last executing test programs: 20.9368021s ago: executing program 3 (id=1092): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setrlimit(0xb, &(0x7f0000000280)={0x3, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000600)={0x0, 0x0, 0x1, 0x0}) socket$kcm(0x10, 0x2, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc0000003e00010000000800000000000100000004000000d8000180d4001080"], 0xfc}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) 15.621460467s ago: executing program 3 (id=1102): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0xa, 0x7, {0x0, 0xffffffffffffffff, 0x1000000}}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x1a) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000006080)={'wlan1\x00'}) socket$netlink(0x10, 0x3, 0x14) syz_io_uring_setup(0x3dac, 0x0, &(0x7f0000000140), 0x0) 13.135606987s ago: executing program 1 (id=1106): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0xa, 0x7, {0x0, 0xffffffffffffffff, 0x1000000}}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x1a) socket$netlink(0x10, 0x3, 0x14) 12.675477864s ago: executing program 3 (id=1107): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000540)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x7, 0xffff, 0x80, 0x6}, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0x34, 0x11, 0xff, @rand_addr=' \x01\x00', @empty, {[@fragment={0x45, 0x0, 0x9, 0x1, 0x0, 0x8, 0x65}], {0x4e24, 0x4e21, 0x2c, 0x0, @opaque="5c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e0613"}}}}}, 0x6a) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000480)={'wlan1\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 9.20235009s ago: executing program 1 (id=1109): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 8.086416749s ago: executing program 1 (id=1110): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xb, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000600)={0x0, 0x0, 0x1, 0x0}) socket$kcm(0x10, 0x2, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc0000003e00010000000800000000000100000004000000d8000180d4001080"], 0xfc}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) 8.076824679s ago: executing program 3 (id=1111): syz_open_dev$sg(0x0, 0x20000000000000, 0xa8401) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0xe2440, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x1c}, './file0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="696f636861727365743d63703836332c0047d359bbc24799f885574eaba64544111af019f727c4d6bd22b6e11240ec816ed65b2c76c8d805185e08111718b5a0e909e51d159eb190e0185bf383c7b14e427bdf2f62283f6d3b4349fe8dfa24c18a9311fc45f06115462fa1728e86ec0d36a85bd203eb3fd422c29ae65d71def8ad9c58fe686aa5b4c600136110728c29677062e368163322c2696537ae1f40c59da4a5aeec7e319bb5c474c9b1ddffacef05fa11cc48b8ca"], 0x1, 0x5ce8, &(0x7f0000005dc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1817c1, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) listxattr(&(0x7f0000000040)='./bus\x00', 0x0, 0x8c) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x10000000000000bc) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000000500)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getdents(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95) 8.044652979s ago: executing program 2 (id=1112): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'c6xdigio\x00', [0x109, 0x80008000, 0x86c, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x1, 0x1138fce9, 0x6, 0xffffffa7, 0x2000001, 0xfffffffd, 0x65c, 0x3ff, 0x10004, 0x800, 0xe2df, 0x9, 0x6, 0x4, 0x3, 0x7, 0x5, 0x5]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020200000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xd}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={0x0, 0x0}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_smc(0x2b, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0xfae76000) 7.884987132s ago: executing program 0 (id=1113): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001100)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001380)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c865534aa138605308cde6be03b4ec0251663c809fa1c4e38621d819ab4d5b12eb81ea0ed4ad7e253ee1ff3965364745ed877ed098d7df413175412f550c25ef6288d09d1661d24dc9115dacb", 0x5f}, {&(0x7f0000001bc0)="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", 0x1c8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9", 0x25}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001980)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d75e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb65e44d4957b00ed35a858d44b25d5b8dad1be42000000000000000000000000009c877837d2748ee16ebcfd6e6308a33d6c814c4af53f5fa089f41a6523950d38400b24cbb3081376bea882af4818751131959958498efb7614a7ec3ba4298bec", 0x158}], 0x1}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001400)="b0a8002dc0a864ab53d84d493526ade0686327ab1eb58ed9b7bec33789c933bdce9687f27e17cfaa2c16d48e87169352ba7b5a186fbd605f5664c5caf9206636cf0f418dc00e5f9aca9a7e562d9130", 0x4f}, {&(0x7f0000001280)="aed864bf576ace1e4e64518b5286fc0bbd9dd2cdf97fc0b10a95fe897c64bd85a080f579d68b69f1a6bdfa09233fa5dc80f65d620bc8d290", 0x38}, {&(0x7f0000001480)="5503015c95332885189a845e00401ea993f83be834b7f78c8ddcdb4ecb0fe1c6298aed088324cbb4b9d63748e5ae7750fcaecc3457", 0x35}], 0x3}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000002c0)="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", 0x1a3, 0x11, 0x0, 0x0) 7.689301875s ago: executing program 0 (id=1114): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x810010, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x1fb, &(0x7f0000000280)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x0) 6.903381158s ago: executing program 2 (id=1115): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth1_to_hsr\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x4, 0xe, 0x4b, 0x6b, 0x5, 0x4d, 0x7, 0x4, 0x2, [0x2, 0x8, 0x7, 0xd45b, 0x5, 0x8001, 0x40], [0x4, 0x87, 0x3, 0x9, 0x7, 0x8, 0x80f]}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private1, 0x60}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 5.658465148s ago: executing program 0 (id=1116): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x80001) setrlimit(0xb, &(0x7f0000000280)={0x3, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000600)={0x0, 0x0, 0x1, 0x0}) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) socket$kcm(0x10, 0x2, 0x10) r4 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x7, 0xf05, 0x3234564e, 0x4, 0xa, [{0x4, 0x52b}, {0x1, 0x7}, {0x4, 0x4}, {0x495b, 0x7ff}, {0x8, 0xcdc}, {0x80000000}, {0xdb, 0x1}, {0x80, 0xa}], 0x7, 0x80, 0x6, 0x0, 0x3}}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0xff) 5.373052403s ago: executing program 0 (id=1117): syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0xfd, 0x146, &(0x7f00000002c0)="$eJzsj79LOnEcxl/39de30jQwsKAIGhLDPE9sa9BIErKDwqUp0IsCTVEIx2pu6A9wKIImcYjGhrLJUgj7O9yCxuLjXYXQ0v55LXfv1/PwcLe20g3iAxsmq6ViuWJUq0Z+bkvPpLZvbu/GhXcB/weNYrkiynmzf5+AffG0Q//E1I+ef0DBWMqVCuLuJyAIJMdg78CBitkdFc4vXMGIWi44D61J02m/uJjlpu2Q9JpO7H1cwoLYm/jZewNqdYf1Z+HQ9YwtYR3U6ovNxtNmp50Oh2aNMy01deUO2MgaTkAR+WukHX6JNBu9biezoWf0bkzTlmNqVFXjPf25k44fn2Nfdx/BjjK85xQbWThVoK5AY5D3HxQP0Lp414tel38EOPSBMpwo1veZSW434PgyfL9IJBKJRCKRSCQSiUTyVz4DAAD//0wAXes=") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) execve(&(0x7f00000003c0)='./file2\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000153201, 0x0) 5.323383403s ago: executing program 1 (id=1118): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000540)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x7, 0xffff, 0x80, 0x6}, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0x34, 0x11, 0xff, @rand_addr=' \x01\x00', @empty, {[@fragment={0x45, 0x0, 0x9, 0x1, 0x0, 0x8, 0x65}], {0x4e24, 0x4e21, 0x2c, 0x0, @opaque="5c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e0613"}}}}}, 0x6a) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000480)={'wlan1\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) 5.265015804s ago: executing program 3 (id=1119): syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0xfd, 0x146, &(0x7f00000002c0)="$eJzsj79LOnEcxl/39de30jQwsKAIGhLDPE9sa9BIErKDwqUp0IsCTVEIx2pu6A9wKIImcYjGhrLJUgj7O9yCxuLjXYXQ0v55LXfv1/PwcLe20g3iAxsmq6ViuWJUq0Z+bkvPpLZvbu/GhXcB/weNYrkiynmzf5+AffG0Q//E1I+ef0DBWMqVCuLuJyAIJMdg78CBitkdFc4vXMGIWi44D61J02m/uJjlpu2Q9JpO7H1cwoLYm/jZewNqdYf1Z+HQ9YwtYR3U6ovNxtNmp50Oh2aNMy01deUO2MgaTkAR+WukHX6JNBu9biezoWf0bkzTlmNqVFXjPf25k44fn2Nfdx/BjjK85xQbWThVoK5AY5D3HxQP0Lp414tel38EOPSBMpwo1veZSW434PgyfL9IJBKJRCKRSCQSiUTyVz4DAAD//0wAXes=") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) execve(&(0x7f00000003c0)='./file2\x00', 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) sendmmsg(r1, &(0x7f0000001d00), 0x0, 0x24005805) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000153201, 0x0) 2.558003068s ago: executing program 0 (id=1120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0xa, 0x7, {0x0, 0xffffffffffffffff, 0x1000000}}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x1a) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00'}) socket$netlink(0x10, 0x3, 0x14) syz_io_uring_setup(0x3dac, 0x0, &(0x7f0000000140), 0x0) 2.505717359s ago: executing program 1 (id=1121): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth1_to_hsr\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x4, 0xe, 0x4b, 0x6b, 0x5, 0x4d, 0x7, 0x4, 0x2, [0x2, 0x8, 0x7, 0xd45b, 0x5, 0x8001, 0x40], [0x4, 0x87, 0x3, 0x9, 0x7, 0x8, 0x80f]}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private1, 0x60}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 2.45708003s ago: executing program 2 (id=1122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x32, &(0x7f00000009c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) r1 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) read$qrtrtun(0xffffffffffffffff, &(0x7f00000004c0)=""/57, 0x39) fsopen(&(0x7f0000000000)='msdos\x00', 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 2.298195872s ago: executing program 2 (id=1123): syz_io_uring_setup(0x7b, 0x0, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$notify(r3, 0x402, 0x80000009) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000300)={'pcl730\x00', [0x2f00, 0x5, 0xd09a, 0xffffffff, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0x5, 0x40000009, 0x830, 0x30000, 0x10000, 0x9, 0x800, 0x101, 0x2, 0x8001, 0x7, 0x3, 0x4, 0x5, 0x70f]}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x3, 0x4}) 1.20804303s ago: executing program 2 (id=1124): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r1, 0x0, 0x20000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x363945a638c543bb, 0x84) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.010141123s ago: executing program 3 (id=1125): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0xa, 0x7, {0x0, 0xffffffffffffffff, 0x1000000}}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x1a) socket$netlink(0x10, 0x3, 0x14) 936.254034ms ago: executing program 1 (id=1126): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xb, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000600)={0x0, 0x0, 0x1, 0x0}) socket$kcm(0x10, 0x2, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc0000003e00010000000800000000000100000004000000d8000180d4001080"], 0xfc}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) 897.645845ms ago: executing program 0 (id=1127): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 0s ago: executing program 2 (id=1128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) pipe2$watch_queue(0x0, 0x80) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000010000840100000000000000020000000500002000000000000000060400"], &(0x7f0000000080)=""/236, 0x3e, 0xec, 0x1}, 0x28) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) kernel console output (not intermixed with test programs): k: 12 bytes leftover after parsing attributes in process `syz.0.28'. [ 92.983020][ T5986] netlink: zone id is out of range [ 92.992854][ T5986] netlink: set zone limit has 8 unknown bytes [ 93.943495][ T5991] loop0: detected capacity change from 0 to 8 [ 94.902195][ T28] audit: type=1800 audit(1753622314.060:3): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.30" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 95.911543][ T6004] loop0: detected capacity change from 0 to 8 [ 96.798498][ T6011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35'. [ 96.807526][ T6011] netlink: zone id is out of range [ 96.815819][ T6011] netlink: set zone limit has 8 unknown bytes [ 97.460624][ T28] audit: type=1800 audit(1753622316.450:4): pid=6013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.33" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 98.384730][ T6020] loop1: detected capacity change from 0 to 8 [ 98.391936][ T6020] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 98.491158][ T6022] cramfs: Error -5 while decompressing! [ 98.496880][ T6022] cramfs: ffffffff96fd8308(26)->ffff88805d5b0000(4096) [ 98.504093][ T6022] cramfs: Error -3 while decompressing! [ 98.511411][ T6022] cramfs: ffffffff96fd8322(26)->ffff88805d5af000(4096) [ 98.520699][ T6022] cramfs: Error -3 while decompressing! [ 98.526383][ T6022] cramfs: ffffffff96fd833c(16)->ffff88805d5a8000(4096) [ 98.533669][ T6022] cramfs: Error -5 while decompressing! [ 98.542333][ T6022] cramfs: ffffffff96fd8308(26)->ffff88805d5b0000(4096) [ 99.348917][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop1 [ 100.093535][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop1 [ 100.140785][ T6032] loop3: detected capacity change from 0 to 24 [ 100.258051][ T6032] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 100.503334][ T6032] romfs: bad initial checksum on dev loop3. [ 100.747863][ T5799] udevd[5799]: incorrect romfs checksum on /dev/loop3 [ 101.281683][ T6037] overlayfs: failed to resolve './file1': -2 [ 102.111708][ T6044] loop1: detected capacity change from 0 to 8 [ 102.521798][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42'. [ 102.530779][ T6040] netlink: zone id is out of range [ 102.536489][ T6040] netlink: set zone limit has 8 unknown bytes [ 103.178002][ T28] audit: type=1800 audit(1753622322.230:5): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.43" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 105.563385][ T6053] block device autoloading is deprecated and will be removed. [ 106.083081][ T6063] loop1: detected capacity change from 0 to 8 [ 106.097781][ T6063] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 106.201324][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop1 [ 106.212756][ T6066] cramfs: Error -5 while decompressing! [ 106.218502][ T6066] cramfs: ffffffff96fdc308(26)->ffff88805a353000(4096) [ 106.225635][ T6066] cramfs: Error -3 while decompressing! [ 106.231359][ T6066] cramfs: ffffffff96fdc322(26)->ffff88805a354000(4096) [ 106.238409][ T6066] cramfs: Error -3 while decompressing! [ 106.244045][ T6066] cramfs: ffffffff96fdc33c(16)->ffff88805a355000(4096) [ 106.251368][ T6066] cramfs: Error -5 while decompressing! [ 106.257032][ T6066] cramfs: ffffffff96fdc308(26)->ffff88805a353000(4096) [ 107.853026][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop1 [ 116.520326][ T6134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'. [ 116.529523][ T6134] netlink: zone id is out of range [ 116.539027][ T6134] netlink: set zone limit has 8 unknown bytes [ 121.130394][ T6156] loop2: detected capacity change from 0 to 32768 [ 121.148084][ T6156] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.75 (6156) [ 121.216688][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.77'. [ 121.226080][ T6163] netlink: zone id is out of range [ 121.234111][ T6163] netlink: set zone limit has 8 unknown bytes [ 121.947379][ T6156] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.003134][ T6156] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 122.030388][ T6156] BTRFS info (device loop2): force clearing of disk cache [ 122.053613][ T6156] BTRFS info (device loop2): enabling auto defrag [ 122.069165][ T6156] BTRFS info (device loop2): max_inline at 0 [ 122.075393][ T6156] BTRFS info (device loop2): enabling disk space caching [ 122.099633][ T6156] BTRFS info (device loop2): disk space caching is enabled [ 122.989007][ T6156] BTRFS info (device loop2): enabling ssd optimizations [ 123.038202][ T6156] BTRFS info (device loop2): rebuilding free space tree [ 124.064210][ T6156] BTRFS info (device loop2): disabling free space tree [ 124.071515][ T6156] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.084664][ T6156] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 124.223477][ T6174] loop1: detected capacity change from 0 to 32768 [ 124.275735][ T6174] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.80 (6174) [ 124.276486][ T5790] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.614893][ T6197] loop3: detected capacity change from 0 to 32768 [ 125.029691][ T6174] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.097739][ T6174] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 125.138057][ T6174] BTRFS info (device loop1): setting nodatasum [ 125.157838][ T6174] BTRFS info (device loop1): force zlib compression, level 3 [ 125.186068][ T6174] BTRFS info (device loop1): enabling ssd optimizations [ 125.312544][ T6174] BTRFS info (device loop1): allowing degraded mounts [ 125.422472][ T6174] BTRFS info (device loop1): using free space tree [ 125.495747][ T5970] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop2 scanned by udevd (5970) [ 125.592088][ T6174] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 125.627220][ T6174] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 125.698655][ T6174] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 125.763461][ T6174] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 125.869045][ T6174] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 125.910163][ T6174] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 125.927312][ T6174] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 125.979171][ T6174] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 126.066573][ T6174] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 126.146321][ T6174] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 126.191718][ T6174] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 126.205546][ T6174] BTRFS error (device loop1): open_ctree failed: -12 [ 128.645813][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'. [ 128.655333][ T6237] netlink: zone id is out of range [ 128.663022][ T6237] netlink: set zone limit has 8 unknown bytes [ 130.555496][ T6252] loop3: detected capacity change from 0 to 8 [ 130.566497][ T6252] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 130.700131][ T5793] Bluetooth: hci3: link tx timeout [ 130.705688][ T5793] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.541244][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 131.554561][ T5103] Bluetooth: hci3: link tx timeout [ 131.560035][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.716140][ T6256] cramfs: Error -5 while decompressing! [ 131.722132][ T6256] cramfs: ffffffff96fd8308(26)->ffff88805c09e000(4096) [ 131.729404][ T6256] cramfs: Error -3 while decompressing! [ 131.735101][ T6256] cramfs: ffffffff96fd8322(26)->ffff88805c09f000(4096) [ 131.742329][ T6256] cramfs: Error -3 while decompressing! [ 131.748012][ T6256] cramfs: ffffffff96fd833c(16)->ffff888076e28000(4096) [ 131.755267][ T6256] cramfs: Error -5 while decompressing! [ 131.765234][ T6256] cramfs: ffffffff96fd8308(26)->ffff88805c09e000(4096) [ 133.268914][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.283773][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.499524][ T6265] loop3: detected capacity change from 0 to 8 [ 133.508521][ T6265] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 133.557813][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 133.573288][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 133.693449][ T6267] cramfs: Error -5 while decompressing! [ 133.699259][ T6267] cramfs: ffffffff96fdc308(26)->ffff88805e0dd000(4096) [ 133.706356][ T6267] cramfs: Error -3 while decompressing! [ 133.712069][ T6267] cramfs: ffffffff96fdc322(26)->ffff88805e0de000(4096) [ 133.719842][ T6267] cramfs: Error -3 while decompressing! [ 133.725489][ T6267] cramfs: ffffffff96fdc33c(16)->ffff88805e0df000(4096) [ 133.732793][ T6267] cramfs: Error -5 while decompressing! [ 133.742773][ T6267] cramfs: ffffffff96fdc308(26)->ffff88805e0dd000(4096) [ 134.692027][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 134.800372][ T6269] loop1: detected capacity change from 0 to 8 [ 134.912426][ T6269] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 135.230228][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop1 [ 135.246290][ T6271] cramfs: Error -5 while decompressing! [ 135.264835][ T6271] cramfs: ffffffff96fd8308(26)->ffff88805923d000(4096) [ 135.287774][ T6271] cramfs: Error -3 while decompressing! [ 135.293407][ T6271] cramfs: ffffffff96fd8322(26)->ffff8880585a6000(4096) [ 135.399600][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop1 [ 135.409567][ T6271] cramfs: Error -3 while decompressing! [ 135.415147][ T6271] cramfs: ffffffff96fd833c(16)->ffff8880572ec000(4096) [ 135.493180][ T6271] cramfs: Error -5 while decompressing! [ 135.503265][ T6271] cramfs: ffffffff96fd8308(26)->ffff88805923d000(4096) [ 138.771026][ T6286] loop0: detected capacity change from 0 to 32768 [ 138.963869][ T6286] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.102 (6286) [ 139.049880][ T6286] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.084956][ T6286] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 139.202964][ T6286] BTRFS info (device loop0): enabling auto defrag [ 139.289889][ T6286] BTRFS info (device loop0): doing ref verification [ 139.296675][ T6286] BTRFS info (device loop0): use no compression [ 139.331870][ T6286] BTRFS info (device loop0): force clearing of disk cache [ 139.387909][ T6286] BTRFS info (device loop0): setting nodatacow, compression disabled [ 139.396110][ T6286] BTRFS info (device loop0): disabling free space tree [ 140.466828][ T6286] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 140.537895][ T6286] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 140.604667][ T6286] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 140.734597][ T6286] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 140.745124][ T6286] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 140.766433][ T6286] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 141.639261][ T6286] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 141.694469][ T6286] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 141.748528][ T6286] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 141.778600][ T6286] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 141.794219][ T6286] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 141.850615][ T6286] BTRFS error (device loop0): open_ctree failed: -12 [ 142.246712][ T6330] loop0: detected capacity change from 0 to 8 [ 142.264427][ T6330] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 142.277327][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop0 [ 142.286144][ T6331] loop1: detected capacity change from 0 to 8 [ 142.334034][ T6331] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 142.418758][ T6332] cramfs: Error -5 while decompressing! [ 142.424440][ T6332] cramfs: ffffffff96fdc308(26)->ffff88805eee9000(4096) [ 142.431743][ T6332] cramfs: Error -3 while decompressing! [ 142.438198][ T6332] cramfs: ffffffff96fdc322(26)->ffff88805a85b000(4096) [ 142.445413][ T6332] cramfs: Error -3 while decompressing! [ 142.451101][ T6332] cramfs: ffffffff96fdc33c(16)->ffff88805a85c000(4096) [ 142.458524][ T6332] cramfs: Error -5 while decompressing! [ 142.464155][ T6332] cramfs: ffffffff96fdc308(26)->ffff88805eee9000(4096) [ 142.596952][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop1 [ 143.749555][ T6334] cramfs: Error -5 while decompressing! [ 143.965510][ T6334] cramfs: ffffffff96fd8308(26)->ffff888055258000(4096) [ 143.975604][ T6334] cramfs: Error -3 while decompressing! [ 143.982862][ T6334] cramfs: ffffffff96fd8322(26)->ffff888055259000(4096) [ 143.991059][ T6334] cramfs: Error -3 while decompressing! [ 143.996825][ T6334] cramfs: ffffffff96fd833c(16)->ffff88805525a000(4096) [ 144.004297][ T6334] cramfs: Error -5 while decompressing! [ 144.010060][ T6334] cramfs: ffffffff96fd8308(26)->ffff888055258000(4096) [ 144.408640][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop1 [ 148.468767][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.118'. [ 148.478023][ T6369] netlink: zone id is out of range [ 148.486392][ T6369] netlink: set zone limit has 8 unknown bytes [ 149.951738][ T6364] loop0: detected capacity change from 0 to 32768 [ 149.974541][ T6364] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 150.163654][ T5970] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 151.952349][ T6391] loop2: detected capacity change from 0 to 8 [ 152.018937][ T6391] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 152.079092][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop2 [ 152.163115][ T6393] cramfs: Error -5 while decompressing! [ 152.169399][ T6393] cramfs: ffffffff96fdc308(26)->ffff88805e993000(4096) [ 152.176642][ T6393] cramfs: Error -3 while decompressing! [ 152.182430][ T6393] cramfs: ffffffff96fdc322(26)->ffff88805e995000(4096) [ 152.189507][ T6393] cramfs: Error -3 while decompressing! [ 152.195123][ T6393] cramfs: ffffffff96fdc33c(16)->ffff88805e996000(4096) [ 152.202581][ T6393] cramfs: Error -5 while decompressing! [ 152.213161][ T6393] cramfs: ffffffff96fdc308(26)->ffff88805e993000(4096) [ 155.159701][ T6412] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 155.387375][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 155.396826][ T6416] netlink: zone id is out of range [ 155.404363][ T6416] netlink: set zone limit has 8 unknown bytes [ 156.892809][ T6423] loop3: detected capacity change from 0 to 8 [ 156.912230][ T6423] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 157.055753][ T5886] udevd[5886]: incorrect cramfs checksum on /dev/loop3 [ 157.766750][ T6430] cramfs: Error -5 while decompressing! [ 157.772869][ T6430] cramfs: ffffffff96fd8308(26)->ffff88805e4ec000(4096) [ 157.780271][ T6430] cramfs: Error -3 while decompressing! [ 157.785931][ T6430] cramfs: ffffffff96fd8322(26)->ffff88805e4ed000(4096) [ 157.793724][ T6430] cramfs: Error -3 while decompressing! [ 157.800685][ T6430] cramfs: ffffffff96fd833c(16)->ffff88805e4ee000(4096) [ 157.808447][ T6430] cramfs: Error -5 while decompressing! [ 157.814057][ T6430] cramfs: ffffffff96fd8308(26)->ffff88805e4ec000(4096) [ 158.068788][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 158.147034][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 162.280976][ T6460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'. [ 162.290270][ T6460] netlink: zone id is out of range [ 162.297934][ T6460] netlink: set zone limit has 8 unknown bytes [ 162.944015][ T6462] loop2: detected capacity change from 0 to 8 [ 162.997712][ T6462] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 163.109907][ T6463] cramfs: Error -5 while decompressing! [ 163.115586][ T6463] cramfs: ffffffff96fdc308(26)->ffff88805d86c000(4096) [ 163.123635][ T6463] cramfs: Error -3 while decompressing! [ 163.130238][ T6463] cramfs: ffffffff96fdc322(26)->ffff88805d86d000(4096) [ 163.137308][ T6463] cramfs: Error -3 while decompressing! [ 163.142960][ T6463] cramfs: ffffffff96fdc33c(16)->ffff88805d85a000(4096) [ 163.150258][ T6463] cramfs: Error -5 while decompressing! [ 163.155873][ T6463] cramfs: ffffffff96fdc308(26)->ffff88805d86c000(4096) [ 163.664166][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop2 [ 164.277454][ T6468] loop0: detected capacity change from 0 to 32768 [ 164.337216][ T6470] overlayfs: missing 'lowerdir' [ 168.521158][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'. [ 168.530258][ T6495] netlink: zone id is out of range [ 168.535936][ T6495] netlink: set zone limit has 8 unknown bytes [ 171.282329][ T6511] loop0: detected capacity change from 0 to 8 [ 171.311206][ T6511] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 171.386860][ T6512] cramfs: Error -5 while decompressing! [ 171.392805][ T6512] cramfs: ffffffff96fd8308(26)->ffff8880590aa000(4096) [ 171.399893][ T6512] cramfs: Error -3 while decompressing! [ 171.405630][ T6512] cramfs: ffffffff96fd8322(26)->ffff8880590ab000(4096) [ 171.412673][ T6512] cramfs: Error -3 while decompressing! [ 171.419468][ T6512] cramfs: ffffffff96fd833c(16)->ffff8880590ac000(4096) [ 171.427903][ T6512] cramfs: Error -5 while decompressing! [ 171.433550][ T6512] cramfs: ffffffff96fd8308(26)->ffff8880590aa000(4096) [ 172.150082][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop0 [ 173.218111][ T6519] overlayfs: missing 'lowerdir' [ 175.965892][ T6540] loop1: detected capacity change from 0 to 32768 [ 176.925482][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.165'. [ 176.934704][ T6554] netlink: zone id is out of range [ 176.942457][ T6554] netlink: set zone limit has 8 unknown bytes [ 178.075452][ T6556] read_mapping_page failed! [ 178.136448][ T6563] loop2: detected capacity change from 0 to 8 [ 178.150794][ T6563] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 178.157767][ T6556] diRead: read_metapage failed [ 178.176914][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop2 [ 178.183970][ T6556] jfs_lookup: iget failed on inum 32 [ 178.440437][ T6557] read_mapping_page failed! [ 178.488630][ T6557] jfs_create: dtInsert returned -EIO [ 178.509794][ T6568] cramfs: Error -5 while decompressing! [ 178.515449][ T6568] cramfs: ffffffff96fdc308(26)->ffff88805a8d7000(4096) [ 178.522785][ T6568] cramfs: Error -3 while decompressing! [ 178.528482][ T6568] cramfs: ffffffff96fdc322(26)->ffff88805a8d8000(4096) [ 178.535530][ T6568] cramfs: Error -3 while decompressing! [ 178.541295][ T6568] cramfs: ffffffff96fdc33c(16)->ffff88805a8d9000(4096) [ 178.548608][ T6568] cramfs: Error -5 while decompressing! [ 178.554273][ T6568] cramfs: ffffffff96fdc308(26)->ffff88805a8d7000(4096) [ 178.988550][ T6557] ERROR: (device loop1): jfs_create: [ 178.988550][ T6557] [ 179.114111][ T6557] ERROR: (device loop1): remounting filesystem as read-only [ 181.637467][ T6581] overlayfs: missing 'lowerdir' [ 184.148053][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.176'. [ 184.157028][ T6601] netlink: zone id is out of range [ 184.162763][ T6601] netlink: set zone limit has 8 unknown bytes [ 184.729011][ T6610] loop3: detected capacity change from 0 to 8 [ 184.738752][ T6610] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 184.772204][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 185.604677][ T6613] cramfs: Error -5 while decompressing! [ 185.610466][ T6613] cramfs: ffffffff96fd8308(26)->ffff88805e25f000(4096) [ 185.618147][ T6613] cramfs: Error -3 while decompressing! [ 185.623792][ T6613] cramfs: ffffffff96fd8322(26)->ffff88805e242000(4096) [ 185.631241][ T6613] cramfs: Error -3 while decompressing! [ 185.636873][ T6613] cramfs: ffffffff96fd833c(16)->ffff88805e243000(4096) [ 185.644455][ T6613] cramfs: Error -5 while decompressing! [ 185.650671][ T6613] cramfs: ffffffff96fd8308(26)->ffff88805e25f000(4096) [ 189.265710][ T6636] overlayfs: missing 'lowerdir' [ 190.111200][ T6645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'. [ 190.120240][ T6645] netlink: zone id is out of range [ 190.125965][ T6645] netlink: set zone limit has 8 unknown bytes [ 191.019684][ T6654] loop3: detected capacity change from 0 to 8 [ 191.778362][ T6654] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 191.790117][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 191.935526][ T6658] cramfs: Error -5 while decompressing! [ 191.941280][ T6658] cramfs: ffffffff96fdc308(26)->ffff888058645000(4096) [ 191.948516][ T6658] cramfs: Error -3 while decompressing! [ 191.954200][ T6658] cramfs: ffffffff96fdc322(26)->ffff888058646000(4096) [ 191.961488][ T6658] cramfs: Error -3 while decompressing! [ 191.967119][ T6658] cramfs: ffffffff96fdc33c(16)->ffff888058647000(4096) [ 191.974400][ T6658] cramfs: Error -5 while decompressing! [ 191.980050][ T6658] cramfs: ffffffff96fdc308(26)->ffff888058645000(4096) [ 192.928643][ T6661] loop0: detected capacity change from 0 to 32768 [ 194.746732][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.758833][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.006491][ T6690] overlayfs: missing 'lowerdir' [ 196.246100][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 196.255131][ T6697] netlink: zone id is out of range [ 196.260870][ T6697] netlink: set zone limit has 8 unknown bytes [ 196.761123][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 196.769082][ T5793] Bluetooth: hci0: command 0x0406 tx timeout [ 196.837981][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 197.996343][ T6707] loop3: detected capacity change from 0 to 8 [ 198.008551][ T6707] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 198.028432][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 198.140726][ T6708] cramfs: Error -5 while decompressing! [ 198.146965][ T6708] cramfs: ffffffff96fd8308(26)->ffff88805ce51000(4096) [ 198.154426][ T6708] cramfs: Error -3 while decompressing! [ 198.160214][ T6708] cramfs: ffffffff96fd8322(26)->ffff88805ce52000(4096) [ 198.167372][ T6708] cramfs: Error -3 while decompressing! [ 198.173214][ T6708] cramfs: ffffffff96fd833c(16)->ffff888077211000(4096) [ 198.180529][ T6708] cramfs: Error -5 while decompressing! [ 198.186153][ T6708] cramfs: ffffffff96fd8308(26)->ffff88805ce51000(4096) [ 201.835851][ T6736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'. [ 201.844972][ T6736] netlink: zone id is out of range [ 201.850828][ T6736] netlink: set zone limit has 8 unknown bytes [ 202.800537][ T6739] loop3: detected capacity change from 0 to 32768 [ 202.974874][ T6743] loop2: detected capacity change from 0 to 8 [ 203.217705][ T6743] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 203.244722][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop2 [ 203.299169][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop2 [ 203.836955][ T6750] cramfs: Error -5 while decompressing! [ 203.842857][ T6750] cramfs: ffffffff96fdc308(26)->ffff88805e814000(4096) [ 203.850145][ T6750] cramfs: Error -3 while decompressing! [ 203.855834][ T6750] cramfs: ffffffff96fdc322(26)->ffff88805e815000(4096) [ 203.863064][ T6750] cramfs: Error -3 while decompressing! [ 203.868779][ T6750] cramfs: ffffffff96fdc33c(16)->ffff88805e816000(4096) [ 203.876337][ T6750] cramfs: Error -5 while decompressing! [ 203.883035][ T6750] cramfs: ffffffff96fdc308(26)->ffff88805e814000(4096) [ 203.980819][ T6747] read_mapping_page failed! [ 204.035761][ T6747] jfs_create: dtInsert returned -EIO [ 204.041870][ T6747] ERROR: (device loop3): jfs_create: [ 204.041870][ T6747] [ 204.053645][ T6747] ERROR: (device loop3): remounting filesystem as read-only [ 205.630450][ T6763] overlayfs: missing 'lowerdir' [ 207.524729][ T5103] Bluetooth: hci3: link tx timeout [ 207.530179][ T5103] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 207.545927][ T5796] Bluetooth: hci3: link tx timeout [ 207.552568][ T5796] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 207.563150][ T5796] Bluetooth: hci3: link tx timeout [ 207.570280][ T5796] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 207.579402][ T5796] Bluetooth: hci3: link tx timeout [ 207.588154][ T5796] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 207.595953][ T5796] Bluetooth: hci3: link tx timeout [ 207.601194][ T5796] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 207.611692][ T5796] Bluetooth: hci3: link tx timeout [ 207.616933][ T5796] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 207.631453][ T5796] Bluetooth: hci3: link tx timeout [ 207.636722][ T5796] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 207.644606][ T5796] Bluetooth: hci3: link tx timeout [ 207.650043][ T5796] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 207.657986][ T5796] Bluetooth: hci3: link tx timeout [ 207.663247][ T5796] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 207.681722][ T5796] Bluetooth: hci3: link tx timeout [ 207.687200][ T5796] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 207.712823][ T5796] Bluetooth: hci3: link tx timeout [ 207.719183][ T5796] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.471567][ T6782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'. [ 208.480817][ T6782] netlink: zone id is out of range [ 208.489436][ T6782] netlink: set zone limit has 8 unknown bytes [ 209.637962][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 209.742767][ T6790] loop3: detected capacity change from 0 to 8 [ 209.758948][ T6790] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 209.900372][ T6790] cramfs: Error -5 while decompressing! [ 209.905953][ T6790] cramfs: ffffffff96fd8308(26)->ffff88805e4db000(4096) [ 209.912993][ T6790] cramfs: Error -3 while decompressing! [ 209.918649][ T6790] cramfs: ffffffff96fd8322(26)->ffff88805e4dc000(4096) [ 209.926191][ T6790] cramfs: Error -3 while decompressing! [ 209.931765][ T6790] cramfs: ffffffff96fd833c(16)->ffff88805e4dd000(4096) [ 209.938687][ T6790] cramfs: Error -5 while decompressing! [ 209.944219][ T6790] cramfs: ffffffff96fd8308(26)->ffff88805e4db000(4096) [ 210.581273][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 210.721717][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 211.508837][ T6806] overlayfs: missing 'workdir' [ 212.333251][ T6813] sched: RT throttling activated [ 213.287080][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.236'. [ 213.296329][ T6824] netlink: zone id is out of range [ 213.304785][ T6824] netlink: set zone limit has 8 unknown bytes [ 214.821036][ T6837] loop0: detected capacity change from 0 to 8 [ 214.839958][ T6837] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 214.855415][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop0 [ 214.953115][ T6837] cramfs: Error -5 while decompressing! [ 214.958767][ T6837] cramfs: ffffffff96fdc308(26)->ffff88805db1f000(4096) [ 214.965661][ T6837] cramfs: Error -3 while decompressing! [ 214.971335][ T6837] cramfs: ffffffff96fdc322(26)->ffff88805db28000(4096) [ 214.978215][ T6837] cramfs: Error -3 while decompressing! [ 214.983779][ T6837] cramfs: ffffffff96fdc33c(16)->ffff88805db29000(4096) [ 214.990738][ T6837] cramfs: Error -5 while decompressing! [ 214.996278][ T6837] cramfs: ffffffff96fdc308(26)->ffff88805db1f000(4096) [ 215.339920][ T6828] loop3: detected capacity change from 0 to 32768 [ 215.384327][ T6828] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 215.662326][ T5970] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 215.696183][ T6845] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.244'. [ 215.906375][ T6845] loop3: detected capacity change from 0 to 32768 [ 217.587925][ T6855] overlayfs: missing 'workdir' [ 218.984630][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.248'. [ 218.993738][ T6865] netlink: zone id is out of range [ 219.000595][ T6865] netlink: set zone limit has 8 unknown bytes [ 219.435246][ T6874] loop2: detected capacity change from 0 to 8 [ 219.446190][ T6874] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 219.631797][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop2 [ 219.663821][ T6874] cramfs: Error -5 while decompressing! [ 219.669455][ T6874] cramfs: ffffffff96fd8308(26)->ffff88805dbb8000(4096) [ 219.676330][ T6874] cramfs: Error -3 while decompressing! [ 219.681936][ T6874] cramfs: ffffffff96fd8322(26)->ffff88805dbb9000(4096) [ 219.688816][ T6874] cramfs: Error -3 while decompressing! [ 219.694349][ T6874] cramfs: ffffffff96fd833c(16)->ffff88805dbba000(4096) [ 219.701325][ T6874] cramfs: Error -5 while decompressing! [ 219.706870][ T6874] cramfs: ffffffff96fd8308(26)->ffff88805dbb8000(4096) [ 219.780412][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.251'. [ 219.789622][ T6878] netlink: zone id is out of range [ 219.797281][ T6878] netlink: set zone limit has 8 unknown bytes [ 220.306256][ T6877] loop0: detected capacity change from 0 to 32768 [ 221.243985][ T6884] read_mapping_page failed! [ 221.292906][ T6884] diRead: read_metapage failed [ 221.306835][ T6884] jfs_lookup: iget failed on inum 32 [ 221.315249][ T6885] read_mapping_page failed! [ 221.320111][ T6885] jfs_create: dtInsert returned -EIO [ 221.325640][ T6885] ERROR: (device loop0): jfs_create: [ 221.325640][ T6885] [ 221.366511][ T6885] ERROR: (device loop0): remounting filesystem as read-only [ 222.912147][ T6899] overlayfs: missing 'workdir' [ 223.020457][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'. [ 223.030596][ T6900] netlink: zone id is out of range [ 223.038481][ T6900] netlink: set zone limit has 8 unknown bytes [ 224.394100][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.260'. [ 224.403476][ T6912] netlink: zone id is out of range [ 224.411422][ T6912] netlink: set zone limit has 8 unknown bytes [ 226.026520][ T6928] loop3: detected capacity change from 0 to 8 [ 226.033508][ T6928] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 226.060133][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 226.090457][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 226.093010][ T6928] cramfs: Error -5 while decompressing! [ 226.103589][ T6928] cramfs: ffffffff96fdc308(26)->ffff888053df6000(4096) [ 226.110565][ T6928] cramfs: Error -3 while decompressing! [ 226.116207][ T6928] cramfs: ffffffff96fdc322(26)->ffff888053df7000(4096) [ 226.123150][ T6928] cramfs: Error -3 while decompressing! [ 226.128715][ T6928] cramfs: ffffffff96fdc33c(16)->ffff888053df8000(4096) [ 226.135613][ T6928] cramfs: Error -5 while decompressing! [ 226.141178][ T6928] cramfs: ffffffff96fdc308(26)->ffff888053df6000(4096) [ 227.681275][ T6943] overlayfs: missing 'lowerdir' [ 228.559799][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.270'. [ 228.569031][ T6950] netlink: zone id is out of range [ 228.576668][ T6950] netlink: set zone limit has 8 unknown bytes [ 229.434597][ T6958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'. [ 229.445424][ T6958] netlink: zone id is out of range [ 229.467943][ T6958] netlink: set zone limit has 8 unknown bytes [ 230.824479][ T6968] loop3: detected capacity change from 0 to 8 [ 230.844531][ T6968] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 230.873094][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 230.886997][ T6968] cramfs: Error -5 while decompressing! [ 230.893300][ T6968] cramfs: ffffffff96fd8308(26)->ffff88805dba0000(4096) [ 230.900401][ T6968] cramfs: Error -3 while decompressing! [ 230.905934][ T6968] cramfs: ffffffff96fd8322(26)->ffff88805dba1000(4096) [ 230.913178][ T6968] cramfs: Error -3 while decompressing! [ 230.918909][ T6968] cramfs: ffffffff96fd833c(16)->ffff88805dba2000(4096) [ 230.925828][ T6968] cramfs: Error -5 while decompressing! [ 230.931394][ T6968] cramfs: ffffffff96fd8308(26)->ffff88805dba0000(4096) [ 230.967120][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 233.218041][ T6986] overlayfs: missing 'lowerdir' [ 234.163546][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.283'. [ 234.172562][ T6996] netlink: zone id is out of range [ 234.178203][ T6996] netlink: set zone limit has 8 unknown bytes [ 234.348117][ T6989] loop1: detected capacity change from 0 to 32768 [ 234.394324][ T6989] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 236.846559][ T7011] loop3: detected capacity change from 0 to 8 [ 236.854566][ T7011] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 236.879267][ T7011] cramfs: Error -5 while decompressing! [ 236.884936][ T7011] cramfs: ffffffff96fdc308(26)->ffff888075340000(4096) [ 236.891902][ T7011] cramfs: Error -3 while decompressing! [ 236.897440][ T7011] cramfs: ffffffff96fdc322(26)->ffff888075341000(4096) [ 236.904353][ T7011] cramfs: Error -3 while decompressing! [ 236.909921][ T7011] cramfs: ffffffff96fdc33c(16)->ffff888075342000(4096) [ 236.916812][ T7011] cramfs: Error -5 while decompressing! [ 236.922453][ T7011] cramfs: ffffffff96fdc308(26)->ffff888075340000(4096) [ 237.750551][ T7013] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.290'. [ 237.950370][ T7013] loop1: detected capacity change from 0 to 32768 [ 238.117323][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 239.088016][ T7022] overlayfs: missing 'lowerdir' [ 239.366793][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 240.657016][ T7018] loop0: detected capacity change from 0 to 32768 [ 240.989764][ T5799] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (5799) [ 241.913309][ T7052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 241.923587][ T7052] netlink: zone id is out of range [ 241.929380][ T7052] netlink: set zone limit has 8 unknown bytes [ 243.878988][ T7067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 243.888045][ T7067] netlink: zone id is out of range [ 243.893804][ T7067] netlink: set zone limit has 8 unknown bytes [ 245.024173][ T7077] loop3: detected capacity change from 0 to 8 [ 245.031334][ T7077] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 245.091209][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 245.130967][ T7078] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 245.140084][ T7078] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 245.318098][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 245.738923][ T7077] cramfs: Error -5 while decompressing! [ 245.744508][ T7077] cramfs: ffffffff96fd8308(26)->ffff88805c3c9000(4096) [ 245.751521][ T7077] cramfs: Error -3 while decompressing! [ 245.757079][ T7077] cramfs: ffffffff96fd8322(26)->ffff88805c3ca000(4096) [ 245.764582][ T7077] cramfs: Error -3 while decompressing! [ 245.770191][ T7077] cramfs: ffffffff96fd833c(16)->ffff88805c3cb000(4096) [ 245.777104][ T7077] cramfs: Error -5 while decompressing! [ 245.782674][ T7077] cramfs: ffffffff96fd8308(26)->ffff88805c3c9000(4096) [ 246.132834][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 247.067961][ T7089] overlayfs: failed to resolve './file0': -2 [ 247.447496][ T7091] loop1: detected capacity change from 0 to 8 [ 248.860756][ T28] audit: type=1800 audit(1753622467.660:6): pid=7095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.305" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 250.815437][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.314'. [ 250.824457][ T7125] netlink: zone id is out of range [ 250.830222][ T7125] netlink: set zone limit has 8 unknown bytes [ 251.885988][ T7129] loop2: detected capacity change from 0 to 32768 [ 252.849330][ T7132] read_mapping_page failed! [ 253.007401][ T7132] diRead: read_metapage failed [ 253.032344][ T7132] jfs_lookup: iget failed on inum 32 [ 253.977941][ T7137] overlayfs: failed to resolve './file0': -2 [ 254.294386][ T7133] read_mapping_page failed! [ 254.299069][ T7133] ERROR: (device loop2): txCommit: [ 254.299069][ T7133] [ 254.530375][ T7133] ERROR: (device loop2): remounting filesystem as read-only [ 254.858499][ T7145] loop1: detected capacity change from 0 to 32768 [ 255.916514][ T7153] loop0: detected capacity change from 0 to 32768 [ 256.141794][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.158793][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.320997][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'. [ 258.330256][ T7165] netlink: zone id is out of range [ 258.338003][ T7165] netlink: set zone limit has 8 unknown bytes [ 258.364357][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.327'. [ 258.373762][ T7166] netlink: zone id is out of range [ 258.382165][ T7166] netlink: set zone limit has 8 unknown bytes [ 258.793947][ T7168] loop0: detected capacity change from 0 to 8 [ 258.811856][ T7168] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 259.178327][ T7171] cramfs: Error -5 while decompressing! [ 259.184053][ T7171] cramfs: ffffffff96fdc308(26)->ffff88805db57000(4096) [ 259.191369][ T7171] cramfs: Error -3 while decompressing! [ 259.197128][ T7171] cramfs: ffffffff96fdc322(26)->ffff88805a200000(4096) [ 259.204471][ T7171] cramfs: Error -3 while decompressing! [ 259.225701][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.329'. [ 259.235072][ T7173] netlink: zone id is out of range [ 259.242918][ T7173] netlink: set zone limit has 8 unknown bytes [ 259.253233][ T7171] cramfs: ffffffff96fdc33c(16)->ffff88805a201000(4096) [ 259.261253][ T7171] cramfs: Error -5 while decompressing! [ 259.267006][ T7171] cramfs: ffffffff96fdc308(26)->ffff88805db57000(4096) [ 260.796553][ T7179] loop1: detected capacity change from 0 to 8 [ 260.826080][ T7179] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 260.868452][ T7179] cramfs: Error -5 while decompressing! [ 260.874074][ T7179] cramfs: ffffffff96fd8308(26)->ffff88805da67000(4096) [ 260.881105][ T7179] cramfs: Error -3 while decompressing! [ 260.886643][ T7179] cramfs: ffffffff96fd8322(26)->ffff88805cd98000(4096) [ 260.893554][ T7179] cramfs: Error -3 while decompressing! [ 260.899120][ T7179] cramfs: ffffffff96fd833c(16)->ffff88805cd99000(4096) [ 260.906008][ T7179] cramfs: Error -5 while decompressing! [ 260.911578][ T7179] cramfs: ffffffff96fd8308(26)->ffff88805da67000(4096) [ 260.949814][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop1 [ 262.939854][ T5778] udevd[5778]: incorrect cramfs checksum on /dev/loop1 [ 264.024820][ T7196] loop2: detected capacity change from 0 to 32768 [ 265.869908][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.340'. [ 265.879270][ T7210] netlink: zone id is out of range [ 265.884950][ T7210] netlink: set zone limit has 8 unknown bytes [ 267.417783][ T7221] loop2: detected capacity change from 0 to 32768 [ 268.894609][ T7223] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.344'. [ 270.142190][ T7223] loop0: detected capacity change from 0 to 32768 [ 271.571867][ T7237] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.347'. [ 271.861602][ T7237] loop1: detected capacity change from 0 to 32768 [ 273.503308][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.350'. [ 273.513135][ T7252] netlink: zone id is out of range [ 273.518935][ T7252] netlink: set zone limit has 8 unknown bytes [ 274.284455][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 274.293721][ T7264] netlink: zone id is out of range [ 274.301475][ T7264] netlink: set zone limit has 8 unknown bytes [ 277.909433][ T7294] loop0: detected capacity change from 0 to 8 [ 278.569809][ T28] audit: type=1800 audit(1753622497.820:7): pid=7302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.359" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 279.654477][ T7310] loop0: detected capacity change from 0 to 32768 [ 280.783154][ T7322] loop3: detected capacity change from 0 to 32768 [ 286.438278][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.374'. [ 286.447247][ T7349] netlink: zone id is out of range [ 286.453003][ T7349] netlink: set zone limit has 8 unknown bytes [ 286.614580][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.373'. [ 286.624358][ T7356] netlink: zone id is out of range [ 286.632699][ T7356] netlink: set zone limit has 8 unknown bytes [ 287.216407][ T7360] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.375'. [ 288.193768][ T7360] loop1: detected capacity change from 0 to 32768 [ 288.698754][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.378'. [ 288.707787][ T7372] netlink: zone id is out of range [ 288.713455][ T7372] netlink: set zone limit has 8 unknown bytes [ 289.832148][ T7373] loop2: detected capacity change from 0 to 32768 [ 289.860042][ T7373] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.379 (7373) [ 289.899605][ T7373] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 289.921143][ T7373] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 289.949031][ T7373] BTRFS info (device loop2): enabling auto defrag [ 289.955574][ T7373] BTRFS info (device loop2): doing ref verification [ 289.977646][ T7373] BTRFS info (device loop2): use no compression [ 289.983980][ T7373] BTRFS info (device loop2): force clearing of disk cache [ 290.008830][ T7373] BTRFS info (device loop2): setting nodatacow, compression disabled [ 290.016975][ T7373] BTRFS info (device loop2): disabling free space tree [ 290.100251][ T7373] BTRFS info (device loop2): enabling ssd optimizations [ 290.122940][ T7373] BTRFS info (device loop2): auto enabling async discard [ 290.170499][ T7373] BTRFS info (device loop2): rebuilding free space tree [ 290.234332][ T7373] BTRFS info (device loop2): disabling free space tree [ 290.265203][ T7373] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 290.293141][ T7373] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 292.173622][ T7399] loop0: detected capacity change from 0 to 32768 [ 293.023060][ T5790] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 294.429501][ T7413] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.384'. [ 294.679777][ T7422] loop0: detected capacity change from 0 to 32768 [ 294.962413][ T7418] loop2: detected capacity change from 0 to 32768 [ 295.094788][ T7424] loop1: detected capacity change from 0 to 32768 [ 297.253826][ T7438] loop1: detected capacity change from 0 to 32768 [ 300.304218][ T7466] loop3: detected capacity change from 0 to 32768 [ 303.545130][ T7484] loop0: detected capacity change from 0 to 8 [ 303.552850][ T7484] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 303.613078][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop0 [ 303.759083][ T7487] cramfs: Error -5 while decompressing! [ 303.809964][ T7487] cramfs: ffffffff96fdc308(26)->ffff8880580ee000(4096) [ 303.820463][ T7487] cramfs: Error -3 while decompressing! [ 303.827722][ T7487] cramfs: ffffffff96fdc322(26)->ffff88805e261000(4096) [ 303.837679][ T7487] cramfs: Error -3 while decompressing! [ 303.844568][ T7487] cramfs: ffffffff96fdc33c(16)->ffff88805e262000(4096) [ 303.851959][ T7487] cramfs: Error -5 while decompressing! [ 303.858699][ T7487] cramfs: ffffffff96fdc308(26)->ffff8880580ee000(4096) [ 303.881105][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop0 [ 304.824802][ T7495] loop0: detected capacity change from 0 to 32768 [ 304.929264][ T7499] loop2: detected capacity change from 0 to 32768 [ 306.425319][ T7504] read_mapping_page failed! [ 306.440747][ T7504] jfs_create: dtInsert returned -EIO [ 306.474315][ T7504] ERROR: (device loop2): jfs_create: [ 306.474315][ T7504] [ 306.949597][ T7504] ERROR: (device loop2): remounting filesystem as read-only [ 307.734615][ T7521] loop3: detected capacity change from 0 to 8 [ 307.741838][ T7521] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 307.958762][ T5886] udevd[5886]: incorrect cramfs checksum on /dev/loop3 [ 308.098471][ T5886] udevd[5886]: incorrect cramfs checksum on /dev/loop3 [ 308.143344][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop3 [ 308.160026][ T7524] cramfs: Error -5 while decompressing! [ 308.165668][ T7524] cramfs: ffffffff96fd8308(26)->ffff88805ecd7000(4096) [ 308.173546][ T7524] cramfs: Error -3 while decompressing! [ 308.179487][ T7524] cramfs: ffffffff96fd8322(26)->ffff888058650000(4096) [ 308.186974][ T7524] cramfs: Error -3 while decompressing! [ 308.192735][ T7524] cramfs: ffffffff96fd833c(16)->ffff888058651000(4096) [ 308.200084][ T7524] cramfs: Error -5 while decompressing! [ 308.205730][ T7524] cramfs: ffffffff96fd8308(26)->ffff88805ecd7000(4096) [ 308.541792][ T7527] loop1: detected capacity change from 0 to 8 [ 308.812962][ T7527] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 308.840455][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop1 [ 308.910185][ T7523] loop0: detected capacity change from 0 to 40427 [ 308.984033][ T7523] F2FS-fs (loop0): invalid crc value [ 309.002131][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop1 [ 309.029984][ T7523] F2FS-fs (loop0): Found nat_bits in checkpoint [ 309.066249][ T7523] F2FS-fs (loop0): Start checkpoint disabled! [ 309.109733][ T7529] cramfs: Error -5 while decompressing! [ 309.115316][ T7529] cramfs: ffffffff96fdc308(26)->ffff88805ebf8000(4096) [ 309.140229][ T7529] cramfs: Error -3 while decompressing! [ 309.146971][ T7529] cramfs: ffffffff96fdc322(26)->ffff88805ebf9000(4096) [ 309.154829][ T7529] cramfs: Error -3 while decompressing! [ 309.163547][ T7529] cramfs: ffffffff96fdc33c(16)->ffff88805ebfa000(4096) [ 309.171065][ T7529] cramfs: Error -5 while decompressing! [ 309.186914][ T7523] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 309.663791][ T7529] cramfs: ffffffff96fdc308(26)->ffff88805ebf8000(4096) [ 310.994924][ T2962] kworker/u4:8: attempt to access beyond end of device [ 310.994924][ T2962] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 311.062156][ T2962] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 311.110532][ T2962] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 311.137708][ T2962] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 311.505377][ T7540] loop1: detected capacity change from 0 to 32768 [ 311.561682][ T7537] loop3: detected capacity change from 0 to 32768 [ 311.570831][ T7537] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.416 (7537) [ 311.957823][ T7537] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 312.015614][ T7537] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 312.087742][ T7537] BTRFS info (device loop3): force clearing of disk cache [ 312.094945][ T7537] BTRFS info (device loop3): enabling auto defrag [ 312.141221][ T7537] BTRFS info (device loop3): max_inline at 0 [ 312.147408][ T7537] BTRFS info (device loop3): enabling disk space caching [ 312.158117][ T7537] BTRFS info (device loop3): disk space caching is enabled [ 312.925789][ T7557] read_mapping_page failed! [ 313.039034][ T7557] jfs_create: dtInsert returned -EIO [ 313.067151][ T7557] ERROR: (device loop1): jfs_create: [ 313.067151][ T7557] [ 313.123018][ T7537] BTRFS info (device loop3): enabling ssd optimizations [ 313.148937][ T7557] ERROR: (device loop1): remounting filesystem as read-only [ 313.186060][ T7537] BTRFS info (device loop3): rebuilding free space tree [ 313.388977][ T7537] BTRFS info (device loop3): disabling free space tree [ 313.409194][ T7537] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 313.428024][ T7537] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 313.444142][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 313.454355][ T7571] netlink: zone id is out of range [ 313.460106][ T7571] netlink: set zone limit has 8 unknown bytes [ 313.853470][ T7574] loop0: detected capacity change from 0 to 32768 [ 313.931352][ T3491] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 314.988651][ T7579] read_mapping_page failed! [ 315.117721][ T7579] diRead: read_metapage failed [ 315.122580][ T7579] jfs_lookup: iget failed on inum 32 [ 315.268237][ T7580] read_mapping_page failed! [ 315.272928][ T7580] jfs_create: dtInsert returned -EIO [ 315.284530][ T5785] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 315.372267][ T7585] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.415'. [ 315.382694][ T7580] ERROR: (device loop0): jfs_create: [ 315.382694][ T7580] [ 315.582248][ T7585] loop1: detected capacity change from 0 to 32768 [ 315.607655][ T7580] ERROR: (device loop0): remounting filesystem as read-only [ 316.852160][ T7589] loop2: detected capacity change from 0 to 32768 [ 317.617758][ T7594] loop3: detected capacity change from 0 to 32768 [ 317.670195][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.691870][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.819215][ T7600] loop0: detected capacity change from 0 to 8 [ 319.269409][ T28] audit: type=1800 audit(1753622538.510:8): pid=7603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.417" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 320.012053][ T7601] loop1: detected capacity change from 0 to 32768 [ 320.157879][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'. [ 320.167278][ T7608] netlink: zone id is out of range [ 320.175818][ T7608] netlink: set zone limit has 8 unknown bytes [ 320.697824][ T7601] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 320.757936][ T7601] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 320.766750][ T7601] BTRFS info (device loop1): setting nodatasum [ 321.085453][ T7614] loop3: detected capacity change from 0 to 32768 [ 321.090901][ T7601] BTRFS info (device loop1): force zlib compression, level 3 [ 321.130982][ T7601] BTRFS info (device loop1): enabling ssd optimizations [ 321.592695][ T7601] BTRFS info (device loop1): allowing degraded mounts [ 321.855628][ T7601] BTRFS info (device loop1): using free space tree [ 321.918873][ T7601] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 321.927732][ T7601] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 321.937248][ T7601] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 321.980322][ T7601] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 322.018260][ T7601] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 322.097482][ T7601] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 322.404728][ T7601] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 322.434940][ T7601] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 322.601898][ T7601] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 322.928910][ T7601] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 322.940024][ T7601] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 323.483697][ T7601] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 323.596615][ T7601] BTRFS error (device loop1): open_ctree failed: -12 [ 323.797123][ T7646] loop0: detected capacity change from 0 to 512 [ 323.805765][ T7646] ======================================================= [ 323.805765][ T7646] WARNING: The mand mount option has been deprecated and [ 323.805765][ T7646] and is ignored by this kernel. Remove the mand [ 323.805765][ T7646] option from the mount to silence this warning. [ 323.805765][ T7646] ======================================================= [ 324.009356][ T7646] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 326.043691][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.433'. [ 326.052798][ T7664] netlink: zone id is out of range [ 326.058544][ T7664] netlink: set zone limit has 8 unknown bytes [ 326.207189][ T7666] QAT: failed to copy from user cfg_data. [ 326.899390][ T7669] loop3: detected capacity change from 0 to 32768 [ 329.039319][ T7677] read_mapping_page failed! [ 329.044168][ T7677] ERROR: (device loop3): txCommit: [ 329.044168][ T7677] [ 329.092805][ T7677] ERROR: (device loop3): remounting filesystem as read-only [ 332.784375][ T7714] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.447'. [ 333.092180][ T7714] loop3: detected capacity change from 0 to 32768 [ 333.594661][ T7711] loop2: detected capacity change from 0 to 32768 [ 333.621246][ T7711] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.446 (7711) [ 333.684473][ T7711] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 333.711906][ T7711] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 333.729907][ T7711] BTRFS info (device loop2): setting nodatasum [ 333.736132][ T7711] BTRFS info (device loop2): force zlib compression, level 3 [ 333.761729][ T7711] BTRFS info (device loop2): enabling ssd optimizations [ 333.772111][ T7711] BTRFS info (device loop2): allowing degraded mounts [ 333.782582][ T7711] BTRFS info (device loop2): using free space tree [ 335.212457][ T5790] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 335.317821][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.449'. [ 335.326787][ T7746] netlink: zone id is out of range [ 335.332807][ T7746] netlink: set zone limit has 8 unknown bytes [ 335.425570][ T5970] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop2 scanned by udevd (5970) [ 335.435435][ T7717] loop1: detected capacity change from 0 to 32768 [ 335.500731][ T7717] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.448 (7717) [ 335.635582][ T7717] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 335.703507][ T7717] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 335.783793][ T7717] BTRFS info (device loop1): force clearing of disk cache [ 335.872857][ T7717] BTRFS info (device loop1): enabling auto defrag [ 335.960202][ T7717] BTRFS info (device loop1): max_inline at 0 [ 336.066801][ T7717] BTRFS info (device loop1): enabling disk space caching [ 336.169838][ T7717] BTRFS info (device loop1): disk space caching is enabled [ 336.619660][ T7717] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 336.620313][ T7717] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 336.630288][ T7717] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 336.640818][ T7717] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 336.650503][ T7717] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 336.660539][ T7717] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 336.671178][ T7717] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 336.682219][ T7717] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 336.692802][ T7717] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 336.703020][ T7717] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 336.713632][ T7717] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 336.724315][ T7717] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 336.787177][ T7717] BTRFS error (device loop1): open_ctree failed: -12 [ 338.367010][ T7775] loop1: detected capacity change from 0 to 8 [ 338.404521][ T7775] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 338.449253][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop1 [ 338.485537][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop1 [ 338.568038][ T7780] cramfs: Error -5 while decompressing! [ 338.573771][ T7780] cramfs: ffffffff96fd8308(26)->ffff8880553f1000(4096) [ 338.581144][ T7780] cramfs: Error -3 while decompressing! [ 338.586764][ T7780] cramfs: ffffffff96fd8322(26)->ffff88805d4d5000(4096) [ 338.593923][ T7780] cramfs: Error -3 while decompressing! [ 338.599648][ T7780] cramfs: ffffffff96fd833c(16)->ffff88805a872000(4096) [ 338.613185][ T7780] cramfs: Error -5 while decompressing! [ 338.625235][ T7780] cramfs: ffffffff96fd8308(26)->ffff8880553f1000(4096) [ 339.984605][ T7785] loop1: detected capacity change from 0 to 32768 [ 342.970260][ T7788] loop3: detected capacity change from 0 to 32768 [ 342.983091][ T7788] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.466 (7788) [ 344.026768][ T7809] loop1: detected capacity change from 0 to 32768 [ 344.430652][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'. [ 344.440995][ T7822] netlink: zone id is out of range [ 344.446680][ T7822] netlink: set zone limit has 8 unknown bytes [ 349.579773][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.473'. [ 349.588823][ T7857] netlink: zone id is out of range [ 349.595069][ T7857] netlink: set zone limit has 8 unknown bytes [ 350.039291][ T7859] loop0: detected capacity change from 0 to 8 [ 350.046388][ T7859] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 350.503599][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.478'. [ 350.512892][ T7869] netlink: zone id is out of range [ 350.521294][ T7869] netlink: set zone limit has 8 unknown bytes [ 351.709143][ T7868] cramfs: Error -5 while decompressing! [ 351.714824][ T7868] cramfs: ffffffff96fdc308(26)->ffff88805925f000(4096) [ 351.722136][ T7868] cramfs: Error -3 while decompressing! [ 351.727826][ T7868] cramfs: ffffffff96fdc322(26)->ffff88805b737000(4096) [ 351.734805][ T7868] cramfs: Error -3 while decompressing! [ 351.740521][ T7868] cramfs: ffffffff96fdc33c(16)->ffff888059317000(4096) [ 351.748674][ T7868] cramfs: Error -5 while decompressing! [ 351.754322][ T7868] cramfs: ffffffff96fdc308(26)->ffff88805925f000(4096) [ 351.940891][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop0 [ 352.109614][ T7875] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.480'. [ 352.404074][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop0 [ 353.220033][ T7875] loop3: detected capacity change from 0 to 32768 [ 355.296197][ T7899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'. [ 355.305255][ T7899] netlink: zone id is out of range [ 355.311091][ T7899] netlink: set zone limit has 8 unknown bytes [ 356.079203][ T7909] loop0: detected capacity change from 0 to 8 [ 356.197428][ T7909] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 356.578959][ T7914] cramfs: Error -5 while decompressing! [ 356.592753][ T7914] cramfs: ffffffff96fd8308(26)->ffff88805e83c000(4096) [ 356.600784][ T7914] cramfs: Error -3 while decompressing! [ 356.606709][ T7914] cramfs: ffffffff96fd8322(26)->ffff88805e83f000(4096) [ 356.614282][ T7914] cramfs: Error -3 while decompressing! [ 356.620129][ T7914] cramfs: ffffffff96fd833c(16)->ffff8880776a9000(4096) [ 356.627949][ T7914] cramfs: Error -5 while decompressing! [ 356.633653][ T7914] cramfs: ffffffff96fd8308(26)->ffff88805e83c000(4096) [ 357.279735][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop0 [ 357.380880][ T7917] loop3: detected capacity change from 0 to 512 [ 357.412686][ T7919] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.494'. [ 357.627905][ T7917] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 357.665088][ T7919] loop2: detected capacity change from 0 to 32768 [ 358.822938][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'. [ 358.832216][ T7929] netlink: zone id is out of range [ 358.839908][ T7929] netlink: set zone limit has 8 unknown bytes [ 360.373443][ T7941] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.500'. [ 361.600300][ T7953] loop0: detected capacity change from 0 to 8 [ 361.626469][ T7941] loop2: detected capacity change from 0 to 32768 [ 361.678474][ T7953] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 362.541750][ T7957] cramfs: Error -5 while decompressing! [ 362.547339][ T7957] cramfs: ffffffff96fdc308(26)->ffff88805872a000(4096) [ 362.554634][ T7957] cramfs: Error -3 while decompressing! [ 362.560341][ T7957] cramfs: ffffffff96fdc322(26)->ffff88805872b000(4096) [ 362.567856][ T7957] cramfs: Error -3 while decompressing! [ 362.573986][ T7957] cramfs: ffffffff96fdc33c(16)->ffff88805872c000(4096) [ 362.581405][ T7957] cramfs: Error -5 while decompressing! [ 362.587025][ T7957] cramfs: ffffffff96fdc308(26)->ffff88805872a000(4096) [ 363.732903][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop0 [ 364.603849][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop0 [ 365.304723][ T7964] loop1: detected capacity change from 0 to 32768 [ 365.555013][ T7969] loop2: detected capacity change from 0 to 32768 [ 366.271825][ T7973] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.518'. [ 366.384575][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.510'. [ 366.394660][ T7975] netlink: zone id is out of range [ 366.402279][ T7975] netlink: set zone limit has 8 unknown bytes [ 367.540714][ T7973] loop0: detected capacity change from 0 to 32768 [ 367.548590][ T7977] read_mapping_page failed! [ 367.589134][ T7977] ERROR: (device loop1): txCommit: [ 367.589134][ T7977] [ 368.110246][ T7978] read_mapping_page failed! [ 368.124307][ T7977] ERROR: (device loop1): remounting filesystem as read-only [ 368.238622][ T7978] ERROR: (device loop2): txCommit: [ 368.238622][ T7978] [ 368.248297][ T7982] loop3: detected capacity change from 0 to 8 [ 368.443142][ T7978] ERROR: (device loop2): remounting filesystem as read-only [ 368.790436][ T7980] ERROR: (device loop2): diRead: i_ino != di_number [ 368.790436][ T7980] [ 368.945713][ T28] audit: type=1800 audit(1753622588.180:9): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.511" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 369.247708][ T7980] jfs_lookup: iget failed on inum 8 [ 370.902686][ T8006] loop2: detected capacity change from 0 to 32768 [ 373.613128][ T8012] read_mapping_page failed! [ 373.675952][ T8012] jfs_create: dtInsert returned -EIO [ 373.690571][ T8012] ERROR: (device loop2): jfs_create: [ 373.690571][ T8012] [ 373.767855][ T8012] ERROR: (device loop2): remounting filesystem as read-only [ 374.055678][ T8021] loop0: detected capacity change from 0 to 8 [ 374.094408][ T8020] loop3: detected capacity change from 0 to 8 [ 375.117548][ T28] audit: type=1800 audit(1753622594.360:10): pid=8023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.522" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 375.155116][ T8025] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.521'. [ 375.313725][ T28] audit: type=1800 audit(1753622594.400:11): pid=8021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.523" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 375.473232][ T8025] loop2: detected capacity change from 0 to 32768 [ 376.275707][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'. [ 376.285016][ T8036] netlink: zone id is out of range [ 376.292759][ T8036] netlink: set zone limit has 8 unknown bytes [ 377.254052][ T8039] loop1: detected capacity change from 0 to 32768 [ 377.286554][ T8044] loop3: detected capacity change from 0 to 32768 [ 379.002463][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.017974][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.625604][ T8049] read_mapping_page failed! [ 380.790279][ T8049] jfs_create: dtInsert returned -EIO [ 380.800207][ T8049] ERROR: (device loop3): jfs_create: [ 380.800207][ T8049] [ 380.818410][ T8049] ERROR: (device loop3): remounting filesystem as read-only [ 381.085190][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'. [ 381.094538][ T8061] netlink: zone id is out of range [ 381.102221][ T8061] netlink: set zone limit has 8 unknown bytes [ 382.051936][ T8067] loop2: detected capacity change from 0 to 32768 [ 382.075238][ T8066] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.534'. [ 382.292600][ T8066] loop0: detected capacity change from 0 to 32768 [ 384.429997][ T8088] loop2: detected capacity change from 0 to 32768 [ 387.006291][ T8116] loop2: detected capacity change from 0 to 32768 [ 388.459688][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.544'. [ 388.468942][ T8129] netlink: zone id is out of range [ 388.476560][ T8129] netlink: set zone limit has 8 unknown bytes [ 388.611885][ T8114] loop1: detected capacity change from 0 to 32768 [ 388.725708][ T8114] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.541 (8114) [ 388.820289][ T8114] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 388.920223][ T8114] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 388.955586][ T8114] BTRFS info (device loop1): enabling auto defrag [ 388.964029][ T8114] BTRFS info (device loop1): doing ref verification [ 388.971283][ T8114] BTRFS info (device loop1): use no compression [ 388.989280][ T8114] BTRFS info (device loop1): force clearing of disk cache [ 388.996479][ T8114] BTRFS info (device loop1): setting nodatacow, compression disabled [ 389.143183][ T8134] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.546'. [ 389.152282][ T8114] BTRFS info (device loop1): disabling free space tree [ 389.183843][ T8114] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 389.196109][ T8114] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 389.207253][ T8114] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 389.228591][ T8114] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 389.288286][ T8114] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 389.364381][ T8114] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 389.475518][ T8134] loop3: detected capacity change from 0 to 32768 [ 389.568651][ T8114] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 389.569159][ T8114] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 389.630489][ T8114] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 389.651628][ T8142] loop0: detected capacity change from 0 to 32768 [ 389.679119][ T8114] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 389.679598][ T8114] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 389.696318][ T8114] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 389.725977][ T8114] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 389.800428][ T8114] BTRFS error (device loop1): open_ctree failed: -12 [ 391.483973][ T8158] loop2: detected capacity change from 0 to 32768 [ 393.041870][ T8168] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.553'. [ 393.385381][ T8172] loop0: detected capacity change from 0 to 8 [ 394.219856][ T28] audit: type=1800 audit(1753622613.480:12): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.550" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 394.395089][ T8168] loop3: detected capacity change from 0 to 32768 [ 395.183228][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.556'. [ 395.192550][ T8179] netlink: zone id is out of range [ 395.200189][ T8179] netlink: set zone limit has 8 unknown bytes [ 395.596552][ T8181] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.555'. [ 395.888618][ T8181] loop0: detected capacity change from 0 to 32768 [ 397.063505][ T8192] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.559'. [ 397.332451][ T8194] loop1: detected capacity change from 0 to 8 [ 397.352351][ T8194] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 397.477713][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.560'. [ 397.486885][ T8202] netlink: zone id is out of range [ 397.494424][ T8202] netlink: set zone limit has 8 unknown bytes [ 398.305732][ T8192] loop2: detected capacity change from 0 to 32768 [ 399.741949][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop1 [ 399.827772][ T8203] cramfs: Error -5 while decompressing! [ 399.884283][ T8203] cramfs: ffffffff96fd8308(26)->ffff888058907000(4096) [ 400.316908][ T8203] cramfs: Error -3 while decompressing! [ 400.323557][ T8203] cramfs: ffffffff96fd8322(26)->ffff888058908000(4096) [ 400.330901][ T8203] cramfs: Error -3 while decompressing! [ 400.336666][ T8203] cramfs: ffffffff96fd833c(16)->ffff888055298000(4096) [ 400.369473][ T8203] cramfs: Error -5 while decompressing! [ 400.375078][ T8203] cramfs: ffffffff96fd8308(26)->ffff888058907000(4096) [ 402.241916][ T8221] loop1: detected capacity change from 0 to 8 [ 403.032055][ T28] audit: type=1800 audit(1753622621.950:13): pid=8225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.564" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 403.316198][ T8224] loop2: detected capacity change from 0 to 32768 [ 403.929383][ T8227] loop1: detected capacity change from 0 to 32768 [ 403.986672][ T8231] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.569'. [ 404.220513][ T8231] loop0: detected capacity change from 0 to 32768 [ 405.043527][ T8227] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 405.156931][ T8240] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.573'. [ 405.469923][ T8240] loop3: detected capacity change from 0 to 32768 [ 405.761830][ T28] audit: type=1800 audit(1753622625.020:14): pid=8227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.567" name="bus" dev="loop1" ino=17058 res=0 errno=0 [ 407.316827][ T8242] loop2: detected capacity change from 0 to 40427 [ 407.462012][ T8242] F2FS-fs (loop2): invalid crc value [ 407.559964][ T8242] F2FS-fs (loop2): Found nat_bits in checkpoint [ 407.610692][ T8242] F2FS-fs (loop2): Start checkpoint disabled! [ 407.671442][ T8242] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 407.772924][ T5794] ocfs2: Unmounting device (7,1) on (node local) [ 408.220984][ T8257] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.575'. [ 408.444618][ T8257] loop3: detected capacity change from 0 to 32768 [ 410.668297][ T2962] kworker/u4:8: attempt to access beyond end of device [ 410.668297][ T2962] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 410.921886][ T2962] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 411.051239][ T2962] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 411.433071][ T8268] loop1: detected capacity change from 0 to 8 [ 411.468585][ T8268] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 411.531292][ T5886] udevd[5886]: incorrect cramfs checksum on /dev/loop1 [ 411.617248][ T8271] cramfs: Error -5 while decompressing! [ 411.625534][ T8271] cramfs: ffffffff96fdc308(26)->ffff88805ef5e000(4096) [ 411.636718][ T8271] cramfs: Error -3 while decompressing! [ 411.654204][ T8271] cramfs: ffffffff96fdc322(26)->ffff88805e215000(4096) [ 411.661621][ T5886] udevd[5886]: incorrect cramfs checksum on /dev/loop1 [ 411.758630][ T8271] cramfs: Error -3 while decompressing! [ 411.764248][ T8271] cramfs: ffffffff96fdc33c(16)->ffff88805b057000(4096) [ 411.786779][ T8271] cramfs: Error -5 while decompressing! [ 411.816702][ T8271] cramfs: ffffffff96fdc308(26)->ffff88805ef5e000(4096) [ 411.911062][ T8275] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.579'. [ 412.124450][ T8274] loop0: detected capacity change from 0 to 32768 [ 412.189572][ T8270] loop2: detected capacity change from 0 to 8 [ 412.622345][ T28] audit: type=1800 audit(1753622631.880:15): pid=8277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.576" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 413.654089][ T8289] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.580'. [ 414.077055][ T8290] loop2: detected capacity change from 0 to 32768 [ 415.991590][ T8289] loop1: detected capacity change from 0 to 32768 [ 417.252378][ T8292] read_mapping_page failed! [ 417.302283][ T8292] jfs_create: dtInsert returned -EIO [ 417.350875][ T8292] ERROR: (device loop2): jfs_create: [ 417.350875][ T8292] [ 417.362532][ T8292] ERROR: (device loop2): remounting filesystem as read-only [ 417.415896][ T8299] loop3: detected capacity change from 0 to 8 [ 417.575880][ T8299] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 418.001552][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop3 [ 418.398294][ T8302] cramfs: Error -5 while decompressing! [ 418.403902][ T8302] cramfs: ffffffff96fd8308(26)->ffff88805e462000(4096) [ 418.487840][ T8302] cramfs: Error -3 while decompressing! [ 418.547957][ T8302] cramfs: ffffffff96fd8322(26)->ffff88805e463000(4096) [ 418.577684][ T8302] cramfs: Error -3 while decompressing! [ 418.583297][ T8302] cramfs: ffffffff96fd833c(16)->ffff888057ca0000(4096) [ 418.959698][ T8302] cramfs: Error -5 while decompressing! [ 419.298045][ T8302] cramfs: ffffffff96fd8308(26)->ffff88805e462000(4096) [ 421.322920][ T8317] loop3: detected capacity change from 0 to 8 [ 421.431830][ T8317] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 421.503808][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.591'. [ 421.513199][ T8322] netlink: zone id is out of range [ 421.521290][ T8322] netlink: set zone limit has 8 unknown bytes [ 422.651769][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 422.759059][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 424.172985][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.589'. [ 424.182486][ T8327] netlink: zone id is out of range [ 424.188227][ T8327] netlink: set zone limit has 8 unknown bytes [ 424.288419][ T8328] cramfs: Error -5 while decompressing! [ 424.346791][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 424.359142][ T8328] cramfs: ffffffff96fdc308(26)->ffff88805b123000(4096) [ 424.366070][ T8328] cramfs: Error -3 while decompressing! [ 424.387936][ T8328] cramfs: ffffffff96fdc322(26)->ffff88805b124000(4096) [ 424.394942][ T8328] cramfs: Error -3 while decompressing! [ 424.401291][ T8328] cramfs: ffffffff96fdc33c(16)->ffff88805b125000(4096) [ 424.409823][ T8328] cramfs: Error -5 while decompressing! [ 424.416564][ T8328] cramfs: ffffffff96fdc308(26)->ffff88805b123000(4096) [ 424.665386][ T8335] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.593'. [ 424.898842][ T8335] loop2: detected capacity change from 0 to 32768 [ 425.390498][ T8339] loop3: detected capacity change from 0 to 512 [ 425.441241][ T8339] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 425.872894][ T8341] loop1: detected capacity change from 0 to 32768 [ 426.924236][ T8348] read_mapping_page failed! [ 427.017219][ T8348] diRead: read_metapage failed [ 427.078993][ T8348] jfs_lookup: iget failed on inum 32 [ 427.161962][ T8349] read_mapping_page failed! [ 427.166516][ T8349] jfs_create: dtInsert returned -EIO [ 427.195498][ T8349] ERROR: (device loop1): jfs_create: [ 427.195498][ T8349] [ 427.275120][ T8349] ERROR: (device loop1): remounting filesystem as read-only [ 427.669269][ T8358] loop0: detected capacity change from 0 to 8 [ 427.913004][ T28] audit: type=1800 audit(1753622647.170:16): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.601" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 429.187926][ T8368] loop3: detected capacity change from 0 to 512 [ 429.360022][ T8368] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 430.578239][ T8381] loop1: detected capacity change from 0 to 32768 [ 430.634622][ T8383] loop0: detected capacity change from 0 to 8 [ 430.982333][ T8383] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 431.097624][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop0 [ 432.262887][ T8383] cramfs: Error -5 while decompressing! [ 433.020392][ T8383] cramfs: ffffffff96fd8308(26)->ffff88805e90b000(4096) [ 433.028118][ T8383] cramfs: Error -3 while decompressing! [ 433.038811][ T8383] cramfs: ffffffff96fd8322(26)->ffff88805ef4a000(4096) [ 433.065369][ T8383] cramfs: Error -3 while decompressing! [ 433.091307][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop0 [ 433.360324][ T8383] cramfs: ffffffff96fd833c(16)->ffff88805782f000(4096) [ 433.378073][ T8383] cramfs: Error -5 while decompressing! [ 433.386545][ T8383] cramfs: ffffffff96fd8308(26)->ffff88805e90b000(4096) [ 434.715937][ T8417] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.612'. [ 435.534923][ T8415] loop3: detected capacity change from 0 to 8 [ 435.593904][ T8417] loop1: detected capacity change from 0 to 32768 [ 436.289481][ T28] audit: type=1800 audit(1753622655.550:17): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.614" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 436.338595][ T8423] loop0: detected capacity change from 0 to 8 [ 436.834106][ T28] audit: type=1800 audit(1753622655.960:18): pid=8425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.615" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 438.927677][ T8445] loop0: detected capacity change from 0 to 8 [ 438.952213][ T8445] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 438.971247][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop0 [ 439.608130][ T8450] cramfs: Error -5 while decompressing! [ 439.613901][ T8450] cramfs: ffffffff96fdc308(26)->ffff88805eeea000(4096) [ 439.621066][ T8450] cramfs: Error -3 while decompressing! [ 439.626721][ T8450] cramfs: ffffffff96fdc322(26)->ffff88805eeeb000(4096) [ 439.633812][ T8450] cramfs: Error -3 while decompressing! [ 439.639560][ T8450] cramfs: ffffffff96fdc33c(16)->ffff88805b368000(4096) [ 439.646839][ T8450] cramfs: Error -5 while decompressing! [ 439.652548][ T8450] cramfs: ffffffff96fdc308(26)->ffff88805eeea000(4096) [ 441.529133][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.591237][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.556915][ T8459] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.624'. [ 443.901152][ T8464] loop0: detected capacity change from 0 to 32768 [ 444.069887][ T8459] loop3: detected capacity change from 0 to 32768 [ 446.622428][ T8474] loop1: detected capacity change from 0 to 512 [ 446.655474][ T8474] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 446.685045][ T8476] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.629'. [ 447.162248][ T8476] loop0: detected capacity change from 0 to 32768 [ 448.236368][ T8490] loop3: detected capacity change from 0 to 8 [ 448.309011][ T8490] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 448.348447][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop3 [ 448.484516][ T8492] loop1: detected capacity change from 0 to 32768 [ 448.499140][ T8490] cramfs: Error -5 while decompressing! [ 448.504718][ T8490] cramfs: ffffffff96fd8308(26)->ffff888057c66000(4096) [ 448.512560][ T8490] cramfs: Error -3 while decompressing! [ 448.518190][ T8490] cramfs: ffffffff96fd8322(26)->ffff888057c68000(4096) [ 448.525045][ T8490] cramfs: Error -3 while decompressing! [ 448.530601][ T8490] cramfs: ffffffff96fd833c(16)->ffff88805d63f000(4096) [ 448.537551][ T8490] cramfs: Error -5 while decompressing! [ 448.543090][ T8490] cramfs: ffffffff96fd8308(26)->ffff888057c66000(4096) [ 448.584401][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop3 [ 448.894973][ T8492] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 449.435312][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop3 [ 449.471016][ T8492] capability: warning: `syz.1.635' uses 32-bit capabilities (legacy support in use) [ 450.628470][ T5794] ocfs2: Unmounting device (7,1) on (node local) [ 451.306821][ T8519] loop0: detected capacity change from 0 to 8 [ 452.306902][ T28] audit: type=1800 audit(1753622671.560:19): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.641" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 452.621310][ T8532] loop3: detected capacity change from 0 to 8 [ 453.078031][ T28] audit: type=1800 audit(1753622672.310:20): pid=8539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.642" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 453.899018][ T8542] loop0: detected capacity change from 0 to 8 [ 453.924108][ T8542] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 454.043128][ T8542] cramfs: Error -5 while decompressing! [ 454.048795][ T8542] cramfs: ffffffff96fdc308(26)->ffff88805b13e000(4096) [ 454.055817][ T8542] cramfs: Error -3 while decompressing! [ 454.061457][ T8542] cramfs: ffffffff96fdc322(26)->ffff88805b13f000(4096) [ 454.068487][ T8542] cramfs: Error -3 while decompressing! [ 454.074027][ T8542] cramfs: ffffffff96fdc33c(16)->ffff888055250000(4096) [ 454.081023][ T8542] cramfs: Error -5 while decompressing! [ 454.086560][ T8542] cramfs: ffffffff96fdc308(26)->ffff88805b13e000(4096) [ 454.431019][ T8548] loop3: detected capacity change from 0 to 32768 [ 454.435291][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop0 [ 454.551869][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop0 [ 454.574494][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop0 [ 457.084033][ T8569] read_mapping_page failed! [ 457.266701][ T8569] jfs_create: dtInsert returned -EIO [ 457.283021][ T8569] ERROR: (device loop3): jfs_create: [ 457.283021][ T8569] [ 457.292426][ T8569] ERROR: (device loop3): remounting filesystem as read-only [ 457.354665][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 457.364235][ T8576] netlink: zone id is out of range [ 457.372016][ T8576] netlink: set zone limit has 8 unknown bytes [ 458.107080][ T8578] loop1: detected capacity change from 0 to 8 [ 458.310885][ T28] audit: type=1800 audit(1753622677.560:21): pid=8580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.655" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 460.489219][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.658'. [ 460.499181][ T8603] netlink: zone id is out of range [ 460.509702][ T8603] netlink: set zone limit has 8 unknown bytes [ 462.349223][ T8612] loop2: detected capacity change from 0 to 32768 [ 464.688323][ T8627] read_mapping_page failed! [ 464.766116][ T8627] diRead: read_metapage failed [ 464.777066][ T8627] jfs_lookup: iget failed on inum 32 [ 465.814635][ T8628] read_mapping_page failed! [ 466.054143][ T8628] jfs_create: dtInsert returned -EIO [ 466.090138][ T8642] loop1: detected capacity change from 0 to 8 [ 466.096483][ T8628] ERROR: (device loop2): jfs_create: [ 466.096483][ T8628] [ 466.105706][ T8628] ERROR: (device loop2): remounting filesystem as read-only [ 466.171484][ T8644] loop0: detected capacity change from 0 to 8 [ 466.652331][ T28] audit: type=1800 audit(1753622685.680:22): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.666" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 466.772531][ T28] audit: type=1800 audit(1753622685.920:23): pid=8650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.668" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 471.950056][ T8689] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.678'. [ 472.677802][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 472.820037][ T8689] loop3: detected capacity change from 0 to 32768 [ 474.818308][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 474.863399][ T8703] loop1: detected capacity change from 0 to 32768 [ 476.060467][ T8713] read_mapping_page failed! [ 476.095991][ T8713] ERROR: (device loop1): txCommit: [ 476.095991][ T8713] [ 476.276793][ T8713] ERROR: (device loop1): remounting filesystem as read-only [ 478.127048][ T8727] loop0: detected capacity change from 0 to 8 [ 478.139400][ T8727] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 478.191264][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop0 [ 478.209434][ T8727] cramfs: Error -5 while decompressing! [ 478.215015][ T8727] cramfs: ffffffff96fd8308(26)->ffff88805db5d000(4096) [ 478.221984][ T8727] cramfs: Error -3 while decompressing! [ 478.227613][ T8727] cramfs: ffffffff96fd8322(26)->ffff88807539a000(4096) [ 478.234484][ T8727] cramfs: Error -3 while decompressing! [ 478.240060][ T8727] cramfs: ffffffff96fd833c(16)->ffff88805a837000(4096) [ 478.246971][ T8727] cramfs: Error -5 while decompressing! [ 478.252626][ T8727] cramfs: ffffffff96fd8308(26)->ffff88805db5d000(4096) [ 479.379999][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop0 [ 479.650776][ T8740] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.691'. [ 479.858953][ T8740] loop0: detected capacity change from 0 to 32768 [ 481.394410][ T8750] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.693'. [ 481.623836][ T8750] loop2: detected capacity change from 0 to 32768 [ 482.037582][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 482.555460][ T8757] loop0: detected capacity change from 0 to 32768 [ 483.513424][ T8762] loop3: detected capacity change from 0 to 32768 [ 484.117562][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 484.296346][ T8765] read_mapping_page failed! [ 484.715286][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.699'. [ 484.724306][ T8769] netlink: zone id is out of range [ 484.730065][ T8769] netlink: set zone limit has 8 unknown bytes [ 484.750656][ T8765] jfs_create: dtInsert returned -EIO [ 484.772236][ T8765] ERROR: (device loop0): jfs_create: [ 484.772236][ T8765] [ 484.917603][ T8765] ERROR: (device loop0): remounting filesystem as read-only [ 485.366817][ T8775] loop1: detected capacity change from 0 to 8 [ 485.376226][ T8775] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 485.456941][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop1 [ 485.526004][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop1 [ 485.619365][ T8778] cramfs: Error -5 while decompressing! [ 485.624980][ T8778] cramfs: ffffffff96fdc308(26)->ffff88805da93000(4096) [ 485.647785][ T8778] cramfs: Error -3 while decompressing! [ 485.653431][ T8778] cramfs: ffffffff96fdc322(26)->ffff8880572d3000(4096) [ 485.736546][ T8778] cramfs: Error -3 while decompressing! [ 485.828657][ T8778] cramfs: ffffffff96fdc33c(16)->ffff888053d57000(4096) [ 485.837871][ T8778] cramfs: Error -5 while decompressing! [ 485.843653][ T8778] cramfs: ffffffff96fdc308(26)->ffff88805da93000(4096) [ 487.081583][ T8788] loop1: detected capacity change from 0 to 8 [ 487.146112][ T8792] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.705'. [ 487.637582][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 487.679209][ T8792] loop0: detected capacity change from 0 to 32768 [ 487.686789][ T28] audit: type=1800 audit(1753622706.650:24): pid=8797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.703" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 490.054204][ T8812] loop0: detected capacity change from 0 to 32768 [ 493.186133][ T8835] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.717'. [ 494.089366][ T8835] loop3: detected capacity change from 0 to 32768 [ 494.447558][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 496.157572][ T8857] loop1: detected capacity change from 0 to 32768 [ 496.893180][ T8863] loop2: detected capacity change from 0 to 32768 [ 497.369968][ T8865] read_mapping_page failed! [ 497.626669][ T8865] diRead: read_metapage failed [ 497.718488][ T8865] jfs_lookup: iget failed on inum 32 [ 497.731270][ T8866] read_mapping_page failed! [ 497.735825][ T8866] jfs_create: dtInsert returned -EIO [ 497.774550][ T8866] ERROR: (device loop1): jfs_create: [ 497.774550][ T8866] [ 497.814132][ T8866] ERROR: (device loop1): remounting filesystem as read-only [ 498.421845][ T8874] read_mapping_page failed! [ 498.601974][ T8874] diRead: read_metapage failed [ 498.617691][ T8874] jfs_lookup: iget failed on inum 32 [ 498.628299][ T8875] read_mapping_page failed! [ 498.632855][ T8875] jfs_create: dtInsert returned -EIO [ 498.658224][ T8875] ERROR: (device loop2): jfs_create: [ 498.658224][ T8875] [ 498.684501][ T8875] ERROR: (device loop2): remounting filesystem as read-only [ 499.553241][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.733'. [ 499.562411][ T8886] netlink: zone id is out of range [ 499.568150][ T8886] netlink: set zone limit has 8 unknown bytes [ 499.922202][ T8891] loop0: detected capacity change from 0 to 8 [ 500.491702][ T28] audit: type=1800 audit(1753622719.530:25): pid=8891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.728" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 501.021851][ T8905] loop0: detected capacity change from 0 to 8 [ 501.631774][ T28] audit: type=1800 audit(1753622720.890:26): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.730" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 501.898210][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.905190][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.341980][ T8921] loop2: detected capacity change from 0 to 32768 [ 502.942413][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.735'. [ 502.951584][ T8925] netlink: zone id is out of range [ 502.957419][ T8925] netlink: set zone limit has 8 unknown bytes [ 504.150862][ T8936] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.738'. [ 505.039256][ T8936] loop0: detected capacity change from 0 to 32768 [ 505.077747][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 507.001610][ T8959] loop2: detected capacity change from 0 to 8 [ 507.271769][ T28] audit: type=1800 audit(1753622726.430:27): pid=8959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.744" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 507.561454][ T8966] loop2: detected capacity change from 0 to 8 [ 507.578322][ T8966] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 507.625177][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop2 [ 507.720408][ T8967] cramfs: Error -5 while decompressing! [ 507.737043][ T8967] cramfs: ffffffff96fd8308(26)->ffff8880591ff000(4096) [ 507.755985][ T8967] cramfs: Error -3 while decompressing! [ 507.765485][ T8967] cramfs: ffffffff96fd8322(26)->ffff888058784000(4096) [ 507.773357][ T8967] cramfs: Error -3 while decompressing! [ 507.793286][ T8967] cramfs: ffffffff96fd833c(16)->ffff888058797000(4096) [ 507.854109][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop2 [ 507.871344][ T8967] cramfs: Error -5 while decompressing! [ 507.920030][ T8967] cramfs: ffffffff96fd8308(26)->ffff8880591ff000(4096) [ 508.148748][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.747'. [ 508.158075][ T8975] netlink: zone id is out of range [ 508.165741][ T8975] netlink: set zone limit has 8 unknown bytes [ 508.688397][ T8952] Bluetooth: hci3: command 0x0406 tx timeout [ 510.607131][ T8988] loop3: detected capacity change from 0 to 32768 [ 511.073139][ T8993] loop0: detected capacity change from 0 to 8 [ 511.253308][ T28] audit: type=1800 audit(1753622730.510:28): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.754" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 512.437664][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 519.063187][ T9034] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.763'. [ 519.338256][ T9034] loop0: detected capacity change from 0 to 32768 [ 519.390827][ T9036] loop3: detected capacity change from 0 to 8 [ 520.089738][ T28] audit: type=1800 audit(1753622739.350:29): pid=9036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.764" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 520.873446][ T9055] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.770'. [ 520.899193][ T9057] loop1: detected capacity change from 0 to 8 [ 520.918366][ T9057] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 521.021966][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop1 [ 521.121629][ T9055] loop2: detected capacity change from 0 to 32768 [ 521.131518][ T9057] cramfs: Error -5 while decompressing! [ 521.137086][ T9057] cramfs: ffffffff96fdc308(26)->ffff88805887b000(4096) [ 521.144060][ T9057] cramfs: Error -3 while decompressing! [ 521.149648][ T9057] cramfs: ffffffff96fdc322(26)->ffff88805887c000(4096) [ 521.156499][ T9057] cramfs: Error -3 while decompressing! [ 521.162098][ T9057] cramfs: ffffffff96fdc33c(16)->ffff88805ec7f000(4096) [ 521.169029][ T9057] cramfs: Error -5 while decompressing! [ 521.174558][ T9057] cramfs: ffffffff96fdc308(26)->ffff88805887b000(4096) [ 523.303982][ T9072] loop0: detected capacity change from 0 to 8 [ 523.374728][ T28] audit: type=1800 audit(1753622742.630:30): pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.775" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 523.908004][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.776'. [ 523.917186][ T9078] netlink: zone id is out of range [ 523.924860][ T9078] netlink: set zone limit has 8 unknown bytes [ 525.196204][ T9095] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.781'. [ 525.589116][ T9095] loop0: detected capacity change from 0 to 32768 [ 525.774255][ T9101] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.782'. [ 526.069050][ T9101] loop3: detected capacity change from 0 to 32768 [ 526.477338][ T9106] loop2: detected capacity change from 0 to 32768 [ 529.439601][ T9124] loop3: detected capacity change from 0 to 8 [ 529.488723][ T9124] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 529.550422][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 529.600327][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 529.687156][ T9132] cramfs: Error -5 while decompressing! [ 529.735337][ T9132] cramfs: ffffffff96fd8308(26)->ffff88805e816000(4096) [ 529.886764][ T9132] cramfs: Error -3 while decompressing! [ 529.914515][ T9132] cramfs: ffffffff96fd8322(26)->ffff88805e817000(4096) [ 529.937409][ T9132] cramfs: Error -3 while decompressing! [ 529.946830][ T9137] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 529.963740][ T9132] cramfs: ffffffff96fd833c(16)->ffff88805d894000(4096) [ 529.972221][ T9132] cramfs: Error -5 while decompressing! [ 529.986593][ T9137] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 529.999079][ T9132] cramfs: ffffffff96fd8308(26)->ffff88805e816000(4096) [ 530.093826][ T9137] Zero length message leads to an empty skb [ 530.453542][ T9143] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.795'. [ 530.643794][ T9143] loop2: detected capacity change from 0 to 32768 [ 532.056822][ T9159] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.800'. [ 534.379764][ T9164] loop3: detected capacity change from 0 to 32768 [ 535.068394][ T9184] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.806'. [ 535.301729][ T9184] loop0: detected capacity change from 0 to 32768 [ 536.510434][ T8952] Bluetooth: hci3: command 0x0406 tx timeout [ 540.201349][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.809'. [ 540.336791][ T9193] netlink: zone id is out of range [ 540.342995][ T9193] netlink: set zone limit has 8 unknown bytes [ 540.394903][ T9220] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.816'. [ 540.609036][ T9220] loop2: detected capacity change from 0 to 32768 [ 541.119487][ T9225] loop3: detected capacity change from 0 to 8 [ 541.205368][ T28] audit: type=1800 audit(1753622760.460:31): pid=9225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.817" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 544.404568][ T9238] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.818'. [ 544.635792][ T9238] loop2: detected capacity change from 0 to 32768 [ 545.881887][ T9251] loop2: detected capacity change from 0 to 8 [ 545.940302][ T9253] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.825'. [ 545.971264][ T28] audit: type=1800 audit(1753622765.230:32): pid=9251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.823" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 546.158423][ T9253] loop1: detected capacity change from 0 to 32768 [ 546.363742][ T9258] loop3: detected capacity change from 0 to 8 [ 546.458682][ T9260] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.827'. [ 546.501658][ T9256] loop0: detected capacity change from 0 to 32768 [ 546.802918][ T9260] loop2: detected capacity change from 0 to 32768 [ 548.242623][ T28] audit: type=1800 audit(1753622767.490:33): pid=9268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.828" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 549.375954][ T9277] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.832'. [ 549.680090][ T9277] loop2: detected capacity change from 0 to 32768 [ 550.917676][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 550.979029][ T9288] loop1: detected capacity change from 0 to 8 [ 551.590838][ T9292] loop0: detected capacity change from 0 to 32768 [ 551.995718][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.834'. [ 552.004930][ T9295] netlink: zone id is out of range [ 552.011321][ T9295] netlink: set zone limit has 8 unknown bytes [ 552.956778][ T28] audit: type=1800 audit(1753622772.210:34): pid=9302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.836" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 553.568173][ T9304] loop0: detected capacity change from 0 to 32768 [ 554.411348][ T9310] loop2: detected capacity change from 0 to 8 [ 559.412847][ T9328] loop3: detected capacity change from 0 to 32768 [ 563.330985][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.338105][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.917039][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.850'. [ 563.926432][ T9353] netlink: zone id is out of range [ 563.934427][ T9353] netlink: set zone limit has 8 unknown bytes [ 564.424996][ T9356] loop1: detected capacity change from 0 to 8 [ 564.687852][ T9361] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.856'. [ 564.997612][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 565.323899][ T9368] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.857'. [ 565.439541][ T9361] loop3: detected capacity change from 0 to 32768 [ 565.461802][ T9368] loop2: detected capacity change from 0 to 512 [ 565.544259][ T28] audit: type=1800 audit(1753622784.790:35): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.853" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 565.573492][ T9368] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 566.603746][ T9375] loop0: detected capacity change from 0 to 32768 [ 566.815289][ T9379] loop1: detected capacity change from 0 to 32768 [ 568.763171][ T9388] loop3: detected capacity change from 0 to 32768 [ 568.852852][ T9390] loop2: detected capacity change from 0 to 32768 [ 570.065347][ T9391] read_mapping_page failed! [ 570.121386][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 570.129574][ T9391] jfs_create: dtInsert returned -EIO [ 570.134885][ T9391] ERROR: (device loop3): jfs_create: [ 570.134885][ T9391] [ 570.309678][ T9391] ERROR: (device loop3): remounting filesystem as read-only [ 570.504454][ T9393] read_mapping_page failed! [ 570.661967][ T9393] diRead: read_metapage failed [ 570.666885][ T9393] jfs_lookup: iget failed on inum 32 [ 574.821257][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 574.830278][ T9422] netlink: zone id is out of range [ 574.835946][ T9422] netlink: set zone limit has 8 unknown bytes [ 576.907996][ T9440] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.874'. [ 578.167521][ T8952] Bluetooth: hci3: command 0x0406 tx timeout [ 578.168158][ T9440] loop3: detected capacity change from 0 to 32768 [ 578.205846][ T9449] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.875'. [ 578.396090][ T9449] loop2: detected capacity change from 0 to 32768 [ 580.310656][ T9468] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.879'. [ 581.510427][ T9468] loop3: detected capacity change from 0 to 32768 [ 583.758666][ T9498] loop1: detected capacity change from 0 to 32768 [ 583.881095][ T9502] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.887'. [ 584.176446][ T9502] loop2: detected capacity change from 0 to 32768 [ 584.911512][ T9507] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.888'. [ 585.136204][ T9507] loop3: detected capacity change from 0 to 32768 [ 592.179306][ T9546] loop0: detected capacity change from 0 to 8 [ 592.479700][ T28] audit: type=1800 audit(1753622811.740:36): pid=9549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.897" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 595.627545][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 595.723981][ T9571] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.905'. [ 595.923710][ T9571] loop0: detected capacity change from 0 to 32768 [ 597.837608][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 598.203706][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.906'. [ 598.212890][ T9575] netlink: zone id is out of range [ 598.218670][ T9575] netlink: set zone limit has 8 unknown bytes [ 598.409192][ T9585] loop0: detected capacity change from 0 to 8 [ 598.421111][ T9589] loop3: detected capacity change from 0 to 32768 [ 599.793497][ T9591] read_mapping_page failed! [ 599.807561][ T9591] diRead: read_metapage failed [ 599.827633][ T9591] jfs_lookup: iget failed on inum 32 [ 600.743713][ T9592] read_mapping_page failed! [ 600.791881][ T9592] jfs_create: dtInsert returned -EIO [ 600.837725][ T28] audit: type=1800 audit(1753622820.080:37): pid=9597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.908" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 600.865457][ T9592] ERROR: (device loop3): jfs_create: [ 600.865457][ T9592] [ 600.937913][ T9592] ERROR: (device loop3): remounting filesystem as read-only [ 601.201296][ T9599] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.912'. [ 601.503425][ T9599] loop1: detected capacity change from 0 to 32768 [ 604.533689][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.916'. [ 604.544196][ T9622] netlink: zone id is out of range [ 604.549967][ T9622] netlink: set zone limit has 8 unknown bytes [ 604.910837][ T9634] loop2: detected capacity change from 0 to 8 [ 605.418066][ T9642] loop0: detected capacity change from 0 to 32768 [ 605.493534][ T28] audit: type=1800 audit(1753622824.750:38): pid=9647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.918" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 605.595779][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.921'. [ 605.604836][ T9635] netlink: zone id is out of range [ 605.610654][ T9635] netlink: set zone limit has 8 unknown bytes [ 605.949189][ T9653] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.922'. [ 606.258940][ T9653] loop3: detected capacity change from 0 to 32768 [ 608.437227][ T9680] loop1: detected capacity change from 0 to 8 [ 608.905717][ T9683] loop3: detected capacity change from 0 to 32768 [ 609.310508][ T28] audit: type=1800 audit(1753622828.570:39): pid=9689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.928" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 609.967138][ T9691] read_mapping_page failed! [ 610.137561][ T9691] jfs_create: dtInsert returned -EIO [ 610.185888][ T9691] ERROR: (device loop3): jfs_create: [ 610.185888][ T9691] [ 610.203845][ T9691] ERROR: (device loop3): remounting filesystem as read-only [ 613.467080][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.930'. [ 613.476497][ T9703] netlink: zone id is out of range [ 613.485617][ T9703] netlink: set zone limit has 8 unknown bytes [ 613.896099][ T9725] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 614.331047][ T9735] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.940'. [ 614.502363][ T9735] loop1: detected capacity change from 0 to 32768 [ 615.620839][ T9744] loop2: detected capacity change from 0 to 8 [ 615.964828][ T28] audit: type=1800 audit(1753622835.220:40): pid=9752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.942" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 616.685754][ T8952] Bluetooth: hci3: command 0x0406 tx timeout [ 618.757498][ T8952] Bluetooth: hci3: command 0x0406 tx timeout [ 619.768558][ T9773] loop1: detected capacity change from 0 to 32768 [ 619.969085][ T9773] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 620.293728][ T28] audit: type=1800 audit(1753622839.550:41): pid=9773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.946" name="bus" dev="loop1" ino=17059 res=0 errno=0 [ 620.510896][ T9778] loop0: detected capacity change from 0 to 32768 [ 620.529319][ T5794] ocfs2: Unmounting device (7,1) on (node local) [ 621.918963][ T9782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.947'. [ 621.928140][ T9782] netlink: zone id is out of range [ 621.933847][ T9782] netlink: set zone limit has 8 unknown bytes [ 624.544680][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 624.761013][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.247320][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.023803][ T9823] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.955'. [ 626.752622][ T9823] loop0: detected capacity change from 0 to 32768 [ 628.234980][ T9841] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 628.538964][ T9845] loop2: detected capacity change from 0 to 32768 [ 628.709378][ T9848] loop0: detected capacity change from 0 to 32768 [ 629.549194][ T9853] loop3: detected capacity change from 0 to 8 [ 630.260205][ T28] audit: type=1800 audit(1753622849.500:42): pid=9857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.961" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 631.033799][ T9867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.962'. [ 631.043008][ T9867] netlink: zone id is out of range [ 631.049060][ T9867] netlink: set zone limit has 8 unknown bytes [ 632.220248][ T9871] loop1: detected capacity change from 0 to 32768 [ 632.804339][ T9873] loop3: detected capacity change from 0 to 8 [ 633.725555][ T28] audit: type=1800 audit(1753622852.980:43): pid=9884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.966" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 634.282105][ T9889] loop2: detected capacity change from 0 to 32768 [ 635.216475][ T9894] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.972'. [ 635.368650][ T9898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.967'. [ 635.377688][ T9898] netlink: zone id is out of range [ 635.383352][ T9898] netlink: set zone limit has 8 unknown bytes [ 636.294720][ T9894] loop0: detected capacity change from 0 to 32768 [ 638.191868][ T9910] loop2: detected capacity change from 0 to 8 [ 638.517528][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 638.734230][ T28] audit: type=1800 audit(1753622857.990:44): pid=9915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.975" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 639.694796][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.977'. [ 639.704050][ T9921] netlink: zone id is out of range [ 639.711678][ T9921] netlink: set zone limit has 8 unknown bytes [ 640.596365][ T9929] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 640.607903][ T8952] Bluetooth: hci3: command 0x0406 tx timeout [ 643.470776][ T9938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.979'. [ 643.480032][ T9938] netlink: zone id is out of range [ 643.486747][ T9938] netlink: set zone limit has 8 unknown bytes [ 645.100772][ T9946] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.985'. [ 645.859763][ T9951] loop3: detected capacity change from 0 to 512 [ 645.904939][ T8952] Bluetooth: hci3: command 0x0406 tx timeout [ 646.209593][ T9951] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 647.649080][ T9966] loop3: detected capacity change from 0 to 32768 [ 648.410847][ T9976] loop0: detected capacity change from 0 to 8 [ 648.418478][ T9976] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 648.535833][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop0 [ 648.544173][ T9977] cramfs: Error -5 while decompressing! [ 648.550236][ T9977] cramfs: ffffffff96fdc308(26)->ffff888058da9000(4096) [ 648.557725][ T9977] cramfs: Error -3 while decompressing! [ 648.563399][ T9977] cramfs: ffffffff96fdc322(26)->ffff888058daa000(4096) [ 648.570963][ T9977] cramfs: Error -3 while decompressing! [ 648.576586][ T9977] cramfs: ffffffff96fdc33c(16)->ffff888058dab000(4096) [ 648.584205][ T9977] cramfs: Error -5 while decompressing! [ 648.590137][ T9977] cramfs: ffffffff96fdc308(26)->ffff888058da9000(4096) [ 649.312773][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop0 [ 649.480136][ T9984] loop3: detected capacity change from 0 to 8 [ 650.551038][ T28] audit: type=1800 audit(1753622869.810:45): pid=9994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.996" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 650.820291][ T9998] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.999'. [ 651.041952][ T9999] loop0: detected capacity change from 0 to 512 [ 651.229729][ T9999] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 651.795946][T10006] loop1: detected capacity change from 0 to 32768 [ 653.133729][T10016] loop0: detected capacity change from 0 to 32768 [ 655.258947][ T8952] Bluetooth: hci3: command 0x0406 tx timeout [ 655.877744][T10037] loop3: detected capacity change from 0 to 32768 [ 656.136972][T10041] loop2: detected capacity change from 0 to 32768 [ 656.405646][T10040] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1010'. [ 657.196308][T10040] loop1: detected capacity change from 0 to 32768 [ 657.317876][ T8952] Bluetooth: hci3: command 0x0406 tx timeout [ 658.614162][T10046] read_mapping_page failed! [ 658.657570][T10045] read_mapping_page failed! [ 658.662124][T10045] jfs_create: dtInsert returned -EIO [ 658.672368][T10045] ERROR: (device loop2): jfs_create: [ 658.672368][T10045] [ 658.682504][T10045] ERROR: (device loop2): remounting filesystem as read-only [ 658.690911][T10046] jfs_create: dtInsert returned -EIO [ 658.767569][T10046] ERROR: (device loop3): jfs_create: [ 658.767569][T10046] [ 658.824312][T10046] ERROR: (device loop3): remounting filesystem as read-only [ 659.787324][T10062] warning: `syz.1.1013' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 660.850243][T10071] loop1: detected capacity change from 0 to 8 [ 661.232245][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1015'. [ 661.241677][T10073] netlink: zone id is out of range [ 661.247432][T10073] netlink: set zone limit has 8 unknown bytes [ 661.351292][ T28] audit: type=1800 audit(1753622880.610:46): pid=10079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1017" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 661.370856][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.887477][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 663.976695][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'. [ 663.986067][T10093] netlink: zone id is out of range [ 663.994306][T10093] netlink: set zone limit has 8 unknown bytes [ 664.759130][T10098] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1022'. [ 668.311307][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1026'. [ 668.320669][T10119] netlink: zone id is out of range [ 668.328357][T10119] netlink: set zone limit has 8 unknown bytes [ 668.842464][ T8952] Bluetooth: hci3: command 0x0406 tx timeout [ 670.774703][T10130] loop0: detected capacity change from 0 to 8 [ 670.782644][T10130] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 670.790524][T10129] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1029'. [ 670.805769][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop0 [ 671.035751][T10129] loop1: detected capacity change from 0 to 32768 [ 671.610050][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop0 [ 671.618474][T10133] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1032'. [ 671.651041][T10134] cramfs: Error -5 while decompressing! [ 671.822724][T10133] loop2: detected capacity change from 0 to 32768 [ 671.875460][T10134] cramfs: ffffffff96fd8308(26)->ffff8880580e3000(4096) [ 671.894950][T10134] cramfs: Error -3 while decompressing! [ 671.900605][T10134] cramfs: ffffffff96fd8322(26)->ffff8880580e4000(4096) [ 671.907558][T10134] cramfs: Error -3 while decompressing! [ 671.913127][T10134] cramfs: ffffffff96fd833c(16)->ffff888057d4b000(4096) [ 671.920442][T10134] cramfs: Error -5 while decompressing! [ 671.926024][T10134] cramfs: ffffffff96fd8308(26)->ffff8880580e3000(4096) [ 672.806687][T10142] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1034'. [ 672.837510][ T8952] Bluetooth: hci3: command 0x0406 tx timeout [ 673.559173][T10142] loop0: detected capacity change from 0 to 32768 [ 674.917909][ T8952] Bluetooth: hci3: command 0x0406 tx timeout [ 675.149582][T10156] loop1: detected capacity change from 0 to 8 [ 676.997583][ T8952] Bluetooth: hci3: command 0x0406 tx timeout [ 678.445861][T10168] loop2: detected capacity change from 0 to 32768 [ 679.472123][T10173] read_mapping_page failed! [ 679.721529][T10173] jfs_create: dtInsert returned -EIO [ 679.731812][T10173] ERROR: (device loop2): jfs_create: [ 679.731812][T10173] [ 679.747501][T10173] ERROR: (device loop2): remounting filesystem as read-only [ 680.431569][T10181] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1043'. [ 680.632655][T10181] loop1: detected capacity change from 0 to 32768 [ 681.500946][T10186] loop0: detected capacity change from 0 to 32768 [ 681.839785][T10188] loop3: detected capacity change from 0 to 32768 [ 686.328051][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.334414][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.474820][T10205] loop2: detected capacity change from 0 to 32768 [ 687.154401][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1054'. [ 687.163973][T10214] netlink: zone id is out of range [ 687.171808][T10214] netlink: set zone limit has 8 unknown bytes [ 688.749083][T10226] loop3: detected capacity change from 0 to 32768 [ 690.116674][T10230] read_mapping_page failed! [ 690.190248][T10230] jfs_create: dtInsert returned -EIO [ 690.210473][T10230] ERROR: (device loop3): jfs_create: [ 690.210473][T10230] [ 690.253807][T10230] ERROR: (device loop3): remounting filesystem as read-only [ 691.324688][T10239] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1060'. [ 691.622950][T10239] loop1: detected capacity change from 0 to 32768 [ 693.289099][T10254] loop2: detected capacity change from 0 to 32768 [ 693.807943][ T8952] Bluetooth: hci3: command 0x0406 tx timeout [ 696.841745][T10273] loop3: detected capacity change from 0 to 32768 [ 696.874040][T10276] loop1: detected capacity change from 0 to 32768 [ 697.020099][T10276] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 697.342033][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 697.786636][ T28] audit: type=1800 audit(1753622917.030:47): pid=10276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1067" name="bus" dev="loop1" ino=17059 res=0 errno=0 [ 699.943306][ T5794] ocfs2: Unmounting device (7,1) on (node local) [ 700.088385][T10289] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1071'. [ 700.422186][T10289] loop3: detected capacity change from 0 to 32768 [ 701.479504][T10295] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1070'. [ 701.507637][T10297] loop0: detected capacity change from 0 to 8 [ 701.660360][T10285] loop2: detected capacity change from 0 to 32768 [ 701.776868][T10295] loop1: detected capacity change from 0 to 32768 [ 702.788035][ T28] audit: type=1800 audit(1753622922.040:48): pid=10305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1073" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 704.421573][T10313] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1078'. [ 704.437482][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 704.661626][T10313] loop3: detected capacity change from 0 to 32768 [ 705.821887][T10321] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1079'. [ 706.115243][T10321] loop2: detected capacity change from 0 to 32768 [ 706.527564][ T8952] Bluetooth: hci3: command 0x0406 tx timeout [ 708.597477][ T8952] Bluetooth: hci3: command 0x0406 tx timeout [ 709.553302][T10338] loop3: detected capacity change from 0 to 8 [ 709.651165][T10338] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 710.026695][T10339] cramfs: Error -5 while decompressing! [ 710.032680][T10339] cramfs: ffffffff96fdc308(26)->ffff88805c2cc000(4096) [ 710.042028][T10339] cramfs: Error -3 while decompressing! [ 710.048541][T10339] cramfs: ffffffff96fdc322(26)->ffff88805c2cd000(4096) [ 710.055573][T10339] cramfs: Error -3 while decompressing! [ 710.062823][T10339] cramfs: ffffffff96fdc33c(16)->ffff88805c2ce000(4096) [ 710.071477][T10339] cramfs: Error -5 while decompressing! [ 710.077299][T10339] cramfs: ffffffff96fdc308(26)->ffff88805c2cc000(4096) [ 710.234732][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop3 [ 713.389040][T10355] loop0: detected capacity change from 0 to 8 [ 716.017590][ T28] audit: type=1800 audit(1753622935.100:49): pid=10362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1089" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 716.669267][T10369] loop1: detected capacity change from 0 to 8 [ 716.743312][T10369] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 716.883624][T10378] cramfs: Error -5 while decompressing! [ 716.889427][T10378] cramfs: ffffffff96fd8308(26)->ffff88805b55e000(4096) [ 716.896587][T10378] cramfs: Error -3 while decompressing! [ 716.902457][T10378] cramfs: ffffffff96fd8322(26)->ffff888059216000(4096) [ 716.909633][T10378] cramfs: Error -3 while decompressing! [ 716.915261][T10378] cramfs: ffffffff96fd833c(16)->ffff888059217000(4096) [ 716.922967][T10378] cramfs: Error -5 while decompressing! [ 716.929011][T10378] cramfs: ffffffff96fd8308(26)->ffff88805b55e000(4096) [ 718.352861][T10377] loop2: detected capacity change from 0 to 32768 [ 719.645932][T10389] loop1: detected capacity change from 0 to 32768 [ 719.682622][T10391] loop0: detected capacity change from 0 to 32768 [ 719.738733][T10389] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 719.909443][ T28] audit: type=1800 audit(1753622939.160:50): pid=10389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1096" name="bus" dev="loop1" ino=17059 res=0 errno=0 [ 720.186149][ T5794] ocfs2: Unmounting device (7,1) on (node local) [ 722.695090][T10411] loop0: detected capacity change from 0 to 8 [ 723.758751][ T28] audit: type=1800 audit(1753622942.730:51): pid=10422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1101" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 723.778269][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.157542][ T8952] Bluetooth: hci3: command 0x0406 tx timeout [ 726.276306][T10434] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1105'. [ 726.449319][T10434] loop0: detected capacity change from 0 to 32768 [ 728.938633][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 729.338795][T10452] loop3: detected capacity change from 0 to 32768 [ 729.971657][T10463] loop0: detected capacity change from 0 to 8 [ 730.283326][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1110'. [ 730.292542][T10466] netlink: zone id is out of range [ 730.298285][T10466] netlink: set zone limit has 8 unknown bytes [ 730.653977][ T28] audit: type=1800 audit(1753622949.910:52): pid=10468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1114" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 731.216576][T10469] read_mapping_page failed! [ 731.434146][T10469] jfs_create: dtInsert returned -EIO [ 731.440813][T10469] ERROR: (device loop3): jfs_create: [ 731.440813][T10469] [ 731.472776][T10469] ERROR: (device loop3): remounting filesystem as read-only [ 731.537810][T10471] read_mapping_page failed! [ 731.573774][T10471] diRead: read_metapage failed [ 731.608028][T10471] jfs_lookup: iget failed on inum 32 [ 731.869822][T10485] loop0: detected capacity change from 0 to 8 [ 731.877059][T10485] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 731.924253][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop0 [ 732.024686][T10490] cramfs: Error -5 while decompressing! [ 732.030534][T10490] cramfs: ffffffff96fdc308(26)->ffff88805d6e3000(4096) [ 732.037953][T10490] cramfs: Error -3 while decompressing! [ 732.043570][T10490] cramfs: ffffffff96fdc322(26)->ffff88805d6e4000(4096) [ 732.050685][T10490] cramfs: Error -3 while decompressing! [ 732.056737][T10490] cramfs: ffffffff96fdc33c(16)->ffff88805d6e5000(4096) [ 732.064185][T10490] cramfs: Error -5 while decompressing! [ 732.073332][T10490] cramfs: ffffffff96fdc308(26)->ffff88805d6e3000(4096) [ 732.758841][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop0 [ 734.885646][T10503] loop3: detected capacity change from 0 to 8 [ 734.892805][T10503] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 734.946348][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 735.212905][T10503] cramfs: Error -5 while decompressing! [ 735.218868][T10503] cramfs: ffffffff96fd8308(26)->ffff88805d9e9000(4096) [ 735.225908][T10503] cramfs: Error -3 while decompressing! [ 735.231998][T10503] cramfs: ffffffff96fd8322(26)->ffff88805d9ea000(4096) [ 735.239079][T10503] cramfs: Error -3 while decompressing! [ 735.244781][T10503] cramfs: ffffffff96fd833c(16)->ffff88805d9eb000(4096) [ 735.251993][T10503] cramfs: Error -5 while decompressing! [ 735.257854][T10503] cramfs: ffffffff96fd8308(26)->ffff88805d9e9000(4096) [ 735.932502][ T5970] udevd[5970]: incorrect cramfs checksum on /dev/loop3 [ 737.355750][T10519] ================================================================== [ 737.363861][T10519] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5ba/0x740 [ 737.371831][T10519] Read of size 1 at addr ffff88805f4e6832 by task syz.0.1127/10519 [ 737.379713][T10519] [ 737.382041][T10519] CPU: 1 PID: 10519 Comm: syz.0.1127 Not tainted 6.6.100-syzkaller #0 [ 737.390176][T10519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 737.400226][T10519] Call Trace: [ 737.403490][T10519] [ 737.406411][T10519] dump_stack_lvl+0x16c/0x230 [ 737.411091][T10519] ? __lock_acquire+0x7c80/0x7c80 [ 737.416104][T10519] ? show_regs_print_info+0x20/0x20 [ 737.421305][T10519] ? load_image+0x3b0/0x3b0 [ 737.425833][T10519] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 737.431227][T10519] ? __virt_addr_valid+0x18c/0x540 [ 737.436354][T10519] ? __virt_addr_valid+0x469/0x540 [ 737.441474][T10519] print_report+0xac/0x200 [ 737.445895][T10519] ? rose_transmit_link+0x5ba/0x740 [ 737.451091][T10519] kasan_report+0x117/0x150 [ 737.455586][T10519] ? kmem_cache_alloc_node+0x17f/0x330 [ 737.461039][T10519] ? rose_transmit_link+0x5ba/0x740 [ 737.466245][T10519] rose_transmit_link+0x5ba/0x740 [ 737.471255][T10519] ? skb_put+0x11b/0x210 [ 737.475503][T10519] rose_write_internal+0x11d1/0x1ab0 [ 737.480776][T10519] ? rose_validate_nr+0x120/0x120 [ 737.485784][T10519] ? __timer_delete+0x6b/0x290 [ 737.490536][T10519] ? skb_queue_purge_reason+0x6c/0x1c0 [ 737.495982][T10519] rose_release+0x24e/0x510 [ 737.500470][T10519] sock_close+0xbd/0x230 [ 737.504697][T10519] ? sock_mmap+0xa0/0xa0 [ 737.508938][T10519] __fput+0x234/0x970 [ 737.512938][T10519] task_work_run+0x1ce/0x250 [ 737.517528][T10519] ? task_work_cancel+0x240/0x240 [ 737.522548][T10519] get_signal+0x1235/0x1400 [ 737.527045][T10519] ? task_work_add+0x3a3/0x440 [ 737.531803][T10519] ? __ia32_sys_pidfd_getfd+0x90/0x90 [ 737.537169][T10519] ? wake_bit_function+0x200/0x200 [ 737.542272][T10519] ? __might_fault+0xaa/0x120 [ 737.546982][T10519] arch_do_signal_or_restart+0x96/0x780 [ 737.552700][T10519] ? __sys_connect+0x240/0x420 [ 737.557459][T10519] ? get_sigframe_size+0x20/0x20 [ 737.562406][T10519] ? exit_to_user_mode_loop+0x3b/0x110 [ 737.567867][T10519] exit_to_user_mode_loop+0x70/0x110 [ 737.573148][T10519] exit_to_user_mode_prepare+0xb1/0x140 [ 737.578684][T10519] syscall_exit_to_user_mode+0x1a/0x50 [ 737.584140][T10519] do_syscall_64+0x61/0xb0 [ 737.588546][T10519] ? clear_bhb_loop+0x40/0x90 [ 737.593211][T10519] ? clear_bhb_loop+0x40/0x90 [ 737.597880][T10519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.603768][T10519] RIP: 0033:0x7faf3d38e9a9 [ 737.608188][T10519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.627792][T10519] RSP: 002b:00007faf3d1ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 737.636211][T10519] RAX: fffffffffffffe00 RBX: 00007faf3d5b6160 RCX: 00007faf3d38e9a9 [ 737.644174][T10519] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000d [ 737.652139][T10519] RBP: 00007faf3d410d69 R08: 0000000000000000 R09: 0000000000000000 [ 737.660099][T10519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.668062][T10519] R13: 0000000000000000 R14: 00007faf3d5b6160 R15: 00007fffde925848 [ 737.676028][T10519] [ 737.679034][T10519] [ 737.681351][T10519] Allocated by task 7197: [ 737.685668][T10519] kasan_set_track+0x4e/0x70 [ 737.690251][T10519] __kasan_kmalloc+0x8f/0xa0 [ 737.694843][T10519] rose_add_node+0x23a/0xdd0 [ 737.699435][T10519] rose_rt_ioctl+0xa42/0xfb0 [ 737.704021][T10519] rose_ioctl+0x3cf/0x8b0 [ 737.708339][T10519] sock_do_ioctl+0xd7/0x2f0 [ 737.712833][T10519] sock_ioctl+0x623/0x7a0 [ 737.717152][T10519] __se_sys_ioctl+0xfd/0x170 [ 737.721731][T10519] do_syscall_64+0x55/0xb0 [ 737.726135][T10519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.732024][T10519] [ 737.734332][T10519] Freed by task 10518: [ 737.738379][T10519] kasan_set_track+0x4e/0x70 [ 737.742958][T10519] kasan_save_free_info+0x2e/0x50 [ 737.747973][T10519] ____kasan_slab_free+0x126/0x1e0 [ 737.753075][T10519] slab_free_freelist_hook+0x130/0x1b0 [ 737.758523][T10519] __kmem_cache_free+0xba/0x1f0 [ 737.763365][T10519] rose_rt_device_down+0x43d/0x490 [ 737.768468][T10519] rose_device_event+0x604/0x690 [ 737.773393][T10519] notifier_call_chain+0x197/0x390 [ 737.778494][T10519] __dev_notify_flags+0x18e/0x2e0 [ 737.783508][T10519] dev_change_flags+0xe8/0x1a0 [ 737.788261][T10519] dev_ifsioc+0x6a7/0xe20 [ 737.792578][T10519] dev_ioctl+0x7e2/0x1170 [ 737.796895][T10519] sock_do_ioctl+0x226/0x2f0 [ 737.801477][T10519] sock_ioctl+0x623/0x7a0 [ 737.805799][T10519] __se_sys_ioctl+0xfd/0x170 [ 737.810380][T10519] do_syscall_64+0x55/0xb0 [ 737.814789][T10519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.820673][T10519] [ 737.822985][T10519] Last potentially related work creation: [ 737.828685][T10519] kasan_save_stack+0x3e/0x60 [ 737.833351][T10519] __kasan_record_aux_stack+0xaf/0xc0 [ 737.838711][T10519] call_rcu+0x158/0x930 [ 737.842855][T10519] addrconf_permanent_addr+0x354/0x980 [ 737.848304][T10519] addrconf_notify+0x996/0x1010 [ 737.853146][T10519] notifier_call_chain+0x197/0x390 [ 737.858261][T10519] __dev_notify_flags+0x18e/0x2e0 [ 737.863278][T10519] dev_change_flags+0xe8/0x1a0 [ 737.868029][T10519] do_setlink+0xc74/0x3fb0 [ 737.872435][T10519] rtnl_newlink+0x175b/0x2020 [ 737.877103][T10519] rtnetlink_rcv_msg+0x7c7/0xf10 [ 737.882032][T10519] netlink_rcv_skb+0x216/0x480 [ 737.886785][T10519] netlink_unicast+0x751/0x8d0 [ 737.891538][T10519] netlink_sendmsg+0x8c1/0xbe0 [ 737.896290][T10519] __sys_sendto+0x46a/0x620 [ 737.900785][T10519] __x64_sys_sendto+0xde/0xf0 [ 737.905453][T10519] do_syscall_64+0x55/0xb0 [ 737.909858][T10519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.915746][T10519] [ 737.918056][T10519] The buggy address belongs to the object at ffff88805f4e6800 [ 737.918056][T10519] which belongs to the cache kmalloc-512 of size 512 [ 737.932101][T10519] The buggy address is located 50 bytes inside of [ 737.932101][T10519] freed 512-byte region [ffff88805f4e6800, ffff88805f4e6a00) [ 737.945905][T10519] [ 737.948227][T10519] The buggy address belongs to the physical page: [ 737.954633][T10519] page:ffffea00017d3900 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805f4e4400 pfn:0x5f4e4 [ 737.966075][T10519] head:ffffea00017d3900 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 737.974995][T10519] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 737.982970][T10519] page_type: 0xffffffff() [ 737.987289][T10519] raw: 00fff00000000840 ffff888017841c80 ffffea00017fb810 ffffea00017c1a10 [ 737.995866][T10519] raw: ffff88805f4e4400 000000000010000b 00000001ffffffff 0000000000000000 [ 738.004434][T10519] page dumped because: kasan: bad access detected [ 738.010842][T10519] page_owner tracks the page as allocated [ 738.016541][T10519] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5790, tgid 5790 (syz-executor), ts 74495831268, free_ts 23150054852 [ 738.035806][T10519] post_alloc_hook+0x1cd/0x210 [ 738.040569][T10519] get_page_from_freelist+0x195c/0x19f0 [ 738.046110][T10519] __alloc_pages+0x1e3/0x460 [ 738.050694][T10519] alloc_slab_page+0x5d/0x170 [ 738.055361][T10519] new_slab+0x87/0x2e0 [ 738.059422][T10519] ___slab_alloc+0xc6d/0x12f0 [ 738.064091][T10519] __kmem_cache_alloc_node+0x1a2/0x260 [ 738.069579][T10519] __kmalloc+0xa4/0x240 [ 738.073740][T10519] fib6_info_alloc+0x32/0xe0 [ 738.078321][T10519] ip6_route_info_create+0x44f/0x1200 [ 738.083689][T10519] ip6_route_add+0x28/0x130 [ 738.088181][T10519] addrconf_permanent_addr+0x659/0x980 [ 738.093629][T10519] addrconf_notify+0x996/0x1010 [ 738.098471][T10519] notifier_call_chain+0x197/0x390 [ 738.103572][T10519] __dev_notify_flags+0x18e/0x2e0 [ 738.108585][T10519] dev_change_flags+0xe8/0x1a0 [ 738.113336][T10519] page last free stack trace: [ 738.117991][T10519] free_unref_page_prepare+0x7ce/0x8e0 [ 738.123443][T10519] free_unref_page+0x32/0x2e0 [ 738.128114][T10519] free_contig_range+0xa1/0x160 [ 738.132966][T10519] destroy_args+0x87/0x770 [ 738.137380][T10519] debug_vm_pgtable+0x3cc/0x410 [ 738.142228][T10519] do_one_initcall+0x1fd/0x750 [ 738.146985][T10519] do_initcall_level+0x137/0x1f0 [ 738.151917][T10519] do_initcalls+0x69/0xd0 [ 738.156234][T10519] kernel_init_freeable+0x3d2/0x570 [ 738.161423][T10519] kernel_init+0x1d/0x1c0 [ 738.165739][T10519] ret_from_fork+0x48/0x80 [ 738.170143][T10519] ret_from_fork_asm+0x11/0x20 [ 738.174894][T10519] [ 738.177200][T10519] Memory state around the buggy address: [ 738.182814][T10519] ffff88805f4e6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 738.190867][T10519] ffff88805f4e6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 738.198919][T10519] >ffff88805f4e6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 738.206970][T10519] ^ [ 738.212588][T10519] ffff88805f4e6880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 738.220637][T10519] ffff88805f4e6900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 738.228681][T10519] ================================================================== [ 738.236837][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.247486][T10519] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 738.254718][T10519] CPU: 1 PID: 10519 Comm: syz.0.1127 Not tainted 6.6.100-syzkaller #0 [ 738.262880][T10519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 738.272922][T10519] Call Trace: [ 738.276183][T10519] [ 738.279097][T10519] dump_stack_lvl+0x16c/0x230 [ 738.283759][T10519] ? show_regs_print_info+0x20/0x20 [ 738.288938][T10519] ? load_image+0x3b0/0x3b0 [ 738.293428][T10519] panic+0x2c0/0x710 [ 738.297303][T10519] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 738.303449][T10519] ? bpf_jit_dump+0xd0/0xd0 [ 738.307948][T10519] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 738.313860][T10519] ? _raw_spin_unlock+0x40/0x40 [ 738.318722][T10519] ? rose_transmit_link+0x5ba/0x740 [ 738.323921][T10519] check_panic_on_warn+0x84/0xa0 [ 738.328858][T10519] ? rose_transmit_link+0x5ba/0x740 [ 738.334046][T10519] end_report+0x6f/0x140 [ 738.338270][T10519] kasan_report+0x128/0x150 [ 738.342763][T10519] ? kmem_cache_alloc_node+0x17f/0x330 [ 738.348206][T10519] ? rose_transmit_link+0x5ba/0x740 [ 738.353388][T10519] rose_transmit_link+0x5ba/0x740 [ 738.358394][T10519] ? skb_put+0x11b/0x210 [ 738.362621][T10519] rose_write_internal+0x11d1/0x1ab0 [ 738.367910][T10519] ? rose_validate_nr+0x120/0x120 [ 738.372919][T10519] ? __timer_delete+0x6b/0x290 [ 738.377668][T10519] ? skb_queue_purge_reason+0x6c/0x1c0 [ 738.383111][T10519] rose_release+0x24e/0x510 [ 738.387600][T10519] sock_close+0xbd/0x230 [ 738.391827][T10519] ? sock_mmap+0xa0/0xa0 [ 738.396053][T10519] __fput+0x234/0x970 [ 738.400022][T10519] task_work_run+0x1ce/0x250 [ 738.404597][T10519] ? task_work_cancel+0x240/0x240 [ 738.409607][T10519] get_signal+0x1235/0x1400 [ 738.414095][T10519] ? task_work_add+0x3a3/0x440 [ 738.418852][T10519] ? __ia32_sys_pidfd_getfd+0x90/0x90 [ 738.424211][T10519] ? wake_bit_function+0x200/0x200 [ 738.429303][T10519] ? __might_fault+0xaa/0x120 [ 738.433962][T10519] arch_do_signal_or_restart+0x96/0x780 [ 738.439496][T10519] ? __sys_connect+0x240/0x420 [ 738.444255][T10519] ? get_sigframe_size+0x20/0x20 [ 738.449222][T10519] ? exit_to_user_mode_loop+0x3b/0x110 [ 738.454675][T10519] exit_to_user_mode_loop+0x70/0x110 [ 738.459954][T10519] exit_to_user_mode_prepare+0xb1/0x140 [ 738.465484][T10519] syscall_exit_to_user_mode+0x1a/0x50 [ 738.470931][T10519] do_syscall_64+0x61/0xb0 [ 738.475328][T10519] ? clear_bhb_loop+0x40/0x90 [ 738.479983][T10519] ? clear_bhb_loop+0x40/0x90 [ 738.484638][T10519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 738.490516][T10519] RIP: 0033:0x7faf3d38e9a9 [ 738.494911][T10519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.514514][T10519] RSP: 002b:00007faf3d1ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 738.522940][T10519] RAX: fffffffffffffe00 RBX: 00007faf3d5b6160 RCX: 00007faf3d38e9a9 [ 738.530902][T10519] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000d [ 738.538861][T10519] RBP: 00007faf3d410d69 R08: 0000000000000000 R09: 0000000000000000 [ 738.546816][T10519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.554772][T10519] R13: 0000000000000000 R14: 00007faf3d5b6160 R15: 00007fffde925848 [ 738.562733][T10519] [ 738.566033][T10519] Kernel Offset: disabled [ 738.570347][T10519] Rebooting in 86400 seconds..