] XFS (loop1): Quotacheck needed: Please wait. [ 629.888907][ T4934] Bluetooth: hci4: unexpected event for opcode 0x007f [ 629.954403][T10560] 9pnet_virtio: no channels available for device syz [ 630.022677][T10542] XFS (loop1): Quotacheck: Done. [ 630.875674][ T5618] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 630.910449][ T5620] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 631.275601][T10390] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.336492][T10568] loop4: detected capacity change from 0 to 64 [ 632.012829][T10568] hfs: request for non-existent node 131072 in B*Tree [ 632.012847][T10568] hfs: request for non-existent node 131072 in B*Tree [ 633.102159][T10568] hfs: request for non-existent node 131072 in B*Tree [ 633.102177][T10568] hfs: request for non-existent node 131072 in B*Tree [ 634.316288][T10588] Process accounting resumed [ 636.370857][T10610] 9pnet_virtio: no channels available for device syz [ 636.666235][T10390] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.241411][T10618] blktrace: Concurrent blktraces are not allowed on loop8 [ 638.434595][T10629] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 638.434799][T10629] bridge1: entered allmulticast mode [ 641.857824][T10390] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.956345][T10655] netlink: 'syz.4.1024': attribute type 8 has an invalid length. [ 642.600517][T10664] blktrace: Concurrent blktraces are not allowed on loop8 [ 644.401861][ T4934] Bluetooth: hci4: unexpected event for opcode 0x007f [ 645.089974][T10390] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.464104][T10693] netlink: 892 bytes leftover after parsing attributes in process `syz.3.1035'. [ 646.961378][T10706] blktrace: Concurrent blktraces are not allowed on loop8 [ 648.100405][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1039'. [ 648.216380][ T160] bridge_slave_1: left allmulticast mode [ 648.216405][ T160] bridge_slave_1: left promiscuous mode [ 648.217713][ T160] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.595582][ T160] bridge_slave_0: left allmulticast mode [ 648.595615][ T160] bridge_slave_0: left promiscuous mode [ 648.595867][ T160] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.644107][T10724] netlink: 892 bytes leftover after parsing attributes in process `syz.3.1046'. [ 648.918577][T10730] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1048'. [ 650.677784][ T160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.741231][ T160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.831371][ T160] bond0 (unregistering): Released all slaves [ 653.189841][T10749] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.190890][T10749] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.701017][T10749] bridge0: entered allmulticast mode [ 654.203592][T10755] program syz.3.1056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 654.314188][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1055'. [ 654.614046][T10760] loop3: detected capacity change from 0 to 32768 [ 654.687134][T10760] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 654.763468][T10760] XFS (loop3): Ending clean mount [ 654.769390][T10760] XFS (loop3): Quotacheck needed: Please wait. [ 654.841462][T10390] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 655.068447][T10390] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 655.190617][T10390] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 655.275844][T10390] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 655.276933][T10390] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 655.357874][T10390] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 655.358951][T10390] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 655.589287][T10390] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 655.595243][T10776] capability: warning: `syz.0.1060' uses deprecated v2 capabilities in a way that may be insecure [ 657.698531][T10760] XFS (loop3): Quotacheck: Done. [ 657.761446][ T5620] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 658.248398][T10798] program syz.0.1067 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 658.844999][ T160] hsr_slave_0: left promiscuous mode [ 658.979668][ T160] hsr_slave_1: left promiscuous mode [ 658.980932][ T160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.980956][ T160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.019169][ T160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.019191][ T160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.127333][T10813] loop4: detected capacity change from 0 to 64 [ 659.272849][T10813] hfs: request for non-existent node 131072 in B*Tree [ 659.272868][T10813] hfs: request for non-existent node 131072 in B*Tree [ 659.310352][T10813] hfs: request for non-existent node 131072 in B*Tree [ 659.310370][T10813] hfs: request for non-existent node 131072 in B*Tree [ 659.450597][ T160] veth1_macvtap: left promiscuous mode [ 659.578155][ T160] veth0_macvtap: left promiscuous mode [ 659.578659][ T160] veth1_vlan: left promiscuous mode [ 659.578834][ T160] veth0_vlan: left promiscuous mode [ 659.642595][T10819] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1073'. [ 659.643696][T10813] hfs: request for non-existent node 131072 in B*Tree [ 659.643712][T10813] hfs: request for non-existent node 131072 in B*Tree [ 659.649243][T10813] hfs: request for non-existent node 131072 in B*Tree [ 659.649261][T10813] hfs: request for non-existent node 131072 in B*Tree [ 659.659643][T10813] hfs: request for non-existent node 131072 in B*Tree [ 659.659660][T10813] hfs: request for non-existent node 131072 in B*Tree [ 659.662309][T10813] hfs: request for non-existent node 131072 in B*Tree [ 659.662324][T10813] hfs: request for non-existent node 131072 in B*Tree [ 661.514554][T10829] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1078'. [ 661.749964][ T160] team0 (unregistering): Port device team_slave_1 removed [ 661.820671][ T160] team0 (unregistering): Port device team_slave_0 removed [ 662.308704][T10839] loop3: detected capacity change from 0 to 64 [ 662.524927][T10390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.424309][T10390] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.492948][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.493110][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.631771][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.631933][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.748840][T10839] hfs: request for non-existent node 131072 in B*Tree [ 663.748860][T10839] hfs: request for non-existent node 131072 in B*Tree [ 663.807831][T10839] hfs: request for non-existent node 131072 in B*Tree [ 663.807850][T10839] hfs: request for non-existent node 131072 in B*Tree [ 664.658866][ T5885] kernel read not supported for file [fscontext] (pid: 5885 comm: kworker/0:7) [ 665.042449][T10839] hfs: request for non-existent node 131072 in B*Tree [ 665.042470][T10839] hfs: request for non-existent node 131072 in B*Tree [ 665.046581][T10847] hfs: request for non-existent node 131072 in B*Tree [ 665.046600][T10847] hfs: request for non-existent node 131072 in B*Tree [ 665.065420][T10852] hfs: request for non-existent node 131072 in B*Tree [ 665.065454][T10852] hfs: request for non-existent node 131072 in B*Tree [ 665.068597][T10839] hfs: request for non-existent node 131072 in B*Tree [ 665.068616][T10839] hfs: request for non-existent node 131072 in B*Tree [ 669.643609][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 669.643629][ T38] audit: type=1326 audit(1779312786.022:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.0.1085" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f291bfcce59 code=0x0 [ 669.648675][T10867] loop0: detected capacity change from 0 to 16 [ 670.401972][ T5754] kernel read not supported for file [fscontext] (pid: 5754 comm: kworker/0:4) [ 671.859665][T10881] 9pnet_virtio: no channels available for device syz [ 672.032874][ T9347] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 672.102302][ T9347] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 672.148894][ T9347] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 672.181589][ T9347] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 672.194660][ T9347] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 672.492957][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 672.493049][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 673.901879][T10901] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1097'. [ 674.627547][ T9347] Bluetooth: hci1: command tx timeout [ 676.410018][T10912] program syz.4.1099 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 676.590751][ T9347] Bluetooth: hci1: command tx timeout [ 678.101621][T10923] loop1: detected capacity change from 0 to 512 [ 678.111956][T10923] EXT4-fs (loop1): Test dummy encryption mode enabled [ 678.111978][T10923] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 678.120486][T10923] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1104: bad orphan inode 131083 [ 678.120514][T10923] loop1: lost filesystem error report for type 5 error -117 [ 678.840718][ T9347] Bluetooth: hci1: command tx timeout [ 678.847407][T10923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.416977][T10943] loop0: detected capacity change from 0 to 16 [ 679.487295][ T38] audit: type=1326 audit(1779312796.258:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.0.1107" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f291bfcce59 code=0x0 [ 681.122146][ T9347] Bluetooth: hci1: command tx timeout [ 681.955508][T10959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1111'. [ 682.768608][T10958] loop4: detected capacity change from 0 to 512 [ 682.785690][T10958] EXT4-fs (loop4): Test dummy encryption mode enabled [ 682.785711][T10958] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 682.807543][T10958] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1112: bad orphan inode 131083 [ 682.807571][T10958] loop4: lost filesystem error report for type 5 error -117 [ 682.849324][T10958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.938529][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.049725][T10965] Can't find ip_set type hash:net,n [ 684.283129][T10972] loop1: detected capacity change from 0 to 64 [ 684.323204][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.418848][T10972] hfs: request for non-existent node 131072 in B*Tree [ 684.418861][T10972] hfs: request for non-existent node 131072 in B*Tree [ 684.440848][T10972] hfs: request for non-existent node 131072 in B*Tree [ 684.440861][T10972] hfs: request for non-existent node 131072 in B*Tree [ 684.442868][T10972] hfs: request for non-existent node 131072 in B*Tree [ 684.442886][T10972] hfs: request for non-existent node 131072 in B*Tree [ 684.448199][T10972] hfs: request for non-existent node 131072 in B*Tree [ 684.448210][T10972] hfs: request for non-existent node 131072 in B*Tree [ 684.510326][T10972] hfs: request for non-existent node 131072 in B*Tree [ 684.510344][T10972] hfs: request for non-existent node 131072 in B*Tree [ 684.574203][T10972] hfs: request for non-existent node 131072 in B*Tree [ 684.574215][T10972] hfs: request for non-existent node 131072 in B*Tree [ 685.347501][T10984] =========================================================[ 685.347501][T10984] ================================================================== [ 685.347518][T10984] BUG: KASAN: slab-use-after-free in clear_tfile_check_list+0x114/0x380 [ 685.347546][T10984] Read of size 8 at addr ffff888037f12008 by task syz.3.1121/10984 [ 685.347562][T10984] [ 685.347575][T10984] CPU: 0 UID: 0 PID: 10984 Comm: syz.3.1121 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 685.347596][T10984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 685.347607][T10984] Call Trace: [ 685.347615][T10984] [ 685.347623][T10984] dump_stack_lvl+0xe8/0x150 [ 685.347647][T10984] print_address_description+0x55/0x1e0 [ 685.347670][T10984] ? clear_tfile_check_list+0x114/0x380 [ 685.347698][T10984] print_report+0x58/0x70 [ 685.347718][T10984] kasan_report+0x117/0x150 [ 685.347739][T10984] ? clear_tfile_check_list+0x114/0x380 [ 685.347763][T10984] clear_tfile_check_list+0x114/0x380 [ 685.347782][T10984] ? clear_tfile_check_list+0x22/0x380 [ 685.347802][T10984] do_epoll_ctl_file+0x8fd/0xed0 [ 685.347829][T10984] ? do_epoll_ctl_file+0xac3/0xed0 [ 685.347853][T10984] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 685.347878][T10984] ? __fget_files+0x3a6/0x420 [ 685.347901][T10984] ? __fget_files+0x2a/0x420 [ 685.347927][T10984] __se_sys_epoll_ctl+0x14e/0x210 [ 685.347944][T10984] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 685.347965][T10984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.347985][T10984] do_syscall_64+0x15f/0x560 [ 685.348005][T10984] ? trace_irq_disable+0x3b/0x140 [ 685.348024][T10984] ? clear_bhb_loop+0x40/0x90 [ 685.348044][T10984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.348062][T10984] RIP: 0033:0x7fc9f922ce59 [ 685.348079][T10984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.348095][T10984] RSP: 002b:00007fc9f7486028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 685.348115][T10984] RAX: ffffffffffffffda RBX: 00007fc9f94a5fa0 RCX: 00007fc9f922ce59 [ 685.348129][T10984] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 685.348139][T10984] RBP: 00007fc9f92c2d6f R08: 0000000000000000 R09: 0000000000000000 [ 685.348152][T10984] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000000 [ 685.348170][T10984] R13: 00007fc9f94a6038 R14: 00007fc9f94a5fa0 R15: 00007ffc89c040f8 [ 685.348192][T10984] [ 685.348199][T10984] [ 685.348203][T10984] Allocated by task 10984: [ 685.348213][T10984] kasan_save_track+0x3e/0x80 [ 685.348237][T10984] __kasan_slab_alloc+0x6c/0x80 [ 685.348252][T10984] kmem_cache_alloc_noprof+0x33b/0x680 [ 685.348268][T10984] ep_insert+0x512/0x1820 [ 685.348281][T10984] do_epoll_ctl_file+0x8bb/0xed0 [ 685.348304][T10984] __se_sys_epoll_ctl+0x14e/0x210 [ 685.348319][T10984] do_syscall_64+0x15f/0x560 [ 685.348336][T10984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.348352][T10984] [ 685.348357][T10984] Freed by task 10989: [ 685.348365][T10984] kasan_save_track+0x3e/0x80 [ 685.348387][T10984] kasan_save_free_info+0x46/0x50 [ 685.348405][T10984] __kasan_slab_free+0x5c/0x80 [ 685.348420][T10984] kmem_cache_free+0x187/0x6c0 [ 685.348436][T10984] eventpoll_release_file+0xc2/0x240 [ 685.348458][T10984] __fput+0x83c/0xa70 [ 685.348478][T10984] task_work_run+0x1d9/0x270 [ 685.348497][T10984] exit_to_user_mode_loop+0xf3/0x4d0 [ 685.348514][T10984] do_syscall_64+0x33e/0x560 [ 685.348531][T10984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.348547][T10984] [ 685.348551][T10984] The buggy address belongs to the object at ffff888037f12000 [ 685.348551][T10984] which belongs to the cache ep_head of size 16 [ 685.348566][T10984] The buggy address is located 8 bytes inside of [ 685.348566][T10984] freed 16-byte region [ffff888037f12000, ffff888037f12010) [ 685.348584][T10984] [ 685.348589][T10984] The buggy address belongs to the physical page: [ 685.348613][T10984] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888037f12040 pfn:0x37f12 [ 685.348634][T10984] memcg:ffff8880641ce801 [ 685.348642][T10984] flags: 0x80000000000200(workingset|node=0|zone=1) [ 685.348661][T10984] page_type: f5(slab) [ 685.348677][T10984] raw: 0080000000000200 ffff88814041cb40 ffffea0000d22510 ffffea0000d5c050 [ 685.348701][T10984] raw: ffff888037f12040 0000000800800023 00000000f5000000 ffff8880641ce801 [ 685.348711][T10984] page dumped because: kasan: bad access detected [ 685.348720][T10984] page_owner tracks the page as allocated [ 685.348727][T10984] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4984, tgid 4984 (udevd), ts 23433650183, free_ts 22780766528 [ 685.348759][T10984] post_alloc_hook+0x1f9/0x250 [ 685.348783][T10984] get_page_from_freelist+0x265c/0x26e0 [ 685.348801][T10984] __alloc_frozen_pages_noprof+0x18d/0x380 [ 685.348819][T10984] allocate_slab+0x74/0x5e0 [ 685.348838][T10984] refill_objects+0x33c/0x3d0 [ 685.348860][T10984] __pcs_replace_empty_main+0x373/0x720 [ 685.348881][T10984] kmem_cache_alloc_noprof+0x433/0x680 [ 685.348895][T10984] ep_insert+0x512/0x1820 [ 685.348908][T10984] do_epoll_ctl_file+0x8bb/0xed0 [ 685.348927][T10984] __se_sys_epoll_ctl+0x14e/0x210 [ 685.348941][T10984] do_syscall_64+0x15f/0x560 [ 685.348955][T10984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.348969][T10984] page last free pid 29 tgid 29 stack trace: [ 685.348978][T10984] __free_frozen_pages+0x10af/0x1190 [ 685.348993][T10984] tlb_remove_table_rcu+0x85/0x100 [ 685.349010][T10984] rcu_cpu_kthread+0x99e/0x1470 [ 685.349027][T10984] smpboot_thread_fn+0x541/0xa50 [ 685.349040][T10984] kthread+0x389/0x470 [ 685.349056][T10984] ret_from_fork+0x514/0xb70 [ 685.349074][T10984] ret_from_fork_asm+0x1a/0x30 [ 685.349096][T10984] [ 685.349100][T10984] Memory state around the buggy address: [ 685.349110][T10984] ffff888037f11f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 685.349122][T10984] ffff888037f11f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 685.349133][T10984] >ffff888037f12000: fa fb fc fc 00 00 fc fc fa fb fc fc fa fb fc fc [ 685.349142][T10984] ^ [ 685.349151][T10984] ffff888037f12080: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 685.349163][T10984] ffff888037f12100: 00 00 fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc [ 685.349173][T10984] ================================================================== [ 685.360566][T10984] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 685.360590][T10984] CPU: 0 UID: 0 PID: 10984 Comm: syz.3.1121 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 685.360612][T10984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 685.360624][T10984] Call Trace: [ 685.360632][T10984] [ 685.360639][T10984] vpanic+0x56c/0xa60 [ 685.360668][T10984] ? __pfx_vpanic+0x10/0x10 [ 685.360699][T10984] ? __pfx___schedule+0x10/0x10 [ 685.360721][T10984] panic+0xc5/0xd0 [ 685.360742][T10984] ? __pfx_panic+0x10/0x10 [ 685.360765][T10984] ? preempt_schedule_thunk+0x16/0x40 [ 685.360787][T10984] ? clear_tfile_check_list+0x114/0x380 [ 685.360806][T10984] check_panic_on_warn+0x89/0xb0 [ 685.360827][T10984] ? clear_tfile_check_list+0x114/0x380 [ 685.360845][T10984] end_report+0x73/0x170 [ 685.360863][T10984] ? clear_tfile_check_list+0x114/0x380 [ 685.360879][T10984] kasan_report+0x128/0x150 [ 685.360897][T10984] ? clear_tfile_check_list+0x114/0x380 [ 685.360919][T10984] clear_tfile_check_list+0x114/0x380 [ 685.360937][T10984] ? clear_tfile_check_list+0x22/0x380 [ 685.360956][T10984] do_epoll_ctl_file+0x8fd/0xed0 [ 685.360981][T10984] ? do_epoll_ctl_file+0xac3/0xed0 [ 685.361006][T10984] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 685.361033][T10984] ? __fget_files+0x3a6/0x420 [ 685.361055][T10984] ? __fget_files+0x2a/0x420 [ 685.361080][T10984] __se_sys_epoll_ctl+0x14e/0x210 [ 685.361098][T10984] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 685.361119][T10984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.361137][T10984] do_syscall_64+0x15f/0x560 [ 685.361156][T10984] ? trace_irq_disable+0x3b/0x140 [ 685.361173][T10984] ? clear_bhb_loop+0x40/0x90 [ 685.361193][T10984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.361210][T10984] RIP: 0033:0x7fc9f922ce59 [ 685.361226][T10984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.361241][T10984] RSP: 002b:00007fc9f7486028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 685.361261][T10984] RAX: ffffffffffffffda RBX: 00007fc9f94a5fa0 RCX: 00007fc9f922ce59 [ 685.361274][T10984] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 685.361285][T10984] RBP: 00007fc9f92c2d6f R08: 0000000000000000 R09: 0000000000000000 [ 685.361297][T10984] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000000 [ 685.361308][T10984] R13: 00007fc9f94a6038 R14: 00007fc9f94a5fa0 R15: 00007ffc89c040f8 [ 685.361328][T10984] [ 685.361685][T10984] Kernel Offset: disabled