last executing test programs: 2m31.48678408s ago: executing program 1 (id=326): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20008040) 2m30.973262795s ago: executing program 1 (id=328): syz_mount_image$xfs(&(0x7f0000000480), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000440)={[{@nodiscard}, {@nolargeio}, {@gquota}]}, 0x1, 0x988a, &(0x7f00000185c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2104bb, 0x0) 2m27.859638335s ago: executing program 1 (id=348): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup=r1, r1, 0x2f, 0x2000, r0, @value=r1, @void, @void, @void, r2}, 0x20) 2m26.738992281s ago: executing program 1 (id=359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000080)={0x5, 0x0, [{0x295, 0x0, 0x4}, {0x9fa, 0x0, 0x7}, {0x991, 0x0, 0x20298ced}, {0x3f2, 0x0, 0x7fffffffffffffff}, {0x57f, 0x0, 0x101}]}) 2m25.845801007s ago: executing program 1 (id=363): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) unshare(0x22020400) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r0) 2m24.51157125s ago: executing program 1 (id=369): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000000)=0x7, 0x4) 2m9.363356662s ago: executing program 32 (id=369): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000000)=0x7, 0x4) 1m34.815492391s ago: executing program 2 (id=646): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m34.62065853s ago: executing program 2 (id=647): r0 = syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x28108c0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xfe, 0x6233, &(0x7f00000079c0)="$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") r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000000f80)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESHEX=r1, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631718d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a97000000000000000286dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES32=r1, @ANYRES32, @ANYBLOB="ac2d5b5b8945d57e7869648ebe10b8d2719763b4bf3f6667bf8f722606d2b3593f26218e9a5fba2e7d4166787da71737b380045fb0a682e2915271f214c0112961b73c4638e7ba68deb34826d7682ace7549c83bf52bd9142b6c5adebf82155270d33204c09c07ed4ca2fc932af48646c9624e3e3544d68f61a2b073fb85332599b299a4f441a8e2f74c57aa38b5b596238280c1693bba97ff258679ab84485970b60f81093dda6501baba18a7790ca3e6fcfa12898b9fff3faf613d71f9d64dbd5c2edad8e774fb0da39e532d92164e2d34aff7cae32f3cd7aa9aace000f136323e4808d0c66c0828942def38deb2e1d847555fe0d5ba8084babb3169f9f06246ecd5327758448c9c7e4591da12ff1b084e757d05af4f0f0444ecfcc0c4d2067a98d49fe52412218380bb75e21cd23724e0390b116b9a1c1e3350b3e6f17c5bd1f1adb4ce1d03d5b30eb0690340708f06dfca5c9d74a7c140cabddd0f37d8bcf15e578dde85d7c28ccb1c9633ceeb54bb278d5a097220ca53a2ea4781aca2b70189199938afba9a700a610225311fe8316794ca0ae139a50dbd34d572d6165eaaa94844620045e615d51f5e19c29aadad3539490961135851f15bbfd0604f3926877583d85c45a04c6f155ad6e1966d2004ab6ab51f9beb82dbcdcaaab886564cbf81b581da397eba4fc8fe430ef93ed613cd588e399669b9f4b63481163e6c2b74112538192be9551ca400bc2b947a535fccbc567a68a3ab94554385bb1f2a0e2146310113102a9ffbcbbf44d30e076d363d6201faecf8bbbbc9d7fcd38195860bbc85ee3f5f9b2c990164abc3a7674ab2a631147d708585f52694a46b681cbc623b53a272f21f2aa5597beec8094954541316cc45ec9751fef12369e7272b7bdcb527bac4a19e0bba1b68ef98e3563705e9ca40bb914cece2fd75c2375b81a06dadcdb1c54a175855e30c3d9ca58ca873e43d703b1471526fb3dfe12e140b81df3afae6104e5ffa4e8585b456a7199c75c5abc7afeca743fce310df09062f20b9a99fac5d019338d98606805f4faad9cc81ebf03b7239a340c973828b676af4e594d796689f9823730c5ead8dba256925869ab0d7196a99b75a15f9927852d7813aa5a4cb76764749e882d59c094c5ebd1911153150e8d53aa8abbf360a4045b63e0e296d03158de8aa02b5aeb459dcdc6b9d5aa8c0e455e7cb6a5d9b26ee5420e41d89590a0c04ca8701a6a386716a32e04102f281f66317a21940c0cf83e128f4f83bdf6770170d74d43f3b1f4c0bb5e8c69254e0bfd15c6d02596bf3b547e5b9b8e84390455a9c4b00b633c661616aca4a4158868be21633f343155996eaff00c2c347fea03c6f06e7adcd83cf320e3a446d07dba202e5960632560da8a3b60efe5a814a5cb2a4ff0842fff23897b583b381e5030e506caef8dc97bef9532111e3eb3621870ec39fe2351d3814a02d2f9e38aac1f0897f32ddbffdc6e0acdea95ff7f67865daae1130f68f00985682ecefc43fb6f8521514923b5cf3560be0739aeb4eb00b389d39ebb9b974e054120fcd48c0d6bc09441c2c19f41bdfceed01a3b686921500fae88795f216794d21dd3a98f2fdb5a1590e0cbdc5cd9593b164e255131c21f22ed7e7ed4ec83db91f8bf5f327d7222be1e470a7c0d0a657c73ad606f2ef0c59d3c118c601d23d67ee16ce3658c9153b8131f06c1e4f83c49dbe6dbc3478b1313b9221bc4c5eadebfd16cd07afde509f2e926fcfd5f8feabe836f4080ea5e65c1e4d859f16ac45ad8c804eb9ecce363faf19c1409d8192a644823578ccfd5b643478eb948223676d375f811fffa874f7c2a281104a28baf4da2716ae870abb3e0f05e63466176356728a700fe39ebb62bdbff139fdbf21520022984dc6d3eed1d81b94f28a07cc238ccb64d65e87534c0111bb76212368c6e8e9a536e758fa2f16a2cab9d31984055488b27bcff12bcc5a0fe21a0e44edfb87c681060e6944ff89dce4a9c7122c53acc27913a5fbf15c9ada971df88f0df3f82eb563f63c640ad6e39a1f5c1aad83c364957ec6d645f4243d1fb4ecef275d4c0ca0284064cde0c282d793f290bab5a4dec15f3e2adcc9d455d2e28bd040d6e0f651ac6f20f55d1303d2aaef2104b393afc849e9cd7743ca20a6f092cbf42a67446892493128d38bb0d0f507ffe3fd718ec48eff58df729728bc01ee180d676dfa22c81da0e4e3fda94f4f94195bc82e1f941d8a290ca0d416373d420eba196470e4f25940506061c601f12b3656d6d6b3a47e50d5235b7fd0f82bb0835aee3470b69bf7e59616ece447d9af36c396f687214ff7d7e27961f461c780b4c563aeb47fa9f335cbdade8a06711ba79b6fe8778ac1bc06bb59131c17409c1d1d0cc746aec8c3b1348f9585945192d8e32002c676753ab246a92702fc8e3a3ce89b84661b1b10dcd73fddacd311ca663d483b87a59225f60627eecf409d6188236b198633d47c5f1c0ba0bb4321aac88a6061d5e97883914cd74284ab937b9579ccee6ab5bb39f6274a04e3e7a8c3d033e340357bc15c5f6daa047b1cee448ac380bbde4bf806b0891a04b9e408609b040b7d3a02d2a76d4013756d79244792c543fe2327a3c371852bed5ab54de987bc4699b32ad1c08f7fff7a23069e72bddc9a590b2c707bac3957d46b657a4e17f1914db58fb6436bdd58b86df491016a2b9ebe0c35a859b216f17f4828c8dee30a38ed1fc36347af978999d0c404313cf99c9281c45194abd79475a80ea1486840aad72b1c0c4f17fe35a150fcb574fa9fcc09a7fc5dcd34e15d4bf1bccfa8bf423d2437e2eb0d3ca9324fbfc7e256b862c50ebc8db3fb69f69003d37807af8ddccf2d929ad9d06ebbb7e538d93bb0b7bc828e1639e0b5e89c22badca307ad28183c3083e87c917feb4c882397d397ea2e7ff0e05ebb252940302cdc0f0f7efe40685f7c3e8923e3795d70d69c70d9a071e401cee771f29dcb5316471768464c4659f2c76d11713ab44f4c944a4819deb1248b02457403e9630aaf4a180e9e55bb4d291e9a2bc85a1ed17f906d54935c7e5e8b707ead56284fda0208bd88ab5c3259bd5329c0d26653eb07b6856ad799fd6fa8d2111da3970ff8509bc2ef3a8813d04f36001526b70757646ed4bf25a256751b8ec714f2e62dea19e82aacec389195532bf7f335afae4351adb93c846e22f1f2a3e0d620d81688bd5530e389f2284b3c997d4abab7c30aac1b141425cd9aa315dc5a5e8b04fd503d79896b1494d8be48048c7392fc92c325b76bde4496c49da34c9ff95969bec8f95c356239d5336907957383b12c512fff6d797097a26a5aee9251bae940ef1a19b3f746396300d3baeb476b023f740ed7c1da92fdbf1834c3a882a6079885b933333d0e194cc1f25a06c3a2d370936886cb385d9861d6762c7416a1db5275228b6499cdef9767fb998d43251b963bc4477b2c051b70a0317de5f6ec3158914145bd036ff194df9722d2a3d2ac2397891b573a34ad16236cdc7ca77bc15f0fdbc3cae923d61633a42bab450a80cf3ee6580e792b1617d74fa189d450a64ca12d8c797698208ea61010b6072885b762af598159621f838ebacc00ea11f5924b39b2bbbc5c7d667871ce32e9aa75893a9fa13a2ffe66b360e266446259a8745addb4e186139d86d4e8d48537ac35029b0d87c03e8c1a9b9a422594496feda8bc5502777428fe737198ed896c2128a4f7d552f2eea8fef6e68feaf3cbfd549e622eea7bc988bb16fc49b7ab241426f2e40edcca07d4f947ccb1d3b8c2e9cb14a0c04495dbb75bd9c935f36bfe398455b0e5f927d5726e617c69ca81fe36c3e6ea510c5fe4735161c992f9ebf66727e5a7ded590061d4da3b86b996846a6bb102e47d33465d88a68644c8a76a770d5e0318e6c301e7c7f5575bf15a9589b32cfaa41ee15972488497195a2cb49a6b6f937a8e311e34d311dfd4fe222d3abc095b0b24a1b7193eb3353def0cc1511c8fce9b0a7867ae2fed4db93009646dc91a3745387cbe61b37f749b40d5d38970856b7ab8b6e1e0b81c078c68cb55c57854b8b5863b7a4c87f42e6d6dca2de0326b1b26970168c99f59816877448e7f72626f5354fdb5e033cd6b42e9476665efae66287e656590d1f80b3a09557a57d7de4bade6a122d40a92db1d347463b74151d44a02dbe067259c633b8c84425e77a736fca99f06d0fd66e35365511ec017537f4c212e7f2e23369958c3a7b92feffad9edb12139f1f690f9512725c0a1a164e78b4130c91fd3961df91c1a11783c24b03bcf305fd0e14e6510f4d58cf73326e94f2bc1b1ab295297bee7a98b77afe483a7d66e780d5e111b4202285f580ce571ecc0985501faa0e9f2f5b9848d770d8d8ad7b90a951f83279073e45a0c7abcf89cd6200f7fc320e46ea3de2addee3a984432501063f9928d0897d93dde20fe8fbe4dabc1ac34b0efdb3d7c7b4d49571ea64252d7209ff6d0ae5b95ef35d8160c5976f7ed9c4b69db81a73f6d00fd254c417696d6af694f3688826cc04db8019f2419fa99e47dc436fd76890b5291cd2724717a1e604e6cb5e214235664e8c7148c2bd87996c05bcfe1f29200f40a0d766df3ddc6faef82fb34d385f90b8f0e4bb7ba519e7986735c169cb3546d62fb70fbd49eec4edd70397d2fcbfdb9cd87331fce3c9786b7090501b904c8f925a1dbfa151a18e6c145ebb74da7100de60a627100d6c04ce789a7d4e88692cb090fd9ff2006e5ddb870f5b2aa502081eb7a26744de9a0d29a66ef18eb097e1d396561078e3f9258046a3a3e9b5878964d71b526755084f385d9777b2ab503f9d77c09a46004b5005f69eedee80edd87dd17f2292eba00f71dedb010b7b003a8400f6b44d63559a10bc0052c678ac8ed9658aff4f858778ebb60cbaf53d82248a260c7255f943711e8ac31a4b7a4694dcdace3be25ea43bdc9dfd52d369292d8d7581a6979d1b8ad543baeb9296907e0926025f4c3597e98e2eacd048a5dedd0e9dabc3268ed35a91c6180908af07a95bf374573c7b4f611eb30bbb5f1721a6550f483dcaed51d84fdaa5c6a52d7c4d04ca4edfd2884483c2d5aaebf6f06c6fff8bff813923ac8c6edd0eadefab938442ff09b1b3ff926c963d67a01cccbd86cb69bb5e5a4adca82110f87d3ee7800b14412b48cd94feacbaa9c1921e816d0287ad1198b94fd6de314912b79938a0d00ef5968ca4cb506afa1496ce4886c8c44955a92c9d2395f108a357e240511cc7e6548ac4174e5b52cc1f03ea8fa8268a7283e9cd25518cc71114869537891b64337222f04c111407bc2c8777f1132e1b294ec533610fd1ae3b4aa7e20c315d87aeed3a19151677e04173fbd55e88669f515dea19c8b99f8d7e829734f615a9b95e278fec62cf2d1a37d535ef71996530c62e65bb6fde625447e9122cfd947d7032c7580bfa5286bdde0bd9c4f0c63cbceddc302e1daef7f27bf289f72456802560e4477b27520b45f3a39e787824f169b3fa0ec7fba1c37f4499d43a9cdca7595f3e9ab74223c34819b260130d8a7613653101cc9a6e236ac01965356c90814c632ed421a62654a457ccc66040026451610b94898d13292cf2096fc1744b8fe67cebbcee0a3830be987694e593d732f05e3c6503a71173dc9870c3eca017318b628dd651232ea1c424a98b394188c8b8dbf30d69f1976219fd5b1975f8deebabeca970581f011f428c164bb35e0d6be187a5a2887d6bb0889c41c5c24d0b173f05db5d3a9e50318b448b3c8c", @ANYRESDEC, @ANYRESHEX, @ANYRES32=r0], 0x0, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 1m31.058234941s ago: executing program 2 (id=661): r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 1m29.334798861s ago: executing program 2 (id=673): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000007c0)={[{@nombcache}, {@lazytime}, {@block_validity}, {@block_validity}, {@nojournal_checksum}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x45c, &(0x7f0000000b80)="$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") mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x20000c, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 1m28.426002484s ago: executing program 5 (id=677): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x150, 0x24, 0xd0f, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x7, 0x8, 0x8, 0x2, 0x15, 0xd, 0x1}}, @TCA_RED_MAX_P={0x8, 0x3, 0xd00}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4940}, 0x24008890) 1m28.189432311s ago: executing program 2 (id=679): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000430000002f0000000000000018"], 0x30}, 0x40440c0) 1m28.146033217s ago: executing program 5 (id=680): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000002100b704000000000000850000005700000095"], 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m27.048159142s ago: executing program 5 (id=683): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x2, 0xfffffffa}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x0, 0x1000, 0x3}) 1m26.54312111s ago: executing program 5 (id=687): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000cc0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x82000714) inotify_rm_watch(r0, r1) 1m26.172258489s ago: executing program 5 (id=688): unshare(0x8000000) semget$private(0x0, 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x9, 0x1800}], 0x1, 0x0) unshare(0x2c040000) 1m25.686024031s ago: executing program 5 (id=691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x68, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xac1e0100}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) 1m23.96988446s ago: executing program 2 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 1m22.601265007s ago: executing program 33 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 1m10.237355014s ago: executing program 34 (id=691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x68, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xac1e0100}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) 1m3.159714947s ago: executing program 3 (id=745): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3a}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 1m2.733903103s ago: executing program 3 (id=746): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x4b, 0xb, "d2f1620200000058f3f99a"}}) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010106000009040000ff02020000052406800005240002000d240f010000000000000000000424020009058103200000000a09058202200000000009050302"], 0x0) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000000000)={0x8, 0x9}) 1m1.07874101s ago: executing program 3 (id=748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000240)={0x50, r1, 0x1, 0x70bd2a, 0x25dfdc00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xd}, @device_b, @device_a, @from_mac=@broadcast, {0x3, 0x7}}, 0x0, @val={0x8c, 0x10, {0x96a, "5d4f7f7d62a8", @short="30e722b9d80daf65"}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040080}, 0x2c048010) 1m0.402977261s ago: executing program 3 (id=750): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./mnt\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES32=0x0], 0x1, 0xc58, &(0x7f00000000c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 58.654750615s ago: executing program 3 (id=754): mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') 50.010691744s ago: executing program 3 (id=770): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) 49.086121929s ago: executing program 35 (id=770): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) 3.282087908s ago: executing program 4 (id=874): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {}, 0x1119dff, 0xffffffff7fffffff, 0xcd41}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000700), r1}}, 0x18) 3.035380231s ago: executing program 4 (id=875): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f00000004c0)=ANY=[], 0x3, 0x2c4, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x2b4602, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2.741650916s ago: executing program 0 (id=876): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb", 0x10}], 0x3}}], 0x1, 0x0) 2.577828998s ago: executing program 0 (id=877): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010026bd70000000001c3b00000008000300", @ANYRES32=r1, @ANYBLOB="5200330080200900ffffffffffff0802110000005050505050505f000000000000000000640000380102"], 0x84}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) 2.136333843s ago: executing program 4 (id=878): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x1, 0x208, 0x80000001, {0x77359400}, {}, {}, 0x1, @can={{0x0, 0x1, 0x1}, 0x84, 0x3, 0x0, 0x0, "c3070400d2a8c4ed"}}, 0x48}}, 0x40000) 1.718979835s ago: executing program 4 (id=879): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x200, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1a, 0xc040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000400)="a6", 0x1}], 0x1) 1.538360542s ago: executing program 0 (id=880): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x1, 0x6}, {0xff}, 0x0, 0x1, 0x3}}, @TCA_TBF_RTAB={0x2da, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffff1d8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x1, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x7, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x40000000, 0x0, 0x0, 0xffffffff, 0x40, 0x0, 0x0, 0x4, 0x1000002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xa97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0xfffffffc, 0x400000, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x1000, 0x0, 0x0, 0x200, 0x0, 0x0, 0x2, 0xb484, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dfd, 0x0, 0x0, 0x0, 0x4, 0x7, 0x72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xfffffffb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0xd79, 0x0, 0x2011, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 1.44551098s ago: executing program 4 (id=881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000240)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {}, {@jqfmt_vfsv1}, {@grpid}]}, 0x2, 0x476, &(0x7f0000000540)="$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") ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x7) 418.771053ms ago: executing program 4 (id=882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(r0) 403.633955ms ago: executing program 0 (id=883): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='X', 0x1}], 0x1) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) 197.105628ms ago: executing program 0 (id=884): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x9}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1}, &(0x7f0000000240)=0x8) 0s ago: executing program 0 (id=885): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r2, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x0, 0x1, [0x30]}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x6, 0x2, 0x3, 0xfffb, 0x81, 0xfffc, 0x100, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x0, 0x7, 0x2}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x80000) kernel console output (not intermixed with test programs): 0 [ 109.401005][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.406002][ T5830] veth0_macvtap: entered promiscuous mode [ 109.503670][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.505321][ T5830] veth1_macvtap: entered promiscuous mode [ 109.527179][ T5831] veth0_macvtap: entered promiscuous mode [ 109.573213][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.573235][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.668480][ T5831] veth1_macvtap: entered promiscuous mode [ 109.695910][ T1036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.715833][ T1036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.747308][ T1036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.766767][ T1036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.806443][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.966540][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.132040][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.206279][ T1036] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.223753][ T1036] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.282955][ T1036] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.317178][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.346694][ T1036] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.521889][ T5945] loop2: detected capacity change from 0 to 1024 [ 110.594545][ T122] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.631944][ T122] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.650317][ T122] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.742443][ T122] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.747957][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.747979][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.172185][ T5943] loop1: detected capacity change from 0 to 32768 [ 111.187294][ T5943] ======================================================= [ 111.187294][ T5943] WARNING: The mand mount option has been deprecated and [ 111.187294][ T5943] and is ignored by this kernel. Remove the mand [ 111.187294][ T5943] option from the mount to silence this warning. [ 111.187294][ T5943] ======================================================= [ 111.748464][ T1576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.748483][ T1576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.385590][ T5943] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 112.451763][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.451790][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.644563][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.644585][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.263846][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.263868][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.546717][ T38] audit: type=1326 audit(1776104210.174:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8fdec819 code=0x7ffc0000 [ 113.651828][ T38] audit: type=1326 audit(1776104210.184:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8fdec819 code=0x7ffc0000 [ 113.651878][ T38] audit: type=1326 audit(1776104210.254:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4a8fdec819 code=0x7ffc0000 [ 113.651918][ T38] audit: type=1326 audit(1776104210.254:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.0.9" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a8fdec819 code=0x0 [ 113.718767][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.718834][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.452392][ T5828] ocfs2: Unmounting device (7,1) on (node local) [ 114.967133][ T32] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.378247][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 115.384438][ T5967] Zero length message leads to an empty skb [ 115.492380][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.492417][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.492460][ T32] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 115.492485][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.786498][ T32] usb 3-1: config 0 descriptor?? [ 117.020084][ T32] usb 3-1: string descriptor 0 read error: -71 [ 117.094359][ T32] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 117.094443][ T32] letsketch 0003:6161:4D15.0001: probe with driver letsketch failed with error -32 [ 117.531781][ T32] usb 3-1: USB disconnect, device number 2 [ 118.153369][ T5992] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.208025][ T5971] loop4: detected capacity change from 0 to 40427 [ 118.623080][ T5971] F2FS-fs (loop4): invalid crc value [ 118.911315][ T5997] netlink: 1 bytes leftover after parsing attributes in process `syz.0.20'. [ 119.659264][ T6001] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.904515][ T6001] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.904544][ T6001] usb 3-1: config 0 has no interface number 0 [ 120.031749][ T6001] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 120.031782][ T6001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.031804][ T6001] usb 3-1: Product: syz [ 120.031821][ T6001] usb 3-1: Manufacturer: syz [ 120.031837][ T6001] usb 3-1: SerialNumber: syz [ 120.201086][ T6001] usb 3-1: config 0 descriptor?? [ 120.357837][ T5988] loop1: detected capacity change from 0 to 32768 [ 120.610570][ T6001] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 120.681129][ T6001] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 120.682368][ T6001] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 120.682458][ T6001] usb 3-1: media controller created [ 120.746796][ T6001] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.026996][ T5988] read_mapping_page failed! [ 121.027063][ T5988] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 121.028020][ T5988] Mount JFS Failure: -5 [ 121.028034][ T5988] jfs_mount failed w/return code = -5 [ 121.342057][ T5971] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 121.417651][ T6001] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 121.724823][ T6001] usb 3-1: USB disconnect, device number 3 [ 121.797418][ T5971] F2FS-fs (loop4): Start checkpoint disabled! [ 122.003750][ T5971] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 122.783154][ T6032] loop2: detected capacity change from 0 to 2048 [ 123.202825][ T6032] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.575414][ T6030] loop1: detected capacity change from 0 to 32768 [ 123.693228][ T6030] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.30 (6030) [ 124.444951][ T6030] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.445001][ T6030] BTRFS info (device loop1): using crc32c checksum algorithm [ 124.586992][ T6050] warning: `syz.4.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 125.282647][ T6030] BTRFS info (device loop1): setting nodatasum [ 125.282677][ T6030] BTRFS info (device loop1): setting nodatacow [ 125.282701][ T6030] BTRFS info (device loop1): turning on async discard [ 125.282834][ T6030] BTRFS info (device loop1): enabling free space tree [ 125.282859][ T6030] BTRFS info (device loop1): enabling auto defrag [ 125.282886][ T6030] BTRFS info (device loop1): max_inline set to 0 [ 125.374222][ T6072] overlayfs: overlapping lowerdir path [ 125.515894][ T5828] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.759936][ T6062] kthread_run failed with err -4 [ 126.101147][ T6083] loop4: detected capacity change from 0 to 512 [ 126.350932][ T6083] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 126.557254][ T6084] loop3: detected capacity change from 0 to 8192 [ 126.983701][ T6083] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.44: invalid indirect mapped block 4294967295 (level 0) [ 126.983922][ T6083] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 127.094405][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 127.094427][ C1] EXT4-fs (loop4): initial error at time 1776104223: ext4_free_branches:1023: inode 16 [ 127.094463][ C1] EXT4-fs (loop4): last error at time 1776104223: ext4_free_branches:1023: inode 16 [ 127.230986][ T6083] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.44: invalid indirect mapped block 4294967295 (level 1) [ 127.231029][ T6083] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 127.584371][ T6083] EXT4-fs (loop4): 1 orphan inode deleted [ 127.584400][ T6083] EXT4-fs (loop4): 1 truncate cleaned up [ 127.702162][ T6083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.109771][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.848804][ T6116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.57'. [ 129.063239][ T6124] loop3: detected capacity change from 0 to 64 [ 129.187144][ T6129] netlink: 'syz.4.60': attribute type 10 has an invalid length. [ 129.210077][ T5946] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 129.342368][ T6129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.364104][ T6129] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 129.364747][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.364768][ T6130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.410685][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 129.410739][ T5946] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 129.410764][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.474003][ T5946] usb 2-1: config 0 descriptor?? [ 129.484206][ T6122] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.656235][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.656267][ T6130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.955133][ T5946] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 129.955178][ T5946] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 129.955207][ T5946] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 129.955236][ T5946] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 129.955265][ T5946] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 129.955293][ T5946] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 129.955322][ T5946] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 129.955349][ T5946] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 129.955375][ T5946] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 129.955402][ T5946] logitech-djreceiver 0003:046D:C71F.0002: unknown main item tag 0x0 [ 130.054019][ T6130] bond0: (slave batadv0): Releasing backup interface [ 130.054590][ T5946] logitech-djreceiver 0003:046D:C71F.0002: collection stack underflow [ 130.054630][ T5946] logitech-djreceiver 0003:046D:C71F.0002: item 0 1 0 12 parsing failed [ 130.090716][ T5946] logitech-djreceiver 0003:046D:C71F.0002: logi_dj_probe: parse failed [ 130.090815][ T5946] logitech-djreceiver 0003:046D:C71F.0002: probe with driver logitech-djreceiver failed with error -22 [ 130.288243][ T5911] usb 2-1: USB disconnect, device number 2 [ 131.041232][ T6141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.801201][ T6155] loop0: detected capacity change from 0 to 32768 [ 133.105722][ T6178] loop4: detected capacity change from 0 to 512 [ 133.151119][ T6178] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.236322][ T6178] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.76: invalid indirect mapped block 4294967295 (level 0) [ 133.236364][ T6178] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 133.249666][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 133.249743][ C1] EXT4-fs (loop4): initial error at time 1776104229: ext4_free_branches:1023: inode 16 [ 133.249829][ C1] EXT4-fs (loop4): last error at time 1776104229: ext4_free_branches:1023: inode 16 [ 133.306732][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.306839][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.368973][ T6178] EXT4-fs (loop4): Remounting filesystem read-only [ 133.419147][ T6178] EXT4-fs (loop4): 1 orphan inode deleted [ 133.419168][ T6178] EXT4-fs (loop4): 1 truncate cleaned up [ 133.462524][ T6178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.082932][ T6155] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 134.136520][ T6194] netlink: 56 bytes leftover after parsing attributes in process `syz.1.80'. [ 134.230068][ T6198] loop2: detected capacity change from 0 to 512 [ 134.273321][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.371306][ T6198] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.745401][ T6198] EXT4-fs (loop2): 1 truncate cleaned up [ 134.844091][ T6155] XFS (loop0): Ending clean mount [ 134.924716][ T6198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.070467][ T6204] loop1: detected capacity change from 0 to 4096 [ 135.372459][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.456432][ T6155] XFS (loop0): Quotacheck needed: Please wait. [ 135.970628][ T6204] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 136.198993][ T6204] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 136.721653][ T6155] XFS (loop0): Quotacheck: Done. [ 136.827433][ T6227] loop2: detected capacity change from 0 to 512 [ 136.869803][ T6227] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.125555][ T6227] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 137.168922][ T38] audit: type=1800 audit(1776104489.728:6): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.84" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 137.242171][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.94'. [ 137.246834][ T6227] EXT4-fs (loop2): 1 truncate cleaned up [ 137.368770][ T6220] ntfs3(loop1): ino=1e, "file1" attr_set_size_ex [ 137.386315][ T6227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.577508][ T6204] ntfs3(loop1): ino=1e, "file1" attr_set_size_ex [ 137.685672][ T5829] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.008026][ T38] audit: type=1800 audit(1776104490.638:7): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.92" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 138.411640][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.273785][ T6242] loop3: detected capacity change from 0 to 131072 [ 139.392269][ T6242] F2FS-fs (loop3): invalid crc value [ 139.578441][ T6242] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 139.635526][ T6242] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 139.995853][ T6253] loop2: detected capacity change from 0 to 4096 [ 140.236314][ T6260] loop4: detected capacity change from 0 to 4096 [ 140.323812][ T6253] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 140.360004][ T6253] ntfs3(loop2): Failed to load $Extend (-22). [ 140.360032][ T6253] ntfs3(loop2): Failed to initialize $Extend. [ 140.579594][ T6262] loop0: detected capacity change from 0 to 65 [ 140.632259][ T6262] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 141.823346][ T6274] loop0: detected capacity change from 0 to 256 [ 141.869379][ T5946] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 142.177446][ T5946] usb 2-1: unable to get BOS descriptor or descriptor too short [ 142.199700][ T5946] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 142.199742][ T5946] usb 2-1: can't read configurations, error -71 [ 142.300122][ T6274] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 142.446444][ T38] audit: type=1800 audit(1776104495.078:8): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.108" name="file2" dev="loop0" ino=1048605 res=0 errno=0 [ 142.847625][ T6265] loop2: detected capacity change from 0 to 32768 [ 142.964981][ T6265] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.105 (6265) [ 143.047673][ T6277] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 143.131740][ T6274] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 143.131767][ T6274] exFAT-fs (loop0): Filesystem has been set read-only [ 143.171840][ T38] audit: type=1804 audit(1776104495.768:9): pid=6275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.108" name="/newroot/15/file2/file2" dev="loop0" ino=1048605 res=1 errno=0 [ 143.171902][ T38] audit: type=1800 audit(1776104495.798:10): pid=6275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.108" name="file2" dev="loop0" ino=1048605 res=0 errno=0 [ 143.422567][ T6265] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.422604][ T6265] BTRFS info (device loop2): using crc32c checksum algorithm [ 143.629585][ T6291] loop4: detected capacity change from 0 to 1024 [ 143.780370][ T6265] BTRFS info (device loop2): enabling ssd optimizations [ 143.780400][ T6265] BTRFS info (device loop2): turning on flush-on-commit [ 143.780434][ T6265] BTRFS info (device loop2): enabling free space tree [ 143.780452][ T6265] BTRFS info (device loop2): enabling auto defrag [ 143.780482][ T6265] BTRFS info (device loop2): use lzo compression, level 1 [ 143.780504][ T6265] BTRFS info (device loop2): max_inline set to 4096 [ 144.159976][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.113'. [ 144.227248][ T6291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.314453][ T5827] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.334431][ T6303] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.387206][ T6303] bridge_slave_1: left allmulticast mode [ 144.387237][ T6303] bridge_slave_1: left promiscuous mode [ 144.387512][ T6303] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.500656][ T6303] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 144.692796][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.228591][ T6310] loop0: detected capacity change from 0 to 4096 [ 145.545986][ T6310] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 146.209999][ T6308] loop1: detected capacity change from 0 to 32768 [ 146.357550][ T6308] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 146.747976][ T6308] XFS (loop1): Ending clean mount [ 146.879055][ T6308] XFS (loop1): Quotacheck needed: Please wait. [ 147.307036][ T6308] XFS (loop1): Quotacheck: Done. [ 147.454321][ T5828] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 148.393830][ T6354] batadv_slave_1: entered promiscuous mode [ 148.394370][ T6353] batadv_slave_1: left promiscuous mode [ 149.748967][ T6379] loop4: detected capacity change from 0 to 512 [ 149.898036][ T6386] loop2: detected capacity change from 0 to 512 [ 150.122324][ T6379] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.137: invalid indirect mapped block 256 (level 2) [ 150.122355][ T6379] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 150.131434][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 150.131572][ C0] EXT4-fs (loop4): initial error at time 1776104502: ext4_free_branches:1023: inode 11 [ 150.131668][ C0] EXT4-fs (loop4): last error at time 1776104502: ext4_free_branches:1023: inode 11 [ 150.210207][ T6386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.222967][ T6391] loop3: detected capacity change from 0 to 256 [ 150.436870][ T6379] EXT4-fs (loop4): 2 truncates cleaned up [ 150.463106][ T6379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.489674][ T38] audit: type=1800 audit(1776104503.128:11): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.137" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 150.521365][ T6394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.596874][ T1036] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:8: bg 0: block 5: invalid block bitmap [ 150.634281][ T6391] FAT-fs (loop3): Directory bread(block 64) failed [ 150.634318][ T6391] FAT-fs (loop3): Directory bread(block 65) failed [ 150.634499][ T6391] FAT-fs (loop3): Directory bread(block 66) failed [ 150.634520][ T6391] FAT-fs (loop3): Directory bread(block 67) failed [ 150.634593][ T6391] FAT-fs (loop3): Directory bread(block 68) failed [ 150.634610][ T6391] FAT-fs (loop3): Directory bread(block 69) failed [ 150.634680][ T6391] FAT-fs (loop3): Directory bread(block 70) failed [ 150.634697][ T6391] FAT-fs (loop3): Directory bread(block 71) failed [ 150.634767][ T6391] FAT-fs (loop3): Directory bread(block 72) failed [ 150.634783][ T6391] FAT-fs (loop3): Directory bread(block 73) failed [ 150.870374][ T1036] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 150.870411][ T1036] EXT4-fs (loop4): This should not happen!! Data will be lost [ 150.870411][ T1036] [ 150.870427][ T1036] EXT4-fs (loop4): Total free blocks count 0 [ 150.870442][ T1036] EXT4-fs (loop4): Free/Dirty block details [ 150.870486][ T1036] EXT4-fs (loop4): free_blocks=0 [ 150.870527][ T1036] EXT4-fs (loop4): dirty_blocks=2 [ 150.870540][ T1036] EXT4-fs (loop4): Block reservation details [ 150.870554][ T1036] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 151.087745][ T57] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16843019 with max blocks 1 with error 28 [ 151.114105][ T5831] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 151.840686][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'. [ 152.126586][ T6388] loop0: detected capacity change from 0 to 40427 [ 152.149021][ T6397] netlink: set zone limit has 4 unknown bytes [ 152.191307][ T6388] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 152.191334][ T6388] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 152.302260][ T6388] F2FS-fs (loop0): invalid crc value [ 152.302285][ T6388] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node [ 152.644613][ T6413] loop4: detected capacity change from 0 to 512 [ 152.876638][ T6413] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 152.944842][ T6388] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 153.222413][ T6413] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 153.255916][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 153.255940][ C0] EXT4-fs (loop4): initial error at time 1776104505: ext4_mb_generate_buddy:1317 [ 153.255961][ C0] EXT4-fs (loop4): last error at time 1776104505: ext4_mb_generate_buddy:1317 [ 153.329257][ T6413] Quota error (device loop4): write_blk: dquota write failed [ 153.329277][ T6413] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 153.330174][ T6413] Quota error (device loop4): write_blk: dquota write failed [ 153.330386][ T6413] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 153.330432][ T6413] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.149: Failed to acquire dquot type 1 [ 153.342362][ T6413] loop4: lost filesystem error report for type 5 error -28 [ 153.378229][ T6388] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 153.378304][ T6388] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 153.483256][ T6413] EXT4-fs (loop4): 1 truncate cleaned up [ 153.492121][ T6413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.583096][ T6413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.740058][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.808831][ T6413] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 153.998465][ T38] audit: type=1326 audit(1776104506.628:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6421 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f18ac819 code=0x7ffc0000 [ 153.998522][ T38] audit: type=1326 audit(1776104506.638:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6421 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f18ac819 code=0x7ffc0000 [ 154.066346][ T38] audit: type=1326 audit(1776104506.698:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6421 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f71f18ac819 code=0x7ffc0000 [ 154.246643][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.620911][ T6411] loop3: detected capacity change from 0 to 32768 [ 155.200934][ T38] audit: type=1326 audit(1776104507.778:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6421 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f18ac819 code=0x7ffc0000 [ 155.202820][ T38] audit: type=1326 audit(1776104507.838:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6421 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f18ac819 code=0x7ffc0000 [ 155.481204][ T6411] read_mapping_page failed! [ 155.481220][ T6411] diRead: read_metapage failed [ 155.523070][ T6422] mmap: syz.1.152 (6422) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 155.523390][ T38] audit: type=1326 audit(1776104508.118:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6421 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f71f18ac819 code=0x7ffc0000 [ 155.699855][ T38] audit: type=1326 audit(1776104508.338:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6421 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f18ac819 code=0x7ffc0000 [ 155.700199][ T38] audit: type=1326 audit(1776104508.338:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6421 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71f18ac819 code=0x7ffc0000 [ 156.899776][ T6453] sctp: [Deprecated]: syz.1.163 (pid 6453) Use of int in max_burst socket option deprecated. [ 156.899776][ T6453] Use struct sctp_assoc_value instead [ 157.247440][ T6440] loop2: detected capacity change from 0 to 131072 [ 157.272423][ T6455] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.164'. [ 157.390799][ T6440] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 157.405370][ T6440] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 157.628354][ T6461] loop1: detected capacity change from 0 to 256 [ 158.560290][ T5946] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 158.560511][ T6001] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 158.592382][ T6476] loop1: detected capacity change from 0 to 128 [ 158.734023][ T6001] usb 5-1: Using ep0 maxpacket: 16 [ 158.752900][ T6001] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 158.752933][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.752956][ T6001] usb 5-1: Product: syz [ 158.752972][ T6001] usb 5-1: Manufacturer: syz [ 158.752988][ T6001] usb 5-1: SerialNumber: syz [ 158.805564][ T5946] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.805592][ T5946] usb 1-1: config 0 has no interface number 0 [ 158.805636][ T5946] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 158.805659][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.031419][ T5946] usb 1-1: config 0 descriptor?? [ 159.371369][ T6001] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 159.389312][ T5946] usb 1-1: selecting invalid altsetting 1 [ 159.397945][ T5946] dvb_ttusb_budget: ttusb_init_controller: error [ 159.397967][ T5946] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 159.789408][ T6001] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 159.794209][ T6001] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 159.794266][ T6001] usb 5-1: media controller created [ 160.108508][ T6001] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.121220][ T6486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.177'. [ 160.460623][ T6490] loop4: detected capacity change from 0 to 4096 [ 160.495467][ T6490] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 160.496008][ T6490] ntfs3(loop4): ino=3, mi_enum_attr [ 161.008379][ T6490] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 161.008526][ T6490] ntfs3(loop4): ino=1a, mi_enum_attr [ 161.008656][ T6490] ntfs3(loop4): ino=1a, mi_enum_attr [ 161.008675][ T6490] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 161.184749][ T6001] zl10353_read_register: readreg error (reg=127, ret==-71) [ 161.235094][ T6494] syz.0.179 (6494) used greatest stack depth: 18520 bytes left [ 161.279517][ T5946] DVB: Unable to find symbol cx22700_attach() [ 161.537515][ T5946] DVB: Unable to find symbol tda10046_attach() [ 161.537531][ T5946] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 161.572002][ T5946] usb 1-1: USB disconnect, device number 2 [ 161.777069][ T6001] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 161.880472][ T6001] usb 5-1: USB disconnect, device number 2 [ 162.050005][ T6514] loop3: detected capacity change from 0 to 1024 [ 163.054282][ T1129] hfsplus: b-tree write err: -5, ino 25 [ 163.106255][ T1129] hfsplus: b-tree write err: -5, ino 4 [ 163.138873][ T1129] hfsplus: b-tree write err: -5, ino 2 [ 163.284729][ T6524] loop1: detected capacity change from 0 to 512 [ 163.527007][ T6512] loop0: detected capacity change from 0 to 32768 [ 163.562946][ T6524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.564506][ T6522] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 163.683860][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.734326][ T6512] (syz.0.184,6512,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 163.789796][ T6512] (syz.0.184,6512,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 164.012656][ T6530] loop1: detected capacity change from 0 to 8 [ 164.114044][ T6533] loop3: detected capacity change from 0 to 256 [ 164.298684][ T6519] loop4: detected capacity change from 0 to 32768 [ 164.325383][ T6512] JBD2: Ignoring recovery information on journal [ 164.470949][ T6519] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.188 (6519) [ 164.554161][ T6535] capability: warning: `syz.2.193' uses 32-bit capabilities (legacy support in use) [ 164.608390][ T6535] program syz.2.193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.654453][ T6533] FAT-fs (loop3): Directory bread(block 64) failed [ 164.654491][ T6533] FAT-fs (loop3): Directory bread(block 65) failed [ 164.654614][ T6533] FAT-fs (loop3): Directory bread(block 66) failed [ 164.654641][ T6533] FAT-fs (loop3): Directory bread(block 67) failed [ 164.654768][ T6533] FAT-fs (loop3): Directory bread(block 68) failed [ 164.654795][ T6533] FAT-fs (loop3): Directory bread(block 69) failed [ 164.654902][ T6533] FAT-fs (loop3): Directory bread(block 70) failed [ 164.654928][ T6533] FAT-fs (loop3): Directory bread(block 71) failed [ 164.655053][ T6533] FAT-fs (loop3): Directory bread(block 72) failed [ 164.655079][ T6533] FAT-fs (loop3): Directory bread(block 73) failed [ 164.916584][ T6519] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.916620][ T6519] BTRFS info (device loop4): using crc32c checksum algorithm [ 165.211155][ T6512] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 166.102322][ T6567] syz.2.201 uses obsolete (PF_INET,SOCK_PACKET) [ 166.650085][ T6519] BTRFS error (device loop4): open_ctree failed: -4 [ 166.996863][ T5829] ocfs2: Unmounting device (7,0) on (node local) [ 167.888890][ T38] audit: type=1326 audit(1776104520.518:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69fd7ec819 code=0x7ffc0000 [ 167.898265][ T38] audit: type=1326 audit(1776104520.528:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69fd7ec819 code=0x7ffc0000 [ 168.033133][ T38] audit: type=1326 audit(1776104520.658:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f69fd7ec819 code=0x7ffc0000 [ 168.033209][ T38] audit: type=1326 audit(1776104520.658:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69fd7ec819 code=0x7ffc0000 [ 168.033257][ T38] audit: type=1326 audit(1776104520.658:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69fd7ec819 code=0x7ffc0000 [ 168.052302][ T38] audit: type=1326 audit(1776104520.668:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f69fd7ec819 code=0x7ffc0000 [ 168.052487][ T38] audit: type=1326 audit(1776104520.668:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69fd7ec819 code=0x7ffc0000 [ 168.052611][ T38] audit: type=1326 audit(1776104520.668:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69fd7ec819 code=0x7ffc0000 [ 169.092172][ T6606] input: syz0 as /devices/virtual/input/input5 [ 169.381181][ T6617] loop0: detected capacity change from 0 to 128 [ 169.521062][ T6617] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.600138][ T6617] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.074047][ T5829] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.594685][ T6620] syz.1.221 (6620) used greatest stack depth: 18488 bytes left [ 171.053469][ T6644] program syz.3.230 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.498541][ T6624] loop4: detected capacity change from 0 to 40427 [ 171.524507][ T6624] F2FS-fs (loop4): invalid crc value [ 172.062128][ T5834] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 172.176759][ T6624] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 172.241799][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 172.241836][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.241876][ T5834] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 172.241900][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.391431][ T38] audit: type=1107 audit(1776104524.998:28): pid=6669 uid=0 auid=0 ses=1 subj=unconfined msg='f!' [ 172.431254][ T5834] usb 3-1: config 0 descriptor?? [ 172.600152][ T6624] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 172.826385][ T6681] program syz.1.244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.024519][ T5834] hid_parser_main: 368 callbacks suppressed [ 173.024546][ T5834] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 173.024585][ T5834] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 173.024613][ T5834] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 173.024640][ T5834] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 173.024666][ T5834] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 173.024691][ T5834] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 173.024717][ T5834] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 173.314089][ T6685] loop3: detected capacity change from 0 to 1024 [ 173.364835][ T5831] syz-executor: attempt to access beyond end of device [ 173.364835][ T5831] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 173.415342][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 173.415398][ T5831] Tainted: [L]=SOFTLOCKUP [ 173.415407][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 173.415430][ T5831] Call Trace: [ 173.415443][ T5831] [ 173.415453][ T5831] dump_stack_lvl+0xe8/0x150 [ 173.415494][ T5831] f2fs_stop_checkpoint+0x383/0x540 [ 173.415535][ T5831] f2fs_write_end_io+0x1274/0x1740 [ 173.415583][ T5831] __submit_merged_bio+0x256/0x6a0 [ 173.415626][ T5831] __submit_merged_write_cond+0x3c9/0x4e0 [ 173.415670][ T5831] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 173.415729][ T5831] f2fs_write_data_pages+0x287e/0x34f0 [ 173.415797][ T5831] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 173.415869][ T5831] ? do_raw_spin_lock+0x12b/0x2f0 [ 173.415907][ T5831] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 173.415939][ T5831] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.415969][ T5831] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 173.416000][ T5831] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 173.416026][ T5831] ? reacquire_held_locks+0x104/0x190 [ 173.416058][ T5831] ? rt_spin_lock+0x1e0/0x400 [ 173.416090][ T5831] ? rt_spin_unlock+0x14f/0x200 [ 173.416115][ T5831] ? rt_spin_unlock+0x160/0x200 [ 173.416138][ T5831] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 173.416162][ T5831] do_writepages+0x32e/0x550 [ 173.416192][ T5831] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 173.416220][ T5831] ? rt_spin_unlock+0x14f/0x200 [ 173.416254][ T5831] filemap_fdatawrite+0x1ec/0x2f0 [ 173.416288][ T5831] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 173.416316][ T5831] ? __lock_acquire+0x6b5/0x2cf0 [ 173.416388][ T5831] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 173.416423][ T5831] ? rt_spin_unlock+0x160/0x200 [ 173.416451][ T5831] f2fs_sync_dirty_inodes+0x30e/0x830 [ 173.416491][ T5831] f2fs_write_checkpoint+0x9df/0x26a0 [ 173.416543][ T5831] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 173.416607][ T5831] kill_f2fs_super+0x314/0x730 [ 173.416631][ T5831] ? __pfx_kill_f2fs_super+0x10/0x10 [ 173.416661][ T5831] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.416699][ T5831] deactivate_locked_super+0xbc/0x130 [ 173.416726][ T5831] cleanup_mnt+0x437/0x4d0 [ 173.416753][ T5831] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.416784][ T5831] task_work_run+0x1d9/0x270 [ 173.416814][ T5831] ? __pfx_task_work_run+0x10/0x10 [ 173.416849][ T5831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.416870][ T5831] exit_to_user_mode_loop+0xed/0x480 [ 173.416892][ T5831] ? rcu_is_watching+0x15/0xb0 [ 173.416921][ T5831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.416942][ T5831] do_syscall_64+0x33e/0xf80 [ 173.416971][ T5831] ? trace_irq_disable+0x3b/0x140 [ 173.416995][ T5831] ? clear_bhb_loop+0x40/0x90 [ 173.417021][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.417041][ T5831] RIP: 0033:0x7f69fd7eda57 [ 173.417070][ T5831] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 173.417085][ T5831] RSP: 002b:00007ffc19a65428 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 173.417105][ T5831] RAX: 0000000000000000 RBX: 00007f69fd882048 RCX: 00007f69fd7eda57 [ 173.417116][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc19a654e0 [ 173.417128][ T5831] RBP: 00007ffc19a654e0 R08: 00007ffc19a664e0 R09: 00000000ffffffff [ 173.417141][ T5831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc19a66570 [ 173.417151][ T5831] R13: 00007f69fd882048 R14: 000000000002a13b R15: 00007ffc19a665b0 [ 173.417178][ T5831] [ 173.432900][ T5834] isku 0003:1E7D:319C.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 173.507785][ T5831] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 173.875487][ T6685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.006811][ T6685] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.246: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 174.366372][ T6677] loop0: detected capacity change from 0 to 32768 [ 174.395341][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.942967][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.997507][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.012498][ T6697] bridge0: entered allmulticast mode [ 175.172780][ T5834] usb 3-1: USB disconnect, device number 4 [ 175.825576][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 178.006757][ T6744] loop3: detected capacity change from 0 to 1024 [ 178.412976][ T122] hfsplus: b-tree write err: -5, ino 25 [ 178.413151][ T122] hfsplus: b-tree write err: -5, ino 4 [ 178.525580][ T122] hfsplus: b-tree write err: -5, ino 2 [ 178.913950][ T6760] loop3: detected capacity change from 0 to 1024 [ 179.081481][ T6760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.450972][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.628269][ T37] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 179.814182][ T37] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.849912][ T37] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 179.849947][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.849970][ T37] usb 5-1: Product: syz [ 179.849986][ T37] usb 5-1: Manufacturer: syz [ 179.850002][ T37] usb 5-1: SerialNumber: syz [ 180.077273][ T6785] loop4: detected capacity change from 0 to 7 [ 180.272655][ T6785] Buffer I/O error on dev loop4, logical block 0, async page read [ 180.272879][ T6785] Buffer I/O error on dev loop4, logical block 0, async page read [ 180.273043][ T6785] Buffer I/O error on dev loop4, logical block 0, async page read [ 180.273165][ T6785] Buffer I/O error on dev loop4, logical block 0, async page read [ 180.273296][ T6785] Buffer I/O error on dev loop4, logical block 0, async page read [ 180.273421][ T6785] Buffer I/O error on dev loop4, logical block 0, async page read [ 180.285548][ T6785] Buffer I/O error on dev loop4, logical block 0, async page read [ 180.287023][ T6785] ldm_validate_partition_table(): Disk read failed. [ 180.290153][ T6785] Buffer I/O error on dev loop4, logical block 0, async page read [ 180.298508][ T6785] Buffer I/O error on dev loop4, logical block 0, async page read [ 180.327338][ T6785] Buffer I/O error on dev loop4, logical block 0, async page read [ 180.415619][ T6785] Dev loop4: unable to read RDB block 0 [ 180.476503][ T6785] loop4: unable to read partition table [ 180.476758][ T6785] loop4: partition table beyond EOD, truncated [ 180.476809][ T6785] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 180.796462][ T6791] ldm_validate_partition_table(): Disk read failed. [ 180.807173][ T6791] Dev loop4: unable to read RDB block 0 [ 180.820725][ T6791] loop4: unable to read partition table [ 180.820968][ T6791] loop4: partition table beyond EOD, truncated [ 181.405070][ T37] usb 5-1: 1:1: cannot get freq at ep 0x1 [ 182.606710][ T6827] netlink: 27 bytes leftover after parsing attributes in process `syz.4.300'. [ 182.945019][ T5911] kernel write not supported for file /media7 (pid: 5911 comm: kworker/1:5) [ 183.066561][ T6831] loop4: detected capacity change from 0 to 1024 [ 183.101726][ T6831] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 183.637100][ T6808] loop3: detected capacity change from 0 to 40427 [ 183.657887][ T6808] F2FS-fs (loop3): build fault injection rate: 174 [ 183.657915][ T6808] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 183.767635][ T6808] F2FS-fs (loop3): invalid crc value [ 184.198549][ T6851] loop2: detected capacity change from 0 to 164 [ 184.802451][ T6808] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 184.839439][ T6843] syz.4.305 (6843) used greatest stack depth: 18040 bytes left [ 185.271614][ T6860] loop1: detected capacity change from 0 to 1024 [ 185.491359][ T37] usb 5-1: USB disconnect, device number 3 [ 185.777440][ T6860] hfsplus: b-tree write err: -5, ino 2 [ 185.961796][ T1576] hfsplus: b-tree write err: -5, ino 25 [ 185.962049][ T1576] hfsplus: b-tree write err: -5, ino 4 [ 185.962181][ T1576] hfsplus: b-tree write err: -5, ino 2 [ 185.962332][ T1576] hfsplus: b-tree write err: -5, ino 26 [ 186.707616][ T5946] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 186.900476][ T5946] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 186.900511][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.207104][ T5946] usb 1-1: config 0 descriptor?? [ 187.355637][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.367331][ T5946] cp210x 1-1:0.0: cp210x converter detected [ 187.798003][ T5946] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 188.347093][ T5946] usb 1-1: cp210x converter now attached to ttyUSB0 [ 188.420890][ T5946] usb 1-1: USB disconnect, device number 3 [ 188.607525][ T5946] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 188.656037][ T6899] loop4: detected capacity change from 0 to 128 [ 188.851061][ T5946] cp210x 1-1:0.0: device disconnected [ 188.920774][ T6903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.331'. [ 189.175449][ T6909] netlink: 'syz.4.333': attribute type 1 has an invalid length. [ 189.956105][ T6897] loop1: detected capacity change from 0 to 32768 [ 190.041159][ T6897] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 190.349828][ T6897] XFS (loop1): Ending clean mount [ 190.491172][ T6897] XFS (loop1): Quotacheck needed: Please wait. [ 191.075817][ T6897] XFS (loop1): Quotacheck: Done. [ 191.167958][ T6897] XFS (loop1): User initiated shutdown received. [ 191.217855][ T6897] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:466). Shutting down filesystem. [ 191.218022][ T6897] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 191.409114][ T5828] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 191.804404][ T6952] loop0: detected capacity change from 0 to 1024 [ 192.032055][ T6952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 192.036439][ T6958] netlink: 512 bytes leftover after parsing attributes in process `syz.2.351'. [ 192.080012][ T6952] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.516605][ T6975] loop2: detected capacity change from 0 to 128 [ 192.545513][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 192.547603][ T6975] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 194.314887][ T7006] loop3: detected capacity change from 0 to 4096 [ 194.649671][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.649748][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.222715][ T7016] netlink: 148 bytes leftover after parsing attributes in process `syz.2.372'. [ 195.308011][ T7021] kvm: kvm [7020]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x2000000000000 [ 195.538501][ T7029] loop4: detected capacity change from 0 to 128 [ 196.136127][ T7032] loop2: detected capacity change from 0 to 8192 [ 196.268569][ T7046] netlink: 56 bytes leftover after parsing attributes in process `syz.3.384'. [ 196.430101][ T7032] loop2: AHDI p1 p2 p3 [ 196.430368][ T7032] loop2: p1 start 327680 is beyond EOD, truncated [ 197.156552][ T6819] udevd[6819]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 197.239753][ T7038] loop0: detected capacity change from 0 to 32768 [ 197.325686][ T7038] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 197.437036][ T7038] XFS (loop0): Ending clean mount [ 197.484752][ T7038] XFS (loop0): Quotacheck needed: Please wait. [ 197.632851][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.391'. [ 198.319349][ T7038] XFS (loop0): Quotacheck: Done. [ 199.005392][ T5829] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 199.617605][ T7098] loop3: detected capacity change from 0 to 4096 [ 199.646655][ T7098] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 200.025218][ T7098] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 200.029395][ T7098] ntfs3(loop3): ino=19, mi_enum_attr [ 200.338581][ T7098] ntfs3(loop3): failed to convert "c46c" to iso8859-14 [ 200.482641][ T7098] ntfs3(loop3): ino=20, mi_enum_attr [ 201.256046][ T7127] netlink: 56 bytes leftover after parsing attributes in process `syz.4.411'. [ 201.439717][ T7131] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 201.531720][ T7133] loop0: detected capacity change from 0 to 8 [ 201.737424][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'. [ 201.914323][ T7137] bond0: entered promiscuous mode [ 201.914347][ T7137] bond_slave_0: entered promiscuous mode [ 201.914611][ T7137] bond_slave_1: entered promiscuous mode [ 202.038239][ T7137] bond0: left promiscuous mode [ 202.038263][ T7137] bond_slave_0: left promiscuous mode [ 202.038550][ T7137] bond_slave_1: left promiscuous mode [ 202.339857][ T7149] loop4: detected capacity change from 0 to 1024 [ 202.343706][ T7149] EXT4-fs (loop4): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 202.515405][ T7149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.127023][ T7167] loop0: detected capacity change from 0 to 1024 [ 203.678478][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.863716][ T38] audit: type=1800 audit(1776104556.498:29): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.427" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=2 res=0 errno=0 [ 204.472504][ T1036] hfsplus: b-tree write err: -5, ino 3 [ 204.712859][ T7186] loop0: detected capacity change from 0 to 512 [ 204.795393][ T7188] netlink: 'syz.2.435': attribute type 10 has an invalid length. [ 204.955542][ T7188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.974280][ T7188] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 204.974349][ T7192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.974374][ T7192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.016206][ T7186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.016356][ T7186] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.074875][ T7192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.074906][ T7192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.215839][ T7186] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 205.271844][ T7192] bond0: (slave batadv0): Releasing backup interface [ 205.429807][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.894273][ T7208] tipc: Started in network mode [ 205.894309][ T7208] tipc: Node identity ac14140f, cluster identity 4711 [ 205.945901][ T7208] tipc: New replicast peer: 255.255.255.255 [ 205.963295][ T7208] tipc: Enabled bearer , priority 10 [ 206.291326][ T7219] loop4: detected capacity change from 0 to 128 [ 206.671322][ T7219] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 206.671690][ T7219] hpfs: filesystem error: improperly stopped [ 206.671709][ T7219] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 206.671725][ T7219] hpfs: You really don't want any checks? You are crazy... [ 206.716277][ T7219] hpfs: hpfs_map_sector(): read error [ 206.716293][ T7219] hpfs: code page support is disabled [ 206.741320][ T7219] hpfs: hpfs_map_4sectors(): unaligned read [ 206.742217][ T7219] hpfs: hpfs_map_4sectors(): unaligned read [ 206.742232][ T7219] hpfs: filesystem error: unable to find root dir [ 207.065771][ T1245] tipc: Node number set to 2886997007 [ 207.708867][ T5946] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 207.900255][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 207.917494][ T5946] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 207.917525][ T5946] usb 5-1: config 0 has no interface number 0 [ 207.946444][ T5946] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 207.946476][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.946499][ T5946] usb 5-1: Product: syz [ 207.946515][ T5946] usb 5-1: Manufacturer: syz [ 207.946530][ T5946] usb 5-1: SerialNumber: syz [ 207.992986][ T5946] usb 5-1: config 0 descriptor?? [ 208.017416][ T5946] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 208.673294][ T7267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.681352][ T7267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.084647][ T5946] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 209.143952][ T5946] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 209.313851][ T7256] loop2: detected capacity change from 0 to 131072 [ 209.315862][ T7256] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 209.315887][ T7256] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 209.342179][ T7256] F2FS-fs (loop2): invalid crc value [ 209.376230][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 209.410223][ T5946] usb 5-1: USB disconnect, device number 4 [ 209.425684][ T5946] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 209.459652][ T5946] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 209.460865][ T5946] quatech2 5-1:0.51: device disconnected [ 209.518123][ T7256] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 209.545969][ T7256] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 209.546001][ T7256] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 210.413225][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.460939][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.462465][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.467593][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.515051][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.540912][ T7291] netlink: 'syz.0.476': attribute type 12 has an invalid length. [ 210.540935][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.476'. [ 210.937516][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 212.354413][ T7320] netlink: 'syz.2.486': attribute type 1 has an invalid length. [ 212.354434][ T7320] netlink: 88 bytes leftover after parsing attributes in process `syz.2.486'. [ 212.354464][ T7320] netlink: 1 bytes leftover after parsing attributes in process `syz.2.486'. [ 212.354482][ T7320] netlink: 'syz.2.486': attribute type 1 has an invalid length. [ 212.354495][ T7320] netlink: 634 bytes leftover after parsing attributes in process `syz.2.486'. [ 212.655953][ T7316] Process accounting resumed [ 212.721208][ T5832] Bluetooth: hci5: command tx timeout [ 213.686377][ T7288] chnl_net:caif_netlink_parms(): no params data found [ 214.053759][ T7351] Bluetooth: MGMT ver 1.23 [ 214.115423][ T7337] loop3: detected capacity change from 0 to 32768 [ 214.144571][ T7337] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.493 (7337) [ 214.455264][ T7337] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.455358][ T7337] BTRFS info (device loop3): using crc32c checksum algorithm [ 214.722782][ T7337] BTRFS info (device loop3): setting nodatasum [ 214.722810][ T7337] BTRFS info (device loop3): enabling ssd optimizations [ 214.722830][ T7337] BTRFS info (device loop3): turning on async discard [ 214.722847][ T7337] BTRFS info (device loop3): enabling free space tree [ 214.722865][ T7337] BTRFS info (device loop3): enabling auto defrag [ 214.722884][ T7337] BTRFS info (device loop3): force zlib compression, level 3 [ 214.722906][ T7337] BTRFS info (device loop3): max_inline set to 0 [ 214.803537][ T5832] Bluetooth: hci5: command tx timeout [ 214.909204][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.911179][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.913207][ T7288] bridge_slave_0: entered allmulticast mode [ 214.971399][ T7288] bridge_slave_0: entered promiscuous mode [ 215.101936][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.102120][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.102366][ T7288] bridge_slave_1: entered allmulticast mode [ 215.219734][ T7288] bridge_slave_1: entered promiscuous mode [ 215.334431][ T5830] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 215.753913][ T7288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.757468][ T7288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.093043][ T7288] team0: Port device team_slave_0 added [ 216.096301][ T7288] team0: Port device team_slave_1 added [ 216.175596][ T7397] netlink: 56 bytes leftover after parsing attributes in process `syz.0.511'. [ 216.294471][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.294489][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.294518][ T7288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.354033][ T7288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.354052][ T7288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.354081][ T7288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.545986][ T7288] hsr_slave_0: entered promiscuous mode [ 216.547427][ T7288] hsr_slave_1: entered promiscuous mode [ 216.560899][ T7288] debugfs: 'hsr0' already exists in 'hsr' [ 216.560929][ T7288] Cannot create hsr debugfs directory [ 216.653431][ T7407] Bluetooth: MGMT ver 1.23 [ 216.881676][ T5832] Bluetooth: hci5: command tx timeout [ 217.049905][ T7416] netlink: 'syz.3.520': attribute type 1 has an invalid length. [ 217.329534][ T5917] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 217.497532][ T5917] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 217.497566][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.497588][ T5917] usb 1-1: Product: syz [ 217.497604][ T5917] usb 1-1: Manufacturer: syz [ 217.497620][ T5917] usb 1-1: SerialNumber: syz [ 217.784517][ T7434] program syz.3.527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.255788][ T5917] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 218.255854][ T5917] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 218.327711][ T5917] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 218.350932][ T5917] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 218.392144][ T5917] usb 1-1: USB disconnect, device number 4 [ 218.951363][ T5832] Bluetooth: hci5: command tx timeout [ 218.966453][ T7449] sctp: [Deprecated]: syz.3.533 (pid 7449) Use of int in maxseg socket option. [ 218.966453][ T7449] Use struct sctp_assoc_value instead [ 219.444007][ T7439] loop4: detected capacity change from 0 to 32768 [ 219.512693][ T7439] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 219.690476][ T7439] XFS (loop4): Ending clean mount [ 219.735040][ T7439] XFS (loop4): Quotacheck needed: Please wait. [ 220.461864][ T7288] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.698726][ T7459] loop3: detected capacity change from 0 to 32768 [ 220.757966][ T7439] XFS (loop4): Quotacheck: Done. [ 220.836782][ T7288] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.840682][ T7288] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.867340][ T7459] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 220.907765][ T7288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.932777][ T7288] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 221.075857][ T7288] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 221.111281][ T7288] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 221.122600][ T7459] XFS (loop3): Ending clean mount [ 221.216964][ T5831] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 221.266257][ T7288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.484791][ T7494] loop0: detected capacity change from 0 to 512 [ 221.563014][ T7494] EXT4-fs warning (device loop0): ext4_multi_mount_protect:314: fsck is running on the filesystem [ 221.563045][ T7494] EXT4-fs warning (device loop0): ext4_multi_mount_protect:314: MMP failure info: last update time: 1756377954, last update node: nogikhp920.muc.corp.google.com, last update device: loop12 [ 222.326585][ T7502] loop2: detected capacity change from 0 to 1024 [ 222.487833][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 222.487886][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 222.487911][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 222.487934][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 222.487956][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 223.179519][ T7288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.183403][ T5830] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 223.653832][ T7288] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.673536][ T270] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.673652][ T270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.754812][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.754985][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.914411][ T7526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.555'. [ 225.228783][ T7531] loop2: detected capacity change from 0 to 1024 [ 225.502506][ T7288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.618877][ T7531] hfsplus: b-tree write err: -5, ino 2 [ 226.368814][ T1576] hfsplus: b-tree write err: -5, ino 25 [ 226.369314][ T1576] hfsplus: b-tree write err: -5, ino 4 [ 226.369448][ T1576] hfsplus: b-tree write err: -5, ino 2 [ 226.369581][ T1576] hfsplus: b-tree write err: -5, ino 26 [ 226.455083][ T1576] hfsplus: b-tree write err: -5, ino 20 [ 226.521471][ T7546] loop0: detected capacity change from 0 to 256 [ 226.639397][ T7546] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 226.792188][ T7288] veth0_vlan: entered promiscuous mode [ 226.864173][ T7288] veth1_vlan: entered promiscuous mode [ 227.106212][ T7535] loop4: detected capacity change from 0 to 40427 [ 227.132939][ T7535] F2FS-fs (loop4): invalid crc value [ 227.274846][ T7555] process 'syz.3.563' launched './file2' with NULL argv: empty string added [ 227.276145][ T7553] program syz.0.561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.632760][ T7288] veth0_macvtap: entered promiscuous mode [ 227.784298][ T7288] veth1_macvtap: entered promiscuous mode [ 227.874601][ T7535] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 228.011775][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.069314][ T7288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.107424][ T153] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.124779][ T153] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.143785][ T153] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.239122][ T7567] loop3: detected capacity change from 0 to 2048 [ 228.286635][ T7535] F2FS-fs (loop4): Start checkpoint disabled! [ 228.307318][ T153] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.367618][ T7570] loop2: detected capacity change from 0 to 256 [ 228.450635][ T7570] exfat: Deprecated parameter 'namecase' [ 228.450772][ T7570] exfat: Deprecated parameter 'namecase' [ 228.504737][ T7567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.982224][ T7535] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 229.022251][ T7570] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 229.472331][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.893025][ T122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.893049][ T122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.489728][ T122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.489748][ T122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.682229][ T7601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.580'. [ 233.000767][ T7631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.346708][ T7640] loop2: detected capacity change from 0 to 256 [ 233.830879][ T7623] loop5: detected capacity change from 0 to 40427 [ 233.983086][ T7623] F2FS-fs (loop5): invalid crc value [ 234.093494][ T7651] netlink: 'syz.0.598': attribute type 9 has an invalid length. [ 234.469063][ T5911] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 234.618202][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 234.622318][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.622354][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.622379][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 234.622423][ T5911] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 234.622448][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.789173][ T5911] usb 5-1: config 0 descriptor?? [ 234.884982][ T7623] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 234.897288][ T7660] loop2: detected capacity change from 0 to 4096 [ 234.935135][ T7660] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 235.253161][ T7660] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 235.305298][ T5911] microsoft 0003:045E:07DA.0004: unknown main item tag 0x2 [ 235.305691][ T5911] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 235.305751][ T5911] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 235.305778][ T5911] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 235.305804][ T5911] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 235.305831][ T5911] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 235.305858][ T5911] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 235.305885][ T5911] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 235.305911][ T5911] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 235.393174][ T5911] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input6 [ 235.537869][ T5911] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 235.632293][ T5911] usb 5-1: USB disconnect, device number 5 [ 235.698189][ T5912] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 235.886021][ T7668] fido_id[7668]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 235.917585][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 235.917650][ T5912] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 235.917675][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.195198][ T5912] usb 1-1: config 0 descriptor?? [ 236.195699][ T7623] F2FS-fs (loop5): Start checkpoint disabled! [ 236.196112][ T7666] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 236.270332][ T38] audit: type=1800 audit(1776104588.908:30): pid=7660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.602" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 236.771758][ T5912] wacom 0003:056A:0084.0005: unknown main item tag 0x0 [ 236.798885][ T5912] wacom 0003:056A:0084.0005: reserved main item tag 0xd [ 236.864816][ T5912] wacom 0003:056A:0084.0005: hidraw0: USB HID v7f.fd Device [HID 056a:0084] on usb-dummy_hcd.0-1/input0 [ 237.150411][ T5912] usb 1-1: USB disconnect, device number 5 [ 237.153213][ T7623] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 237.153865][ T7623] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 238.858199][ T5911] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 239.019644][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 239.022311][ T5911] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 239.022378][ T5911] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.022403][ T5911] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.022429][ T5911] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.022455][ T5911] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.022500][ T5911] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 239.022525][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.380309][ T5911] usb 6-1: GET_CAPABILITIES returned 0 [ 239.380361][ T5911] usbtmc 6-1:16.0: can't read capabilities [ 239.868379][ T7697] loop4: detected capacity change from 0 to 32768 [ 239.923831][ T5911] usb 6-1: USB disconnect, device number 2 [ 239.929662][ T7697] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.615 (7697) [ 240.271946][ T7697] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.271983][ T7697] BTRFS info (device loop4): using crc32c checksum algorithm [ 240.693196][ T6001] hid_parser_main: 462 callbacks suppressed [ 240.693222][ T6001] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 240.693250][ T6001] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 240.693273][ T6001] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 240.693296][ T6001] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 240.693318][ T6001] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 240.693340][ T6001] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 240.693361][ T6001] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 240.693383][ T6001] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 240.693405][ T6001] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 240.693426][ T6001] hid-generic 0000:0000:000E.0006: unknown main item tag 0x0 [ 240.980251][ T7697] BTRFS info (device loop4): enabling free space tree [ 240.980282][ T7697] BTRFS info (device loop4): enabling auto defrag [ 240.980302][ T7697] BTRFS info (device loop4): use zlib compression, level 3 [ 240.980323][ T7697] BTRFS info (device loop4): max_inline set to 4096 [ 241.052244][ T7751] loop2: detected capacity change from 0 to 128 [ 241.786743][ T6001] hid-generic 0000:0000:000E.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 242.690422][ T7769] loop2: detected capacity change from 0 to 1024 [ 242.986600][ T7769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.633707][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.004198][ T7782] loop0: detected capacity change from 0 to 64 [ 245.540789][ T5831] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 246.178560][ T7795] loop2: detected capacity change from 0 to 32768 [ 247.312443][ T7823] loop5: detected capacity change from 0 to 2048 [ 247.412368][ T7823] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.113356][ T7829] loop4: detected capacity change from 0 to 256 [ 248.301806][ T7829] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 249.778711][ T7858] loop5: detected capacity change from 0 to 512 [ 249.961781][ T7865] loop2: detected capacity change from 0 to 512 [ 250.188457][ T7865] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.673: invalid indirect mapped block 4294967295 (level 0) [ 250.188500][ T7865] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 250.198161][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 250.198187][ C0] EXT4-fs (loop2): initial error at time 1776104602: ext4_free_branches:1023: inode 16 [ 250.198220][ C0] EXT4-fs (loop2): last error at time 1776104602: ext4_free_branches:1023: inode 16 [ 250.202452][ T7865] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.673: invalid indirect mapped block 4294967295 (level 1) [ 250.202897][ T7865] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 250.405478][ T7865] EXT4-fs (loop2): 1 orphan inode deleted [ 250.405507][ T7865] EXT4-fs (loop2): 1 truncate cleaned up [ 250.471221][ T7865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.777765][ T7844] loop4: detected capacity change from 0 to 32768 [ 251.033161][ T5827] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 251.445388][ T7844] JBD2: Ignoring recovery information on journal [ 251.674322][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 251.674360][ T7884] netlink: 'syz.0.682': attribute type 30 has an invalid length. [ 251.724450][ T7882] loop3: detected capacity change from 0 to 512 [ 251.725623][ T7882] EXT4-fs: inline encryption not supported [ 251.811045][ T7844] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 251.863125][ T7882] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 251.936345][ T7882] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 251.936467][ T7882] System zones: 1-12 [ 251.943983][ T7882] EXT4-fs (loop3): 1 truncate cleaned up [ 251.971451][ T7882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.464127][ T270] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.466285][ T270] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.466337][ T270] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.466376][ T270] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.734568][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.263055][ T5831] ocfs2: Unmounting device (7,4) on (node local) [ 254.077346][ T7867] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 254.119099][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 254.284884][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 254.297708][ T32] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.297744][ T32] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.297769][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 254.297806][ T32] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 254.297830][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.587114][ T32] usb 4-1: config 0 descriptor?? [ 254.980787][ T7592] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.536898][ T32] hid (null): unknown global tag 0xe [ 255.536923][ T32] hid (null): usage index exceeded [ 255.536938][ T32] hid (null): unknown global tag 0xc [ 255.554859][ T32] hid (null): report_id 0 is invalid [ 255.737087][ T7925] loop0: detected capacity change from 0 to 1024 [ 255.756437][ T7925] EXT4-fs: Ignoring removed bh option [ 255.897596][ T7925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.913859][ T32] usb 4-1: USB disconnect, device number 2 [ 256.094157][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.094231][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.027042][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.495455][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.541094][ T7941] loop3: detected capacity change from 0 to 512 [ 257.602602][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.613185][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.640761][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.656186][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.822240][ T7941] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 258.545421][ T7946] loop4: detected capacity change from 0 to 4096 [ 258.846048][ T7941] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.704: Invalid inode bitmap blk 4 in block_group 0 [ 258.846083][ T7941] loop3: lost filesystem error report for type 5 error -117 [ 258.862874][ C0] EXT4-fs (loop3): initial error at time 1776104611: ext4_read_inode_bitmap:139 [ 258.862907][ C0] EXT4-fs (loop3): last error at time 1776104611: ext4_read_inode_bitmap:139 [ 259.142666][ T7941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.514213][ T7951] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.704: bg 0: block 13: invalid block bitmap [ 259.807235][ T3619] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.914001][ T5840] Bluetooth: hci1: command tx timeout [ 260.256295][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.782606][ T7962] loop3: detected capacity change from 0 to 1024 [ 260.917373][ T7962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.965735][ T7962] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.3.708: path /148/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 261.220961][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.824057][ T7976] loop3: detected capacity change from 0 to 1024 [ 262.257259][ T7976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.331080][ T5840] Bluetooth: hci1: command tx timeout [ 262.820590][ T7978] loop0: detected capacity change from 0 to 131072 [ 262.824790][ T7978] F2FS-fs (loop0): Test dummy encryption mode enabled [ 262.852051][ T7978] F2FS-fs (loop0): invalid crc value [ 263.034674][ T7978] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1000000, run fsck to fix. [ 263.039533][ T7978] F2FS-fs (loop0): Bad quota inode 2:16777216 [ 263.039562][ T7978] F2FS-fs (loop0): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 263.039583][ T7978] F2FS-fs (loop0): Cannot turn on quotas: error -22 [ 263.039600][ T7978] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 263.118603][ T7978] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 263.213497][ T7978] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 263.472251][ T3619] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.756352][ T7987] loop4: detected capacity change from 0 to 256 [ 263.800216][ T7987] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 264.184845][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.407098][ T5840] Bluetooth: hci1: command tx timeout [ 264.491641][ T38] audit: type=1800 audit(1776104617.118:31): pid=7987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.717" name="file1" dev="loop4" ino=1048629 res=0 errno=0 [ 264.776632][ T3619] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.350729][ T32] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 265.610643][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 265.630265][ T32] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.630297][ T32] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 265.630321][ T32] usb 5-1: config 0 interface 0 has no altsetting 0 [ 265.645255][ T32] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 265.645346][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.645403][ T32] usb 5-1: Product: syz [ 265.645445][ T32] usb 5-1: Manufacturer: syz [ 265.645490][ T32] usb 5-1: SerialNumber: syz [ 265.720505][ T32] usb 5-1: config 0 descriptor?? [ 266.026140][ T3619] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.303773][ T32] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 266.468163][ T5840] Bluetooth: hci1: command tx timeout [ 266.711812][ T32] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 266.712508][ T32] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 266.792403][ T32] usb 5-1: USB disconnect, device number 6 [ 267.117369][ T7937] chnl_net:caif_netlink_parms(): no params data found [ 267.814472][ T7937] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.815460][ T7937] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.815690][ T7937] bridge_slave_0: entered allmulticast mode [ 267.853528][ T7937] bridge_slave_0: entered promiscuous mode [ 267.885356][ T7937] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.885494][ T7937] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.885758][ T7937] bridge_slave_1: entered allmulticast mode [ 267.919603][ T7937] bridge_slave_1: entered promiscuous mode [ 268.578609][ T8007] loop3: detected capacity change from 0 to 32768 [ 268.827367][ T7937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.267925][ T7937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.289350][ T8007] dmapctl: invalid leafidx 30293 (expected 341) [ 269.289388][ T8007] ERROR: (device loop3): dbAdjCtl: Corrupt dmapctl page [ 269.289388][ T8007] [ 269.289777][ T8007] ERROR: (device loop3): dbDiscardAG: -EIO [ 269.289777][ T8007] [ 269.911192][ T7937] team0: Port device team_slave_0 added [ 270.014024][ T7937] team0: Port device team_slave_1 added [ 270.645693][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 270.700206][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 270.731848][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.785507][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.838915][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.257067][ T3619] bridge_slave_1: left allmulticast mode [ 271.257252][ T3619] bridge_slave_1: left promiscuous mode [ 271.321254][ T3619] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.713002][ T3619] bridge_slave_0: left allmulticast mode [ 271.713034][ T3619] bridge_slave_0: left promiscuous mode [ 271.713494][ T3619] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.808096][ T8048] loop4: detected capacity change from 0 to 128 [ 272.209132][ T8048] FAT-fs (loop4): error, corrupted directory (invalid i_start) [ 272.209152][ T8048] FAT-fs (loop4): Filesystem has been set read-only [ 272.957226][ T5840] Bluetooth: hci6: command tx timeout [ 273.322765][ T3619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.378952][ T3619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.400590][ T3619] bond0 (unregistering): Released all slaves [ 273.439390][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.439406][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.439429][ T7937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.931552][ T8054] loop0: detected capacity change from 0 to 512 [ 273.957829][ T8054] EXT4-fs: Ignoring removed bh option [ 273.965858][ T8054] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 274.064628][ T8054] EXT4-fs (loop0): 1 truncate cleaned up [ 274.073437][ T8054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.174800][ T38] audit: type=1800 audit(1776104626.808:32): pid=8054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.740" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 274.251832][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.251852][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.251882][ T7937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.254725][ T3619] tipc: Disabling bearer [ 274.326296][ T3619] tipc: Left network mode [ 274.678552][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.980770][ T8062] loop4: detected capacity change from 0 to 32768 [ 275.031848][ T5840] Bluetooth: hci6: command tx timeout [ 275.063921][ T8062] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 275.063943][ T8062] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 275.493565][ T8062] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 275.542019][ T5912] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 275.542042][ T5912] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 276.013938][ T7937] hsr_slave_0: entered promiscuous mode [ 276.015430][ T7937] hsr_slave_1: entered promiscuous mode [ 276.016402][ T7937] debugfs: 'hsr0' already exists in 'hsr' [ 276.016427][ T7937] Cannot create hsr debugfs directory [ 276.890915][ T6001] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 277.006360][ T5912] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1464ms [ 277.075876][ T6001] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 277.075923][ T6001] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 277.075952][ T6001] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 277.120464][ T6001] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.120495][ T6001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 277.120517][ T6001] usb 4-1: SerialNumber: syz [ 277.120893][ T5840] Bluetooth: hci6: command tx timeout [ 277.182403][ T5912] gfs2: fsid=syz:syz.0: jid=0: Done [ 277.270853][ T8062] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 277.758613][ T6001] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 277.786887][ T6001] usb 4-1: USB disconnect, device number 3 [ 278.340983][ T8062] gfs2: fsid=syz:syz.0: found 1 quota changes [ 279.023951][ T8090] loop3: detected capacity change from 0 to 2048 [ 279.189378][ T5840] Bluetooth: hci6: command tx timeout [ 279.412537][ T8090] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.202098][ T8090] overlayfs: upper fs needs to support d_type. [ 280.440317][ T8090] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 280.440350][ T8090] overlayfs: failed to set xattr on upper [ 280.440369][ T8090] overlayfs: ...falling back to redirect_dir=nofollow. [ 280.440378][ T8090] overlayfs: ...falling back to index=off. [ 280.440387][ T8090] overlayfs: ...falling back to uuid=null. [ 280.658063][ T5830] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 280.658527][ T5830] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 281.236189][ T5492] 8021q: adding VLAN 0 to HW filter on device eth1 [ 281.863245][ T3619] hsr_slave_0: left promiscuous mode [ 281.970790][ T3619] hsr_slave_1: left promiscuous mode [ 282.472884][ T3619] veth1_macvtap: left promiscuous mode [ 282.473101][ T3619] veth0_macvtap: left promiscuous mode [ 282.473412][ T3619] veth1_vlan: left promiscuous mode [ 282.473575][ T3619] veth0_vlan: left promiscuous mode [ 283.332770][ T8125] sctp: [Deprecated]: syz.0.758 (pid 8125) Use of int in max_burst socket option deprecated. [ 283.332770][ T8125] Use struct sctp_assoc_value instead [ 283.774211][ T8135] loop0: detected capacity change from 0 to 8 [ 283.787312][ T8135] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 283.867222][ T5949] udevd[5949]: incorrect cramfs checksum on /dev/loop0 [ 284.255279][ T8137] loop4: detected capacity change from 0 to 32768 [ 284.282671][ T8137] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.764 (8137) [ 284.323681][ T8137] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 284.323719][ T8137] BTRFS info (device loop4): using crc32c checksum algorithm [ 284.657839][ T8153] loop0: detected capacity change from 0 to 4096 [ 284.831373][ T8137] BTRFS info (device loop4): enabling ssd optimizations [ 284.831402][ T8137] BTRFS info (device loop4): turning on flush-on-commit [ 284.831421][ T8137] BTRFS info (device loop4): enabling free space tree [ 284.831439][ T8137] BTRFS info (device loop4): enabling auto defrag [ 284.831458][ T8137] BTRFS info (device loop4): use lzo compression, level 1 [ 284.831480][ T8137] BTRFS info (device loop4): max_inline set to 4096 [ 285.457130][ T38] audit: type=1800 audit(1776104638.088:33): pid=8137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.764" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 286.725376][ T3619] team0 (unregistering): Port device team_slave_1 removed [ 286.901074][ T8159] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.904504][ T3619] team0 (unregistering): Port device team_slave_0 removed [ 287.101877][ T5831] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 289.734473][ T8032] chnl_net:caif_netlink_parms(): no params data found [ 290.906128][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.992135][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.005582][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.027847][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.061339][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 291.691704][ T5492] 8021q: adding VLAN 0 to HW filter on device eth2 [ 291.806910][ T8188] loop4: detected capacity change from 0 to 131072 [ 291.807806][ T8188] xfs: Deprecated parameter 'ikeep' [ 291.807824][ T8188] XFS: ikeep mount option is deprecated. [ 291.938066][ T8188] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 292.084985][ T8032] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.085097][ T8032] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.085318][ T8032] bridge_slave_0: entered allmulticast mode [ 292.119762][ T8032] bridge_slave_0: entered promiscuous mode [ 292.234709][ T8032] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.234924][ T8032] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.235157][ T8032] bridge_slave_1: entered allmulticast mode [ 292.269371][ T8032] bridge_slave_1: entered promiscuous mode [ 292.447356][ T7937] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 292.470361][ T8188] XFS (loop4): Starting recovery (logdev: internal) [ 292.532112][ T8188] XFS (loop4): Ending recovery (logdev: internal) [ 292.553201][ T8188] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 292.855992][ T8184] loop0: detected capacity change from 0 to 32768 [ 293.123889][ T5835] Bluetooth: hci3: command tx timeout [ 293.229041][ T7937] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 293.367288][ T7937] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 293.404156][ T8184] read_mapping_page failed! [ 293.404172][ T8184] diRead: read_metapage failed [ 293.659138][ T7937] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 293.777958][ T8032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.064110][ T7937] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 294.227686][ T7937] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 294.290283][ T8032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.291784][ T5492] 8021q: adding VLAN 0 to HW filter on device eth3 [ 294.337775][ T8224] netlink: 844 bytes leftover after parsing attributes in process `syz.4.777'. [ 294.383314][ T7937] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 294.477258][ T7937] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 294.953420][ T8032] team0: Port device team_slave_0 added [ 295.129988][ T8032] team0: Port device team_slave_1 added [ 295.188321][ T5835] Bluetooth: hci3: command tx timeout [ 295.240392][ T8242] capability: warning: `syz.4.782' uses deprecated v2 capabilities in a way that may be insecure [ 295.588509][ T5912] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 295.796420][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.796457][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.796498][ T5912] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 295.796522][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.875714][ T5912] usb 5-1: config 0 descriptor?? [ 295.916061][ T8248] loop0: detected capacity change from 0 to 64 [ 295.917470][ T8248] hfs: Bad value for 'umask' [ 296.328880][ T8032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.328899][ T8032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.328929][ T8032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.454701][ T8032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.454720][ T8032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.454759][ T8032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.597817][ T5912] hid-led 0003:1D34:000A.0008: probe with driver hid-led failed with error -71 [ 296.652837][ T5912] usb 5-1: USB disconnect, device number 7 [ 296.873946][ T8250] loop0: detected capacity change from 0 to 32768 [ 297.063812][ T8250] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 297.268227][ T5835] Bluetooth: hci3: command tx timeout [ 297.318296][ T8263] netlink: 'syz.4.788': attribute type 83 has an invalid length. [ 297.320210][ T3619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.545820][ T8250] XFS (loop0): Starting recovery (logdev: internal) [ 297.612841][ T8250] XFS (loop0): Ending recovery (logdev: internal) [ 297.701769][ T8265] loop4: detected capacity change from 0 to 32768 [ 297.715226][ T8265] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.789 (8265) [ 297.738887][ T8265] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 297.738934][ T8265] BTRFS info (device loop4): using crc32c checksum algorithm [ 297.739185][ T8265] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 297.861960][ T38] audit: type=1800 audit(1776104650.488:34): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.786" name="file1" dev="loop0" ino=7430 res=0 errno=0 [ 298.136321][ T8265] BTRFS info (device loop4): rebuilding free space tree [ 298.225559][ T38] audit: type=1800 audit(1776104650.858:35): pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.786" name="file1" dev="loop0" ino=7430 res=0 errno=0 [ 298.644401][ T8265] BTRFS info (device loop4): disabling free space tree [ 298.644559][ T8265] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 298.644597][ T8265] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 298.668296][ T8032] hsr_slave_0: entered promiscuous mode [ 298.671082][ T8032] hsr_slave_1: entered promiscuous mode [ 298.683236][ T8032] debugfs: 'hsr0' already exists in 'hsr' [ 298.683267][ T8032] Cannot create hsr debugfs directory [ 298.759496][ T8265] BTRFS info (device loop4): enabling ssd optimizations [ 298.759533][ T8265] BTRFS info (device loop4): turning on async discard [ 298.759552][ T8265] BTRFS info (device loop4): enabling disk space caching [ 298.759571][ T8265] BTRFS info (device loop4): force clearing of disk cache [ 298.759590][ T8265] BTRFS info (device loop4): use zstd compression, level 3 [ 298.875373][ T5829] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 299.342979][ T3619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.351563][ T5835] Bluetooth: hci3: command tx timeout [ 299.520878][ T5831] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 300.753834][ T8291] loop4: detected capacity change from 0 to 256 [ 300.785930][ T8291] exfat: Deprecated parameter 'utf8' [ 300.817087][ T8291] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 301.101739][ T3619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.126259][ T3619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.287103][ T5492] 8021q: adding VLAN 0 to HW filter on device eth4 [ 302.405901][ T8189] chnl_net:caif_netlink_parms(): no params data found [ 303.361235][ T8189] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.361457][ T8189] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.361682][ T8189] bridge_slave_0: entered allmulticast mode [ 303.363675][ T8189] bridge_slave_0: entered promiscuous mode [ 303.422434][ T8189] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.422564][ T8189] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.422802][ T8189] bridge_slave_1: entered allmulticast mode [ 303.426100][ T8189] bridge_slave_1: entered promiscuous mode [ 303.739303][ T8189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.862999][ T8189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.048452][ T7937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.089916][ T8189] team0: Port device team_slave_0 added [ 304.386588][ T3619] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.470125][ T8189] team0: Port device team_slave_1 added [ 304.627960][ T8032] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 304.670741][ T8032] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.672441][ T8189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.672455][ T8189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.672476][ T8189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.796637][ T8032] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 304.854375][ T8032] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 304.857181][ T8189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.857200][ T8189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.857230][ T8189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.055167][ T8032] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 305.126749][ T8032] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.398201][ T5816] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 305.460459][ T3619] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.580549][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.580582][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.580617][ T5816] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 305.580638][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.630642][ T7937] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.665488][ T8032] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 305.676315][ T5816] usb 1-1: config 0 descriptor?? [ 305.707794][ T8032] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 305.949825][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.950025][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.976018][ T8329] dummy0: entered allmulticast mode [ 306.034841][ T8189] hsr_slave_0: entered promiscuous mode [ 306.036764][ T8189] hsr_slave_1: entered promiscuous mode [ 306.037815][ T8189] debugfs: 'hsr0' already exists in 'hsr' [ 306.037842][ T8189] Cannot create hsr debugfs directory [ 306.343263][ T5816] hid-led 0003:1D34:000A.0009: probe with driver hid-led failed with error -71 [ 306.405300][ T5816] usb 1-1: USB disconnect, device number 6 [ 306.447787][ T3619] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.589763][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.590011][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.682809][ T8326] dummy0: left allmulticast mode [ 306.852490][ T8335] loop4: detected capacity change from 0 to 128 [ 306.988808][ T8335] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 306.989384][ T8335] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 307.054775][ T8335] fscrypt (loop4, inode 12): Unsupported encryption flags (0x09) [ 307.105286][ T3619] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.252361][ T5831] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 307.548659][ T8341] loop4: detected capacity change from 0 to 128 [ 309.236555][ T8344] loop0: detected capacity change from 0 to 32768 [ 310.461094][ T8350] loop4: detected capacity change from 0 to 32768 [ 310.582350][ T8350] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 310.582376][ T8350] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 310.882750][ T8350] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 310.912296][ T5816] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 310.912319][ T5816] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 310.916670][ T8032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.955907][ T3619] bridge_slave_1: left allmulticast mode [ 310.955937][ T3619] bridge_slave_1: left promiscuous mode [ 310.977008][ T3619] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.093984][ T3619] bridge_slave_0: left allmulticast mode [ 311.094017][ T3619] bridge_slave_0: left promiscuous mode [ 311.096643][ T3619] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.240663][ T3619] bridge_slave_1: left allmulticast mode [ 311.240686][ T3619] bridge_slave_1: left promiscuous mode [ 311.240854][ T3619] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.301677][ T5816] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 389ms [ 311.302646][ T5816] gfs2: fsid=syz:syz.0: jid=0: Done [ 311.302775][ T8350] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 311.390245][ T3619] bridge_slave_0: left allmulticast mode [ 311.390279][ T3619] bridge_slave_0: left promiscuous mode [ 311.390532][ T3619] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.428937][ T3619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.539037][ T3619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.580911][ T3619] bond0 (unregistering): Released all slaves [ 314.119506][ T3619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.179232][ T3619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.204371][ T3619] bond0 (unregistering): Released all slaves [ 314.602727][ T8377] loop0: detected capacity change from 0 to 128 [ 314.615499][ T8377] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 314.643938][ T8377] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 314.784270][ T8379] loop4: detected capacity change from 0 to 512 [ 314.865363][ T8189] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 314.876175][ T8379] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 314.952904][ T8379] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.817: invalid indirect mapped block 4294967295 (level 0) [ 314.952948][ T8379] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 314.973323][ T8379] EXT4-fs (loop4): Remounting filesystem read-only [ 314.973721][ T8379] EXT4-fs (loop4): 1 orphan inode deleted [ 314.973740][ T8379] EXT4-fs (loop4): 1 truncate cleaned up [ 315.100764][ T8379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.132307][ T8189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.171920][ T8032] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.292677][ T8189] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 315.494280][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.494646][ T8189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 316.610530][ T8189] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 316.852759][ T8189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 316.856077][ T7937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.087371][ T8189] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 317.372078][ T8189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 317.524736][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.524809][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.916993][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.006618][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.027438][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.057235][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.103588][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.639082][ T1195] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.639233][ T1195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.798766][ T8418] loop0: detected capacity change from 0 to 4096 [ 319.237684][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.237859][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.413592][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.836'. [ 320.468337][ T5835] Bluetooth: hci5: command tx timeout [ 320.683961][ T5835] block nbd0: Receive control failed (result -32) [ 320.793905][ T8446] loop4: detected capacity change from 0 to 16 [ 320.922208][ T8446] erofs (device loop4): mounted with root inode @ nid 36. [ 321.954201][ T3619] hsr_slave_0: left promiscuous mode [ 321.990140][ T3619] hsr_slave_1: left promiscuous mode [ 321.991260][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.991526][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.103570][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.103603][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.328312][ T3619] hsr_slave_0: left promiscuous mode [ 322.368339][ T3619] hsr_slave_1: left promiscuous mode [ 322.369586][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.369613][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.410307][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.410339][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.548258][ T5835] Bluetooth: hci5: command tx timeout [ 322.622165][ T8470] loop0: detected capacity change from 0 to 40427 [ 322.663895][ T8470] F2FS-fs (loop0): invalid crc value [ 322.705052][ T3619] veth1_macvtap: left promiscuous mode [ 322.763631][ T3619] veth0_macvtap: left promiscuous mode [ 322.763913][ T3619] veth1_vlan: left promiscuous mode [ 322.764091][ T3619] veth0_vlan: left promiscuous mode [ 322.900561][ T8470] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 322.961160][ T8470] F2FS-fs (loop0): Start checkpoint disabled! [ 323.004631][ T3619] veth1_macvtap: left promiscuous mode [ 323.004732][ T3619] veth0_macvtap: left promiscuous mode [ 323.006539][ T3619] veth1_vlan: left promiscuous mode [ 323.006683][ T3619] veth0_vlan: left promiscuous mode [ 323.077640][ T8470] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 323.086422][ T8470] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 323.241933][ T3542] kworker/u8:16: attempt to access beyond end of device [ 323.241933][ T3542] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 323.280398][ T3542] CPU: 1 UID: 0 PID: 3542 Comm: kworker/u8:16 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 323.280435][ T3542] Tainted: [L]=SOFTLOCKUP [ 323.280444][ T3542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 323.280460][ T3542] Workqueue: writeback wb_workfn (flush-7:0) [ 323.280515][ T3542] Call Trace: [ 323.280525][ T3542] [ 323.280534][ T3542] dump_stack_lvl+0xe8/0x150 [ 323.280563][ T3542] f2fs_stop_checkpoint+0x383/0x540 [ 323.280615][ T3542] f2fs_write_end_io+0x1274/0x1740 [ 323.280663][ T3542] __submit_merged_bio+0x256/0x6a0 [ 323.280705][ T3542] __submit_merged_write_cond+0x3c9/0x4e0 [ 323.280749][ T3542] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 323.280808][ T3542] f2fs_write_data_pages+0x287e/0x34f0 [ 323.280872][ T3542] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 323.280910][ T3542] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 323.280979][ T3542] ? __lock_acquire+0x6b5/0x2cf0 [ 323.281026][ T3542] ? __lock_acquire+0x6b5/0x2cf0 [ 323.281079][ T3542] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 323.281105][ T3542] do_writepages+0x32e/0x550 [ 323.281138][ T3542] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 323.281164][ T3542] ? reacquire_held_locks+0x104/0x190 [ 323.281197][ T3542] ? rt_spin_lock+0x1e0/0x400 [ 323.281232][ T3542] __writeback_single_inode+0x133/0x10e0 [ 323.281262][ T3542] ? rt_spin_unlock+0x160/0x200 [ 323.281290][ T3542] writeback_sb_inodes+0x97f/0x1980 [ 323.281330][ T3542] ? lockdep_hardirqs_on+0x7a/0x110 [ 323.281370][ T3542] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 323.281435][ T3542] ? rcu_is_watching+0x15/0xb0 [ 323.281477][ T3542] wb_writeback+0x445/0xb00 [ 323.281503][ T3542] ? queue_io+0x2a1/0x440 [ 323.281534][ T3542] ? __pfx_wb_writeback+0x10/0x10 [ 323.281578][ T3542] wb_workfn+0x3fd/0xf20 [ 323.281606][ T3542] ? __lock_acquire+0x6b5/0x2cf0 [ 323.281629][ T3542] ? look_up_lock_class+0x57/0x110 [ 323.281672][ T3542] ? __pfx_wb_workfn+0x10/0x10 [ 323.281696][ T3542] ? finish_task_switch+0x15f/0xbe0 [ 323.281721][ T3542] ? lock_acquire+0x106/0x350 [ 323.281746][ T3542] ? do_raw_spin_lock+0x12b/0x2f0 [ 323.281767][ T3542] ? lock_acquire+0x106/0x350 [ 323.281796][ T3542] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 323.281822][ T3542] ? process_scheduled_works+0xa69/0x1910 [ 323.281847][ T3542] ? process_scheduled_works+0xa69/0x1910 [ 323.281878][ T3542] ? process_scheduled_works+0xa69/0x1910 [ 323.281901][ T3542] ? process_scheduled_works+0xa69/0x1910 [ 323.281926][ T3542] process_scheduled_works+0xb68/0x1910 [ 323.281971][ T3542] ? __pfx_process_scheduled_works+0x10/0x10 [ 323.281994][ T3542] ? assign_work+0x3d5/0x5e0 [ 323.282021][ T3542] worker_thread+0xa90/0x1040 [ 323.282063][ T3542] kthread+0x388/0x470 [ 323.282087][ T3542] ? __pfx_worker_thread+0x10/0x10 [ 323.282105][ T3542] ? __pfx_kthread+0x10/0x10 [ 323.282130][ T3542] ret_from_fork+0x514/0xb70 [ 323.282153][ T3542] ? __pfx_ret_from_fork+0x10/0x10 [ 323.282172][ T3542] ? __switch_to+0xc79/0x1410 [ 323.282203][ T3542] ? __pfx_kthread+0x10/0x10 [ 323.282227][ T3542] ret_from_fork_asm+0x1a/0x30 [ 323.282264][ T3542] [ 323.627358][ T3542] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 324.628333][ T5835] Bluetooth: hci5: command tx timeout [ 324.958704][ T3619] team0 (unregistering): Port device team_slave_1 removed [ 325.019670][ T3619] team0 (unregistering): Port device team_slave_0 removed [ 325.861872][ T3619] team0 (unregistering): Port device team_slave_1 removed [ 325.908948][ T3619] team0 (unregistering): Port device team_slave_0 removed [ 326.184664][ T5492] 8021q: adding VLAN 0 to HW filter on device eth5 [ 326.187263][ T8479] netlink: 40 bytes leftover after parsing attributes in process `syz.0.842'. [ 326.709489][ T5835] Bluetooth: hci5: command tx timeout [ 327.112101][ T8189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.255623][ T8405] chnl_net:caif_netlink_parms(): no params data found [ 327.732652][ T8189] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.199889][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.200034][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.556748][ T8405] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.556894][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.557126][ T8405] bridge_slave_0: entered allmulticast mode [ 328.563864][ T8405] bridge_slave_0: entered promiscuous mode [ 328.625856][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.625995][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.629231][ T8405] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.629563][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.630315][ T8405] bridge_slave_1: entered allmulticast mode [ 328.682576][ T8405] bridge_slave_1: entered promiscuous mode [ 328.736893][ T8032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.027666][ T5492] 8021q: adding VLAN 0 to HW filter on device eth6 [ 329.045813][ T8405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.204438][ T8405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.604577][ T8405] team0: Port device team_slave_0 added [ 329.740298][ T8405] team0: Port device team_slave_1 added [ 329.979583][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.979602][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.979634][ T8405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.039052][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.039067][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.039089][ T8405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.626545][ T8405] hsr_slave_0: entered promiscuous mode [ 330.635929][ T8405] hsr_slave_1: entered promiscuous mode [ 330.637022][ T8405] debugfs: 'hsr0' already exists in 'hsr' [ 330.637049][ T8405] Cannot create hsr debugfs directory [ 330.744933][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.757777][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.776227][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.923695][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.937887][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 331.229211][ T8555] loop0: detected capacity change from 0 to 1024 [ 332.032937][ T12] hfsplus: b-tree write err: -5, ino 25 [ 332.033216][ T12] hfsplus: b-tree write err: -5, ino 4 [ 332.033358][ T12] hfsplus: b-tree write err: -5, ino 2 [ 333.030914][ T5492] 8021q: adding VLAN 0 to HW filter on device eth7 [ 333.268449][ T5840] Bluetooth: hci1: command tx timeout [ 333.878945][ T8189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.971422][ T8610] macvlan0: entered promiscuous mode [ 334.995433][ T8610] netlink: 'syz.0.870': attribute type 1 has an invalid length. [ 335.348332][ T5840] Bluetooth: hci1: command tx timeout [ 335.375259][ T8628] loop4: detected capacity change from 0 to 256 [ 335.432667][ T8628] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 336.125081][ T5492] 8021q: adding VLAN 0 to HW filter on device eth8 [ 336.197412][ T8548] chnl_net:caif_netlink_parms(): no params data found [ 336.357577][ T8639] loop4: detected capacity change from 0 to 64 [ 336.816280][ T8643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.877'. [ 337.320188][ T5831] hfs: node 4:3 still has 1 user(s)! [ 337.428768][ T5840] Bluetooth: hci1: command tx timeout [ 337.885253][ T8653] loop4: detected capacity change from 0 to 512 [ 337.952773][ T8653] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 337.952919][ T8653] System zones: 1-12 [ 338.447343][ T8653] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.881: error while reading EA inode 32 err=-116 [ 338.447372][ T8653] loop4: lost filesystem error report for type 5 error -117 [ 338.458208][ C0] EXT4-fs (loop4): initial error at time 1776104691: ext4_xattr_inode_iget:446 [ 338.458245][ C0] EXT4-fs (loop4): last error at time 1776104691: ext4_xattr_inode_iget:446 [ 338.643702][ T8653] EXT4-fs (loop4): Remounting filesystem read-only [ 338.643821][ T8653] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 338.643978][ T8653] EXT4-fs (loop4): 1 orphan inode deleted [ 338.698324][ T8651] netlink: 296 bytes leftover after parsing attributes in process `syz.0.880'. [ 338.698624][ T8651] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 338.746219][ T8653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.886319][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.303669][ T39] INFO: task syz-executor:5828 blocked for more than 143 seconds. [ 339.303702][ T39] Tainted: G L syzkaller #0 [ 339.303715][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.303727][ T39] task:syz-executor state:D stack:21184 pid:5828 tgid:5828 ppid:1 task_flags:0x400140 flags:0x00080002 [ 339.303790][ T39] Call Trace: [ 339.303796][ T39] [ 339.303807][ T39] __schedule+0x169e/0x54f0 [ 339.303853][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 339.303888][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 339.303921][ T39] ? rt_spin_lock+0x1e0/0x400 [ 339.303945][ T39] ? __pfx___schedule+0x10/0x10 [ 339.303980][ T39] ? schedule+0x90/0x360 [ 339.304007][ T39] schedule+0x164/0x360 [ 339.304034][ T39] fuse_chan_wait_aborted+0x15b/0x250 [ 339.304070][ T39] ? __pfx_fuse_chan_wait_aborted+0x10/0x10 [ 339.304101][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 339.304142][ T39] ? __pfx_fuse_chan_abort+0x10/0x10 [ 339.304175][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 339.304205][ T39] fuse_conn_destroy+0x1e7/0x3e0 [ 339.304234][ T39] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 339.304259][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 339.304285][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 339.304314][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 339.304357][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 339.304394][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 339.304426][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 339.304456][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 339.304495][ T39] fuse_kill_sb_anon+0x1ef/0x270 [ 339.304521][ T39] deactivate_locked_super+0xbc/0x130 [ 339.304546][ T39] cleanup_mnt+0x437/0x4d0 [ 339.304570][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.304595][ T39] task_work_run+0x1d9/0x270 [ 339.304622][ T39] ? __pfx_task_work_run+0x10/0x10 [ 339.304651][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.304669][ T39] exit_to_user_mode_loop+0xed/0x480 [ 339.304689][ T39] ? rcu_is_watching+0x15/0xb0 [ 339.304714][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.304732][ T39] do_syscall_64+0x33e/0xf80 [ 339.304755][ T39] ? trace_irq_disable+0x3b/0x140 [ 339.304774][ T39] ? clear_bhb_loop+0x40/0x90 [ 339.304794][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.304811][ T39] RIP: 0033:0x7f71f18ada57 [ 339.304826][ T39] RSP: 002b:00007fff05dce848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 339.304843][ T39] RAX: 0000000000000000 RBX: 00007f71f1942048 RCX: 00007f71f18ada57 [ 339.304855][ T39] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff05dce900 [ 339.304866][ T39] RBP: 00007fff05dce900 R08: 00007fff05dcf900 R09: 00000000ffffffff [ 339.304880][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff05dcf990 [ 339.304907][ T39] R13: 00007f71f1942048 R14: 000000000002f550 R15: 00007fff05dcf9d0 [ 339.305148][ T39] [ 339.305200][ T39] [ 339.305200][ T39] Showing all locks held in the system: [ 339.305210][ T39] 3 locks held by kworker/1:0/32: [ 339.305220][ T39] #0: ffff88801a053938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 339.305262][ T39] #1: ffffc90000a6fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 339.305301][ T39] #2: ffffffff8f37ef38 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 339.305348][ T39] 1 lock held by khungtaskd/39: [ 339.305357][ T39] #0: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 339.305401][ T39] 3 locks held by kworker/u8:3/57: [ 339.305410][ T39] #0: ffff888031a1f138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 339.305448][ T39] #1: ffffc9000123fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 339.305487][ T39] #2: ffffffff8f37ef38 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680 [ 339.305528][ T39] 2 locks held by kworker/u8:5/122: [ 339.305536][ T39] #0: ffff88801a094138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 339.305575][ T39] #1: ffffc90003017c40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 339.305632][ T39] 2 locks held by kworker/u8:16/3542: [ 339.305641][ T39] #0: ffff88801a094138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 339.305679][ T39] #1: ffffc9000fe57c40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 339.305718][ T39] 6 locks held by kworker/u8:19/3619: [ 339.305726][ T39] #0: ffff88801b296138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa2e/0x1910 [ 339.305764][ T39] #1: ffffc9000fdc7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa69/0x1910 [ 339.305801][ T39] #2: ffffffff8f370620 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 339.305837][ T39] #3: ffff888033794160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 339.305881][ T39] #4: ffff888039e26310 (&devlink->lock_key#8){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 339.305927][ T39] #5: ffffffff8f37ef38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 339.305974][ T39] 2 locks held by dhcpcd/5492: [ 339.305982][ T39] #0: ffff88803eaee928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe2/0xe10 [ 339.306028][ T39] #1: ffffffff8f37ef38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 339.306072][ T39] 2 locks held by getty/5581: [ 339.306186][ T39] #0: ffff8880322760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 339.306254][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 339.306298][ T39] 1 lock held by syz-executor/5828: [ 339.306307][ T39] #0: ffff88804f4f60d0 (&type->s_umount_key#66){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 339.306352][ T39] 2 locks held by syz-executor/5829: [ 339.306362][ T39] #0: ffffffff8e0991d0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x130/0x4a0 [ 339.306399][ T39] #1: ffff888037c75eb0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x181/0x1d50 [ 339.306451][ T39] 1 lock held by syz-executor/8189: [ 339.306460][ T39] #0: ffffffff8f37ef38 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65f/0xe30 [ 339.306505][ T39] 8 locks held by syz-executor/8405: [ 339.306513][ T39] #0: ffff8880334fc480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 339.306560][ T39] #1: ffff88804f737078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 339.306617][ T39] #2: ffff888029474b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 339.306703][ T39] #3: ffffffff8ebe3c38 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 339.306741][ T39] #4: ffff888024803160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 339.306780][ T39] #5: ffff888062244310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 339.306830][ T39] #6: ffffffff8f37ef38 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x13a/0x830 [ 339.306866][ T39] #7: ffff88802ba70f40 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1197/0x22b0 [ 339.306918][ T39] 2 locks held by syz-executor/8548: [ 339.306926][ T39] #0: ffffffff8f8d22f0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 339.306966][ T39] #1: ffffffff8f37ef38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 339.307011][ T39] 3 locks held by syz.4.882/8661: [ 339.307020][ T39] #0: ffff8880605e2478 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 339.307066][ T39] #1: ffffffff8f3ecac0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 339.307110][ T39] #2: ffff88805e0990c8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x13d/0xdb0 [ 339.307157][ T39] [ 339.307161][ T39] ============================================= [ 339.307161][ T39] [ 339.307175][ T39] NMI backtrace for cpu 1 [ 339.307189][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 339.307211][ T39] Tainted: [L]=SOFTLOCKUP [ 339.307216][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 339.307227][ T39] Call Trace: [ 339.307234][ T39] [ 339.307240][ T39] dump_stack_lvl+0xe8/0x150 [ 339.307281][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 339.307307][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 339.307334][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 339.307363][ T39] sys_info+0x135/0x170 [ 339.307386][ T39] watchdog+0xfd3/0x1030 [ 339.307410][ T39] ? watchdog+0x1c9/0x1030 [ 339.307432][ T39] kthread+0x388/0x470 [ 339.307454][ T39] ? __pfx_watchdog+0x10/0x10 [ 339.307470][ T39] ? __pfx_kthread+0x10/0x10 [ 339.307492][ T39] ret_from_fork+0x514/0xb70 [ 339.307512][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 339.307529][ T39] ? __switch_to+0xc79/0x1410 [ 339.307556][ T39] ? __pfx_kthread+0x10/0x10 [ 339.307578][ T39] ret_from_fork_asm+0x1a/0x30 [ 339.307609][ T39] [ 339.307615][ T39] Sending NMI from CPU 1 to CPUs 0: [ 339.307653][ C0] NMI backtrace for cpu 0 [ 339.307672][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 339.307696][ C0] Tainted: [L]=SOFTLOCKUP [ 339.307702][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 339.307713][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 339.307742][ C0] Code: 7b 5a 02 e9 c3 c6 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 4b 14 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 339.307758][ C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 00000246 [ 339.307774][ C0] RAX: 00000000000b5af3 RBX: ffffffff81997a4a RCX: 0000000080000001 [ 339.307787][ C0] RDX: 0000000000000001 RSI: ffffffff8d64d175 RDI: ffffffff8ba83760 [ 339.307800][ C0] RBP: ffffffff8dc07eb0 R08: ffff8880b8833e9b R09: 1ffff110171067d3 [ 339.307813][ C0] R10: dffffc0000000000 R11: ffffed10171067d4 R12: 0000000000000000 [ 339.307826][ C0] R13: 1ffffffff1b9fdd8 R14: 0000000000000000 R15: 1ffffffff1b9fdd8 [ 339.307839][ C0] FS: 0000000000000000(0000) GS:ffff8881260c2000(0000) knlGS:0000000000000000 [ 339.307853][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.307873][ C0] CR2: 00007f2f1f6d1930 CR3: 000000003830e000 CR4: 00000000003526f0 [ 339.307889][ C0] Call Trace: [ 339.307895][ C0] [ 339.307902][ C0] default_idle+0x9/0x20 [ 339.307919][ C0] default_idle_call+0x72/0xb0 [ 339.307936][ C0] do_idle+0x36a/0x5f0 [ 339.307965][ C0] ? lock_acquire+0x106/0x350 [ 339.307995][ C0] ? __pfx_do_idle+0x10/0x10 [ 339.308032][ C0] cpu_startup_entry+0x43/0x60 [ 339.308063][ C0] rest_init+0x2de/0x300 [ 339.308084][ C0] start_kernel+0x38a/0x3e0 [ 339.308106][ C0] x86_64_start_reservations+0x24/0x30 [ 339.308132][ C0] x86_64_start_kernel+0x143/0x1c0 [ 339.308157][ C0] common_startup_64+0x13e/0x147 [ 339.308190][ C0] [ 339.308819][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 339.308839][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 339.308870][ T39] Tainted: [L]=SOFTLOCKUP [ 339.308879][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 339.308893][ T39] Call Trace: [ 339.308902][ T39] [ 339.308911][ T39] vpanic+0x56c/0xa60 [ 339.308940][ T39] ? __pfx___schedule+0x10/0x10 [ 339.308970][ T39] ? __pfx_vpanic+0x10/0x10 [ 339.309006][ T39] panic+0xc5/0xd0 [ 339.309031][ T39] ? __pfx_panic+0x10/0x10 [ 339.309059][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 339.309099][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 339.309135][ T39] watchdog+0x102c/0x1030 [ 339.309160][ T39] ? watchdog+0x1c9/0x1030 [ 339.309181][ T39] kthread+0x388/0x470 [ 339.309204][ T39] ? __pfx_watchdog+0x10/0x10 [ 339.309220][ T39] ? __pfx_kthread+0x10/0x10 [ 339.309242][ T39] ret_from_fork+0x514/0xb70 [ 339.309262][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 339.309280][ T39] ? __switch_to+0xc79/0x1410 [ 339.309306][ T39] ? __pfx_kthread+0x10/0x10 [ 339.309328][ T39] ret_from_fork_asm+0x1a/0x30 [ 339.309360][ T39] [ 339.310086][ T39] Kernel Offset: disabled