last executing test programs: 1m42.157563533s ago: executing program 0 (id=151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)='d', 0x1}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB='('], 0x28}, 0x0, 0x4800, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1m41.336264653s ago: executing program 0 (id=156): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mq_timedsend(r0, &(0x7f0000000600)='m', 0x1, 0x6, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 1m21.998997297s ago: executing program 0 (id=156): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mq_timedsend(r0, &(0x7f0000000600)='m', 0x1, 0x6, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 1m20.280606017s ago: executing program 3 (id=260): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0xa) r2 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x71) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0xffffffff) 1m19.7554609s ago: executing program 3 (id=262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x70bd27, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="29a3db19bab9"}, @NL80211_ATTR_SSID={0x5, 0x34, @random="b2"}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x488c0) 1m17.194168772s ago: executing program 3 (id=273): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x7, &(0x7f0000000140)={@local, @dev={0xac, 0x14, 0x14, 0x23}}, 0xc) read(r0, &(0x7f0000000040)=""/38, 0x26) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000) 1m16.758860107s ago: executing program 3 (id=276): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x0) 1m15.689990246s ago: executing program 3 (id=282): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) 1m12.94613898s ago: executing program 3 (id=294): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) setgroups(0x3, &(0x7f0000000080)=[r1, r1, r1]) socket$inet6(0xa, 0x2, 0x3a) 1m11.940302473s ago: executing program 32 (id=294): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) setgroups(0x3, &(0x7f0000000080)=[r1, r1, r1]) socket$inet6(0xa, 0x2, 0x3a) 54.391443166s ago: executing program 0 (id=156): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mq_timedsend(r0, &(0x7f0000000600)='m', 0x1, 0x6, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 33.725929005s ago: executing program 0 (id=156): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mq_timedsend(r0, &(0x7f0000000600)='m', 0x1, 0x6, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 29.882508509s ago: executing program 2 (id=488): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{0x0, 0x100}, {0x2, 0x0, 0x2000}], 0x2) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) 28.243415156s ago: executing program 2 (id=501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x98, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x5d7f, @void, @val={0x1, 0x2, [{0xc}, {0x6}]}, @val={0x3, 0x1, 0xab}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x9, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, "cd"}, @NL80211_FTM_RESP_ATTR_LCI={0xffc8}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xffffffff}]}, 0x98}}, 0x0) 23.470287122s ago: executing program 2 (id=532): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = mq_open(&(0x7f0000000000)='}{\x00', 0x40, 0x46, 0x0) mq_notify(r0, &(0x7f0000000080)={0x0, 0xb}) mq_notify(r0, 0x0) 23.255619979s ago: executing program 2 (id=536): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 22.853853709s ago: executing program 2 (id=539): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) 22.195395528s ago: executing program 2 (id=542): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 21.268782462s ago: executing program 33 (id=542): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 7.079220983s ago: executing program 5 (id=630): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 7.059884407s ago: executing program 4 (id=631): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b1a, 0x0) 6.719376004s ago: executing program 5 (id=632): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f00000094c0)=ANY=[], 0x200002e6) socket$kcm(0x10, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04050400"], 0x7) 5.603774536s ago: executing program 5 (id=639): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf254300000008000300", @ANYRES32=r3, @ANYBLOB='\f\x00X'], 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 5.429439205s ago: executing program 5 (id=641): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x81) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) rmdir(&(0x7f0000000040)='./control\x00') 5.264993883s ago: executing program 6 (id=642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) 5.087546189s ago: executing program 4 (id=644): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) r2 = openat$cgroup_pressure(r1, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) 5.059752035s ago: executing program 5 (id=645): syz_mount_image$bcachefs(&(0x7f0000005b40), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000006200)=ANY=[@ANYRES16=0x0], 0x1, 0x5a2a, &(0x7f0000013940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) write$proc_mixer(r0, &(0x7f00000001c0)=[{'VOLUME', @void}], 0x7) pwrite64(r0, &(0x7f0000000140)='d', 0x1, 0x709c) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0xd, 0x8005, 0x1, 0x1, 0x1, 0x0, [{0x80, 0x1b9e, 0x4, '\x00', 0x4}]}) 4.923241882s ago: executing program 6 (id=646): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r1 = socket$inet6(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x40, 0x0, 0x0) 4.681123885s ago: executing program 4 (id=648): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x2000003) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) close(r0) 3.802873453s ago: executing program 6 (id=652): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd8f3dccb89d0ae3e, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1c0) getdents(r0, 0xfffffffffffffffd, 0x58) 3.730223777s ago: executing program 4 (id=653): syz_init_net_socket$ax25(0x3, 0x2, 0xc3) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xcc90, 0x400, 0x10003, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3513, 0x217, 0xa1, 0x0, 0x0) 3.16986569s ago: executing program 4 (id=655): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) munlockall() 2.776958916s ago: executing program 1 (id=656): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 2.475986793s ago: executing program 1 (id=657): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x156, 0x4010, 0x0, 0x0) 2.451756481s ago: executing program 5 (id=658): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x22402, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.408450059s ago: executing program 4 (id=659): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd800000001a4824030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x83, 0x2, "fe1b"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x83, "718bcfaa600032d24db153b14e97b62f3ba5430b4d4282640ba3ef9e8c3e5ae4903bb109605908b907f29a1c6b881c01526c636e945f7cdd10cba8465a5862dde8c0818b5eae4dad490dfd5cc75e3625585e76d9242b7f452fd611b172a633bde8fd00a8a2fe67bbd4b43aead58c57cd121dd7a0dec64228d2b752a932f1ade30428dd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000700)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x17, 0x6, @local}, &(0x7f0000000780)={0x40, 0x19, 0x2, '{N'}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0xdb}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x8}}) 2.220885192s ago: executing program 1 (id=660): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.055858972s ago: executing program 6 (id=661): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@gettaction={0x40, 0x32, 0x100, 0x70bd28, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x40}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) 2.024560365s ago: executing program 1 (id=662): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100007e383440030450f81190010203010902"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000780)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, 0x0) 1.46031933s ago: executing program 0 (id=156): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mq_timedsend(r0, &(0x7f0000000600)='m', 0x1, 0x6, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 308.474696ms ago: executing program 7 (id=543): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) 307.085852ms ago: executing program 6 (id=663): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x2, 0x6, 0x1, 0xa8, 0x40, 0x3, 0x8, 0x1, 0x1, 0x78, 0x8, 0x9f, 0x5}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x4, 0x0) 258.044611ms ago: executing program 1 (id=664): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x38) 24.227687ms ago: executing program 1 (id=665): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 0s ago: executing program 6 (id=666): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): __pfx_kthread+0x10/0x10 [ 147.185610][ T1326] ? _raw_spin_unlock_irq+0x23/0x50 [ 147.185638][ T1326] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.185665][ T1326] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.185693][ T1326] ? __pfx_kthread+0x10/0x10 [ 147.185718][ T1326] ret_from_fork+0x4e/0x80 [ 147.185740][ T1326] ? __pfx_kthread+0x10/0x10 [ 147.185767][ T1326] ret_from_fork_asm+0x1a/0x30 [ 147.185803][ T1326] [ 147.237845][ T1326] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 147.244001][ T5912] hsr_slave_0: left promiscuous mode [ 147.435504][ T6962] loop1: detected capacity change from 0 to 2048 [ 147.552883][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 147.679761][ T5912] hsr_slave_1: left promiscuous mode [ 147.686303][ T5912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.697297][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.786360][ T6962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.820723][ T5912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.897528][ T6962] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.908023][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.916736][ T5839] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz-executor: corrupted in-inode xattr: overlapping e_value [ 147.943377][ T5839] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz-executor: corrupted in-inode xattr: overlapping e_value [ 147.959196][ T5841] Bluetooth: hci4: command tx timeout [ 148.037367][ T6962] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.275: bg 0: block 345: padding at end of block bitmap is not set [ 148.053190][ T5912] veth1_macvtap: left promiscuous mode [ 148.067555][ T5912] veth0_macvtap: left promiscuous mode [ 148.074511][ T5912] veth1_vlan: left promiscuous mode [ 148.080861][ T5912] veth0_vlan: left promiscuous mode [ 148.090123][ T6962] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 148.108472][ T6962] EXT4-fs (loop1): This should not happen!! Data will be lost [ 148.108472][ T6962] [ 148.372569][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.602177][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 148.626284][ T6979] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 149.139479][ T5912] team0 (unregistering): Port device team_slave_1 removed [ 149.182209][ T5912] team0 (unregistering): Port device team_slave_0 removed [ 149.637236][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 149.662033][ T6884] chnl_net:caif_netlink_parms(): no params data found [ 149.769469][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.027913][ T5841] Bluetooth: hci4: command tx timeout [ 150.296286][ T7009] loop2: detected capacity change from 0 to 1024 [ 150.338684][ T7009] EXT4-fs: Ignoring removed orlov option [ 150.397414][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.404608][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.463853][ T7009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.483309][ T6884] bridge_slave_0: entered allmulticast mode [ 150.529408][ T6884] bridge_slave_0: entered promiscuous mode [ 150.626404][ T6884] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.648357][ T30] audit: type=1800 audit(1746094409.277:14): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.296" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 150.669156][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.676407][ T6884] bridge_slave_1: entered allmulticast mode [ 150.677335][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 150.729575][ T6884] bridge_slave_1: entered promiscuous mode [ 150.989248][ T6884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.035037][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.050120][ T6884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.325166][ T6999] loop1: detected capacity change from 0 to 32768 [ 151.445056][ T6999] JBD2: Ignoring recovery information on journal [ 151.469628][ T7008] loop4: detected capacity change from 0 to 32768 [ 151.510080][ T5912] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.585355][ T7008] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.295 (7008) [ 151.632065][ T7008] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 151.657016][ T7008] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 151.678656][ T6999] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 151.696879][ T6884] team0: Port device team_slave_0 added [ 151.700035][ T7008] BTRFS info (device loop4): disk space caching is enabled [ 151.717234][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 151.757901][ T30] audit: type=1800 audit(1746094666.383:15): pid=6999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.290" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 151.808629][ T7008] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 151.809142][ T6884] team0: Port device team_slave_1 added [ 151.840245][ T5133] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.849968][ T5133] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.863260][ T5133] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.874952][ T5133] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.886321][ T5133] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.004929][ T7008] BTRFS info (device loop4): rebuilding free space tree [ 152.031721][ T7008] BTRFS info (device loop4): disabling free space tree [ 152.038909][ T7008] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 152.049944][ T7008] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 152.107812][ T5133] Bluetooth: hci4: command tx timeout [ 152.115692][ T5912] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.191759][ T5827] ocfs2: Unmounting device (7,1) on (node local) [ 152.296226][ T30] audit: type=1800 audit(1746094666.923:16): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.295" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 152.439531][ T5826] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 152.459560][ T7059] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.592033][ T7066] loop2: detected capacity change from 0 to 2048 [ 152.648632][ T7066] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.747228][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 152.755313][ T7066] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 152.800465][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.845917][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.962396][ T6884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.004999][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.049524][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.127350][ T6884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.294425][ T5912] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.370680][ T7079] loop2: detected capacity change from 0 to 32768 [ 153.390208][ T7079] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.306 (7079) [ 153.410133][ T7079] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.420457][ T7079] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 153.429013][ T7079] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 153.459260][ T7079] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 153.476491][ T7059] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.517720][ T7079] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 153.542298][ T7079] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 153.567954][ T7079] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 153.602492][ T7079] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 153.625916][ T7079] workqueue: max_active 16777219 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 153.679689][ T7079] BTRFS info (device loop2): rebuilding free space tree [ 153.699815][ T7079] BTRFS info (device loop2): disabling free space tree [ 153.706780][ T7079] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 153.716737][ T7079] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 153.787245][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 153.876187][ T5912] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.948536][ T5133] Bluetooth: hci5: command tx timeout [ 153.981534][ T5822] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 154.191354][ T7059] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.376799][ T6884] hsr_slave_0: entered promiscuous mode [ 154.401694][ T7081] loop4: detected capacity change from 0 to 40427 [ 154.411409][ T6884] hsr_slave_1: entered promiscuous mode [ 154.418342][ T6884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.430232][ T6884] Cannot create hsr debugfs directory [ 154.436059][ T7081] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3fffff [ 154.518138][ T7081] F2FS-fs (loop4): invalid crc value [ 154.740568][ T7059] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.802010][ T7081] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 154.831727][ T5193] udevd[5193]: worker [5836] terminated by signal 33 (Unknown signal 33) [ 154.840422][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 154.870217][ T5193] udevd[5193]: worker [5836] failed while handling '/devices/virtual/block/loop2' [ 155.265765][ T7059] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.353682][ T7059] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.459013][ T7103] loop1: detected capacity change from 0 to 32768 [ 155.573601][ T7103] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 155.700172][ T7059] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.745048][ T7103] XFS (loop1): Ending clean mount [ 155.796754][ T7103] XFS (loop1): Quotacheck needed: Please wait. [ 155.857727][ T36] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1148 dinode [ 155.869787][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 155.891938][ T7059] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.908541][ T36] XFS (loop1): Unmount and run xfs_repair [ 155.915758][ T36] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 155.926149][ T36] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 155.935169][ T36] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 155.959281][ T36] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 155.977620][ T36] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 64 4.Xh...........d [ 156.009300][ T36] 00000040: 00 00 60 00 00 00 00 01 00 00 00 00 00 00 00 01 ..`............. [ 156.027413][ T5133] Bluetooth: hci5: command tx timeout [ 156.053151][ T36] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 3f ea 7e 76 ............?.~v [ 156.063175][ T5912] bridge_slave_1: left allmulticast mode [ 156.094040][ T7116] loop2: detected capacity change from 0 to 32768 [ 156.097281][ T5912] bridge_slave_1: left promiscuous mode [ 156.110479][ T36] 00000060: ff ff ff ff 24 f6 12 e4 00 00 00 00 00 00 00 05 ....$........... [ 156.119663][ T36] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 156.160949][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.177115][ T7103] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 156.266678][ T5912] bridge_slave_0: left allmulticast mode [ 156.297356][ T5912] bridge_slave_0: left promiscuous mode [ 156.303227][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.409506][ T7116] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 156.409506][ T7116] allowing incompatible features above 0.0: (unknown version) [ 156.471048][ T7116] bcachefs (loop2): initializing new filesystem [ 156.517738][ T7116] bcachefs (loop2): going read-write [ 156.583099][ T7116] bcachefs (loop2): marking superblocks [ 156.684788][ T5827] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 156.727796][ T5827] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 156.818899][ T7116] bcachefs (loop2): initializing freespace [ 156.855321][ T7116] bcachefs (loop2): done initializing freespace [ 156.898016][ T7116] bcachefs (loop2): reading snapshots table [ 156.904052][ T7116] bcachefs (loop2): reading snapshots done [ 156.917290][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 157.028333][ T7116] bcachefs (loop2): done starting filesystem [ 157.087320][ T48] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 157.251510][ T7116] syz.2.315 (7116) used greatest stack depth: 15336 bytes left [ 157.270877][ T48] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.284412][ T48] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 157.305893][ T5822] bcachefs (loop2): shutting down [ 157.312237][ T7166] loop1: detected capacity change from 0 to 1024 [ 157.316796][ T5822] bcachefs (loop2): going read-only [ 157.318954][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.325617][ T5822] bcachefs (loop2): finished waiting for writes to stop [ 157.337732][ T48] usb 6-1: config 0 descriptor?? [ 157.350162][ T48] pwc: Askey VC010 type 2 USB webcam detected. [ 157.398763][ T5822] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 157.420057][ T7166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.483247][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.525536][ T5822] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 157.584577][ T5912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.594955][ T5822] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 157.609251][ T5912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.636148][ T5912] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 157.656701][ T5912] tipc: Resetting bearer [ 157.660121][ T5822] bcachefs (loop2): marking filesystem clean [ 157.672624][ T5912] tipc: Resetting bearer [ 157.684568][ T5912] bond0 (unregistering): Released all slaves [ 157.764226][ T48] pwc: recv_control_msg error -32 req 02 val 2b00 [ 157.788557][ T48] pwc: recv_control_msg error -32 req 02 val 2700 [ 157.808754][ T5822] bcachefs (loop2): shutdown complete [ 157.947241][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 158.012400][ T5912] tipc: Disabling bearer [ 158.036253][ T48] pwc: recv_control_msg error -71 req 04 val 1000 [ 158.047291][ T48] pwc: recv_control_msg error -71 req 04 val 1300 [ 158.060069][ T5912] tipc: Left network mode [ 158.066064][ T48] pwc: recv_control_msg error -71 req 04 val 1400 [ 158.074329][ T48] pwc: recv_control_msg error -71 req 02 val 2000 [ 158.087569][ T48] pwc: recv_control_msg error -71 req 02 val 2100 [ 158.096734][ T48] pwc: recv_control_msg error -71 req 04 val 1500 [ 158.108214][ T5133] Bluetooth: hci5: command tx timeout [ 158.128884][ T48] pwc: recv_control_msg error -71 req 02 val 2500 [ 158.137828][ T48] pwc: recv_control_msg error -71 req 02 val 2400 [ 158.147852][ T48] pwc: recv_control_msg error -71 req 02 val 2600 [ 158.166232][ T48] pwc: recv_control_msg error -71 req 02 val 2900 [ 158.187741][ T48] pwc: recv_control_msg error -71 req 02 val 2800 [ 158.202008][ T48] pwc: recv_control_msg error -71 req 04 val 1100 [ 158.215430][ T48] pwc: recv_control_msg error -71 req 04 val 1200 [ 158.266305][ T48] pwc: Registered as video103. [ 158.284442][ T48] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 158.356390][ T48] usb 6-1: USB disconnect, device number 3 [ 158.834491][ T7171] loop1: detected capacity change from 0 to 32768 [ 158.902399][ T7171] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 158.924291][ T5133] Bluetooth: hci1: Malformed LE Event: 0x0b [ 158.981412][ T7171] XFS (loop1): Ending clean mount [ 158.987264][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 159.021580][ T7171] XFS (loop1): Quotacheck needed: Please wait. [ 159.154106][ T7171] XFS (loop1): Quotacheck: Done. [ 159.221406][ T7037] chnl_net:caif_netlink_parms(): no params data found [ 159.231970][ T7171] XFS (loop1): User initiated shutdown received. [ 159.263379][ T7171] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476). Shutting down filesystem. [ 159.286753][ T7171] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 159.368543][ T5912] hsr_slave_0: left promiscuous mode [ 159.428413][ T5912] hsr_slave_1: left promiscuous mode [ 159.436183][ T5912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.461785][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.463297][ T5827] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 159.489453][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.578594][ T5912] veth1_macvtap: left promiscuous mode [ 159.601450][ T5912] veth0_macvtap: left promiscuous mode [ 159.625585][ T5912] veth1_vlan: left promiscuous mode [ 159.644405][ T5912] veth0_vlan: left promiscuous mode [ 160.037237][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 160.190815][ T5133] Bluetooth: hci5: command tx timeout [ 160.684484][ T7225] loop5: detected capacity change from 0 to 256 [ 160.986383][ T7227] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96 [ 161.067473][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 161.398656][ T7236] loop5: detected capacity change from 0 to 2048 [ 161.416765][ T7236] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.535332][ T7236] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.566756][ T7244] loop2: detected capacity change from 0 to 1024 [ 161.592181][ T7239] loop4: detected capacity change from 0 to 8192 [ 161.704091][ T7244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.835847][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.855126][ T5912] team0 (unregistering): Port device team_slave_1 removed [ 161.960240][ T5912] team0 (unregistering): Port device team_slave_0 removed [ 162.112568][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 162.430651][ T7243] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 162.487630][ T7243] EXT4-fs (loop5): Remounting filesystem read-only [ 162.732905][ T7252] loop2: detected capacity change from 0 to 40427 [ 162.756553][ T7252] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3fffff [ 162.789197][ T7252] F2FS-fs (loop2): Image doesn't support compression [ 162.796206][ T7252] F2FS-fs (loop2): Image doesn't support compression [ 162.812521][ T7252] F2FS-fs (loop2): invalid crc value [ 162.927725][ T7252] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 162.972521][ T7252] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_convert_inline_inode+0x6bd/0x880 [ 163.024472][ T5822] syz-executor: attempt to access beyond end of device [ 163.024472][ T5822] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 163.038993][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 163.039033][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 163.039051][ T5822] Call Trace: [ 163.039062][ T5822] [ 163.039074][ T5822] dump_stack_lvl+0x189/0x250 [ 163.039129][ T5822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.039174][ T5822] ? __pfx_queue_work_on+0x10/0x10 [ 163.039202][ T5822] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 163.039233][ T5822] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 163.039267][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.039317][ T5822] f2fs_handle_critical_error+0x37c/0x540 [ 163.039363][ T5822] f2fs_write_end_io+0x4e2/0x6d0 [ 163.039426][ T5822] __submit_merged_bio+0x27a/0x6a0 [ 163.039471][ T5822] __submit_merged_write_cond+0x255/0x530 [ 163.039536][ T5822] f2fs_write_data_pages+0x2854/0x31f0 [ 163.039573][ T5822] ? unwind_next_frame+0x19ae/0x2390 [ 163.039679][ T5822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 163.039743][ T5822] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 163.039814][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.039847][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.039874][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 163.039935][ T5822] ? folios_put_refs+0x559/0x640 [ 163.039982][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.040009][ T5822] ? lru_add+0xa2f/0xd80 [ 163.040038][ T5822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 163.040067][ T5822] do_writepages+0x3b1/0x7b0 [ 163.040123][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.040149][ T5822] ? do_raw_spin_lock+0x121/0x290 [ 163.040177][ T5822] ? __pfx_do_writepages+0x10/0x10 [ 163.040215][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.040246][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.040272][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 163.040306][ T5822] filemap_fdatawrite+0x191/0x230 [ 163.040339][ T5822] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 163.040431][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.040465][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 163.040499][ T5822] f2fs_sync_dirty_inodes+0x31f/0x830 [ 163.040553][ T5822] f2fs_write_checkpoint+0x94a/0x1de0 [ 163.040623][ T5822] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 163.040730][ T5822] ? kill_f2fs_super+0x298/0x6c0 [ 163.040770][ T5822] kill_f2fs_super+0x2c3/0x6c0 [ 163.040811][ T5822] ? __pfx_kill_f2fs_super+0x10/0x10 [ 163.040838][ T5822] ? radix_tree_delete_item+0x2b6/0x400 [ 163.040875][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.040901][ T5822] ? shrinker_free+0x2ce/0x3e0 [ 163.040929][ T5822] deactivate_locked_super+0xbc/0x130 [ 163.040957][ T5822] cleanup_mnt+0x425/0x4c0 [ 163.040994][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.041020][ T5822] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.041052][ T5822] task_work_run+0x1d4/0x260 [ 163.041089][ T5822] ? __pfx_task_work_run+0x10/0x10 [ 163.041121][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.041164][ T5822] resume_user_mode_work+0x5e/0x80 [ 163.041198][ T5822] syscall_exit_to_user_mode+0x9a/0x120 [ 163.041228][ T5822] do_syscall_64+0x103/0x210 [ 163.041257][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.041283][ T5822] ? exc_page_fault+0x91/0x110 [ 163.041313][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.041336][ T5822] RIP: 0033:0x7fd28298fc97 [ 163.041356][ T5822] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 163.041376][ T5822] RSP: 002b:00007fffa7db3cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 163.041401][ T5822] RAX: 0000000000000000 RBX: 00007fd282a1089d RCX: 00007fd28298fc97 [ 163.041418][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa7db3db0 [ 163.041433][ T5822] RBP: 00007fffa7db3db0 R08: 0000000000000000 R09: 0000000000000000 [ 163.041449][ T5822] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffa7db4e40 [ 163.041464][ T5822] R13: 00007fd282a1089d R14: 0000000000027c9e R15: 00007fffa7db4e80 [ 163.041502][ T5822] [ 163.041510][ T5822] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 163.157247][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 163.163900][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 163.163933][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 163.163948][ T5822] Call Trace: [ 163.163958][ T5822] [ 163.163968][ T5822] dump_stack_lvl+0x189/0x250 [ 163.164013][ T5822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.164049][ T5822] ? __pfx_queue_work_on+0x10/0x10 [ 163.164072][ T5822] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 163.164098][ T5822] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 163.164126][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.164166][ T5822] f2fs_handle_critical_error+0x37c/0x540 [ 163.164203][ T5822] f2fs_write_end_io+0x4e2/0x6d0 [ 163.164256][ T5822] __submit_merged_bio+0x27a/0x6a0 [ 163.164292][ T5822] __submit_merged_write_cond+0x255/0x530 [ 163.164343][ T5822] f2fs_write_data_pages+0x2854/0x31f0 [ 163.164372][ T5822] ? unwind_next_frame+0x19ae/0x2390 [ 163.164448][ T5822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 163.164499][ T5822] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 163.164564][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.164597][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.164624][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 163.164691][ T5822] ? folios_put_refs+0x559/0x640 [ 163.164741][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.164767][ T5822] ? lru_add+0xa2f/0xd80 [ 163.164796][ T5822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 163.164826][ T5822] do_writepages+0x3b1/0x7b0 [ 163.164881][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.164908][ T5822] ? do_raw_spin_lock+0x121/0x290 [ 163.164935][ T5822] ? __pfx_do_writepages+0x10/0x10 [ 163.164973][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.165006][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.165032][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 163.165067][ T5822] filemap_fdatawrite+0x191/0x230 [ 163.165101][ T5822] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 163.165194][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.165228][ T5822] ? do_raw_spin_unlock+0x122/0x240 [ 163.165263][ T5822] f2fs_sync_dirty_inodes+0x31f/0x830 [ 163.165317][ T5822] f2fs_write_checkpoint+0x94a/0x1de0 [ 163.165383][ T5822] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 163.165482][ T5822] ? kill_f2fs_super+0x298/0x6c0 [ 163.165521][ T5822] kill_f2fs_super+0x2c3/0x6c0 [ 163.165562][ T5822] ? __pfx_kill_f2fs_super+0x10/0x10 [ 163.165589][ T5822] ? radix_tree_delete_item+0x2b6/0x400 [ 163.165626][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.165657][ T5822] ? shrinker_free+0x2ce/0x3e0 [ 163.165687][ T5822] deactivate_locked_super+0xbc/0x130 [ 163.165715][ T5822] cleanup_mnt+0x425/0x4c0 [ 163.165752][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.165778][ T5822] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.165811][ T5822] task_work_run+0x1d4/0x260 [ 163.165848][ T5822] ? __pfx_task_work_run+0x10/0x10 [ 163.165881][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.165923][ T5822] resume_user_mode_work+0x5e/0x80 [ 163.165958][ T5822] syscall_exit_to_user_mode+0x9a/0x120 [ 163.165989][ T5822] do_syscall_64+0x103/0x210 [ 163.166021][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 163.166048][ T5822] ? exc_page_fault+0x91/0x110 [ 163.166078][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.166102][ T5822] RIP: 0033:0x7fd28298fc97 [ 163.166123][ T5822] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 163.166143][ T5822] RSP: 002b:00007fffa7db3cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 163.166168][ T5822] RAX: 0000000000000000 RBX: 00007fd282a1089d RCX: 00007fd28298fc97 [ 163.166184][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa7db3db0 [ 163.166200][ T5822] RBP: 00007fffa7db3db0 R08: 0000000000000000 R09: 0000000000000000 [ 163.166215][ T5822] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffa7db4e40 [ 163.166231][ T5822] R13: 00007fd282a1089d R14: 0000000000027c9e R15: 00007fffa7db4e80 [ 163.166275][ T5822] [ 163.167378][ T5822] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 164.002568][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.188500][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 164.280437][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.301428][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.343345][ T7037] bridge_slave_0: entered allmulticast mode [ 164.352249][ T7037] bridge_slave_0: entered promiscuous mode [ 164.371558][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.390741][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.431970][ T7037] bridge_slave_1: entered allmulticast mode [ 164.469198][ T7037] bridge_slave_1: entered promiscuous mode [ 164.787956][ T7037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.820089][ T7037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.851387][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.346'. [ 165.025574][ T7280] dlm: non-version read from control device 211 [ 165.035292][ T7280] dlm: non-version read from control device 211 [ 165.042511][ T7280] dlm: non-version read from control device 211 [ 165.066773][ T7280] dlm: non-version read from control device 211 [ 165.073511][ T7280] dlm: non-version read from control device 211 [ 165.080109][ T7280] dlm: non-version read from control device 211 [ 165.086513][ T7280] dlm: non-version read from control device 211 [ 165.090767][ T7037] team0: Port device team_slave_0 added [ 165.097869][ T7280] dlm: non-version read from control device 211 [ 165.112147][ T7280] dlm: non-version read from control device 211 [ 165.114790][ T7037] team0: Port device team_slave_1 added [ 165.119591][ T7280] dlm: non-version read from control device 211 [ 165.137127][ T7280] dlm: non-version read from control device 211 [ 165.150873][ T7280] dlm: non-version read from control device 211 [ 165.161863][ T7280] dlm: non-version read from control device 211 [ 165.168518][ T7280] dlm: non-version read from control device 211 [ 165.174820][ T7280] dlm: non-version read from control device 211 [ 165.185767][ T7280] dlm: non-version read from control device 211 [ 165.192239][ T6884] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 165.204662][ T7280] dlm: non-version read from control device 211 [ 165.209957][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.211131][ T7280] dlm: non-version read from control device 211 [ 165.219026][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.230787][ T7280] dlm: non-version read from control device 211 [ 165.251161][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 165.253417][ T7037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.277892][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.284870][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.313380][ T7037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.317493][ T7280] dlm: non-version read from control device 211 [ 165.330789][ T6884] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 165.342635][ T6884] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 165.349447][ T7280] dlm: non-version read from control device 211 [ 165.349484][ T7280] dlm: non-version read from control device 211 [ 165.362280][ T7280] dlm: non-version read from control device 211 [ 165.368700][ T7280] dlm: non-version read from control device 211 [ 165.375051][ T7280] dlm: non-version read from control device 211 [ 165.377095][ T6884] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.392251][ T7280] dlm: non-version read from control device 211 [ 165.398700][ T7280] dlm: non-version read from control device 211 [ 165.405142][ T7280] dlm: non-version read from control device 211 [ 165.420987][ T7280] dlm: non-version read from control device 211 [ 165.433466][ T7280] dlm: non-version read from control device 211 [ 165.442047][ T7280] dlm: non-version read from control device 211 [ 165.465188][ T7280] dlm: non-version read from control device 211 [ 165.479689][ T7280] dlm: non-version read from control device 211 [ 165.491283][ T7280] dlm: non-version read from control device 211 [ 165.522260][ T7037] hsr_slave_0: entered promiscuous mode [ 165.532305][ T7280] dlm: non-version read from control device 211 [ 165.539532][ T7280] dlm: non-version read from control device 211 [ 165.545861][ T7280] dlm: non-version read from control device 211 [ 165.554790][ T7037] hsr_slave_1: entered promiscuous mode [ 165.561169][ T7037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.562442][ T7280] dlm: non-version read from control device 211 [ 165.568796][ T7037] Cannot create hsr debugfs directory [ 165.586238][ T7280] dlm: non-version read from control device 211 [ 165.592676][ T7280] dlm: non-version read from control device 211 [ 165.599249][ T7280] dlm: non-version read from control device 211 [ 165.605522][ T7280] dlm: non-version read from control device 211 [ 165.617541][ T7280] dlm: non-version read from control device 211 [ 165.625278][ T7280] dlm: non-version read from control device 211 [ 165.640035][ T7280] dlm: non-version read from control device 211 [ 165.646997][ T7280] dlm: non-version read from control device 211 [ 165.654252][ T7280] dlm: non-version read from control device 211 [ 165.677250][ T7280] dlm: non-version read from control device 211 [ 165.683613][ T7280] dlm: non-version read from control device 211 [ 165.697909][ T7280] dlm: non-version read from control device 211 [ 165.704219][ T7280] dlm: non-version read from control device 211 [ 165.746645][ T7280] dlm: non-version read from control device 211 [ 165.777415][ T7280] dlm: non-version read from control device 211 [ 165.783720][ T7280] dlm: non-version read from control device 211 [ 165.807309][ T7280] dlm: non-version read from control device 211 [ 165.813663][ T7280] dlm: non-version read from control device 211 [ 165.833279][ T7280] dlm: non-version read from control device 211 [ 165.841717][ T7280] dlm: non-version read from control device 211 [ 165.851135][ T7280] dlm: non-version read from control device 211 [ 165.862556][ T7280] dlm: non-version read from control device 211 [ 165.919980][ T6884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.084612][ T6884] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.139714][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.146926][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.159568][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.166722][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.239655][ T7037] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 166.267310][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 166.282272][ T7037] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 166.313727][ T6884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.333413][ T7037] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 166.356903][ T7037] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 166.585716][ T7037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.633752][ T7037] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.658822][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.666003][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.713010][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.720248][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.784369][ T6884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.935163][ T6884] veth0_vlan: entered promiscuous mode [ 166.956738][ T6884] veth1_vlan: entered promiscuous mode [ 167.052067][ T6884] veth0_macvtap: entered promiscuous mode [ 167.074878][ T6884] veth1_macvtap: entered promiscuous mode [ 167.116825][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.134442][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.160789][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.175142][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.192536][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.207042][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.222468][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.234302][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.252215][ T6884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.307390][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 167.334515][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.350196][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.360491][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.372956][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.382996][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.395883][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.406287][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.416934][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.429046][ T6884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.461777][ T6884] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.471199][ T6884] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.483943][ T6884] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.492743][ T6884] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.571779][ T7037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.636610][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.663341][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.752602][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.778634][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.115203][ T7037] veth0_vlan: entered promiscuous mode [ 168.149075][ T7037] veth1_vlan: entered promiscuous mode [ 168.194868][ T7037] veth0_macvtap: entered promiscuous mode [ 168.216589][ T7037] veth1_macvtap: entered promiscuous mode [ 168.241947][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.253692][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.263678][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.274417][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.285050][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.297495][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.307948][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.319579][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.329483][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.340079][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.350018][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 168.369288][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.410901][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.447328][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.463751][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.476043][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.486143][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.500093][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.510639][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.522282][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.536812][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.554092][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.565887][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.630109][ T7037] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.647106][ T7037] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.658840][ T7037] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.669610][ T7037] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.728678][ T1326] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.960222][ T1326] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.044867][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.076702][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.196980][ T1326] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.258971][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.266851][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.362889][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.386472][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.393707][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 169.403686][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.411719][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.422074][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.442365][ T1326] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.887262][ T970] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 169.954237][ T7362] loop4: detected capacity change from 0 to 4096 [ 170.060150][ T970] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.098634][ T970] usb 2-1: config 0 interface 0 has no altsetting 0 [ 170.105331][ T970] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 170.114844][ T7362] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 170.203152][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.257339][ T5883] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 170.285662][ T970] usb 2-1: config 0 descriptor?? [ 170.296666][ T1326] bridge_slave_1: left allmulticast mode [ 170.317346][ T1326] bridge_slave_1: left promiscuous mode [ 170.323259][ T1326] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.407628][ T1326] bridge_slave_0: left allmulticast mode [ 170.418187][ T1326] bridge_slave_0: left promiscuous mode [ 170.427221][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 170.435409][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 170.438334][ T1326] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.493615][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 170.527946][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.590747][ T5883] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 170.617464][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.657240][ T5883] usb 3-1: Product: syz [ 170.668322][ T5883] usb 3-1: Manufacturer: syz [ 170.672954][ T5883] usb 3-1: SerialNumber: syz [ 170.729101][ T5883] usb 3-1: config 0 descriptor?? [ 170.753652][ T5883] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 170.754410][ T970] hid-rmi 0003:0461:4E72.0004: item 0 2 0 8 parsing failed [ 170.797209][ T5883] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 170.808229][ T970] hid-rmi 0003:0461:4E72.0004: parse failed [ 170.827594][ T970] hid-rmi 0003:0461:4E72.0004: probe with driver hid-rmi failed with error -22 [ 171.036617][ T970] usb 2-1: USB disconnect, device number 6 [ 171.206510][ T7371] loop6: detected capacity change from 0 to 32768 [ 171.365011][ T5883] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 171.390374][ T5883] em28xx 3-1:0.0: Config register raw data: 0x56 [ 171.395522][ T7371] JBD2: Ignoring recovery information on journal [ 171.467898][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 171.475482][ T5841] Bluetooth: hci4: command tx timeout [ 171.597576][ T5883] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 171.604621][ T5883] em28xx 3-1:0.0: No AC97 audio processor [ 171.612683][ T7371] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 171.647838][ T5883] usb 3-1: USB disconnect, device number 3 [ 171.682573][ T5883] em28xx 3-1:0.0: Disconnecting em28xx [ 171.734212][ T7376] loop5: detected capacity change from 0 to 32768 [ 171.746617][ T5883] em28xx 3-1:0.0: Freeing device [ 171.755305][ T30] audit: type=1800 audit(1746094686.383:17): pid=7371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.347" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 171.787673][ T7376] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.350 (7376) [ 171.835731][ T7398] netlink: 104 bytes leftover after parsing attributes in process `syz.1.354'. [ 171.962754][ T7376] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.041980][ T7376] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 172.056575][ T7376] BTRFS info (device loop5): disk space caching is enabled [ 172.088740][ T7376] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 172.203927][ T7037] ocfs2: Unmounting device (7,6) on (node local) [ 172.392782][ T7376] BTRFS info (device loop5): rebuilding free space tree [ 172.499000][ T7376] BTRFS info (device loop5): disabling free space tree [ 172.507643][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 172.543942][ T7376] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 172.568120][ T30] audit: type=1326 audit(1746094687.193:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.2.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28298e969 code=0x7fc00000 [ 172.582688][ T7376] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 172.641921][ T1326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.692820][ T1326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.733371][ T1326] bond0 (unregistering): Released all slaves [ 172.956736][ T5824] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.981055][ T7392] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.353'. [ 173.268889][ T30] audit: type=1326 audit(1746094687.873:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.2.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd28298e969 code=0x7fc00000 [ 173.547231][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 173.554377][ T5841] Bluetooth: hci4: command tx timeout [ 174.092232][ T7346] chnl_net:caif_netlink_parms(): no params data found [ 174.179001][ T7472] netlink: 40 bytes leftover after parsing attributes in process `syz.5.371'. [ 174.248454][ T7474] sg_write: data in/out 8156/14 bytes for SCSI command 0x0-- guessing data in; [ 174.248454][ T7474] program syz.4.372 not setting count and/or reply_len properly [ 174.329619][ T1326] hsr_slave_0: left promiscuous mode [ 174.365470][ T1326] hsr_slave_1: left promiscuous mode [ 174.405294][ T1326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.426398][ T1326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.473541][ T1326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.484899][ T1326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.581402][ T1326] veth1_macvtap: left promiscuous mode [ 174.587227][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 174.607338][ T1326] veth0_macvtap: left promiscuous mode [ 174.625706][ T1326] veth1_vlan: left promiscuous mode [ 174.634915][ T7487] loop4: detected capacity change from 0 to 512 [ 174.644653][ T1326] veth0_vlan: left promiscuous mode [ 174.684205][ T7487] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 174.752109][ T7487] EXT4-fs (loop4): 1 truncate cleaned up [ 174.810140][ T7487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.833849][ T7487] EXT4-fs error (device loop4): ext4_find_dest_de:2054: inode #2: block 13: comm syz.4.376: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 174.861333][ T7487] EXT4-fs (loop4): Remounting filesystem read-only [ 174.941578][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.379239][ T7507] loop4: detected capacity change from 0 to 256 [ 175.413910][ T7507] exfat: Deprecated parameter 'namecase' [ 175.441641][ T7507] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 175.627251][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 175.634969][ T5841] Bluetooth: hci4: command tx timeout [ 176.006827][ T7523] loop4: detected capacity change from 0 to 16 [ 176.040211][ T7523] erofs (device loop4): mounted with root inode @ nid 36. [ 176.083351][ T7520] loop2: detected capacity change from 0 to 4096 [ 176.640914][ T1326] team0 (unregistering): Port device team_slave_1 removed [ 176.668638][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 176.895395][ T1326] team0 (unregistering): Port device team_slave_0 removed [ 177.717223][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 177.727462][ T5841] Bluetooth: hci4: command tx timeout [ 177.767906][ T7550] loop4: detected capacity change from 0 to 32768 [ 177.814409][ T7550] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.391 (7550) [ 177.886830][ T7550] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.927292][ T7550] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 177.946527][ T7550] BTRFS info (device loop4): using free-space-tree [ 178.730839][ T7593] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 178.747235][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 178.864750][ T5826] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.207844][ T7346] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.219631][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.226850][ T7346] bridge_slave_0: entered allmulticast mode [ 179.277311][ T7346] bridge_slave_0: entered promiscuous mode [ 179.330682][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.359158][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.399129][ T7346] bridge_slave_1: entered allmulticast mode [ 179.417081][ T7346] bridge_slave_1: entered promiscuous mode [ 179.736075][ T7346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.787219][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 179.797973][ T7346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.162642][ T7346] team0: Port device team_slave_0 added [ 180.334921][ T7346] team0: Port device team_slave_1 added [ 180.379972][ T5884] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 180.726847][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.757892][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.794105][ T7638] loop6: detected capacity change from 0 to 32768 [ 180.829451][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 180.837749][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 180.838091][ T5884] usb 2-1: config 0 has an invalid interface number: 154 but max is 0 [ 180.853349][ T5884] usb 2-1: config 0 has no interface number 0 [ 180.862491][ T5884] usb 2-1: New USB device found, idVendor=0b95, idProduct=7e2b, bcdDevice=c4.04 [ 180.871796][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.881706][ T5884] usb 2-1: Product: syz [ 180.886077][ T5884] usb 2-1: Manufacturer: syz [ 180.911446][ T7346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.917503][ T5884] usb 2-1: SerialNumber: syz [ 180.932382][ T5884] usb 2-1: config 0 descriptor?? [ 181.026121][ T7638] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=gzip,erasure_code,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 181.026121][ T7638] allowing incompatible features above 0.0: (unknown version) [ 181.054508][ T7638] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 181.062977][ T7638] bcachefs (loop6): Version upgrade required: [ 181.062977][ T7638] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 181.062977][ T7638] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 181.062977][ T7638] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 181.135010][ T7638] bcachefs (loop6): dropping and reconstructing all alloc info [ 181.149906][ T7638] bcachefs (loop6): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 181.153760][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.169990][ T7638] bcachefs (loop6): bcachefs (loop6): error validating btree node on loop6 at btree dirents level 0/0 [ 181.170021][ T7638] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 281474976710656: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 181.170041][ T7638] node offset 0/24: incorrect min_key: got 0:0:7 should be POS_MIN, btree topology error: [ 181.209282][ T7638] bcachefs (loop6): flagging btree dirents lost data [ 181.216251][ T7638] bcachefs (loop6): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 181.228660][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.257612][ T7638] bcachefs (loop6): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 181.284800][ T7638] bcachefs (loop6): scan_for_btree_nodes... [ 181.290726][ T7635] loop5: detected capacity change from 0 to 32768 [ 181.313134][ T7635] (syz.5.410,7635,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 181.335029][ T7346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.338373][ T7635] (syz.5.410,7635,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 181.413918][ T7638] bcachefs (loop6): btree node scan found 7 nodes after overwrites [ 181.422091][ T7638] done [ 181.425351][ T7638] bcachefs (loop6): check_topology... [ 181.427968][ T7638] bcachefs (loop6): btree root dirents unreadable, must recover from scan [ 181.442415][ T7638] bcachefs (loop6): bch2_get_scanned_nodes(): recovery btree=dirents level=0 POS_MIN - SPOS_MAX [ 181.453191][ T7638] bcachefs (loop6): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key 0:0:7 durability: 1 ptr: 0:41:0 gen 0 [ 181.486268][ T7638] bcachefs (loop6): bch2_get_scanned_nodes(): recovery btree=dirents level=0 POS_MIN - 0:0:6 [ 181.502529][ T7638] bcachefs (loop6): btree node with incorrect min_key at btree=dirents level=1: [ 181.502557][ T7638] parent: u64s 5 type btree_ptr SPOS_MAX len 0 ver 0 [ 181.502571][ T7638] next: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key 0:0:7 durability: 1 ptr: 0:41:0 gen 0, fixing [ 181.536018][ T7638] bcachefs (loop6): set_node_min(): u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key 0:0:7 durability: 1 ptr: 0:41:0 gen 0 -> POS_MIN [ 181.553806][ T7638] done [ 181.558926][ T7638] bcachefs (loop6): accounting_read... [ 181.570037][ T7635] JBD2: Ignoring recovery information on journal [ 181.584807][ T7638] done [ 181.587929][ T7638] bcachefs (loop6): alloc_read... done [ 181.593544][ T7638] bcachefs (loop6): snapshots_read... done [ 181.599699][ T7638] bcachefs (loop6): Fixed errors, running fsck a second time to verify fs is clean [ 181.612089][ T7638] bcachefs (loop6): done starting filesystem [ 181.628175][ T5884] asix 2-1:0.154 (unnamed net_device) (uninitialized): invalid hw address, using random [ 181.686351][ T7635] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 181.746836][ T7346] hsr_slave_0: entered promiscuous mode [ 181.754555][ T7037] bcachefs (loop6): shutting down [ 181.762845][ T7346] hsr_slave_1: entered promiscuous mode [ 181.790056][ T7346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.801844][ T7346] Cannot create hsr debugfs directory [ 181.834544][ T5884] asix 2-1:0.154 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 181.853757][ T7656] veth1_macvtap: left promiscuous mode [ 181.867222][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 181.876318][ T7037] bcachefs (loop6): shutdown complete [ 181.877820][ T5884] asix 2-1:0.154 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 181.890231][ T7656] macsec0: entered promiscuous mode [ 181.902786][ T5884] asix 2-1:0.154: probe with driver asix failed with error -71 [ 181.920242][ T7635] (syz.5.410,7635,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 181.937555][ T5884] usb 2-1: USB disconnect, device number 7 [ 181.942233][ T7656] macsec0: entered allmulticast mode [ 181.963953][ T7659] veth1_macvtap: entered promiscuous mode [ 182.019272][ T7659] veth1_macvtap: entered allmulticast mode [ 182.025389][ T7659] macsec0: left promiscuous mode [ 182.074945][ T7659] macsec0: left allmulticast mode [ 182.086626][ T7665] loop4: detected capacity change from 0 to 512 [ 182.127351][ T7659] veth1_macvtap: left allmulticast mode [ 182.200035][ T7665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.234332][ T5824] ocfs2: Unmounting device (7,5) on (node local) [ 182.239068][ T7665] ext4 filesystem being mounted at /80/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.398046][ T7665] EXT4-fs (loop4): shut down requested (2) [ 182.564773][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 182.584952][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.641022][ T7677] netlink: 'syz.2.418': attribute type 1 has an invalid length. [ 182.907226][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 183.322408][ T7694] loop2: detected capacity change from 0 to 4096 [ 183.489572][ T30] audit: type=1800 audit(1746094698.123:20): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.423" name="file0" dev="loop2" ino=33 res=0 errno=0 [ 183.948158][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 184.307639][ T7346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 184.374735][ T7719] loop2: detected capacity change from 0 to 1024 [ 184.423174][ T7346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 184.535399][ T7725] loop5: detected capacity change from 0 to 512 [ 184.558270][ T7346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 184.638179][ T7346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 184.790958][ T7725] EXT4-fs (loop5): 1 orphan inode deleted [ 184.816906][ T7725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.840072][ T6494] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 184.860088][ T7731] sctp: [Deprecated]: syz.1.434 (pid 7731) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.860088][ T7731] Use struct sctp_sack_info instead [ 184.888786][ T7725] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.901379][ T6494] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 1 [ 184.906503][ T7346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.997217][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 185.018828][ T7346] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.088853][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.096065][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.166914][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.174241][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.239764][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.502343][ T7346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.603514][ T7747] ALSA: mixer_oss: invalid OSS volume '' [ 186.027413][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 186.104093][ T7346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.119160][ T7762] loop6: detected capacity change from 0 to 1024 [ 186.249600][ T7767] loop2: detected capacity change from 0 to 128 [ 186.256689][ T7767] EXT4-fs: Ignoring removed nobh option [ 186.264984][ T7762] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.308121][ T7762] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.368821][ T7767] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.396758][ T7346] veth0_vlan: entered promiscuous mode [ 186.445169][ T7767] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 186.501017][ T7762] EXT4-fs (loop6): shut down requested (1) [ 186.538717][ T7346] veth1_vlan: entered promiscuous mode [ 186.697660][ T7037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.767799][ T7346] veth0_macvtap: entered promiscuous mode [ 186.831186][ T5822] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.845244][ T7346] veth1_macvtap: entered promiscuous mode [ 186.904504][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.954204][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.028269][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.068354][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 187.077335][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.117348][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.172478][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.202941][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.214817][ T7782] loop5: detected capacity change from 0 to 2048 [ 187.233898][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.255832][ T7782] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.294295][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.342604][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.379492][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.429116][ T5884] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 187.446152][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.497566][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.517255][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.557685][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.587291][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.617674][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.627645][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 187.656508][ T5884] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 187.666596][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.681162][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.692985][ T5884] usb 5-1: Product: syz [ 187.693556][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.717401][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.719152][ T5884] usb 5-1: Manufacturer: syz [ 187.744296][ T5884] usb 5-1: SerialNumber: syz [ 187.745386][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.750593][ T7793] sock: sock_set_timeout: `syz.1.454' (pid 7793) tries to set negative timeout [ 187.781502][ T5884] usb 5-1: config 0 descriptor?? [ 187.790694][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.793350][ T5884] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 187.824614][ T7346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.858106][ T7346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.888525][ T5884] usb 5-1: Detected FT232H [ 187.914080][ T7346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.930347][ T7346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.004334][ T5884] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 188.107216][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 188.145195][ T7778] loop6: detected capacity change from 0 to 32768 [ 188.287360][ T7778] ERROR: (device loop6): dbAllocNext: Corrupt dmap page [ 188.287360][ T7778] [ 188.355977][ T6494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.376329][ T6494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.456618][ T5884] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 188.477245][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 188.512817][ T6494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.540664][ T6494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.637749][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 188.687928][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.726618][ T9] usb 6-1: config 0 has no interface number 0 [ 188.731959][ T48] usb 5-1: USB disconnect, device number 3 [ 188.741556][ T9] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 188.753480][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.767066][ T9] usb 6-1: Product: syz [ 188.777427][ T9] usb 6-1: Manufacturer: syz [ 188.803805][ T9] usb 6-1: SerialNumber: syz [ 188.833790][ T48] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 188.834663][ T9] usb 6-1: config 0 descriptor?? [ 188.869802][ T48] ftdi_sio 5-1:0.0: device disconnected [ 188.940382][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 189.157386][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 189.463433][ T54] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.650126][ T54] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.804811][ T54] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.902957][ T54] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.965388][ T9] gspca_spca1528: reg_w err -71 [ 189.975050][ T9] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 190.015020][ T9] usb 6-1: USB disconnect, device number 4 [ 190.187300][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 190.217508][ T54] bridge_slave_1: left allmulticast mode [ 190.227779][ T54] bridge_slave_1: left promiscuous mode [ 190.249495][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.305180][ T54] bridge_slave_0: left allmulticast mode [ 190.314178][ T54] bridge_slave_0: left promiscuous mode [ 190.336697][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.419241][ T7831] loop1: detected capacity change from 0 to 1024 [ 190.472285][ T7831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.731399][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.902337][ T7840] loop6: detected capacity change from 0 to 1024 [ 191.006449][ T7845] kernel read not supported for file /bus (pid: 7845 comm: syz.1.475) [ 191.092751][ T30] audit: type=1800 audit(1746094705.723:21): pid=7845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.475" name="bus" dev="mqueue" ino=15856 res=0 errno=0 [ 191.148285][ T13] hfsplus: b-tree write err: -5, ino 4 [ 191.162822][ T5133] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.175867][ T5133] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.185983][ T5133] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.204880][ T5133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.217545][ T5133] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.227260][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 191.341397][ T7853] input: syz0 as /devices/virtual/input/input9 [ 191.356588][ T30] audit: type=1326 audit(1746094705.983:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.5.479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d8dd8e969 code=0x0 [ 191.889146][ T7858] loop1: detected capacity change from 0 to 32768 [ 191.939163][ T7858] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 192.058567][ T7858] XFS (loop1): Ending clean mount [ 192.115679][ T7849] loop2: detected capacity change from 0 to 32768 [ 192.123764][ T5827] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 192.159171][ T7849] XFS: ikeep mount option is deprecated. [ 192.238953][ T7849] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 192.277226][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 192.391646][ T7849] XFS (loop2): Ending clean mount [ 192.416175][ T7849] XFS (loop2): Quotacheck needed: Please wait. [ 192.658885][ T7849] XFS (loop2): Quotacheck: Done. [ 192.809472][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.898380][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.923977][ T54] bond0 (unregistering): Released all slaves [ 192.957075][ T5822] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 193.307223][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 193.314488][ T5133] Bluetooth: hci4: command tx timeout [ 193.356329][ T7878] loop5: detected capacity change from 0 to 32768 [ 193.460604][ T7878] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 193.636465][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.642859][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.730432][ T7913] loop8: detected capacity change from 0 to 8 [ 193.738628][ T7878] XFS (loop5): Ending clean mount [ 193.752881][ T7913] Dev loop8: unable to read RDB block 8 [ 193.761493][ T7913] loop8: unable to read partition table [ 193.775902][ T7913] loop8: partition table beyond EOD, truncated [ 193.779277][ T7915] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 193.779277][ T7915] The task syz.2.488 (7915) triggered the difference, watch for misbehavior. [ 193.787043][ T7913] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 193.838175][ T7878] XFS (loop5): Quotacheck needed: Please wait. [ 193.869230][ T5884] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 193.939629][ T7878] XFS (loop5): Quotacheck: Done. [ 194.037763][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 194.063143][ T5884] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 194.072666][ T5884] usb 5-1: config 0 has no interface number 0 [ 194.088692][ T5884] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.125717][ T5884] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 194.126430][ T7918] loop6: detected capacity change from 0 to 256 [ 194.166889][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.171690][ T5824] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 194.214814][ T5884] usb 5-1: config 0 descriptor?? [ 194.322592][ T54] hsr_slave_0: left promiscuous mode [ 194.347276][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 194.376073][ T54] hsr_slave_1: left promiscuous mode [ 194.409240][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.416765][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.417999][ T5884] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 194.553121][ T5884] usb 5-1: USB disconnect, device number 4 [ 194.574704][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.618275][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.633017][ T7924] loop6: detected capacity change from 0 to 1024 [ 194.713465][ T54] veth1_macvtap: left promiscuous mode [ 194.748503][ T7924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.763166][ T7924] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.781379][ T7924] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 194.794651][ T54] veth0_macvtap: left promiscuous mode [ 194.811331][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'. [ 194.851899][ T54] veth1_vlan: left promiscuous mode [ 194.875222][ T54] veth0_vlan: left promiscuous mode [ 194.934555][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 194.977242][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 194.977242][ T12] [ 195.002546][ T12] EXT4-fs (loop6): Total free blocks count 0 [ 195.021541][ T12] EXT4-fs (loop6): Free/Dirty block details [ 195.037704][ T12] EXT4-fs (loop6): free_blocks=4293918720 [ 195.047231][ T12] EXT4-fs (loop6): dirty_blocks=16 [ 195.052390][ T12] EXT4-fs (loop6): Block reservation details [ 195.080216][ T12] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 195.142469][ T7037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.397221][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 195.405059][ T5133] Bluetooth: hci4: command tx timeout [ 196.427300][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 196.757918][ T54] team0 (unregistering): Port device team_slave_1 removed [ 196.767692][ T7963] loop1: detected capacity change from 0 to 32768 [ 196.794684][ T7963] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.515 (7963) [ 196.903286][ T7963] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.923735][ T7967] loop6: detected capacity change from 0 to 32768 [ 196.932917][ T7963] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 196.972407][ T7963] BTRFS info (device loop1): disk space caching is enabled [ 196.982856][ T7963] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 196.985422][ T7967] (syz.6.516,7967,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 197.055086][ T7967] (syz.6.516,7967,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 197.081439][ T54] team0 (unregistering): Port device team_slave_0 removed [ 197.184409][ T7967] JBD2: Ignoring recovery information on journal [ 197.334797][ T7967] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 197.346270][ T7963] BTRFS info (device loop1): rebuilding free space tree [ 197.413785][ T7963] BTRFS info (device loop1): disabling free space tree [ 197.423169][ T7963] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 197.457847][ T7963] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 197.468845][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 197.486003][ T5133] Bluetooth: hci4: command tx timeout [ 197.664117][ T7037] ocfs2: Unmounting device (7,6) on (node local) [ 197.874244][ T5827] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.517277][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 198.570083][ T8004] loop5: detected capacity change from 0 to 512 [ 198.578345][ T8004] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.662210][ T8004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.729001][ T8004] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.846152][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.261395][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'. [ 199.547218][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 199.554695][ T5133] Bluetooth: hci4: command tx timeout [ 199.736844][ T7846] chnl_net:caif_netlink_parms(): no params data found [ 199.896950][ T8035] syzkaller1: entered promiscuous mode [ 199.915292][ T8035] syzkaller1: entered allmulticast mode [ 200.587310][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 201.136277][ T7846] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.157947][ T7846] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.186334][ T7846] bridge_slave_0: entered allmulticast mode [ 201.208764][ T7846] bridge_slave_0: entered promiscuous mode [ 201.229152][ T7846] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.236343][ T7846] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.257460][ T7846] bridge_slave_1: entered allmulticast mode [ 201.275693][ T7846] bridge_slave_1: entered promiscuous mode [ 201.529475][ T7846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.564826][ T7846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.627244][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 201.673425][ T8053] loop4: detected capacity change from 0 to 256 [ 201.794807][ T7846] team0: Port device team_slave_0 added [ 201.829267][ T7846] team0: Port device team_slave_1 added [ 201.913792][ T8033] loop5: detected capacity change from 0 to 262144 [ 201.954055][ T8033] F2FS-fs (loop5): invalid crc value [ 201.968439][ T8053] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 202.032375][ T8053] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 202.099447][ T8053] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 202.109168][ T8033] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 202.136977][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.147303][ T8053] UDF-fs: Scanning with blocksize 512 failed [ 202.178950][ T8053] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 202.183110][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.248646][ T7846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.265910][ T8053] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.415856][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.426475][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.517996][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.525989][ T7846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.549194][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.563761][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.581874][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.590335][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.667217][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 202.750838][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.039231][ T8079] loop1: detected capacity change from 0 to 16 [ 203.132519][ T8079] erofs (device loop1): mounted with root inode @ nid 36. [ 203.178383][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.218906][ T8083] netlink: 432 bytes leftover after parsing attributes in process `syz.6.556'. [ 203.246973][ T7846] hsr_slave_0: entered promiscuous mode [ 203.288149][ T7846] hsr_slave_1: entered promiscuous mode [ 203.294606][ T7846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.310680][ T7846] Cannot create hsr debugfs directory [ 203.322401][ T8083] netlink: 56 bytes leftover after parsing attributes in process `syz.6.556'. [ 203.402406][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.637850][ T8089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.707212][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 203.872164][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.669561][ T5841] Bluetooth: hci0: command tx timeout [ 204.703921][ T13] bridge_slave_1: left allmulticast mode [ 204.713462][ T13] bridge_slave_1: left promiscuous mode [ 204.721208][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.747768][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 204.753217][ T13] bridge_slave_0: left allmulticast mode [ 204.763211][ T13] bridge_slave_0: left promiscuous mode [ 204.771728][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.624102][ T8123] loop1: detected capacity change from 0 to 512 [ 205.664386][ T8123] ext4: Bad value for 'sb' [ 205.787226][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 206.253791][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.275652][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.296987][ T13] bond0 (unregistering): Released all slaves [ 206.748922][ T5841] Bluetooth: hci0: command tx timeout [ 206.827214][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 206.950381][ T1201] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 206.977754][ T1201] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 207.004821][ T1201] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 207.025163][ T1201] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 207.034711][ T8131] loop5: detected capacity change from 0 to 40427 [ 207.095147][ T1201] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 207.128190][ T8131] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3fffff [ 207.136940][ T1201] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 207.175691][ T1201] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 207.192703][ T8131] F2FS-fs (loop5): invalid crc value [ 207.221152][ T1201] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 207.264950][ T1201] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 207.283023][ T1201] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 207.323116][ T1201] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 207.333393][ T8065] chnl_net:caif_netlink_parms(): no params data found [ 207.362144][ T1201] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 207.362198][ T1201] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 207.362223][ T1201] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 207.362246][ T1201] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 207.362269][ T1201] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 207.386289][ T1201] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 207.592898][ T8131] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 207.625597][ T8131] syz.5.576: attempt to access beyond end of device [ 207.625597][ T8131] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 207.737411][ T1201] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 207.753891][ T13] hsr_slave_0: left promiscuous mode [ 207.773283][ T5824] syz-executor: attempt to access beyond end of device [ 207.773283][ T5824] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 207.791916][ T13] hsr_slave_1: left promiscuous mode [ 207.805989][ T5824] CPU: 0 UID: 0 PID: 5824 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 207.806026][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 207.806041][ T5824] Call Trace: [ 207.806051][ T5824] [ 207.806061][ T5824] dump_stack_lvl+0x189/0x250 [ 207.806106][ T5824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.806143][ T5824] ? __pfx_queue_work_on+0x10/0x10 [ 207.806165][ T5824] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 207.806192][ T5824] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 207.806219][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.806257][ T5824] f2fs_handle_critical_error+0x37c/0x540 [ 207.806293][ T5824] f2fs_write_end_io+0x4e2/0x6d0 [ 207.806341][ T5824] __submit_merged_bio+0x27a/0x6a0 [ 207.806373][ T5824] __submit_merged_write_cond+0x255/0x530 [ 207.806423][ T5824] f2fs_write_data_pages+0x2854/0x31f0 [ 207.806451][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.806517][ T5824] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 207.806604][ T5824] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 207.806667][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.806696][ T5824] ? cgroup_rstat_updated+0x144/0xb50 [ 207.806739][ T5824] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 207.806793][ T5824] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 207.806823][ T5824] do_writepages+0x3b1/0x7b0 [ 207.806874][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.806900][ T5824] ? do_raw_spin_lock+0x121/0x290 [ 207.806929][ T5824] ? __pfx_do_writepages+0x10/0x10 [ 207.806965][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.806997][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.807024][ T5824] ? do_raw_spin_unlock+0x122/0x240 [ 207.807058][ T5824] filemap_fdatawrite+0x191/0x230 [ 207.807092][ T5824] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 207.807174][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.807208][ T5824] ? do_raw_spin_unlock+0x122/0x240 [ 207.807242][ T5824] f2fs_sync_dirty_inodes+0x31f/0x830 [ 207.807290][ T5824] f2fs_write_checkpoint+0x94a/0x1de0 [ 207.807347][ T5824] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 207.807444][ T5824] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 207.807475][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.807505][ T5824] ? kfree+0x193/0x440 [ 207.807534][ T5824] ? kill_f2fs_super+0x298/0x6c0 [ 207.807571][ T5824] kill_f2fs_super+0x2c3/0x6c0 [ 207.807609][ T5824] ? __pfx_kill_f2fs_super+0x10/0x10 [ 207.807637][ T5824] ? radix_tree_delete_item+0x2b6/0x400 [ 207.807681][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.807708][ T5824] ? shrinker_free+0x2ce/0x3e0 [ 207.807737][ T5824] deactivate_locked_super+0xbc/0x130 [ 207.807763][ T5824] cleanup_mnt+0x425/0x4c0 [ 207.807800][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.807828][ T5824] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.807858][ T5824] task_work_run+0x1d4/0x260 [ 207.807895][ T5824] ? __pfx_task_work_run+0x10/0x10 [ 207.807927][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.807967][ T5824] resume_user_mode_work+0x5e/0x80 [ 207.808002][ T5824] syscall_exit_to_user_mode+0x9a/0x120 [ 207.808032][ T5824] do_syscall_64+0x103/0x210 [ 207.808063][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 207.808090][ T5824] ? exc_page_fault+0x91/0x110 [ 207.808119][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.808142][ T5824] RIP: 0033:0x7f9d8dd8fc97 [ 207.808164][ T5824] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 207.808184][ T5824] RSP: 002b:00007ffc8d38be48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 207.808208][ T5824] RAX: 0000000000000000 RBX: 00007f9d8de1089d RCX: 00007f9d8dd8fc97 [ 207.808225][ T5824] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8d38bf00 [ 207.808240][ T5824] RBP: 00007ffc8d38bf00 R08: 0000000000000000 R09: 0000000000000000 [ 207.808255][ T5824] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc8d38cf90 [ 207.808271][ T5824] R13: 00007f9d8de1089d R14: 0000000000032b0c R15: 00007ffc8d38cfd0 [ 207.808309][ T5824] [ 208.199387][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 208.202060][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.221084][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.238001][ T5824] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 208.278574][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.286073][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.326595][ T13] veth1_macvtap: left promiscuous mode [ 208.342183][ T13] veth0_macvtap: left promiscuous mode [ 208.351932][ T13] veth1_vlan: left promiscuous mode [ 208.361535][ T13] veth0_vlan: left promiscuous mode [ 208.495017][ T8164] loop6: detected capacity change from 0 to 32768 [ 208.594444][ T1201] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 208.605540][ T1201] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 208.615329][ T1201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.626632][ T1201] usb 2-1: config 0 descriptor?? [ 208.639033][ T8156] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 208.683770][ T8165] ERROR: (device loop6): dbAdjCtl: the maximum free buddy is not the old root [ 208.683770][ T8165] [ 208.747518][ T8165] ERROR: (device loop6): remounting filesystem as read-only [ 208.827961][ T5841] Bluetooth: hci0: command tx timeout [ 209.112428][ T1201] elan 0003:04F3:0755.0006: ignoring exceeding usage max [ 209.157929][ T1201] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 209.227431][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 209.306716][ T9] usb 2-1: USB disconnect, device number 8 [ 209.874373][ T13] team0 (unregistering): Port device team_slave_1 removed [ 209.991296][ T30] audit: type=1326 audit(1746094724.623:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8166 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ec98e969 code=0x7fc00000 [ 210.019658][ T30] audit: type=1326 audit(1746094724.623:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8166 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35ec98e969 code=0x7fc00000 [ 210.051877][ T30] audit: type=1326 audit(1746094724.623:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8166 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ec98e969 code=0x7fc00000 [ 210.081103][ T13] team0 (unregistering): Port device team_slave_0 removed [ 210.111711][ T30] audit: type=1326 audit(1746094724.623:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8166 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ec98e969 code=0x7fc00000 [ 210.161347][ T30] audit: type=1326 audit(1746094724.623:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8166 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ec98e969 code=0x7fc00000 [ 210.212488][ T30] audit: type=1326 audit(1746094724.623:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8166 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ec98e969 code=0x7fc00000 [ 210.254003][ T30] audit: type=1326 audit(1746094724.623:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8166 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ec98e969 code=0x7fc00000 [ 210.276279][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 210.322242][ T30] audit: type=1326 audit(1746094724.623:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8166 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ec98e969 code=0x7fc00000 [ 210.359861][ T30] audit: type=1326 audit(1746094724.623:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8166 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ec98e969 code=0x7fc00000 [ 210.454630][ T30] audit: type=1326 audit(1746094724.623:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8166 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ec98e969 code=0x7fc00000 [ 210.666098][ T8184] loop6: detected capacity change from 0 to 40427 [ 210.676795][ T8184] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288) [ 210.690998][ T8184] F2FS-fs (loop6): invalid crc value [ 210.860339][ T8184] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 210.916514][ T5841] Bluetooth: hci0: command tx timeout [ 210.931497][ T7037] syz-executor: attempt to access beyond end of device [ 210.931497][ T7037] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 210.952004][ T7037] CPU: 0 UID: 0 PID: 7037 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 210.952036][ T7037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 210.952052][ T7037] Call Trace: [ 210.952061][ T7037] [ 210.952071][ T7037] dump_stack_lvl+0x189/0x250 [ 210.952116][ T7037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.952152][ T7037] ? __pfx_queue_work_on+0x10/0x10 [ 210.952175][ T7037] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 210.952200][ T7037] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 210.952227][ T7037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.952264][ T7037] f2fs_handle_critical_error+0x37c/0x540 [ 210.952300][ T7037] f2fs_write_end_io+0x4e2/0x6d0 [ 210.952348][ T7037] __submit_merged_bio+0x27a/0x6a0 [ 210.952381][ T7037] __submit_merged_write_cond+0x255/0x530 [ 210.952439][ T7037] f2fs_write_data_pages+0x2854/0x31f0 [ 210.952466][ T7037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.952534][ T7037] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 210.952622][ T7037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.952674][ T7037] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 210.952696][ T7037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.952719][ T7037] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.952759][ T7037] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 210.952785][ T7037] do_writepages+0x3b1/0x7b0 [ 210.952830][ T7037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.952854][ T7037] ? do_raw_spin_lock+0x121/0x290 [ 210.952880][ T7037] ? __pfx_do_writepages+0x10/0x10 [ 210.952912][ T7037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.952940][ T7037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.952965][ T7037] ? do_raw_spin_unlock+0x122/0x240 [ 210.952996][ T7037] filemap_fdatawrite+0x191/0x230 [ 210.953026][ T7037] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 210.953100][ T7037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.953130][ T7037] ? do_raw_spin_unlock+0x122/0x240 [ 210.953160][ T7037] f2fs_sync_dirty_inodes+0x31f/0x830 [ 210.953212][ T7037] f2fs_write_checkpoint+0x94a/0x1de0 [ 210.953265][ T7037] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 210.953345][ T7037] ? kill_f2fs_super+0x298/0x6c0 [ 210.953379][ T7037] kill_f2fs_super+0x2c3/0x6c0 [ 210.953423][ T7037] ? __pfx_kill_f2fs_super+0x10/0x10 [ 210.953448][ T7037] ? radix_tree_delete_item+0x2b6/0x400 [ 210.953479][ T7037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.953504][ T7037] ? shrinker_free+0x2ce/0x3e0 [ 210.953529][ T7037] deactivate_locked_super+0xbc/0x130 [ 210.953554][ T7037] cleanup_mnt+0x425/0x4c0 [ 210.953588][ T7037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.953612][ T7037] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.953647][ T7037] task_work_run+0x1d4/0x260 [ 210.953680][ T7037] ? __pfx_task_work_run+0x10/0x10 [ 210.953709][ T7037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.953746][ T7037] resume_user_mode_work+0x5e/0x80 [ 210.953777][ T7037] syscall_exit_to_user_mode+0x9a/0x120 [ 210.953804][ T7037] do_syscall_64+0x103/0x210 [ 210.953831][ T7037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.953856][ T7037] ? exc_page_fault+0x91/0x110 [ 210.953882][ T7037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.953904][ T7037] RIP: 0033:0x7f35ec98fc97 [ 210.953924][ T7037] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 210.953943][ T7037] RSP: 002b:00007fff36b61678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 210.953965][ T7037] RAX: 0000000000000000 RBX: 00007f35eca1089d RCX: 00007f35ec98fc97 [ 210.953981][ T7037] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff36b61730 [ 210.953995][ T7037] RBP: 00007fff36b61730 R08: 0000000000000000 R09: 0000000000000000 [ 210.954009][ T7037] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff36b627c0 [ 210.954023][ T7037] R13: 00007f35eca1089d R14: 000000000003379d R15: 00007fff36b62800 [ 210.954059][ T7037] [ 210.954067][ T7037] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 211.310810][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 212.195030][ T8194] loop1: detected capacity change from 0 to 32768 [ 212.211614][ T8174] batadv_slave_1: entered promiscuous mode [ 212.249217][ T8175] batadv_slave_1: left promiscuous mode [ 212.268100][ T8194] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.333601][ T8208] loop6: detected capacity change from 0 to 2048 [ 212.347212][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 212.476606][ T8194] XFS (loop1): Ending clean mount [ 212.484250][ T8065] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.506122][ T8065] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.523161][ T8065] bridge_slave_0: entered allmulticast mode [ 212.553748][ T5884] kernel write not supported for file [eventfd] (pid: 5884 comm: kworker/1:4) [ 212.565643][ T8208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.574387][ T8217] netlink: 3 bytes leftover after parsing attributes in process `syz.5.602'. [ 212.588937][ T8065] bridge_slave_0: entered promiscuous mode [ 212.596591][ T5827] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.609560][ T8217] 0X: renamed from caif0 [ 212.643152][ T8217] 0X: entered allmulticast mode [ 212.657618][ T8217] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 212.706717][ T8065] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.724940][ T8065] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.778763][ T8065] bridge_slave_1: entered allmulticast mode [ 212.829384][ T8065] bridge_slave_1: entered promiscuous mode [ 212.829994][ T7037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.305586][ T8065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.372066][ T8065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.398741][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 213.448927][ T7846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.604508][ T8236] loop5: detected capacity change from 0 to 512 [ 213.643122][ T8236] EXT4-fs: Ignoring removed oldalloc option [ 213.704230][ T8236] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 213.743587][ T8236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 213.779066][ T8236] System zones: 1-12 [ 213.798433][ T7846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.823377][ T8236] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.610: corrupted in-inode xattr: e_value size too large [ 213.857787][ T7846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.885120][ T8242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.917026][ T8065] team0: Port device team_slave_0 added [ 213.925911][ T8236] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.610: couldn't read orphan inode 15 (err -117) [ 213.956847][ T8065] team0: Port device team_slave_1 added [ 213.972708][ T8236] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.995739][ T7846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.084170][ T8236] EXT4-fs (loop5): shut down requested (1) [ 214.124957][ T8229] loop1: detected capacity change from 0 to 32768 [ 214.225013][ T8229] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 214.266912][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.291350][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.291875][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.330570][ T8065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.378124][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.398146][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.424195][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.430696][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 214.458965][ T1201] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 214.486142][ T8065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.506346][ T5827] ocfs2: Unmounting device (7,1) on (node local) [ 214.627309][ T1201] usb 7-1: Using ep0 maxpacket: 16 [ 214.634510][ T1201] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 214.646242][ T1201] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.697242][ T1201] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.738999][ T1201] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.763003][ T1201] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.790018][ T1201] usb 7-1: Product: syz [ 214.794256][ T1201] usb 7-1: Manufacturer: syz [ 214.807234][ T1201] usb 7-1: SerialNumber: syz [ 214.831604][ T8065] hsr_slave_0: entered promiscuous mode [ 214.858674][ T8065] hsr_slave_1: entered promiscuous mode [ 214.866327][ T8065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.887517][ T8065] Cannot create hsr debugfs directory [ 215.033870][ T8260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.228567][ T1201] usb 7-1: 0:2 : does not exist [ 215.389043][ T7846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.467223][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 215.476970][ T8268] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 215.595682][ T7846] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.687039][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.694290][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.816267][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.823522][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.864492][ T1201] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 215.994468][ T1201] usb 7-1: USB disconnect, device number 2 [ 216.065555][ T8065] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 216.075560][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.099697][ T8065] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 216.167469][ T5888] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 216.183734][ T8065] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 216.193858][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 216.193882][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 216.200008][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 216.281359][ T8065] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 216.337891][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 216.353702][ T5888] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 216.369064][ T5888] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.391031][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.408438][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.420752][ T5888] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.434096][ T5888] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 216.443369][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.508822][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 216.693605][ T5888] usb 5-1: usb_control_msg returned -32 [ 216.710038][ T5888] usbtmc 5-1:16.0: can't read capabilities [ 216.902292][ T8065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.912705][ T8298] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 216.972429][ T8065] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.011121][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.018363][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.053237][ T8302] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 217.065760][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.073047][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.097999][ T5888] usb 5-1: USB disconnect, device number 5 [ 217.362910][ T8309] Illegal XDP return value 4291506176 on prog (id 60) dev N/A, expect packet loss! [ 217.376733][ T7846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.547206][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 217.572930][ T8312] loop5: detected capacity change from 0 to 1024 [ 217.657282][ T7846] veth0_vlan: entered promiscuous mode [ 217.713254][ T8312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.749980][ T7846] veth1_vlan: entered promiscuous mode [ 217.835037][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.052403][ T7846] veth0_macvtap: entered promiscuous mode [ 218.112167][ T7846] veth1_macvtap: entered promiscuous mode [ 218.245487][ T8065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.267931][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.320579][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.347655][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.372271][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.384839][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.410978][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.453116][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.484047][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.492363][ T8342] loop1: detected capacity change from 0 to 8 [ 218.503351][ T7846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.587486][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 218.625613][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.657237][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.679520][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.697377][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.713929][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.735909][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.757422][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.777682][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.801121][ T7846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.814503][ T8332] loop5: detected capacity change from 0 to 32768 [ 219.106776][ T7846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.160530][ T7846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.191583][ T7846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.212870][ T7846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.250498][ T6494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.288670][ T6494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.289763][ T8332] bcachefs (loop5): starting version 1.1023: (unknown version) opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=0,compression=lz4:2,nopromote_whole_extents,nojournal_transaction_names,allocator_stuck_timeout=0 [ 219.289763][ T8332] allowing incompatible features above 0.0: (unknown version) [ 219.342907][ T8332] bcachefs (loop5): initializing new filesystem [ 219.388605][ T8332] bcachefs (loop5): going read-write [ 219.406989][ T8065] veth0_vlan: entered promiscuous mode [ 219.444260][ T8332] bcachefs (loop5): marking superblocks [ 219.465404][ T8065] veth1_vlan: entered promiscuous mode [ 219.525615][ T8332] bcachefs (loop5): initializing freespace [ 219.568131][ T8365] loop1: detected capacity change from 0 to 256 [ 219.589976][ T8332] bcachefs (loop5): done initializing freespace [ 219.609129][ T8332] bcachefs (loop5): reading snapshots table [ 219.615526][ T8332] bcachefs (loop5): reading snapshots done [ 219.627379][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 219.748974][ T8332] bcachefs (loop5): done starting filesystem [ 219.880088][ T8065] veth0_macvtap: entered promiscuous mode [ 219.926870][ T8065] veth1_macvtap: entered promiscuous mode [ 219.934698][ T6494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.976176][ T6494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.105617][ T6494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.123010][ T6494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.126065][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.167217][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.181052][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.228660][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.245932][ T8332] syz.5.645 (8332) used greatest stack depth: 12872 bytes left [ 220.247691][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.303582][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.334656][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.359770][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.382204][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.401258][ T8360] loop6: detected capacity change from 0 to 32768 [ 220.422618][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.442988][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.476778][ T5824] bcachefs (loop5): shutting down [ 220.487658][ T5824] bcachefs (loop5): going read-only [ 220.493268][ T5824] bcachefs (loop5): finished waiting for writes to stop [ 220.530069][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.548116][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.562948][ T8360] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 220.582529][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.614118][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.659293][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.677266][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 220.682463][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.696050][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.711732][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.743303][ T8065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.762388][ T8065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.783874][ T5824] bcachefs (loop5): flushing journal and stopping allocators, journal seq 4 [ 220.792909][ T48] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 220.813934][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.849611][ T8065] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.863171][ T8065] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.873211][ T8065] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.883065][ T8065] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.912870][ T7037] ocfs2: Unmounting device (7,6) on (node local) [ 220.957282][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 220.996580][ T5824] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 4 [ 221.039148][ T5824] bcachefs (loop5): clean shutdown complete, journal seq 5 [ 221.039377][ T48] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 221.059725][ T48] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.072446][ T48] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.089236][ T48] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.103860][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.109398][ T5824] bcachefs (loop5): marking filesystem clean [ 221.125955][ T48] usb 5-1: Product: syz [ 221.148360][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 221.166772][ T48] usb 5-1: Manufacturer: syz [ 221.200051][ T48] usb 5-1: SerialNumber: syz [ 221.290565][ T5824] bcachefs (loop5): shutdown complete [ 221.343067][ T9] usb 2-1: config 0 has no interfaces? [ 221.367973][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=90.11 [ 221.379735][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.389136][ T9] usb 2-1: Product: syz [ 221.391027][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.405400][ T9] usb 2-1: Manufacturer: syz [ 221.411759][ T9] usb 2-1: SerialNumber: syz [ 221.432392][ T9] usb 2-1: config 0 descriptor?? [ 221.442119][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.571893][ T5912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.611218][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.626346][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.661368][ T48] usb 5-1: 0:2 : does not exist [ 221.717259][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 221.819232][ T5912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.885110][ T8382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.931552][ T8382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.959256][ T5936] usb 2-1: USB disconnect, device number 9 [ 222.022578][ T5912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.151671][ T5912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.313265][ T48] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 222.380668][ T5912] bridge_slave_1: left allmulticast mode [ 222.384237][ T48] usb 5-1: USB disconnect, device number 6 [ 222.386381][ T5912] bridge_slave_1: left promiscuous mode [ 222.386618][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.444188][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.463842][ T5912] bridge_slave_0: left allmulticast mode [ 222.469825][ T5912] bridge_slave_0: left promiscuous mode [ 222.475552][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.590895][ T8390] loop7: detected capacity change from 0 to 64 [ 222.751984][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 222.891729][ T8390] ------------[ cut here ]------------ [ 222.897724][ T8390] WARNING: CPU: 1 PID: 8390 at fs/buffer.c:1186 mark_buffer_dirty+0x2a9/0x410 [ 222.906666][ T8390] Modules linked in: [ 222.911705][ T8390] CPU: 1 UID: 0 PID: 8390 Comm: syz.7.543 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 222.923843][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 222.934137][ T8390] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 222.940061][ T8390] Code: 4c 89 f7 e8 79 0d de ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 c4 34 fc ff e8 5f 18 7c ff eb 8c e8 58 18 7c ff 90 <0f> 0b 90 e9 95 fd ff ff e8 4a 18 7c ff 90 0f 0b 90 e9 bf fd ff ff [ 222.959809][ T8390] RSP: 0018:ffffc9000b41f628 EFLAGS: 00010287 [ 222.965915][ T8390] RAX: ffffffff8243a7f8 RBX: ffff8880514811d0 RCX: 0000000000080000 [ 222.974927][ T8390] RDX: ffffc900049e2000 RSI: 0000000000000b7a RDI: 0000000000000b7b [ 222.983790][ T8390] RBP: ffff88806f1cc001 R08: ffff8880514811d7 R09: 1ffff1100a29023a [ 222.992284][ T8390] R10: dffffc0000000000 R11: ffffed100a29023b R12: ffff88805491a400 [ 223.000363][ T8390] R13: ffff888058c2a488 R14: ffff8880514811d0 R15: 000000000000000a [ 223.008428][ T8390] FS: 00007f0dc2b986c0(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 223.017488][ T8390] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.024143][ T8390] CR2: 0000200000001000 CR3: 0000000060e67000 CR4: 0000000000350ef0 [ 223.032324][ T8390] Call Trace: [ 223.035635][ T8390] [ 223.038713][ T8390] bfs_get_block+0x5da/0xae0 [ 223.043374][ T8390] __block_write_begin_int+0x6b5/0x1900 [ 223.049050][ T8390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.054721][ T8390] ? __pfx_bfs_get_block+0x10/0x10 [ 223.059961][ T8390] ? __pfx___block_write_begin_int+0x10/0x10 [ 223.065989][ T8390] ? __filemap_get_folio+0x79f/0xaf0 [ 223.072073][ T8390] ? __pfx_bfs_get_block+0x10/0x10 [ 223.079806][ T8390] block_write_begin+0x8a/0x120 [ 223.084834][ T8390] ? bfs_write_begin+0x1e/0xd0 [ 223.090372][ T8390] bfs_write_begin+0x35/0xd0 [ 223.095020][ T8390] generic_perform_write+0x2c7/0x910 [ 223.100460][ T8390] ? __pfx_generic_perform_write+0x10/0x10 [ 223.106659][ T8390] ? file_update_time+0x2da/0x490 [ 223.111807][ T8390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.118036][ T8390] ? __generic_file_write_iter+0xf9/0x230 [ 223.123806][ T8390] ? generic_file_write_iter+0xfb/0x540 [ 223.130070][ T8390] generic_file_write_iter+0x10f/0x540 [ 223.135582][ T8390] ? __pfx_generic_file_write_iter+0x10/0x10 [ 223.142234][ T8390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.148560][ T8390] ? __lock_acquire+0xaac/0xd20 [ 223.153466][ T8390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.159491][ T8390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.165157][ T8390] ? rcu_read_lock_any_held+0xb3/0x120 [ 223.170698][ T8390] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 223.176821][ T8390] vfs_write+0x54b/0xa90 [ 223.182065][ T8390] ? __pfx_generic_file_write_iter+0x10/0x10 [ 223.188888][ T8390] ? __pfx_vfs_write+0x10/0x10 [ 223.194000][ T8390] ? __fget_files+0x2a/0x420 [ 223.198791][ T8390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.204467][ T8390] ksys_write+0x145/0x250 [ 223.209402][ T8390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.215105][ T8390] ? rcu_is_watching+0x15/0xb0 [ 223.219978][ T8390] ? __pfx_ksys_write+0x10/0x10 [ 223.224869][ T8390] ? do_syscall_64+0xba/0x210 [ 223.230511][ T8390] do_syscall_64+0xf6/0x210 [ 223.235058][ T8390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.241164][ T8390] ? exc_page_fault+0x91/0x110 [ 223.245966][ T8390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.251919][ T8390] RIP: 0033:0x7f0dc1d8e969 [ 223.256351][ T8390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.276064][ T8390] RSP: 002b:00007f0dc2b98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 223.285586][ T8390] RAX: ffffffffffffffda RBX: 00007f0dc1fb5fa0 RCX: 00007f0dc1d8e969 [ 223.294460][ T8390] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000004 [ 223.302594][ T8390] RBP: 00007f0dc1e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 223.311293][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.319678][ T8390] R13: 0000000000000000 R14: 00007f0dc1fb5fa0 R15: 00007ffded9be958 [ 223.327784][ T8390] [ 223.330828][ T8390] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 223.338127][ T8390] CPU: 1 UID: 0 PID: 8390 Comm: syz.7.543 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 223.350053][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 223.360296][ T8390] Call Trace: [ 223.363587][ T8390] [ 223.366519][ T8390] dump_stack_lvl+0x99/0x250 [ 223.371168][ T8390] ? __asan_memcpy+0x40/0x70 [ 223.375769][ T8390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.380992][ T8390] ? __pfx__printk+0x10/0x10 [ 223.385610][ T8390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.391296][ T8390] panic+0x2db/0x790 [ 223.395245][ T8390] ? __pfx_panic+0x10/0x10 [ 223.399715][ T8390] ? show_trace_log_lvl+0x4fb/0x550 [ 223.404955][ T8390] __warn+0x31b/0x4b0 [ 223.408951][ T8390] ? mark_buffer_dirty+0x2a9/0x410 [ 223.414077][ T8390] ? mark_buffer_dirty+0x2a9/0x410 [ 223.419201][ T8390] report_bug+0x2be/0x4f0 [ 223.423542][ T8390] ? mark_buffer_dirty+0x2a9/0x410 [ 223.428671][ T8390] ? mark_buffer_dirty+0x2a9/0x410 [ 223.433791][ T8390] ? mark_buffer_dirty+0x2ab/0x410 [ 223.439002][ T8390] handle_bug+0x84/0x160 [ 223.443260][ T8390] exc_invalid_op+0x1a/0x50 [ 223.447782][ T8390] asm_exc_invalid_op+0x1a/0x20 [ 223.452640][ T8390] RIP: 0010:mark_buffer_dirty+0x2a9/0x410 [ 223.458374][ T8390] Code: 4c 89 f7 e8 79 0d de ff 49 8b 3e be 20 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 c4 34 fc ff e8 5f 18 7c ff eb 8c e8 58 18 7c ff 90 <0f> 0b 90 e9 95 fd ff ff e8 4a 18 7c ff 90 0f 0b 90 e9 bf fd ff ff [ 223.478015][ T8390] RSP: 0018:ffffc9000b41f628 EFLAGS: 00010287 [ 223.484097][ T8390] RAX: ffffffff8243a7f8 RBX: ffff8880514811d0 RCX: 0000000000080000 [ 223.492090][ T8390] RDX: ffffc900049e2000 RSI: 0000000000000b7a RDI: 0000000000000b7b [ 223.500073][ T8390] RBP: ffff88806f1cc001 R08: ffff8880514811d7 R09: 1ffff1100a29023a [ 223.508087][ T8390] R10: dffffc0000000000 R11: ffffed100a29023b R12: ffff88805491a400 [ 223.516077][ T8390] R13: ffff888058c2a488 R14: ffff8880514811d0 R15: 000000000000000a [ 223.524107][ T8390] ? mark_buffer_dirty+0x2a8/0x410 [ 223.529440][ T8390] ? mark_buffer_dirty+0x2a8/0x410 [ 223.534566][ T8390] bfs_get_block+0x5da/0xae0 [ 223.539197][ T8390] __block_write_begin_int+0x6b5/0x1900 [ 223.544775][ T8390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.550426][ T8390] ? __pfx_bfs_get_block+0x10/0x10 [ 223.555605][ T8390] ? __pfx___block_write_begin_int+0x10/0x10 [ 223.561619][ T8390] ? __filemap_get_folio+0x79f/0xaf0 [ 223.567019][ T8390] ? __pfx_bfs_get_block+0x10/0x10 [ 223.572149][ T8390] block_write_begin+0x8a/0x120 [ 223.577021][ T8390] ? bfs_write_begin+0x1e/0xd0 [ 223.581821][ T8390] bfs_write_begin+0x35/0xd0 [ 223.586441][ T8390] generic_perform_write+0x2c7/0x910 [ 223.591764][ T8390] ? __pfx_generic_perform_write+0x10/0x10 [ 223.597588][ T8390] ? file_update_time+0x2da/0x490 [ 223.602679][ T8390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.608339][ T8390] ? __generic_file_write_iter+0xf9/0x230 [ 223.614071][ T8390] ? generic_file_write_iter+0xfb/0x540 [ 223.619653][ T8390] generic_file_write_iter+0x10f/0x540 [ 223.625137][ T8390] ? __pfx_generic_file_write_iter+0x10/0x10 [ 223.631158][ T8390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.636855][ T8390] ? __lock_acquire+0xaac/0xd20 [ 223.641731][ T8390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.647385][ T8390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.653086][ T8390] ? rcu_read_lock_any_held+0xb3/0x120 [ 223.658554][ T8390] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 223.664474][ T8390] vfs_write+0x54b/0xa90 [ 223.668775][ T8390] ? __pfx_generic_file_write_iter+0x10/0x10 [ 223.674768][ T8390] ? __pfx_vfs_write+0x10/0x10 [ 223.679557][ T8390] ? __fget_files+0x2a/0x420 [ 223.684163][ T8390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.689810][ T8390] ksys_write+0x145/0x250 [ 223.694156][ T8390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.699806][ T8390] ? rcu_is_watching+0x15/0xb0 [ 223.704594][ T8390] ? __pfx_ksys_write+0x10/0x10 [ 223.709480][ T8390] ? do_syscall_64+0xba/0x210 [ 223.714223][ T8390] do_syscall_64+0xf6/0x210 [ 223.718919][ T8390] ? srso_alias_return_thunk+0x5/0xfbef5 [ 223.724689][ T8390] ? exc_page_fault+0x91/0x110 [ 223.729471][ T8390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.735396][ T8390] RIP: 0033:0x7f0dc1d8e969 [ 223.739849][ T8390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.759476][ T8390] RSP: 002b:00007f0dc2b98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 223.767907][ T8390] RAX: ffffffffffffffda RBX: 00007f0dc1fb5fa0 RCX: 00007f0dc1d8e969 [ 223.775881][ T8390] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000004 [ 223.783861][ T8390] RBP: 00007f0dc1e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 223.791847][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.799829][ T8390] R13: 0000000000000000 R14: 00007f0dc1fb5fa0 R15: 00007ffded9be958 [ 223.807828][ T8390] [ 223.811151][ T8390] Kernel Offset: disabled [ 223.815498][ T8390] Rebooting in 86400 seconds..