last executing test programs: 5.900904692s ago: executing program 4 (id=820): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000100)='./bus\x00', 0x300000a, &(0x7f0000000700)={[{@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@ssd_spread}, {@enospc_debug}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@ssd}, {@nodatasum}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.083169779s ago: executing program 2 (id=830): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000080)={0x18, 0x0, 0x21, 0x8d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) 4.065501681s ago: executing program 2 (id=831): fcntl$notify(0xffffffffffffffff, 0x402, 0x4) unshare(0x2c020400) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 3.659210814s ago: executing program 2 (id=833): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = inotify_init1(0x0) close(r1) 3.182754692s ago: executing program 1 (id=836): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) 3.178397003s ago: executing program 4 (id=837): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 2.760516697s ago: executing program 0 (id=839): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r1 = syz_pidfd_open(r0, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x4000}], 0x1, 0x0, 0x0, 0x0) 2.631276197s ago: executing program 2 (id=840): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f00)=ANY=[@ANYBLOB="1c0000000f14010025bd7000fcdbdf25090045006973736d000000008754f80796ff70b897b60d1c287da15a7324810989e750e7601a2060aa02fddbd10e186f98346924b5e82d64eb4eb0468f68a9be41ee523b066cd4fdf256c06c07"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) 2.559612473s ago: executing program 2 (id=842): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x4, 0x3f, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x1, 0x20, 0x0, 0x3, {{0x43, 0x4, 0x2, 0x3a, 0x10c, 0x64, 0x0, 0x2, 0x4, 0x0, @empty, @private=0xa010102, {[@cipso={0x86, 0xc, 0x3, [{0x2, 0x6, "e2c403ff"}]}, @timestamp_prespec={0x44, 0xc, 0x47, 0x3, 0xf, [{@multicast1, 0x4}]}, @timestamp_addr={0x44, 0x44, 0xc1, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1b}, {@rand_addr=0x64010101, 0x3}, {@multicast2, 0xfffff05c}, {@multicast2, 0x2}, {@local, 0xff}, {@multicast2, 0xd}, {@private=0xa010100, 0xb}]}, @timestamp_prespec={0x44, 0x4c, 0xdf, 0x3, 0x9, [{@broadcast, 0x7}, {@local, 0xb}, {@remote, 0xcdd}, {@rand_addr=0x64010100, 0xf}, {@remote, 0x8}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x27}}, {@local, 0x2}, {@remote, 0xf905}]}, @generic={0x86, 0x9, "60d7ae753c51cb"}, @rr={0x7, 0x13, 0xa1, [@dev={0xac, 0x14, 0x14, 0x2f}, @empty, @empty, @local]}, @timestamp_prespec={0x44, 0x34, 0xfb, 0x3, 0x6, [{@multicast2, 0x1}, {@multicast1, 0x101}, {@rand_addr=0x64010100, 0x1}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010100, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x151}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r3, 0x58, &(0x7f00000003c0)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r3, 0x58, &(0x7f0000000600)}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffff02ffffffffffffffffffffffff200004000a004e2000000401000000006d5a00000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d400", @ANYRES16=r7], 0x21c}}, 0x0) 2.330788172s ago: executing program 4 (id=843): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000240)=0x8000, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6(0xa, 0x1, 0x0) bind$x25(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000080), 0x12) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="070000000000000000000800000008000300", @ANYRES32=r6], 0x1c}}, 0x0) 2.206788201s ago: executing program 1 (id=845): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x7) accept4$x25(r1, 0x0, 0x0, 0x80800) 2.111697609s ago: executing program 1 (id=846): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.016131347s ago: executing program 4 (id=847): open(0x0, 0x141242, 0x40) mount(&(0x7f0000000080)=@filename='./file1\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)='bpf\x00', 0x4800, 0x0) 1.918680055s ago: executing program 1 (id=849): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1.897781917s ago: executing program 4 (id=850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000118000680140004002001000000000000000000"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ffb}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e24, @remote}}, 0x0, 0x0, 0x49, 0x0, "33b86d2a0f0accea4d271492d8350509d1895835550b731e3def36b52a787c6305438d73c636f3c58359623852844ede64dc54e44c92cb365f575df2c7f322eaa3de52d913a247675024babef91473b3"}, 0xd8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) msgget$private(0x0, 0x200) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) signalfd4(r2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{}, &(0x7f0000000580), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.843603231s ago: executing program 2 (id=851): socket$netlink(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x6, 0x0, 0xffffffffffffffff, 0xfffffffdfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f0000000080)=0xa4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) openat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) 1.828731712s ago: executing program 3 (id=852): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r3}) 1.771493596s ago: executing program 0 (id=853): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 1.508139538s ago: executing program 0 (id=854): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) bind$can_raw(r2, &(0x7f0000000080), 0x10) 1.504478778s ago: executing program 3 (id=855): fsmount(0xffffffffffffffff, 0x1, 0x72) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) r0 = semget$private(0x0, 0x6, 0x3b9) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) 1.179261825s ago: executing program 1 (id=856): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000080)={0x18, r0, 0x21, 0x8d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) 1.083046322s ago: executing program 3 (id=857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 1.082631623s ago: executing program 0 (id=858): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080)={[{@errors_remount}, {@noload}, {@nogrpid}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x51f, &(0x7f00000007c0)="$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") mremap(&(0x7f0000a99000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff8000/0x2000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 864.90882ms ago: executing program 1 (id=859): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) fchdir(r0) exit(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 803.993435ms ago: executing program 3 (id=860): open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)='bpf\x00', 0x4800, 0x0) 559.004805ms ago: executing program 0 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 535.566197ms ago: executing program 3 (id=862): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a310000000005000500020000"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0xffff0000, 0x0, 0x10000082}, 0x80) 336.557503ms ago: executing program 0 (id=863): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) 142.427238ms ago: executing program 3 (id=864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") openat(0xffffffffffffff9c, 0x0, 0x107042, 0x64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r6}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x1, 0xfff2}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48090}, 0x0) 0s ago: executing program 4 (id=865): sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x40010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) getpid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) kernel console output (not intermixed with test programs): can1: link becomes ready [ 63.832159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.841037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.848989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.863351][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.886054][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.896845][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.909606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.919235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.928149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.936878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.941424][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 63.946057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.960342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.969150][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.976286][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.984495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.993618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.005001][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.012243][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.019883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.027425][ T4274] Bluetooth: hci1: command 0x041b tx timeout [ 64.027522][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 64.034166][ T4272] Bluetooth: hci2: command 0x041b tx timeout [ 64.039826][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 64.048134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.071330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.081485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.089977][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.097237][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.105736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.116721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.125323][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.132445][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.164377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.172743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.186285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.195349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.205135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.214455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.222383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.229819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.239020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.247719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.261456][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.293928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.303554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.315120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.326592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.337323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.346881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.357032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.366443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.375316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.386017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.409663][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.452614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.466893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.476793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.492772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.509116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.519757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.534526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.544383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.553224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.562702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.572504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.583301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.591462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.601885][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.613599][ T4276] device veth0_vlan entered promiscuous mode [ 64.641934][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.650404][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.672622][ T4265] device veth0_vlan entered promiscuous mode [ 64.701657][ T4276] device veth1_vlan entered promiscuous mode [ 64.711308][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.719473][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.739005][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.762464][ T4265] device veth1_vlan entered promiscuous mode [ 64.784976][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.802124][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.842286][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.868074][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.894920][ T4276] device veth0_macvtap entered promiscuous mode [ 64.919878][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.935398][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.948308][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.959970][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.970431][ T4276] device veth1_macvtap entered promiscuous mode [ 64.985151][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.999549][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.008312][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.016608][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.036300][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.048144][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.066022][ T4265] device veth0_macvtap entered promiscuous mode [ 65.079030][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.098056][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.108248][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.125693][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.143019][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.159851][ T4265] device veth1_macvtap entered promiscuous mode [ 65.176294][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.197067][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.207906][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.229130][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.248915][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.264736][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.275382][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.289493][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.331223][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.343051][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.372470][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.384729][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.397042][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.409628][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.430721][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.438310][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.446147][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.455115][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.473939][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.484607][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.493823][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.502171][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.515217][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.529247][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.543889][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.555189][ T4266] device veth0_vlan entered promiscuous mode [ 65.576198][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.590332][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.605148][ T4265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.614687][ T4265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.625057][ T4265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.635420][ T4265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.668694][ T4266] device veth1_vlan entered promiscuous mode [ 65.698129][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.707183][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.716788][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.807853][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.819540][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.820167][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.835907][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.838489][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.853339][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.862360][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.870196][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.908866][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.919370][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.951979][ T4266] device veth0_macvtap entered promiscuous mode [ 65.962736][ T4267] device veth0_vlan entered promiscuous mode [ 65.989477][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.001722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.010914][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.016858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.026749][ T4272] Bluetooth: hci3: command 0x040f tx timeout [ 66.035019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.044181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.056144][ T4266] device veth1_macvtap entered promiscuous mode [ 66.067983][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.082709][ T2929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.084608][ T4267] device veth1_vlan entered promiscuous mode [ 66.100709][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 66.107663][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 66.114363][ T4272] Bluetooth: hci1: command 0x040f tx timeout [ 66.114378][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 66.122061][ T2929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.135432][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.146471][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.162830][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.171619][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.179705][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.189097][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.200209][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.218504][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.230364][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.244619][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.255510][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.269375][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.282115][ T4278] device veth0_vlan entered promiscuous mode [ 66.289164][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.312379][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.325784][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.337018][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.352728][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.366645][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.377978][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.388430][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.399208][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.411804][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.453509][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.487737][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.525228][ T4278] device veth1_vlan entered promiscuous mode [ 66.558300][ T4267] device veth0_macvtap entered promiscuous mode [ 66.577878][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.602896][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.616163][ T4381] loop2: detected capacity change from 0 to 256 [ 66.625372][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.659413][ T4381] ======================================================= [ 66.659413][ T4381] WARNING: The mand mount option has been deprecated and [ 66.659413][ T4381] and is ignored by this kernel. Remove the mand [ 66.659413][ T4381] option from the mount to silence this warning. [ 66.659413][ T4381] ======================================================= [ 66.710306][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.736317][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.775862][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.801437][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.823317][ T4379] loop3: detected capacity change from 0 to 32768 [ 66.845041][ T4379] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (4379) [ 66.846639][ T4267] device veth1_macvtap entered promiscuous mode [ 66.875705][ T4379] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 66.886452][ T4379] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 66.895893][ T4379] BTRFS info (device loop3): using free space tree [ 66.963199][ T4381] FAT-fs (loop2): Directory bread(block 64) failed [ 66.964542][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.990096][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.994026][ T4381] FAT-fs (loop2): Directory bread(block 65) failed [ 67.008218][ T4381] FAT-fs (loop2): Directory bread(block 66) failed [ 67.015961][ T4381] FAT-fs (loop2): Directory bread(block 67) failed [ 67.023726][ T4381] FAT-fs (loop2): Directory bread(block 68) failed [ 67.026315][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.030450][ T4381] FAT-fs (loop2): Directory bread(block 69) failed [ 67.048519][ T4381] FAT-fs (loop2): Directory bread(block 70) failed [ 67.058143][ T4381] FAT-fs (loop2): Directory bread(block 71) failed [ 67.066216][ T4381] FAT-fs (loop2): Directory bread(block 72) failed [ 67.072580][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.074184][ T4381] FAT-fs (loop2): Directory bread(block 73) failed [ 67.105177][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.115710][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.126515][ T4379] BTRFS info (device loop3): enabling ssd optimizations [ 67.138037][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.203560][ T4379] BTRFS error (device loop3): balance: invalid convert metadata profile raid1c3 [ 67.218778][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.239763][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.260438][ T4276] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 67.291884][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.329768][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.365962][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.381785][ T4278] device veth0_macvtap entered promiscuous mode [ 67.397077][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.408568][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.419587][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.431167][ T26] audit: type=1800 audit(1754037756.677:2): pid=4381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file0" dev="loop2" ino=1048586 res=0 errno=0 [ 67.465831][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.487855][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.504694][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.526835][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.599160][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.609142][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.655042][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.667628][ T4278] device veth1_macvtap entered promiscuous mode [ 67.738174][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.766883][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.780265][ T4413] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 67.787695][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.804057][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.868584][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.884736][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.895554][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.913678][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.927557][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.945402][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.957011][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.975033][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.987398][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.004121][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.011063][ T4414] loop3: detected capacity change from 0 to 32768 [ 68.028659][ T4414] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.6 (4414) [ 68.035954][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.055860][ T4414] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 68.058249][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.066075][ T4414] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 68.085650][ T4414] BTRFS info (device loop3): force zlib compression, level 3 [ 68.093339][ T4414] BTRFS info (device loop3): enabling ssd optimizations [ 68.100398][ T4414] BTRFS info (device loop3): using spread ssd allocation scheme [ 68.108252][ T4414] BTRFS info (device loop3): doing ref verification [ 68.114904][ T4414] BTRFS info (device loop3): force clearing of disk cache [ 68.117418][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.122125][ T4414] BTRFS info (device loop3): turning off barriers [ 68.122188][ T4414] BTRFS info (device loop3): setting nodatasum [ 68.122208][ T4414] BTRFS info (device loop3): not using ssd optimizations [ 68.122221][ T4414] BTRFS info (device loop3): not using spread ssd allocation scheme [ 68.122233][ T4414] BTRFS info (device loop3): using free space tree [ 68.134408][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 68.149877][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.185713][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 68.192108][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 68.198191][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 68.198212][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.201559][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 68.204301][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.226235][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.248561][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.265944][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.276722][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.289630][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.305418][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.324087][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.333820][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.344646][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.353853][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.368876][ T4414] BTRFS info (device loop3): rebuilding free space tree [ 68.599301][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.648437][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.692444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.704667][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.736655][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.776407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.865526][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.897452][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.912442][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.938367][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.963237][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.981521][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.989864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.000018][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.007988][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.031399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.042953][ T4436] loop2: detected capacity change from 0 to 2048 [ 69.056247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.087766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.115071][ T4436] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.458119][ T4445] loop2: detected capacity change from 0 to 256 [ 69.476526][ T4443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 69.498464][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.570807][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.581477][ T4445] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.596971][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.640829][ T4445] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 69.699917][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.719783][ T4445] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 69.773174][ T4276] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 69.920311][ T4451] loop4: detected capacity change from 0 to 2048 [ 69.973077][ T4451] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 69.985415][ T4451] NILFS (loop4): mounting unchecked fs [ 69.999137][ T4449] device veth1_macvtap left promiscuous mode [ 70.006596][ T4449] device macsec0 entered promiscuous mode [ 70.070232][ T4257] udevd[4257]: incorrect nilfs2 checksum on /dev/loop4 [ 70.158553][ T4451] NILFS (loop4): recovery complete [ 70.179583][ T26] audit: type=1326 audit(1754037759.427:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.2.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08eb8eb69 code=0x7ffc0000 [ 70.236764][ T4461] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.279582][ T26] audit: type=1326 audit(1754037759.457:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.2.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08eb8eb69 code=0x7ffc0000 [ 70.355122][ T4465] loop1: detected capacity change from 0 to 764 [ 70.577030][ T4464] loop3: detected capacity change from 0 to 32768 [ 70.600787][ T26] audit: type=1326 audit(1754037759.457:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.2.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff08eb8eb69 code=0x7ffc0000 [ 70.623676][ T26] audit: type=1326 audit(1754037759.457:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.2.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08eb8eb69 code=0x7ffc0000 [ 70.665693][ T4465] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 70.665704][ T26] audit: type=1326 audit(1754037759.457:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.2.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08eb8eb69 code=0x7ffc0000 [ 70.665734][ T26] audit: type=1326 audit(1754037759.457:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.2.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7ff08eb8eb69 code=0x7ffc0000 [ 70.687835][ T4464] JBD2: Ignoring recovery information on journal [ 70.751183][ T26] audit: type=1326 audit(1754037759.457:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.2.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08eb8eb69 code=0x7ffc0000 [ 70.928886][ T4464] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 70.957952][ T26] audit: type=1326 audit(1754037759.457:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.2.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08eb8eb69 code=0x7ffc0000 [ 71.069680][ T26] audit: type=1326 audit(1754037759.457:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.2.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff08eb8eb69 code=0x7ffc0000 [ 71.302524][ T4276] ocfs2: Unmounting device (7,3) on (node local) [ 71.385796][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.392366][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.469411][ T4483] netlink: 'syz.3.21': attribute type 2 has an invalid length. [ 71.505940][ T4338] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.762893][ T4489] mmap: syz.2.23 (4489) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.782181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 71.798180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 71.813180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 71.837177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 71.851552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 71.866183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 71.879181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 71.887640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 71.902190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 71.919188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 72.704700][ T4338] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.716758][ T4338] usb 5-1: config 0 has no interfaces? [ 72.723935][ T4338] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 72.733411][ T4338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.747187][ T4338] usb 5-1: config 0 descriptor?? [ 72.978669][ T14] usb 5-1: USB disconnect, device number 2 [ 73.367284][ T4505] loop0: detected capacity change from 0 to 512 [ 73.422829][ T4505] EXT4-fs: Invalid want_extra_isize 1932 [ 73.488140][ T4259] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.504491][ T4282] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 74.280348][ T4528] loop1: detected capacity change from 0 to 8192 [ 74.331864][ T4528] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.832024][ T4535] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.105966][ T4546] Zero length message leads to an empty skb [ 75.411047][ T4282] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 75.990689][ T951] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.212536][ T951] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.254794][ T951] usb 4-1: config 0 has no interfaces? [ 76.260350][ T951] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 76.316569][ T4560] loop4: detected capacity change from 0 to 32768 [ 76.325602][ T4560] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.54 (4560) [ 76.357280][ T951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.655540][ T7] cfg80211: failed to load regulatory.db [ 76.671409][ T951] usb 4-1: config 0 descriptor?? [ 76.726278][ T4560] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 76.736681][ T4560] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 76.745537][ T4560] BTRFS info (device loop4): using free space tree [ 77.004301][ T4456] usb 4-1: USB disconnect, device number 2 [ 77.055621][ T4564] loop1: detected capacity change from 0 to 8192 [ 77.080429][ T4564] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.343463][ T4560] BTRFS info (device loop4): enabling ssd optimizations [ 77.560421][ T4278] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 79.563979][ T4629] sched: RT throttling activated [ 79.719833][ T4636] loop1: detected capacity change from 0 to 8192 [ 80.247715][ T4636] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.863351][ T4655] netlink: 'syz.1.79': attribute type 2 has an invalid length. [ 81.802296][ T4687] fuse: Bad value for 'fd' [ 82.346269][ T4406] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.360598][ T4453] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.520582][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.536132][ T4693] loop1: detected capacity change from 0 to 32768 [ 82.559379][ T4693] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.90 (4693) [ 82.582769][ T4453] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 82.592670][ T4406] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 82.617400][ T4453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.634782][ T4406] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 82.649808][ T4453] usb 1-1: config 0 descriptor?? [ 82.663448][ T4406] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 82.682639][ T4406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.690821][ T14] usb 4-1: device descriptor read/64, error -71 [ 82.717299][ T4693] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 82.741601][ T4693] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 82.771200][ T4693] BTRFS info (device loop1): enabling disk space caching [ 82.781129][ T4693] BTRFS info (device loop1): doing ref verification [ 82.799716][ T4693] BTRFS info (device loop1): setting nodatacow, compression disabled [ 82.830639][ T4693] BTRFS info (device loop1): force clearing of disk cache [ 82.840891][ T4693] BTRFS info (device loop1): doing ref verification [ 82.847524][ T4693] BTRFS info (device loop1): disk space caching is enabled [ 82.932202][ T4406] usb 5-1: USB disconnect, device number 3 [ 82.960777][ T14] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 83.092004][ T4693] BTRFS info (device loop1): rebuilding free space tree [ 83.120926][ T14] usb 4-1: device descriptor read/64, error -71 [ 83.139894][ T4693] BTRFS info (device loop1): disabling free space tree [ 83.147756][ T4693] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 83.160032][ T4693] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 83.251041][ T14] usb usb4-port1: attempt power cycle [ 83.590391][ T4266] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 83.603802][ T4753] netlink: 'syz.2.101': attribute type 2 has an invalid length. [ 83.660823][ T14] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 83.721300][ T14] usb 4-1: device descriptor read/8, error -71 [ 83.924199][ T4764] fuse: Bad value for 'fd' [ 83.991408][ T14] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 84.031326][ T14] usb 4-1: device descriptor read/8, error -71 [ 84.175149][ T14] usb usb4-port1: unable to enumerate USB device [ 84.528945][ T4777] loop1: detected capacity change from 0 to 40427 [ 84.594249][ T4777] F2FS-fs (loop1): Found nat_bits in checkpoint [ 84.631173][ T4785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.108'. [ 84.650925][ T4777] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 84.684959][ T4777] F2FS-fs (loop1): Inconsistent error blkaddr:5633, sit bitmap:0 [ 84.693221][ T4777] CPU: 0 PID: 4777 Comm: syz.1.106 Not tainted 6.1.147-syzkaller #0 [ 84.701318][ T4777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 84.711417][ T4777] Call Trace: [ 84.714718][ T4777] [ 84.717713][ T4777] dump_stack_lvl+0x168/0x22e [ 84.722523][ T4777] ? show_regs_print_info+0x12/0x12 [ 84.727750][ T4777] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 84.733696][ T4777] f2fs_is_valid_blkaddr+0xc3b/0x1250 [ 84.739252][ T4777] f2fs_map_blocks+0xd37/0x3840 [ 84.744257][ T4777] ? f2fs_do_map_lock+0x70/0x70 [ 84.749150][ T4777] ? xa_load+0x60/0x2e0 [ 84.753346][ T4777] ? page_index+0xe7/0x470 [ 84.757897][ T4777] f2fs_mpage_readpages+0xa58/0x27e0 [ 84.763225][ T4777] ? mark_lock+0x94/0x320 [ 84.767677][ T4777] ? dquot_release_reservation_block+0xa0/0xa0 [ 84.773865][ T4777] ? __mod_lruvec_page_state+0xa1/0x410 [ 84.779548][ T4777] ? f2fs_is_compress_backend_ready+0x97/0x120 [ 84.785745][ T4777] ? f2fs_readahead+0x180/0x380 [ 84.790717][ T4777] ? blk_start_plug+0x94/0x110 [ 84.795699][ T4777] read_pages+0x173/0x840 [ 84.800143][ T4777] ? folio_put+0xd0/0xd0 [ 84.804589][ T4777] ? folio_add_lru+0xd50/0xd50 [ 84.809467][ T4777] ? page_cache_ra_unbounded+0x770/0x770 [ 84.815123][ T4777] ? filemap_add_folio+0x188/0x3c0 [ 84.820254][ T4777] page_cache_ra_unbounded+0x690/0x770 [ 84.825733][ T4777] f2fs_readdir+0x468/0x990 [ 84.830245][ T4777] ? f2fs_fill_dentries+0xcb0/0xcb0 [ 84.835439][ T4777] ? lockdep_hardirqs_on+0x94/0x140 [ 84.840797][ T4777] ? end_current_label_crit_section+0x14b/0x170 [ 84.847049][ T4777] ? preempt_count_add+0x8d/0x190 [ 84.852070][ T4777] ? down_read_killable+0x1cc/0x340 [ 84.857421][ T4777] ? fsnotify_perm+0x248/0x550 [ 84.862481][ T4777] iterate_dir+0x218/0x560 [ 84.866941][ T4777] ? f2fs_fill_dentries+0xcb0/0xcb0 [ 84.872328][ T4777] __se_sys_getdents64+0xe5/0x260 [ 84.877398][ T4777] ? __x64_sys_getdents64+0x80/0x80 [ 84.882596][ T4777] ? filldir+0x700/0x700 [ 84.886872][ T4777] ? lockdep_hardirqs_on+0x94/0x140 [ 84.892079][ T4777] do_syscall_64+0x4c/0xa0 [ 84.896491][ T4777] ? clear_bhb_loop+0x60/0xb0 [ 84.901164][ T4777] ? clear_bhb_loop+0x60/0xb0 [ 84.905831][ T4777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.911906][ T4777] RIP: 0033:0x7f0ffa18eb69 [ 84.916443][ T4777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.936065][ T4777] RSP: 002b:00007f0ffb003038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 84.944476][ T4777] RAX: ffffffffffffffda RBX: 00007f0ffa3b5fa0 RCX: 00007f0ffa18eb69 [ 84.952440][ T4777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 84.960428][ T4777] RBP: 00007f0ffa211df1 R08: 0000000000000000 R09: 0000000000000000 [ 84.968434][ T4777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.976416][ T4777] R13: 0000000000000000 R14: 00007f0ffa3b5fa0 R15: 00007ffde81b0eb8 [ 84.984399][ T4777] [ 85.006634][ T4777] F2FS-fs (loop1): Inconsistent error blkaddr:5633, sit bitmap:0 [ 85.014840][ T4777] CPU: 0 PID: 4777 Comm: syz.1.106 Not tainted 6.1.147-syzkaller #0 [ 85.022857][ T4777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.032936][ T4777] Call Trace: [ 85.036329][ T4777] [ 85.039283][ T4777] dump_stack_lvl+0x168/0x22e [ 85.044123][ T4777] ? show_regs_print_info+0x12/0x12 [ 85.049356][ T4777] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 85.055226][ T4777] f2fs_is_valid_blkaddr+0xc3b/0x1250 [ 85.060628][ T4777] f2fs_get_read_data_page+0x3ed/0x610 [ 85.066175][ T4777] ? f2fs_get_block+0x130/0x130 [ 85.071066][ T4777] ? PageHeadHuge+0x8f/0x1c0 [ 85.075697][ T4777] f2fs_find_data_page+0x9b/0x3a0 [ 85.080771][ T4777] f2fs_readdir+0x47b/0x990 [ 85.085316][ T4777] ? f2fs_fill_dentries+0xcb0/0xcb0 [ 85.090541][ T4777] ? lockdep_hardirqs_on+0x94/0x140 [ 85.095772][ T4777] ? end_current_label_crit_section+0x14b/0x170 [ 85.102217][ T4777] ? preempt_count_add+0x8d/0x190 [ 85.107353][ T4777] ? down_read_killable+0x1cc/0x340 [ 85.110898][ T22] usb 1-1: USB disconnect, device number 2 [ 85.112554][ T4777] ? fsnotify_perm+0x248/0x550 [ 85.123134][ T4777] iterate_dir+0x218/0x560 [ 85.127588][ T4777] ? f2fs_fill_dentries+0xcb0/0xcb0 [ 85.132842][ T4777] __se_sys_getdents64+0xe5/0x260 [ 85.139398][ T4777] ? __x64_sys_getdents64+0x80/0x80 [ 85.145152][ T4777] ? filldir+0x700/0x700 [ 85.149846][ T4777] ? lockdep_hardirqs_on+0x94/0x140 [ 85.155444][ T4777] do_syscall_64+0x4c/0xa0 [ 85.160411][ T4777] ? clear_bhb_loop+0x60/0xb0 [ 85.165304][ T4777] ? clear_bhb_loop+0x60/0xb0 [ 85.170117][ T4777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.176879][ T4777] RIP: 0033:0x7f0ffa18eb69 [ 85.181793][ T4777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.201997][ T4777] RSP: 002b:00007f0ffb003038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 85.210706][ T4777] RAX: ffffffffffffffda RBX: 00007f0ffa3b5fa0 RCX: 00007f0ffa18eb69 [ 85.218795][ T4777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 85.226877][ T4777] RBP: 00007f0ffa211df1 R08: 0000000000000000 R09: 0000000000000000 [ 85.235146][ T4777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.243274][ T4777] R13: 0000000000000000 R14: 00007f0ffa3b5fa0 R15: 00007ffde81b0eb8 [ 85.251645][ T4777] [ 85.290181][ T4266] syz-executor: attempt to access beyond end of device [ 85.290181][ T4266] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 85.447726][ T4779] loop4: detected capacity change from 0 to 32768 [ 85.494280][ T4779] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.107 (4779) [ 85.568724][ T4779] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 85.638093][ T4779] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 85.680927][ T4779] BTRFS info (device loop4): using free space tree [ 85.988339][ T4779] BTRFS info (device loop4): enabling ssd optimizations [ 86.089548][ T4779] BTRFS error (device loop4): balance: invalid convert metadata profile raid1c3 [ 86.238718][ T4278] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 86.280132][ T4833] netlink: 'syz.2.118': attribute type 2 has an invalid length. [ 86.312573][ T4793] loop0: detected capacity change from 0 to 32768 [ 86.374140][ T4793] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.110 (4793) [ 86.551985][ T4793] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 86.581079][ T4338] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.612162][ T4793] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 86.617677][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.119'. [ 86.633506][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.644418][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.649102][ T4793] BTRFS info (device loop0): enabling disk space caching [ 86.654309][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.654364][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.682336][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.692982][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.702888][ T4851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.714277][ T4851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.727883][ T4793] BTRFS info (device loop0): doing ref verification [ 86.735849][ T4851] batman_adv: batadv0: Adding interface: ipvlan2 [ 86.742428][ T4851] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.767789][ T4851] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 86.782151][ T4338] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 86.801435][ T4793] BTRFS info (device loop0): setting nodatacow, compression disabled [ 86.829372][ T4338] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 86.846218][ T4853] netlink: 28 bytes leftover after parsing attributes in process `syz.4.120'. [ 86.860568][ T4793] BTRFS info (device loop0): force clearing of disk cache [ 86.875284][ T4793] BTRFS info (device loop0): doing ref verification [ 86.883633][ T4338] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 86.890726][ T4793] BTRFS info (device loop0): disk space caching is enabled [ 86.925065][ T4338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.098331][ T4793] BTRFS info (device loop0): rebuilding free space tree [ 87.134759][ T4827] loop3: detected capacity change from 0 to 32768 [ 87.172642][ T22] usb 2-1: USB disconnect, device number 2 [ 87.187173][ T4793] BTRFS info (device loop0): disabling free space tree [ 87.214912][ T4793] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 87.255170][ T4827] JBD2: Ignoring recovery information on journal [ 87.274735][ T4793] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 87.340547][ T4338] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.415000][ T4827] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 87.504622][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 87.504636][ T26] audit: type=1800 audit(1754037776.757:16): pid=4827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.116" name="file2" dev="loop3" ino=17056 res=0 errno=0 [ 87.538853][ T4338] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 87.558301][ T4338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.623131][ T4338] usb 5-1: config 0 descriptor?? [ 87.726225][ T4827] syz.3.116 (4827) used greatest stack depth: 19688 bytes left [ 87.781371][ T4267] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 87.797339][ T4276] ocfs2: Unmounting device (7,3) on (node local) [ 88.592473][ T4916] fuse: Bad value for 'fd' [ 89.151336][ T4405] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 89.159879][ T4408] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.350609][ T4408] usb 2-1: Using ep0 maxpacket: 32 [ 89.359256][ T4405] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 89.370292][ T4408] usb 2-1: no configurations [ 89.400566][ T4408] usb 2-1: can't read configurations, error -22 [ 89.407338][ T4405] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 89.427604][ T4405] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 89.437383][ T4405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.649118][ T4408] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.664097][ T4405] usb 4-1: USB disconnect, device number 7 [ 89.800825][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.830585][ T4408] usb 2-1: Using ep0 maxpacket: 32 [ 89.836317][ T4408] usb 2-1: no configurations [ 89.843454][ T4408] usb 2-1: can't read configurations, error -22 [ 89.849982][ T4408] usb usb2-port1: attempt power cycle [ 89.980908][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 89.988156][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.002726][ T14] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 90.012045][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.020128][ T14] usb 1-1: Product: syz [ 90.024712][ T14] usb 1-1: Manufacturer: syz [ 90.029650][ T14] usb 1-1: SerialNumber: syz [ 90.036288][ T14] usb 1-1: config 0 descriptor?? [ 90.044576][ T14] pegasus_notetaker 1-1:0.0: Invalid number of endpoints [ 90.051982][ T14] pegasus_notetaker: probe of 1-1:0.0 failed with error -22 [ 90.086208][ T14] usb 5-1: USB disconnect, device number 4 [ 90.127705][ T4941] fuse: Bad value for 'fd' [ 90.251968][ T4840] usb 1-1: USB disconnect, device number 3 [ 90.262294][ T4408] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 90.312113][ T4408] usb 2-1: Using ep0 maxpacket: 32 [ 90.318097][ T4408] usb 2-1: no configurations [ 90.332123][ T4408] usb 2-1: can't read configurations, error -22 [ 90.500661][ T4408] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 90.552503][ T4408] usb 2-1: Using ep0 maxpacket: 32 [ 90.575564][ T4408] usb 2-1: no configurations [ 90.580209][ T4408] usb 2-1: can't read configurations, error -22 [ 90.615142][ T4408] usb usb2-port1: unable to enumerate USB device [ 91.560600][ T4317] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.742544][ T4317] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 91.754131][ T4317] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 91.763812][ T4317] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 91.778699][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.011533][ T4407] usb 1-1: USB disconnect, device number 4 [ 92.438151][ T5005] capability: warning: `syz.4.168' uses deprecated v2 capabilities in a way that may be insecure [ 92.457057][ T4282] Bluetooth: hci4: SCO packet for unknown connection handle 1 [ 94.639435][ T5010] loop3: detected capacity change from 0 to 8192 [ 94.740437][ T5010] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.400621][ T4405] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.437116][ T5025] loop3: detected capacity change from 0 to 1024 [ 95.536051][ T5025] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 95.590674][ T4405] usb 5-1: Using ep0 maxpacket: 32 [ 95.597443][ T4405] usb 5-1: no configurations [ 95.610563][ T4405] usb 5-1: can't read configurations, error -22 [ 95.749890][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 95.915934][ T4405] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.970450][ T5022] loop1: detected capacity change from 0 to 32768 [ 95.986369][ T5022] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.175 (5022) [ 96.054542][ T5022] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 96.079561][ T5022] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 96.100353][ T5022] BTRFS info (device loop1): using free space tree [ 96.120689][ T4405] usb 5-1: Using ep0 maxpacket: 32 [ 96.126961][ T4405] usb 5-1: no configurations [ 96.136076][ T4405] usb 5-1: can't read configurations, error -22 [ 96.143695][ T4405] usb usb5-port1: attempt power cycle [ 96.288543][ T5022] BTRFS info (device loop1): enabling ssd optimizations [ 96.409154][ T4266] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 97.028170][ T5068] loop0: detected capacity change from 0 to 8192 [ 97.044326][ T4405] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 97.134238][ T5068] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.213138][ T4405] usb 5-1: Using ep0 maxpacket: 32 [ 97.345359][ T4405] usb 5-1: no configurations [ 97.391632][ T4405] usb 5-1: can't read configurations, error -22 [ 97.590679][ T4405] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 97.657975][ T4405] usb 5-1: Using ep0 maxpacket: 32 [ 97.665617][ T4405] usb 5-1: no configurations [ 97.684351][ T4405] usb 5-1: can't read configurations, error -22 [ 97.704096][ T4405] usb usb5-port1: unable to enumerate USB device [ 97.728620][ T4259] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop1 scanned by udevd (4259) [ 98.101974][ T5088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.192'. [ 98.562974][ T5076] loop3: detected capacity change from 0 to 32768 [ 98.646977][ T5076] JBD2: Ignoring recovery information on journal [ 98.666697][ T5103] loop1: detected capacity change from 0 to 256 [ 98.817433][ T5076] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 98.912890][ T5103] FAT-fs (loop1): Directory bread(block 64) failed [ 98.959090][ T26] audit: type=1800 audit(1754037788.207:17): pid=5076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.187" name="file2" dev="loop3" ino=17056 res=0 errno=0 [ 98.970627][ T5103] FAT-fs (loop1): Directory bread(block 65) failed [ 99.024004][ T5103] FAT-fs (loop1): Directory bread(block 66) failed [ 99.068686][ T5103] FAT-fs (loop1): Directory bread(block 67) failed [ 99.076773][ T5103] FAT-fs (loop1): Directory bread(block 68) failed [ 99.087478][ T5103] FAT-fs (loop1): Directory bread(block 69) failed [ 99.096286][ T5103] FAT-fs (loop1): Directory bread(block 70) failed [ 99.117511][ T5103] FAT-fs (loop1): Directory bread(block 71) failed [ 99.130681][ T5103] FAT-fs (loop1): Directory bread(block 72) failed [ 99.140918][ T5103] FAT-fs (loop1): Directory bread(block 73) failed [ 99.234473][ T4276] ocfs2: Unmounting device (7,3) on (node local) [ 99.706025][ T5127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.205'. [ 99.773600][ T5117] loop4: detected capacity change from 0 to 8192 [ 99.831392][ T5117] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.996488][ T4840] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 100.181456][ T4840] usb 2-1: Using ep0 maxpacket: 32 [ 100.189071][ T4840] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.210614][ T4840] usb 2-1: config 0 has no interfaces? [ 100.224080][ T4840] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 100.245526][ T4840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.297741][ T4840] usb 2-1: config 0 descriptor?? [ 100.834498][ T5142] netlink: 32 bytes leftover after parsing attributes in process `syz.3.212'. [ 101.080683][ T4840] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 101.270855][ T4840] usb 5-1: Using ep0 maxpacket: 16 [ 101.278466][ T4840] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 101.294510][ T4840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 101.322263][ T4840] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 101.338014][ T26] audit: type=1326 audit(1754037790.587:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.0.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51bfb8eb69 code=0x7ffc0000 [ 101.365885][ T5158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.218'. [ 101.375707][ T4840] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 101.398458][ T26] audit: type=1326 audit(1754037790.587:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.0.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f51bfb8eb69 code=0x7ffc0000 [ 101.434407][ T4840] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 101.467864][ T4840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.477064][ T26] audit: type=1326 audit(1754037790.587:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.0.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51bfb8eb69 code=0x7ffc0000 [ 101.496432][ T4840] usb 5-1: Product: syz [ 101.501774][ T26] audit: type=1326 audit(1754037790.587:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.0.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f51bfb8eb69 code=0x7ffc0000 [ 101.527015][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.537768][ T4840] usb 5-1: Manufacturer: syz [ 101.549371][ T4840] usb 5-1: SerialNumber: syz [ 101.575364][ T4840] usb 5-1: config 0 descriptor?? [ 101.613485][ T5140] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 101.620456][ T26] audit: type=1326 audit(1754037790.587:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.0.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51bfb8eb69 code=0x7ffc0000 [ 101.627506][ T5140] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 101.643848][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.686918][ T5170] loop3: detected capacity change from 0 to 512 [ 101.740259][ T5170] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 101.746477][ T4840] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 101.748387][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 101.748486][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 101.799806][ T26] audit: type=1326 audit(1754037790.587:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.0.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f51bfb8eb69 code=0x7ffc0000 [ 101.805131][ T5170] System zones: [ 101.822639][ T26] audit: type=1326 audit(1754037790.587:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5159 comm="syz.0.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51bfb8eb69 code=0x7ffc0000 [ 101.913205][ T5170] 0-7 [ 101.951587][ T5170] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.973759][ T14] usb 5-1: USB disconnect, device number 9 [ 101.991017][ T14] mcba_usb 5-1:0.0 can0: device disconnected [ 102.185432][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 102.737825][ T22] usb 2-1: USB disconnect, device number 7 [ 102.808658][ T5182] loop0: detected capacity change from 0 to 32768 [ 102.855656][ T5182] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.225 (5182) [ 102.907209][ T5182] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 102.936422][ T5202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.231'. [ 102.969330][ T5182] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 103.024795][ T5182] BTRFS info (device loop0): enabling disk space caching [ 103.056640][ T5182] BTRFS info (device loop0): doing ref verification [ 103.119394][ T5182] BTRFS info (device loop0): setting nodatacow, compression disabled [ 103.155977][ T5182] BTRFS info (device loop0): force clearing of disk cache [ 103.173636][ T26] audit: type=1326 audit(1754037792.427:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ffa18eb69 code=0x7ffc0000 [ 103.196083][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.225162][ T5182] BTRFS info (device loop0): doing ref verification [ 103.225186][ T5182] BTRFS info (device loop0): disk space caching is enabled [ 103.261944][ T26] audit: type=1326 audit(1754037792.477:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5206 comm="syz.1.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ffa18eb69 code=0x7ffc0000 [ 103.580300][ T5182] BTRFS info (device loop0): rebuilding free space tree [ 103.637858][ T5182] BTRFS info (device loop0): disabling free space tree [ 103.655755][ T5182] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.703420][ T5182] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.815402][ T5182] overlayfs: failed to resolve './bus': -2 [ 104.003130][ T4267] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.245800][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 104.245814][ T26] audit: type=1326 audit(1754037793.497:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 104.282218][ T4259] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop0 scanned by udevd (4259) [ 104.352799][ T26] audit: type=1326 audit(1754037793.497:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 104.391930][ T5272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.244'. [ 104.439267][ T26] audit: type=1326 audit(1754037793.537:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 104.542272][ T26] audit: type=1326 audit(1754037793.537:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 104.667974][ T26] audit: type=1326 audit(1754037793.537:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 104.736452][ T5281] overlayfs: unrecognized mount option "/NÍ°¹°rÏؤ´i !¹>Å’‘¯Ä€©.k­ (£ÛÃ…¹‡=úƒK~¦v„Æ'í³ÏØPݚ˾ºÓ¾Eˆ’gö3Êl.ÿG uÛ­4| °›\[" or missing value [ 104.791918][ T26] audit: type=1326 audit(1754037793.547:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 104.844233][ T5288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 104.890628][ T26] audit: type=1326 audit(1754037793.547:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 104.957333][ T26] audit: type=1326 audit(1754037793.547:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 105.070657][ T26] audit: type=1326 audit(1754037793.547:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 105.168941][ T26] audit: type=1326 audit(1754037793.547:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5266 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 105.434871][ T5304] binder: 5303:5304 ioctl c0306201 0 returned -14 [ 105.466103][ T5306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.261'. [ 105.560578][ T4408] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 105.566126][ T5308] binder: 5303:5308 ioctl c0306201 0 returned -14 [ 105.599166][ T5274] loop1: detected capacity change from 0 to 40427 [ 105.683133][ T5295] loop0: detected capacity change from 0 to 32768 [ 105.707847][ T5295] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 105.719076][ T5295] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 105.728237][ T5295] BTRFS info (device loop0): enabling disk space caching [ 105.738812][ T5295] BTRFS info (device loop0): doing ref verification [ 105.750782][ T4408] usb 4-1: Using ep0 maxpacket: 32 [ 105.760167][ T4408] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.765251][ T5274] F2FS-fs (loop1): Found nat_bits in checkpoint [ 105.779249][ T5295] BTRFS info (device loop0): setting nodatacow, compression disabled [ 105.779732][ T4408] usb 4-1: config 0 has no interfaces? [ 105.824543][ T4408] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 105.825997][ T5295] BTRFS info (device loop0): force clearing of disk cache [ 105.843476][ T4408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.854583][ T4408] usb 4-1: config 0 descriptor?? [ 105.859926][ T5295] BTRFS info (device loop0): doing ref verification [ 105.869812][ T5295] BTRFS info (device loop0): disk space caching is enabled [ 105.991695][ T5274] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 106.048804][ T5274] F2FS-fs (loop1): Inconsistent error blkaddr:5633, sit bitmap:0 [ 106.106252][ T5295] BTRFS info (device loop0): rebuilding free space tree [ 106.135904][ T5274] CPU: 0 PID: 5274 Comm: syz.1.248 Not tainted 6.1.147-syzkaller #0 [ 106.144152][ T5274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.154338][ T5274] Call Trace: [ 106.157741][ T5274] [ 106.160868][ T5274] dump_stack_lvl+0x168/0x22e [ 106.162475][ T5295] BTRFS info (device loop0): disabling free space tree [ 106.165567][ T5274] ? show_regs_print_info+0x12/0x12 [ 106.177692][ T5274] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 106.183577][ T5274] f2fs_is_valid_blkaddr+0xc3b/0x1250 [ 106.189004][ T5274] f2fs_map_blocks+0xd37/0x3840 [ 106.191065][ T5295] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 106.193927][ T5274] ? f2fs_do_map_lock+0x70/0x70 [ 106.209335][ T5274] ? xa_load+0x60/0x2e0 [ 106.213701][ T5274] ? page_index+0xe7/0x470 [ 106.215942][ T5295] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 106.218142][ T5274] f2fs_mpage_readpages+0xa58/0x27e0 [ 106.233864][ T5274] ? mark_lock+0x94/0x320 [ 106.238323][ T5274] ? dquot_release_reservation_block+0xa0/0xa0 [ 106.244479][ T5274] ? __mod_lruvec_page_state+0xa1/0x410 [ 106.250043][ T5274] ? f2fs_is_compress_backend_ready+0x97/0x120 [ 106.256382][ T5274] ? f2fs_readahead+0x180/0x380 [ 106.261589][ T5274] ? blk_start_plug+0x94/0x110 [ 106.266368][ T5274] read_pages+0x173/0x840 [ 106.270703][ T5274] ? folio_put+0xd0/0xd0 [ 106.275075][ T5274] ? folio_add_lru+0xd50/0xd50 [ 106.279856][ T5274] ? page_cache_ra_unbounded+0x770/0x770 [ 106.285739][ T5274] ? filemap_add_folio+0x188/0x3c0 [ 106.290983][ T5274] page_cache_ra_unbounded+0x690/0x770 [ 106.296756][ T5274] f2fs_readdir+0x468/0x990 [ 106.301637][ T5274] ? f2fs_fill_dentries+0xcb0/0xcb0 [ 106.307054][ T5274] ? lockdep_hardirqs_on+0x94/0x140 [ 106.312466][ T5274] ? end_current_label_crit_section+0x14b/0x170 [ 106.319016][ T5274] ? preempt_count_add+0x8d/0x190 [ 106.324077][ T5274] ? down_read_killable+0x1cc/0x340 [ 106.330086][ T5274] ? fsnotify_perm+0x248/0x550 [ 106.335072][ T5274] iterate_dir+0x218/0x560 [ 106.339583][ T5274] ? f2fs_fill_dentries+0xcb0/0xcb0 [ 106.344872][ T5274] __se_sys_getdents64+0xe5/0x260 [ 106.350265][ T5274] ? __x64_sys_getdents64+0x80/0x80 [ 106.355658][ T5274] ? filldir+0x700/0x700 [ 106.359917][ T5274] ? lockdep_hardirqs_on+0x94/0x140 [ 106.365342][ T5274] do_syscall_64+0x4c/0xa0 [ 106.369760][ T5274] ? clear_bhb_loop+0x60/0xb0 [ 106.374438][ T5274] ? clear_bhb_loop+0x60/0xb0 [ 106.379149][ T5274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.385282][ T5274] RIP: 0033:0x7f0ffa18eb69 [ 106.389812][ T5274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.409794][ T5274] RSP: 002b:00007f0ffb003038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 106.418215][ T5274] RAX: ffffffffffffffda RBX: 00007f0ffa3b5fa0 RCX: 00007f0ffa18eb69 [ 106.427084][ T5274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 106.435857][ T5274] RBP: 00007f0ffa211df1 R08: 0000000000000000 R09: 0000000000000000 [ 106.444032][ T5274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.452819][ T5274] R13: 0000000000000000 R14: 00007f0ffa3b5fa0 R15: 00007ffde81b0eb8 [ 106.462442][ T5274] [ 106.589811][ T5295] overlayfs: failed to resolve './bus': -2 [ 106.610889][ T5274] F2FS-fs (loop1): Inconsistent error blkaddr:5633, sit bitmap:0 [ 106.622399][ T5274] CPU: 1 PID: 5274 Comm: syz.1.248 Not tainted 6.1.147-syzkaller #0 [ 106.630528][ T5274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.640743][ T5274] Call Trace: [ 106.644128][ T5274] [ 106.647093][ T5274] dump_stack_lvl+0x168/0x22e [ 106.651864][ T5274] ? show_regs_print_info+0x12/0x12 [ 106.657093][ T5274] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 106.663000][ T5274] f2fs_is_valid_blkaddr+0xc3b/0x1250 [ 106.668544][ T5274] f2fs_get_read_data_page+0x3ed/0x610 [ 106.674229][ T5274] ? f2fs_get_block+0x130/0x130 [ 106.679577][ T5274] ? PageHeadHuge+0x8f/0x1c0 [ 106.684207][ T5274] f2fs_find_data_page+0x9b/0x3a0 [ 106.689269][ T5274] f2fs_readdir+0x47b/0x990 [ 106.693816][ T5274] ? f2fs_fill_dentries+0xcb0/0xcb0 [ 106.699044][ T5274] ? lockdep_hardirqs_on+0x94/0x140 [ 106.704471][ T5274] ? end_current_label_crit_section+0x14b/0x170 [ 106.710804][ T5274] ? preempt_count_add+0x8d/0x190 [ 106.715859][ T5274] ? down_read_killable+0x1cc/0x340 [ 106.721100][ T5274] ? fsnotify_perm+0x248/0x550 [ 106.725979][ T5274] iterate_dir+0x218/0x560 [ 106.730424][ T5274] ? f2fs_fill_dentries+0xcb0/0xcb0 [ 106.735654][ T5274] __se_sys_getdents64+0xe5/0x260 [ 106.740714][ T5274] ? __x64_sys_getdents64+0x80/0x80 [ 106.746125][ T5274] ? filldir+0x700/0x700 [ 106.750756][ T5274] ? lockdep_hardirqs_on+0x94/0x140 [ 106.755989][ T5274] do_syscall_64+0x4c/0xa0 [ 106.760608][ T5274] ? clear_bhb_loop+0x60/0xb0 [ 106.765400][ T5274] ? clear_bhb_loop+0x60/0xb0 [ 106.770174][ T5274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.776112][ T5274] RIP: 0033:0x7f0ffa18eb69 [ 106.780560][ T5274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.800748][ T5274] RSP: 002b:00007f0ffb003038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 106.809508][ T5274] RAX: ffffffffffffffda RBX: 00007f0ffa3b5fa0 RCX: 00007f0ffa18eb69 [ 106.817737][ T5274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 106.826263][ T5274] RBP: 00007f0ffa211df1 R08: 0000000000000000 R09: 0000000000000000 [ 106.834349][ T5274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.842447][ T5274] R13: 0000000000000000 R14: 00007f0ffa3b5fa0 R15: 00007ffde81b0eb8 [ 106.850835][ T5274] [ 106.854151][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.895242][ T4267] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 106.914049][ T4266] syz-executor: attempt to access beyond end of device [ 106.914049][ T4266] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.002060][ T5340] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.024927][ T4408] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 107.231903][ T4408] usb 5-1: Using ep0 maxpacket: 32 [ 107.242719][ T4408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.267242][ T4408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.273523][ T5340] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.288886][ T4408] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 107.303756][ T4408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.321521][ T4408] usb 5-1: config 0 descriptor?? [ 107.333110][ T4408] hub 5-1:0.0: USB hub found [ 107.436669][ T5340] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.544242][ T4408] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 107.566637][ T4408] usbhid 5-1:0.0: can't add hid device: -71 [ 107.575246][ T4408] usbhid: probe of 5-1:0.0 failed with error -71 [ 107.581693][ T5340] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.621508][ T4408] usb 5-1: USB disconnect, device number 10 [ 107.722728][ T5340] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.745609][ T5340] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.766487][ T5340] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.787903][ T5340] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.329387][ T27] usb 4-1: USB disconnect, device number 8 [ 108.673985][ T5375] loop3: detected capacity change from 0 to 32768 [ 108.684581][ T5375] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.280 (5375) [ 108.699486][ T5375] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.709764][ T5375] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 108.718685][ T5375] BTRFS info (device loop3): setting nodatacow, compression disabled [ 108.727116][ T5375] BTRFS info (device loop3): max_inline at 0 [ 108.734001][ T5375] BTRFS info (device loop3): enabling disk space caching [ 108.741325][ T5375] BTRFS info (device loop3): setting datasum, datacow enabled [ 108.748895][ T5375] BTRFS info (device loop3): turning off barriers [ 108.755481][ T5375] BTRFS info (device loop3): turning on flush-on-commit [ 108.762542][ T5375] BTRFS info (device loop3): disabling tree log [ 108.768803][ T5375] BTRFS info (device loop3): force clearing of disk cache [ 108.768871][ T5375] BTRFS info (device loop3): use zlib compression, level 3 [ 108.768908][ T5375] BTRFS info (device loop3): max_inline at 86 [ 108.789559][ T5375] BTRFS info (device loop3): disk space caching is enabled [ 108.813635][ T5375] BTRFS info (device loop3): enabling ssd optimizations [ 108.822950][ T5375] BTRFS info (device loop3): rebuilding free space tree [ 108.838812][ T5375] BTRFS info (device loop3): disabling free space tree [ 108.845900][ T5375] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.855812][ T5375] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 109.024510][ T4276] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.079638][ T5371] loop4: detected capacity change from 0 to 32768 [ 109.137046][ T5371] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.278 (5371) [ 109.219243][ T5407] tipc: Started in network mode [ 109.276315][ T5407] tipc: Node identity ac1414aa, cluster identity 4711 [ 109.305788][ T5407] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 109.357585][ T5371] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 109.369672][ T5407] tipc: Enabled bearer , priority 10 [ 109.399964][ T5371] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 109.442292][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 109.448730][ T5371] BTRFS info (device loop4): enabling disk space caching [ 109.488183][ T5371] BTRFS info (device loop4): doing ref verification [ 109.544838][ T5371] BTRFS info (device loop4): setting nodatacow, compression disabled [ 109.580638][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 109.582020][ T5371] BTRFS info (device loop4): force clearing of disk cache [ 109.629516][ T5371] BTRFS info (device loop4): doing ref verification [ 109.660622][ T5371] BTRFS info (device loop4): disk space caching is enabled [ 109.730699][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 109.870675][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 109.891339][ T5371] BTRFS info (device loop4): rebuilding free space tree [ 110.010820][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 110.033577][ T5371] BTRFS info (device loop4): disabling free space tree [ 110.060868][ T5371] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 110.114387][ T5371] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 110.160710][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 110.302475][ T4408] tipc: Node number set to 2886997162 [ 110.440714][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 110.466472][ T4278] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 110.568522][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 110.568534][ T26] audit: type=1326 audit(1754037799.817:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 110.708019][ T26] audit: type=1326 audit(1754037799.827:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 110.730521][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 110.845560][ T5466] netlink: 'syz.3.304': attribute type 10 has an invalid length. [ 110.855526][ T26] audit: type=1326 audit(1754037799.857:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 110.882907][ T5466] device macvlan0 entered promiscuous mode [ 110.895902][ T5466] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 110.968856][ T26] audit: type=1326 audit(1754037799.857:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 111.070050][ T26] audit: type=1326 audit(1754037799.857:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 111.139012][ T26] audit: type=1326 audit(1754037799.857:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 111.182033][ T4282] Bluetooth: hci3: Malformed Event: 0x13 [ 111.250937][ T26] audit: type=1326 audit(1754037799.857:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 111.273342][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 111.347230][ T5477] netlink: 'syz.4.308': attribute type 21 has an invalid length. [ 111.356370][ T5477] netlink: 132 bytes leftover after parsing attributes in process `syz.4.308'. [ 111.369806][ T5477] netlink: 'syz.4.308': attribute type 1 has an invalid length. [ 111.398006][ T26] audit: type=1326 audit(1754037799.857:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 111.436400][ T26] audit: type=1326 audit(1754037799.857:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 111.474592][ T26] audit: type=1326 audit(1754037799.857:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 111.804045][ T4840] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 112.013685][ T4840] usb 5-1: Using ep0 maxpacket: 32 [ 112.022175][ T4840] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.035381][ T5487] loop1: detected capacity change from 0 to 32768 [ 112.043369][ T5487] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.313 (5487) [ 112.079820][ T4840] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 112.122219][ T4840] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 112.160690][ T4840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.188168][ T5487] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.198875][ T5487] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 112.208085][ T5487] BTRFS info (device loop1): enabling disk space caching [ 112.215875][ T5487] BTRFS info (device loop1): enabling free space tree [ 112.222922][ T5487] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 112.233577][ T5487] BTRFS info (device loop1): trying to use backup root at mount time [ 112.236883][ T4840] usb 5-1: config 0 descriptor?? [ 112.241821][ T5487] BTRFS info (device loop1): disabling tree log [ 112.241874][ T5487] BTRFS info (device loop1): enabling all of the rescue options [ 112.260824][ T5487] BTRFS info (device loop1): ignoring data csums [ 112.267176][ T5487] BTRFS info (device loop1): ignoring bad roots [ 112.273570][ T5487] BTRFS info (device loop1): disabling log replay at mount time [ 112.281536][ T5487] BTRFS info (device loop1): max_inline at 0 [ 112.287554][ T5487] BTRFS error (device loop1): nologreplay must be used with ro mount option [ 112.300056][ T5487] BTRFS error (device loop1): open_ctree failed: -22 [ 112.350010][ T4259] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4259) [ 113.250581][ T4842] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 115.182323][ T4842] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 115.941881][ C1] net_ratelimit: 2 callbacks suppressed [ 115.941899][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 115.977048][ T4405] usb 5-1: USB disconnect, device number 11 [ 115.984808][ T4842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.029488][ T4842] usb 2-1: config 0 descriptor?? [ 116.051072][ T4842] usb 2-1: can't set config #0, error -71 [ 116.093358][ T4842] usb 2-1: USB disconnect, device number 8 [ 116.981186][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 118.020969][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 119.060614][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 119.689864][ T5581] fuse: Bad value for 'fd' [ 119.881174][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 119.881188][ T26] audit: type=1326 audit(1754037809.137:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ffa18eb69 code=0x7ffc0000 [ 119.961272][ T26] audit: type=1326 audit(1754037809.137:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ffa18eb69 code=0x7ffc0000 [ 120.044704][ T26] audit: type=1326 audit(1754037809.137:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ffa18eb69 code=0x7ffc0000 [ 120.089059][ T5602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.362'. [ 120.100614][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 120.123780][ T26] audit: type=1326 audit(1754037809.137:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ffa18eb69 code=0x7ffc0000 [ 120.246519][ T26] audit: type=1326 audit(1754037809.137:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f0ffa18eb69 code=0x7ffc0000 [ 120.321860][ T26] audit: type=1326 audit(1754037809.137:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ffa18eb69 code=0x7ffc0000 [ 120.447378][ T26] audit: type=1326 audit(1754037809.137:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ffa18eb69 code=0x7ffc0000 [ 120.585464][ T26] audit: type=1326 audit(1754037809.137:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0ffa18eb69 code=0x7ffc0000 [ 120.756429][ T26] audit: type=1326 audit(1754037809.137:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ffa18eb69 code=0x7ffc0000 [ 120.908741][ T26] audit: type=1326 audit(1754037809.137:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.1.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ffa18eb69 code=0x7ffc0000 [ 121.140616][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 121.442589][ T5625] overlayfs: missing 'lowerdir' [ 121.479945][ T5630] fuse: Bad value for 'group_id' [ 121.874369][ T5634] loop4: detected capacity change from 0 to 32768 [ 121.889410][ T5634] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.373 (5634) [ 121.906303][ T5634] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 121.916570][ T5634] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 121.925533][ T5634] BTRFS info (device loop4): turning on flush-on-commit [ 121.933756][ T5634] BTRFS info (device loop4): doing ref verification [ 121.940899][ T5634] BTRFS info (device loop4): enabling disk space caching [ 121.948695][ T5634] BTRFS info (device loop4): force clearing of disk cache [ 121.955903][ T5634] BTRFS info (device loop4): turning off barriers [ 121.962425][ T5634] BTRFS info (device loop4): setting nodatacow, compression disabled [ 121.970565][ T5634] BTRFS info (device loop4): enabling ssd optimizations [ 121.977610][ T5634] BTRFS info (device loop4): using spread ssd allocation scheme [ 121.985430][ T5634] BTRFS info (device loop4): force zlib compression, level 3 [ 121.993361][ T5634] BTRFS info (device loop4): disk space caching is enabled [ 122.180607][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 122.328998][ T5634] BTRFS info (device loop4): rebuilding free space tree [ 122.360404][ T5634] BTRFS info (device loop4): disabling free space tree [ 122.367559][ T5634] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 122.377325][ T5634] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 122.438817][ T5665] fuse: Bad value for 'fd' [ 122.755230][ T4278] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 122.824821][ T5668] netlink: zone id is out of range [ 122.925760][ T5671] fuse: Bad value for 'group_id' [ 123.221203][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 123.528718][ T5591] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop4 scanned by udevd (5591) [ 124.250222][ T5699] fuse: Bad value for 'group_id' [ 124.260626][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 124.542028][ T5682] loop4: detected capacity change from 0 to 32768 [ 126.020582][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 126.681864][ T5682] BTRFS error (device loop4): open_ctree failed: -4 [ 127.061900][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 128.130632][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 128.261882][ T5757] loop4: detected capacity change from 0 to 32768 [ 128.269648][ T5757] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.417 (5757) [ 128.325513][ T5757] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.360619][ T5757] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 128.373350][ T5757] BTRFS info (device loop4): enabling disk space caching [ 128.380452][ T5757] BTRFS info (device loop4): doing ref verification [ 128.410850][ T5757] BTRFS info (device loop4): setting nodatacow, compression disabled [ 128.410938][ T4457] libceph: connect (1)[c::]:6789 error -101 [ 128.425992][ T4457] libceph: mon0 (1)[c::]:6789 connect error [ 128.429899][ T5757] BTRFS info (device loop4): force clearing of disk cache [ 128.441929][ T5777] ceph: No mds server is up or the cluster is laggy [ 128.476319][ T5757] BTRFS info (device loop4): doing ref verification [ 128.495749][ T4282] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 128.497850][ T5757] BTRFS info (device loop4): disk space caching is enabled [ 128.638678][ T5757] BTRFS info (device loop4): rebuilding free space tree [ 128.667274][ T5757] BTRFS info (device loop4): disabling free space tree [ 128.681416][ T5757] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 128.697383][ T5757] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.937565][ T4278] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.143540][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 129.183834][ T5819] overlayfs: missing 'workdir' [ 129.683509][ T5834] netlink: 1456 bytes leftover after parsing attributes in process `syz.3.440'. [ 130.084280][ T5823] loop4: detected capacity change from 0 to 40427 [ 130.093882][ T5848] overlayfs: failed to clone upperpath [ 130.175320][ T5823] F2FS-fs (loop4): Found nat_bits in checkpoint [ 130.181935][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 130.305549][ T5823] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 130.367526][ T5823] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0 [ 130.414158][ T5823] CPU: 0 PID: 5823 Comm: syz.4.432 Not tainted 6.1.147-syzkaller #0 [ 130.422203][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.432623][ T5823] Call Trace: [ 130.436096][ T5823] [ 130.439134][ T5823] dump_stack_lvl+0x168/0x22e [ 130.444031][ T5823] ? show_regs_print_info+0x12/0x12 [ 130.449244][ T5823] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 130.455783][ T5823] f2fs_is_valid_blkaddr+0xc3b/0x1250 [ 130.461159][ T5823] f2fs_map_blocks+0xd37/0x3840 [ 130.466117][ T5823] ? f2fs_do_map_lock+0x70/0x70 [ 130.471085][ T5823] ? xa_load+0x60/0x2e0 [ 130.475309][ T5823] ? page_index+0xe7/0x470 [ 130.479768][ T5823] f2fs_mpage_readpages+0xa58/0x27e0 [ 130.485084][ T5823] ? mark_lock+0x94/0x320 [ 130.489464][ T5823] ? dquot_release_reservation_block+0xa0/0xa0 [ 130.495805][ T5823] ? __mod_lruvec_page_state+0xa1/0x410 [ 130.501379][ T5823] ? f2fs_is_compress_backend_ready+0x97/0x120 [ 130.507565][ T5823] ? f2fs_readahead+0x180/0x380 [ 130.512516][ T5823] ? blk_start_plug+0x94/0x110 [ 130.517630][ T5823] read_pages+0x173/0x840 [ 130.521978][ T5823] ? folio_put+0xd0/0xd0 [ 130.526226][ T5823] ? folio_add_lru+0xd50/0xd50 [ 130.530983][ T5823] ? page_cache_ra_unbounded+0x770/0x770 [ 130.536726][ T5823] ? filemap_add_folio+0x188/0x3c0 [ 130.541843][ T5823] page_cache_ra_unbounded+0x690/0x770 [ 130.547412][ T5823] f2fs_readdir+0x468/0x990 [ 130.552012][ T5823] ? f2fs_fill_dentries+0xcb0/0xcb0 [ 130.557233][ T5823] ? lockdep_hardirqs_on+0x94/0x140 [ 130.562437][ T5823] ? end_current_label_crit_section+0x14b/0x170 [ 130.568694][ T5823] ? preempt_count_add+0x8d/0x190 [ 130.573900][ T5823] ? down_read_killable+0x1cc/0x340 [ 130.579106][ T5823] ? fsnotify_perm+0x248/0x550 [ 130.583899][ T5823] iterate_dir+0x218/0x560 [ 130.588318][ T5823] ? f2fs_fill_dentries+0xcb0/0xcb0 [ 130.593520][ T5823] __se_sys_getdents64+0xe5/0x260 [ 130.598740][ T5823] ? __x64_sys_getdents64+0x80/0x80 [ 130.603968][ T5823] ? filldir+0x700/0x700 [ 130.608333][ T5823] ? lockdep_hardirqs_on+0x94/0x140 [ 130.613735][ T5823] do_syscall_64+0x4c/0xa0 [ 130.618261][ T5823] ? clear_bhb_loop+0x60/0xb0 [ 130.622933][ T5823] ? clear_bhb_loop+0x60/0xb0 [ 130.627627][ T5823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.633574][ T5823] RIP: 0033:0x7f1469b8eb69 [ 130.638115][ T5823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.657838][ T5823] RSP: 002b:00007f146a9d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 130.666275][ T5823] RAX: ffffffffffffffda RBX: 00007f1469db5fa0 RCX: 00007f1469b8eb69 [ 130.674762][ T5823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 130.682916][ T5823] RBP: 00007f1469c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 130.691588][ T5823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.699570][ T5823] R13: 0000000000000000 R14: 00007f1469db5fa0 R15: 00007ffe9fb56c48 [ 130.707551][ T5823] [ 131.036269][ T5823] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0 [ 131.060946][ T5823] CPU: 0 PID: 5823 Comm: syz.4.432 Not tainted 6.1.147-syzkaller #0 [ 131.068984][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.079148][ T5823] Call Trace: [ 131.082449][ T5823] [ 131.085393][ T5823] dump_stack_lvl+0x168/0x22e [ 131.090099][ T5823] ? show_regs_print_info+0x12/0x12 [ 131.095349][ T5823] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 131.101290][ T5823] f2fs_is_valid_blkaddr+0xc3b/0x1250 [ 131.106700][ T5823] f2fs_get_read_data_page+0x3ed/0x610 [ 131.112195][ T5823] ? f2fs_get_block+0x130/0x130 [ 131.117259][ T5823] ? PageHeadHuge+0x8f/0x1c0 [ 131.121904][ T5823] f2fs_find_data_page+0x9b/0x3a0 [ 131.126959][ T5823] f2fs_readdir+0x47b/0x990 [ 131.131508][ T5823] ? f2fs_fill_dentries+0xcb0/0xcb0 [ 131.136731][ T5823] ? lockdep_hardirqs_on+0x94/0x140 [ 131.141968][ T5823] ? end_current_label_crit_section+0x14b/0x170 [ 131.148733][ T5823] ? preempt_count_add+0x8d/0x190 [ 131.153870][ T5823] ? down_read_killable+0x1cc/0x340 [ 131.159125][ T5823] ? fsnotify_perm+0x248/0x550 [ 131.163920][ T5823] iterate_dir+0x218/0x560 [ 131.168339][ T5823] ? f2fs_fill_dentries+0xcb0/0xcb0 [ 131.173536][ T5823] __se_sys_getdents64+0xe5/0x260 [ 131.178575][ T5823] ? __x64_sys_getdents64+0x80/0x80 [ 131.183775][ T5823] ? filldir+0x700/0x700 [ 131.188136][ T5823] ? lockdep_hardirqs_on+0x94/0x140 [ 131.193331][ T5823] do_syscall_64+0x4c/0xa0 [ 131.197750][ T5823] ? clear_bhb_loop+0x60/0xb0 [ 131.202418][ T5823] ? clear_bhb_loop+0x60/0xb0 [ 131.207118][ T5823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.213050][ T5823] RIP: 0033:0x7f1469b8eb69 [ 131.217569][ T5823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.237347][ T5823] RSP: 002b:00007f146a9d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 131.245950][ T5823] RAX: ffffffffffffffda RBX: 00007f1469db5fa0 RCX: 00007f1469b8eb69 [ 131.254048][ T5823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 131.260632][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 131.262091][ T5823] RBP: 00007f1469c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 131.277195][ T5823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.285171][ T5823] R13: 0000000000000000 R14: 00007f1469db5fa0 R15: 00007ffe9fb56c48 [ 131.293245][ T5823] [ 131.373821][ T5872] overlayfs: failed to clone upperpath [ 131.418600][ T4278] syz-executor: attempt to access beyond end of device [ 131.418600][ T4278] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.582843][ T5883] overlayfs: failed to clone upperpath [ 132.164679][ T5911] overlayfs: failed to clone upperpath [ 132.340719][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 132.340743][ T5913] loop4: detected capacity change from 0 to 32768 [ 132.355300][ T5913] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.474 (5913) [ 132.370138][ T5913] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 132.380735][ T5913] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 132.389488][ T5913] BTRFS info (device loop4): force zlib compression, level 3 [ 132.397374][ T5913] BTRFS info (device loop4): enabling ssd optimizations [ 132.404585][ T5913] BTRFS info (device loop4): using spread ssd allocation scheme [ 132.412372][ T5913] BTRFS info (device loop4): doing ref verification [ 132.419058][ T5913] BTRFS info (device loop4): force clearing of disk cache [ 132.426395][ T5913] BTRFS info (device loop4): turning off barriers [ 132.432942][ T5913] BTRFS info (device loop4): setting nodatasum [ 132.439213][ T5913] BTRFS info (device loop4): not using ssd optimizations [ 132.446469][ T5913] BTRFS info (device loop4): not using spread ssd allocation scheme [ 132.455074][ T5913] BTRFS info (device loop4): using free space tree [ 132.644369][ T5913] BTRFS info (device loop4): rebuilding free space tree [ 132.823474][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.830387][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.249071][ T4278] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.387655][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 134.421130][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 135.460771][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 136.365680][ T6045] overlayfs: failed to clone upperpath [ 136.500611][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 137.358292][ T6075] overlayfs: failed to clone upperpath [ 137.540607][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 137.747242][ T6087] process 'syz.0.538' launched './file0/file0' with NULL argv: empty string added [ 137.810894][ T4339] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 138.010582][ T4339] usb 5-1: Using ep0 maxpacket: 32 [ 138.022969][ T4339] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 138.050610][ T4339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.080952][ T4339] usb 5-1: config 0 descriptor?? [ 138.098211][ T4339] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 138.300916][ T4339] gspca_vc032x: reg_r err -32 [ 138.305661][ T4339] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.337946][ T4339] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.353173][ T4339] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.370961][ T4339] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.376364][ T4339] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.390565][ T4339] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.416134][ T4339] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.436349][ T4339] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.450554][ T4339] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.460733][ T4339] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.466066][ T4339] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.488663][ T4339] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.499738][ T6108] overlayfs: failed to clone upperpath [ 138.505625][ T4339] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.513280][ T4339] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.519371][ T4339] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.525591][ T4339] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.533024][ T4339] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.538631][ T4339] gspca_vc032x: I2c Bus Busy Wait 00 [ 138.544489][ T4339] gspca_vc032x: Unknown sensor... [ 138.552078][ T4339] vc032x: probe of 5-1:0.0 failed with error -22 [ 138.561510][ T4339] usb 5-1: USB disconnect, device number 12 [ 138.580717][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 139.176440][ T6127] loop4: detected capacity change from 0 to 32768 [ 139.223785][ T6127] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.554 (6127) [ 139.249215][ T6127] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.259836][ T6127] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 139.268608][ T6127] BTRFS info (device loop4): force zlib compression, level 3 [ 139.276152][ T6127] BTRFS info (device loop4): enabling ssd optimizations [ 139.283190][ T6127] BTRFS info (device loop4): using spread ssd allocation scheme [ 139.290917][ T6127] BTRFS info (device loop4): doing ref verification [ 139.297542][ T6127] BTRFS info (device loop4): force clearing of disk cache [ 139.304833][ T6127] BTRFS info (device loop4): turning off barriers [ 139.311382][ T6127] BTRFS info (device loop4): setting nodatasum [ 139.317838][ T6127] BTRFS info (device loop4): not using ssd optimizations [ 139.325040][ T6127] BTRFS info (device loop4): not using spread ssd allocation scheme [ 139.333244][ T6127] BTRFS info (device loop4): using free space tree [ 139.566757][ T6127] BTRFS info (device loop4): rebuilding free space tree [ 139.620720][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 139.810873][ T4278] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.887661][ T6164] overlayfs: failed to clone upperpath [ 140.441036][ T6173] netlink: 48 bytes leftover after parsing attributes in process `syz.0.564'. [ 140.668710][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 141.165100][ T6181] sctp: [Deprecated]: syz.3.568 (pid 6181) Use of int in maxseg socket option. [ 141.165100][ T6181] Use struct sctp_assoc_value instead [ 141.700700][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 141.840251][ T6192] overlayfs: failed to clone upperpath [ 142.154697][ T6195] loop4: detected capacity change from 0 to 32768 [ 142.740623][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 142.935160][ T6203] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.963112][ T6203] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 142.969729][ T6203] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 143.011791][ T6203] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.050648][ T6203] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.057720][ T6203] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 143.097307][ T6203] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.103672][ T6203] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.109679][ T6203] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 143.180092][ T6203] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.204550][ T6214] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 143.239619][ T6203] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.264665][ T6203] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 143.307114][ T6203] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 143.334373][ T6203] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 143.378667][ T6203] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 143.700241][ T6224] overlayfs: failed to clone upperpath [ 143.780614][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 143.876491][ T6232] overlayfs: failed to clone upperpath [ 143.880562][ T4339] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 144.100572][ T4339] usb 5-1: Using ep0 maxpacket: 8 [ 144.107797][ T4339] usb 5-1: config 0 has an invalid interface number: 223 but max is 0 [ 144.141101][ T4339] usb 5-1: config 0 has no interface number 0 [ 144.147248][ T4339] usb 5-1: config 0 interface 223 has no altsetting 0 [ 144.178490][ T4339] usb 5-1: New USB device found, idVendor=0543, idProduct=1923, bcdDevice=2f.36 [ 144.200608][ T4339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.220636][ T4339] usb 5-1: Product: syz [ 144.224893][ T4339] usb 5-1: Manufacturer: syz [ 144.229508][ T4339] usb 5-1: SerialNumber: syz [ 144.263796][ T4339] usb 5-1: config 0 descriptor?? [ 144.417357][ T6248] overlayfs: failed to clone upperpath [ 144.489754][ T4339] usb 5-1: USB disconnect, device number 13 [ 144.820691][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 144.840580][ T4268] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.061495][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.140727][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.220631][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.380619][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.850079][ T6276] overlayfs: failed to clone upperpath [ 145.860601][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 146.540691][ T4339] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 146.746459][ T4339] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 146.758209][ T4339] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 146.782971][ T4339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.828279][ T4339] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 146.900614][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 146.900725][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 147.140602][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 147.220713][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 147.236535][ T6308] overlayfs: failed to clone upperpath [ 147.300775][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 147.460639][ T4268] Bluetooth: hci4: command 0x0406 tx timeout [ 147.856053][ T6324] loop4: detected capacity change from 0 to 512 [ 147.929087][ T6324] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 147.940747][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 148.006868][ T4339] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 148.016197][ T4339] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 148.023253][ T4339] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 148.034652][ T4339] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 148.042597][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 148.042611][ T26] audit: type=1800 audit(1754037837.297:87): pid=6324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.635" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 148.075169][ T4339] usb 5-1: USB disconnect, device number 14 [ 148.149282][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 148.248765][ T6338] overlayfs: failed to clone upperpath [ 148.293446][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'. [ 148.426686][ T6339] device hsr_slave_0 left promiscuous mode [ 148.511263][ T6336] loop4: detected capacity change from 0 to 40427 [ 148.530776][ T6336] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 148.538814][ T6336] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 148.549017][ T6336] F2FS-fs (loop4): invalid crc value [ 148.622318][ T6336] F2FS-fs (loop4): Found nat_bits in checkpoint [ 148.707785][ T6336] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 148.715494][ T6336] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 148.980651][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 149.198252][ T6365] loop4: detected capacity change from 0 to 64 [ 149.634453][ T6373] fuse: Bad value for 'user_id' [ 150.020616][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 150.700602][ T22] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 150.770100][ T6407] fuse: Bad value for 'user_id' [ 150.890594][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 150.897899][ T22] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 150.914998][ T22] usb 5-1: config 179 has no interface number 0 [ 150.929490][ T22] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 150.953783][ T22] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 150.978045][ T22] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 151.001194][ T22] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 151.023041][ T22] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 151.051301][ T22] usb 5-1: config 179 interface 65 has no altsetting 0 [ 151.060654][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 151.073087][ T22] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 151.091514][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.123887][ T22] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5 [ 151.323329][ T22] usb 5-1: USB disconnect, device number 15 [ 151.337757][ T22] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 151.969281][ T26] audit: type=1326 audit(1754037841.217:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 151.995669][ T26] audit: type=1326 audit(1754037841.247:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 152.083928][ T26] audit: type=1326 audit(1754037841.337:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 152.106291][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 152.136563][ T6454] IPVS: stopping backup sync thread 6455 ... [ 152.141944][ T26] audit: type=1326 audit(1754037841.337:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 152.149731][ T6455] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 152.193501][ T26] audit: type=1326 audit(1754037841.337:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.3.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5858eb69 code=0x7ffc0000 [ 152.385118][ T6469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.698'. [ 152.911862][ T6484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.706'. [ 153.140612][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 153.348853][ T6496] netlink: 44 bytes leftover after parsing attributes in process `syz.3.711'. [ 153.607200][ T6498] loop4: detected capacity change from 0 to 40427 [ 153.630583][ T6498] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 153.638538][ T6498] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 153.774727][ T6498] F2FS-fs (loop4): Found nat_bits in checkpoint [ 153.861082][ T6498] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 153.885678][ T6498] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 153.893537][ T6498] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 154.190605][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 155.208271][ T6527] loop4: detected capacity change from 0 to 40427 [ 155.220681][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 155.267288][ T6527] F2FS-fs (loop4): Found nat_bits in checkpoint [ 155.371202][ T6527] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 155.452285][ T4278] syz-executor: attempt to access beyond end of device [ 155.452285][ T4278] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 156.957381][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 158.020663][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 158.972882][ T6623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.765'. [ 159.039233][ T6623] netlink: 172 bytes leftover after parsing attributes in process `syz.3.765'. [ 159.070896][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 159.744926][ T6637] loop4: detected capacity change from 0 to 8 [ 160.008419][ T26] audit: type=1326 audit(1754037849.257:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6644 comm="syz.2.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08eb8eb69 code=0x7ffc0000 [ 160.075881][ T26] audit: type=1326 audit(1754037849.257:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6644 comm="syz.2.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7ff08eb8eb69 code=0x7ffc0000 [ 160.100988][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 160.109811][ T26] audit: type=1326 audit(1754037849.257:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6644 comm="syz.2.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08eb8eb69 code=0x7ffc0000 [ 160.137851][ T26] audit: type=1326 audit(1754037849.257:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6644 comm="syz.2.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7ff08eb8eb69 code=0x7ffc0000 [ 160.172856][ T26] audit: type=1326 audit(1754037849.257:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6644 comm="syz.2.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08eb8eb69 code=0x7ffc0000 [ 160.370571][ T22] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 160.661418][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.717244][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.825775][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.949516][ T22] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.963247][ T6666] syz.2.783[6666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.963349][ T6666] syz.2.783[6666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.084276][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.106036][ T22] usb 5-1: config 0 descriptor?? [ 161.145939][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 161.542438][ T22] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 161.724819][ T22] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 161.837003][ T22] usb 5-1: USB disconnect, device number 16 [ 162.137196][ T6687] fido_id[6687]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 162.180859][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 162.310840][ T26] audit: type=1326 audit(1754037851.547:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08eb8eb69 code=0x7ffc0000 [ 162.375019][ T26] audit: type=1326 audit(1754037851.547:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08eb8eb69 code=0x7ffc0000 [ 162.424913][ T26] audit: type=1326 audit(1754037851.547:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7ff08eb8eb69 code=0x7ffc0000 [ 162.519874][ T26] audit: type=1326 audit(1754037851.547:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08eb8eb69 code=0x7ffc0000 [ 162.710937][ T26] audit: type=1326 audit(1754037851.547:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.2.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08eb8eb69 code=0x7ffc0000 [ 163.102547][ T6713] loop4: detected capacity change from 0 to 1024 [ 163.212054][ T6713] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 163.221035][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 163.365560][ T6719] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.804: Allocating blocks 385-513 which overlap fs metadata [ 163.484869][ T6711] EXT4-fs (loop4): pa ffff88807001ec40: logic 16, phys. 129, len 24 [ 163.493453][ T6711] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 163.745235][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 164.261016][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 165.300730][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 165.487076][ T6776] tmpfs: Bad value for 'nr_inodes' [ 165.691358][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 165.706789][ T6757] loop4: detected capacity change from 0 to 32768 [ 165.737027][ T6757] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.820 (6757) [ 165.797665][ T6757] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 165.831793][ T6757] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 165.875689][ T6757] BTRFS info (device loop4): force zlib compression, level 3 [ 165.915402][ T6757] BTRFS info (device loop4): enabling ssd optimizations [ 165.947955][ T6757] BTRFS info (device loop4): using spread ssd allocation scheme [ 165.981033][ T6757] BTRFS info (device loop4): doing ref verification [ 166.016165][ T6757] BTRFS info (device loop4): force clearing of disk cache [ 166.058735][ T6757] BTRFS info (device loop4): turning off barriers [ 166.082193][ T6757] BTRFS info (device loop4): setting nodatasum [ 166.089602][ T6757] BTRFS info (device loop4): not using ssd optimizations [ 166.109426][ T6757] BTRFS info (device loop4): not using spread ssd allocation scheme [ 166.145910][ T6757] BTRFS info (device loop4): using free space tree [ 166.340737][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 166.627883][ T6757] BTRFS info (device loop4): rebuilding free space tree [ 166.835484][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 166.835499][ T26] audit: type=1326 audit(1754037856.087:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.2.833" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff08eb8eb69 code=0x0 [ 166.941814][ T26] audit: type=1326 audit(1754037856.107:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.0.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51bfb8eb69 code=0x7ffc0000 [ 167.071351][ T26] audit: type=1326 audit(1754037856.137:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.0.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f51bfb8eb69 code=0x7ffc0000 [ 167.179462][ T26] audit: type=1326 audit(1754037856.137:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.0.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51bfb8eb69 code=0x7ffc0000 [ 167.276831][ T4278] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 167.383129][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 168.201167][ T6846] netlink: 'syz.3.844': attribute type 13 has an invalid length. [ 168.329535][ T6846] gretap0: refused to change device tx_queue_len [ 168.346082][ T6846] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 168.420611][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 168.473700][ T6856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.848'. [ 168.576811][ T26] audit: type=1326 audit(1754037857.827:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1469b8eb69 code=0x7ffc0000 [ 168.672496][ T26] audit: type=1326 audit(1754037857.877:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1469b8eb69 code=0x7ffc0000 [ 168.727718][ T26] audit: type=1326 audit(1754037857.877:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f1469b8eb69 code=0x7ffc0000 [ 168.937490][ T26] audit: type=1326 audit(1754037857.877:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1469b8eb69 code=0x7ffc0000 [ 169.050167][ T26] audit: type=1326 audit(1754037857.877:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1469b8eb69 code=0x7ffc0000 [ 169.181384][ T26] audit: type=1326 audit(1754037857.877:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.4.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1469b8eb69 code=0x7ffc0000 [ 169.470612][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 169.959023][ T6892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.862'. [ 170.510637][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 275.490498][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 275.497508][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11/1:b..l [ 275.505808][ C0] (detected by 0, t=10502 jiffies, g=22085, q=35 ncpus=2) [ 275.513030][ C0] task:kworker/u4:1 state:R running task stack:24880 pid:11 ppid:2 flags:0x00004000 [ 275.525139][ C0] Workqueue: bat_events batadv_nc_worker [ 275.530808][ C0] Call Trace: [ 275.534090][ C0] [ 275.537031][ C0] __schedule+0x10ec/0x40b0 [ 275.541564][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 275.547478][ C0] ? lock_chain_count+0x20/0x20 [ 275.552342][ C0] ? preempt_schedule_irq+0xa6/0x150 [ 275.557636][ C0] preempt_schedule_irq+0xb1/0x150 [ 275.562758][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 275.568588][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 275.574409][ C0] irqentry_exit+0x63/0x70 [ 275.578833][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 275.584301][ C0] RIP: 0010:lock_acquire+0x20f/0x490 [ 275.589603][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 275.609220][ C0] RSP: 0018:ffffc90000107ac0 EFLAGS: 00000206 [ 275.615297][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 4fd99a2273622400 [ 275.623362][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c15e0 RDI: ffffffff8adef320 [ 275.631339][ C0] RBP: ffffc90000107bc8 R08: dffffc0000000000 R09: fffffbfff215ba49 [ 275.639317][ C0] R10: fffffbfff215ba49 R11: 1ffffffff215ba48 R12: 0000000000000000 [ 275.647297][ C0] R13: 1ffff92000020f64 R14: 0000000000000246 R15: dffffc0000000000 [ 275.655307][ C0] ? read_lock_is_recursive+0x10/0x10 [ 275.660701][ C0] ? batadv_nc_worker+0xce/0x600 [ 275.665679][ C0] ? batadv_nc_worker+0xce/0x600 [ 275.670646][ C0] ? batadv_nc_worker+0xce/0x600 [ 275.675593][ C0] batadv_nc_worker+0xeb/0x600 [ 275.680368][ C0] ? batadv_nc_worker+0xce/0x600 [ 275.685324][ C0] ? process_one_work+0x7a1/0x1160 [ 275.690555][ C0] process_one_work+0x898/0x1160 [ 275.695526][ C0] ? worker_detach_from_pool+0x240/0x240 [ 275.701170][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 275.706208][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 275.711592][ C0] ? kthread_data+0x4b/0xc0 [ 275.716111][ C0] worker_thread+0xaa2/0x1250 [ 275.720823][ C0] kthread+0x29d/0x330 [ 275.724902][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 275.729929][ C0] ? kthread_blkcg+0xd0/0xd0 [ 275.734533][ C0] ret_from_fork+0x1f/0x30 [ 275.738973][ C0] [ 275.741996][ C0] rcu: rcu_preempt kthread starved for 10527 jiffies! g22085 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 275.753198][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 275.763168][ C0] rcu: RCU grace-period kthread stack dump: [ 275.769142][ C0] task:rcu_preempt state:R running task stack:27848 pid:16 ppid:2 flags:0x00004000 [ 275.779932][ C0] Call Trace: [ 275.783219][ C0] [ 275.786160][ C0] __schedule+0x10ec/0x40b0 [ 275.790709][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 275.795924][ C0] ? _raw_spin_unlock+0x40/0x40 [ 275.800792][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 275.806711][ C0] schedule+0xb9/0x180 [ 275.810797][ C0] schedule_timeout+0x15c/0x280 [ 275.815660][ C0] ? console_conditional_schedule+0x40/0x40 [ 275.821563][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 275.827557][ C0] ? update_process_times+0x1b0/0x1b0 [ 275.832951][ C0] ? prepare_to_swait_event+0x335/0x350 [ 275.838514][ C0] rcu_gp_fqs_loop+0x2f2/0x1310 [ 275.843380][ C0] ? rcu_gp_kthread+0x380/0x380 [ 275.848237][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 275.854228][ C0] ? rcu_gp_init+0x14b0/0x14b0 [ 275.858995][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 275.863853][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 275.869063][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 275.874271][ C0] rcu_gp_kthread+0x95/0x380 [ 275.878874][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 275.884006][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 275.889922][ C0] ? __kthread_parkme+0x162/0x1c0 [ 275.894965][ C0] kthread+0x29d/0x330 [ 275.899055][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 275.904183][ C0] ? kthread_blkcg+0xd0/0xd0 [ 275.908791][ C0] ret_from_fork+0x1f/0x30 [ 275.913228][ C0] [ 275.916249][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 275.922672][ C0] Sending NMI from CPU 0 to CPUs 1: [ 275.927907][ C1] NMI backtrace for cpu 1 [ 275.927922][ C1] CPU: 1 PID: 6863 Comm: syz.2.851 Not tainted 6.1.147-syzkaller #0 [ 275.927936][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.927944][ C1] RIP: 0010:pvclock_clocksource_read+0xcd/0x760 [ 275.927963][ C1] Code: 8d 4f 1d 48 89 4c 24 30 48 c1 e9 03 48 89 4c 24 58 49 bc 00 00 00 00 00 fc ff df 48 89 54 24 38 4c 89 74 24 28 42 0f b6 04 22 <84> c0 0f 85 45 01 00 00 43 0f b6 04 26 84 c0 0f 85 7f 01 00 00 8b [ 275.927975][ C1] RSP: 0018:ffffc900001e0e20 EFLAGS: 00000803 [ 275.927988][ C1] RAX: 0000000000000000 RBX: ffffc900001e0f40 RCX: 1ffffffff1f3e40b [ 275.927999][ C1] RDX: 1ffffffff1f3e408 RSI: ffffffff8f9f205c RDI: ffffffff8f9f2040 [ 275.928009][ C1] RBP: ffffc900001e0fb0 R08: ffffffff8f9f2048 R09: ffffffff8f9f2058 [ 275.928020][ C1] R10: ffffffff8f9f2050 R11: ffffffff8f9f2043 R12: dffffc0000000000 [ 275.928030][ C1] R13: dffffc0000000000 R14: 1ffffffff1f3e408 R15: ffffffff8c5e0988 [ 275.928041][ C1] FS: 00007ff08f9d76c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 275.928054][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.928064][ C1] CR2: 000000110c32dfac CR3: 000000001e707000 CR4: 00000000003506e0 [ 275.928076][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 275.928084][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 275.928093][ C1] Call Trace: [ 275.928099][ C1] [ 275.928105][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 275.928126][ C1] ? sched_clock_cpu+0x6e/0x250 [ 275.928149][ C1] kvm_sched_clock_read+0x14/0x40 [ 275.928168][ C1] sched_clock_cpu+0x6e/0x250 [ 275.928185][ C1] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 275.928200][ C1] ? __irq_exit_rcu+0x13b/0x220 [ 275.928219][ C1] ? irq_exit_rcu+0x20/0x20 [ 275.928241][ C1] irqtime_account_irq+0x6a/0x1b0 [ 275.928263][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 275.928282][ C1] [ 275.928286][ C1] [ 275.928290][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 275.928305][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 275.928325][ C1] Code: f5 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 2e 31 43 f7 48 89 df e8 86 f6 43 f7 e8 91 e8 66 f7 fb bf 01 00 00 00 36 74 37 f7 65 8b 05 07 35 e2 75 85 c0 74 02 5b c3 e8 54 46 e0 [ 275.928336][ C1] RSP: 0018:ffffc9000357fbb8 EFLAGS: 00000286 [ 275.928346][ C1] RAX: 6553c0ba25e0b500 RBX: ffff88807afe5c80 RCX: 6553c0ba25e0b500 [ 275.928357][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c0460 RDI: 0000000000000001 [ 275.928366][ C1] RBP: ffff88807afe6118 R08: dffffc0000000000 R09: ffffed100f5fcb91 [ 275.928377][ C1] R10: ffffed100f5fcb91 R11: 1ffff1100f5fcb90 R12: 1ffff1100f5fcc23 [ 275.928387][ C1] R13: 0000000000000021 R14: dffffc0000000000 R15: 0000000000000000 [ 275.928404][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 275.928422][ C1] get_signal+0x1163/0x1350 [ 275.928456][ C1] arch_do_signal_or_restart+0xb0/0x1230 [ 275.928476][ C1] ? __ia32_sys_rt_sigreturn+0x660/0x790 [ 275.928495][ C1] ? load_gs_index+0x120/0x120 [ 275.928511][ C1] ? get_sigframe_size+0x10/0x10 [ 275.928536][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 275.928556][ C1] exit_to_user_mode_loop+0x70/0x110 [ 275.928575][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 275.928594][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 275.928611][ C1] do_syscall_64+0x58/0xa0 [ 275.928624][ C1] ? clear_bhb_loop+0x60/0xb0 [ 275.928637][ C1] ? clear_bhb_loop+0x60/0xb0 [ 275.928650][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.928670][ C1] RIP: 0033:0x7ff08eb8eb67 [ 275.928681][ C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 275.928693][ C1] RSP: 002b:00007ff08f9d7038 EFLAGS: 00000246 [ 275.928704][ C1] RAX: 0000000000000113 RBX: 00007ff08edb5fa0 RCX: 00007ff08eb8eb69 [ 275.928714][ C1] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 275.928722][ C1] RBP: 00007ff08ec11df1 R08: 0000000000000007 R09: 0000000000000000 [ 275.928731][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.928739][ C1] R13: 0000000000000000 R14: 00007ff08edb5fa0 R15: 00007ffc89bfabc8 [ 275.928756][ C1] [ 276.112325][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available