last executing test programs: 1m25.422824364s ago: executing program 0 (id=1): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r1}, &(0x7f0000000440)=0x8) 1m24.305669328s ago: executing program 0 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000a80)='./file0/file0\x00') 1m23.947932229s ago: executing program 0 (id=11): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) 1m8.656947306s ago: executing program 32 (id=11): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) 1m8.381135612s ago: executing program 1 (id=97): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) 1m8.172919734s ago: executing program 1 (id=100): r0 = socket$packet(0x11, 0x2, 0x300) close(0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom(r0, 0x0, 0x0, 0x102, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 1m7.099317876s ago: executing program 1 (id=105): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x533, &(0x7f0000000880)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oC6GKso43bVT1AOWEKlQJ0SNIqbE3VpTdrJVdl9pEwj1zRaISJzjyB3DuiTsXBDcu5YDEDwtUI3EYNLNjZ2Pv2k7j9Vq7n4802vfmjef7Xpx5b+btel8AE+tKRGxHxExEvB8RC+X+pNzi7e6WH/fZzsOV3Z2HK0lk2Xv/TIryfF/0/EzuUnnOuYj4wXcjfpwcjtve3Lq33GjUH5T5xU5zfbG9uXX9bnN5rb5Wv1+r3Vq6dePNm2/UnqA1c0eWvtScKVNf/fQP26/9NK/WfLmntx2nqdv0yn6c3HREfG8YwUZgqmzPzKgrwueSRsTzEfFycf0vxFTx2zzOO6+dQdUAgCHJsoXIFnrzAMC4S4s5sCStlnMB85Gm1Wp3Du+FuJg2Wu3OtTutjfur3bmyy1FJ79xt1G+Uc4WXo5Lk+aUi/ShfO5C/GRHPRcQvZi8U+epKq7E6yhsfAJhglw6M//+Z7Y7/AMCYO/pjMwDAODL+A8DkMf4DwOQx/gPA5OmO/xee9MeyLPvZMKoDAJwBz/8AMHmM/wAwUb7/7rv5lu2W33+9+sHmxr3WB9dX6+171ebGSnWl9WC9utZqrRXf2dM87nyNVmt96fXY+PDyt9bbncX25tbtZmvjfud28b3et+uV4qjtM2gZADDIcy998uckH5HfulBs0bOWQ2WkNQOGLR11BYCRmRp1BYCR6a721WeBPmDsPXrGf+IPAZgegDFx3B3AXL8/EMqyLBtelYAhu/ol8/8wqcr5/2mfAobJc9z8f7E2sDcJYSxNH13sEQDGWJYlJ13zP056IABwvh1xg3/5LO9DgNEZ8P7/8+Xrb8s3B360evCIj4dZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjf9tb/rZbL/M5HmlarEc8UCwBVkjt3G/UbEfFsRPxptjKb55dGXGcA4Gmlf0vK9b+uLrw6/1jRi5f2kzMR8ZNfvffLD5c7nQd/jJhJ/jW7t7/zcbm/dmywuWG0AAA42t44Xbz2PMh/tvNwZW87y/r8/Tvdu4I87u7OTOzux5+O6eJ1LioRcfHfSZnvSnrmLp7G9kcR8cV+7U9ivpgD6d6yHIyfx37mlOJPnSh++lj8tFygOS3/Lb5wCnWBSfNJ3v+83e/6S+NK8dr/+p8reqinV/Z/+alWdos+8FH8vf5vakD/d+WkMV7//Tvd1IXDZR9FfHk6Yi/2bk//sxc/GRD/1RPG/8tXXnx5UFn264ir0T9+b6zFTnN9sb25df1uc3mtvla/X6vdWrp1482bb9QWiznqxcGjwT/euvbsoLK8/RcHxJ87pv1fH3TSA0+5v/nf+z/82hHxv/lKv/hpvHBE/HxM/MbAFj9u+eLvBj535/FXD7c/Ocnv/9oJ43/6161Dy4YDAKPT3ty6t9xo1B9ISJz/RP5f9hxUo2/i22cVayb6F/38le41faAoyz5XrEE9xmnMugHnwf5FHxH/HXVlAAAAAAAAAAAAAACAvs7iL5ZG3UYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADG1/8DAAD//4wA1F8=") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r0, 0x0, 0xee01) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x4}) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x1f2) fchown(r0, 0x0, 0x0) 1m6.189228159s ago: executing program 1 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000000c0)='./file0/file0/../file0\x00', 0x1) 1m5.411289955s ago: executing program 1 (id=112): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000390400000000fcffffff00000000", @ANYRES32=r1, @ANYBLOB="01980000020800001800128008000100677265000c00028008000700ac141429f84710209f06ec040c55c6774c0b7a8db618e043451a2ba465478fb6694162015df3124ceeb8abcd4b56fcd75cbd9e9ebe2c27883f3cc97f12f853cee0f4c7c4c4f09ff5a38e849458e10ee7d5bd5a4eb0b4de4edd4c3ef9764000d0348e51c73281de1e98f25ca53f3919468842d7d8"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r1, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010102}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}]}}}]}, 0x48}}, 0x4040000) 1m4.600108692s ago: executing program 1 (id=114): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1m3.847649385s ago: executing program 33 (id=114): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 30.882663548s ago: executing program 4 (id=279): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xa27, 0x0, &(0x7f0000000280)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x9}) 30.343601279s ago: executing program 4 (id=284): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1, 0x6, 0x4, 0xe, 0x2, 0x7bf}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 30.136187061s ago: executing program 4 (id=286): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 29.664081708s ago: executing program 4 (id=291): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bc, &(0x7f0000001440)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 29.002336587s ago: executing program 4 (id=295): socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64=r0], 0x18}}, 0x2080) 26.680567222s ago: executing program 4 (id=301): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x9ac, 0xfffffc, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 25.660594601s ago: executing program 34 (id=301): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x9ac, 0xfffffc, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 7.043690261s ago: executing program 6 (id=411): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.677624713s ago: executing program 6 (id=413): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x9, 0x60, {0x60, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020019000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 5.072001966s ago: executing program 6 (id=423): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0xfffffffb, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="000101000040000000", 0x9}], 0x1}, 0x4000) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/6, 0x6}], 0x1) 4.82019006s ago: executing program 6 (id=424): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x1, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105842, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x88) write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'lock', ' ', 'io+mem'}, 0xc) 4.029444306s ago: executing program 5 (id=426): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xea41bece6959855b, "2b415490"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r1, 0x4004480d, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001c00)={{r1, &(0x7f0000000200)='\x00', 0x40200, &(0x7f0000000380)={@align=0xe, {0x9, 0x7, 0x4000000, 0x8}}, 0x401, &(0x7f00000003c0), &(0x7f0000000880)=0x80}, 0x0, &(0x7f0000001b80)}) 3.034720824s ago: executing program 3 (id=431): sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x420, 0x3f4, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x1, 0x9, [0x1, 0x45e4e745, 0x9, 0xfffffffc, 0x0, 0xf5, 0x3, 0xa6, 0x10000, 0x7fffffff, 0x8001, 0xa0, 0x2, 0x0, 0x24, 0x8, 0x40e, 0x0, 0x1c5, 0x7ff, 0x1, 0x6, 0x1, 0x8, 0xfff, 0x10000, 0x5, 0x9, 0x40000, 0x5, 0x0, 0x8, 0x4, 0x1, 0x2, 0x7089, 0xe, 0x6, 0xfffffde8, 0x9, 0x7ff, 0x0, 0x4, 0x9, 0x2e, 0x4cc8, 0x7, 0xa24, 0xfff, 0x1, 0x5edaa154, 0xfffffffa, 0xae, 0xde6, 0xa92, 0x5b008d06, 0x7, 0x95, 0x4, 0xf, 0x3, 0x8001, 0x9, 0xc], [0x5, 0x7, 0xea, 0x400, 0x2, 0x0, 0x23, 0xfffffffc, 0xff, 0x2, 0x6, 0x3, 0x0, 0x100, 0x4, 0x7, 0x3, 0x1, 0x828, 0x7, 0xffffffff, 0x80000000, 0x8000, 0x1cee, 0xa3a, 0x2, 0x2, 0x7, 0x80000001, 0x6aa6, 0x0, 0x511, 0x8001, 0x200, 0x3, 0xea49, 0x6, 0x5, 0x400, 0x6, 0x0, 0xa, 0x8000, 0x4f8, 0x7, 0x3, 0x778, 0x3, 0x3, 0xffffffff, 0x1, 0x7f, 0x4, 0xffff, 0x6, 0x6, 0xd581, 0xd67, 0x5, 0x1, 0x1, 0x3, 0x1, 0x7], [0x800, 0xfffffff7, 0x40, 0x2, 0x8e, 0x0, 0x10001, 0x5, 0xc1f, 0x9, 0x0, 0x5, 0xffffffff, 0x7fff, 0x0, 0x2, 0x2, 0x8, 0x3, 0x9, 0x6, 0x4, 0x8, 0x3, 0x4, 0xf1, 0x2, 0x2, 0x1, 0x6, 0xfffffff8, 0x2, 0x5, 0x4, 0x80, 0x8, 0x3, 0x4, 0xf114, 0xffffffff, 0x4, 0x0, 0x5, 0x5b4, 0xfffffff9, 0x9, 0x8001, 0xd, 0x3, 0x61, 0x7f, 0x3, 0x7, 0x7, 0x2, 0xfff, 0x0, 0xf791, 0x800, 0x1, 0x1, 0x5, 0x6, 0x5], [0xff, 0x1, 0xfffffff8, 0xa5, 0x1, 0x1, 0x8, 0x81, 0x6, 0xf72, 0x7, 0x4, 0x2, 0x7f, 0x4, 0x7, 0x7, 0x7, 0x401, 0x3, 0x6, 0x0, 0x2, 0x5, 0x6, 0x1000, 0x9, 0x100, 0x1, 0x10001, 0x9, 0x8, 0x0, 0x400, 0x1, 0x80000000, 0xffff8001, 0xc0b, 0x6, 0xa884, 0x80000000, 0x6f86187, 0xb, 0x4, 0x4, 0x2, 0x2, 0x6, 0x1, 0x0, 0x9, 0x81, 0x2, 0x7, 0x6, 0x4, 0x6, 0x5, 0x3, 0x3, 0xe, 0x3, 0x1, 0x7]}}, 0x420}, 0x1, 0x0, 0x0, 0x800}, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 2.92153115s ago: executing program 6 (id=432): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.516342083s ago: executing program 3 (id=434): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) syslog(0x3, 0xfffffffffffffffe, 0x13) 2.2390645s ago: executing program 3 (id=435): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 2.131553596s ago: executing program 2 (id=436): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) 2.034775142s ago: executing program 2 (id=437): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000001140)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b", @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0x6, 0x2c1, &(0x7f0000001880)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x449) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 2.013311203s ago: executing program 5 (id=438): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='vegas', 0x5) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c000000120001030000000000000000000600004e2300000000000000000000810000000000000001000000fdffffff0000010000000000", @ANYRES32=0x0, @ANYBLOB="0000a37bc4d24bfede"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) 1.776099397s ago: executing program 5 (id=439): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x1048}, {r0, 0x1}], 0x3, 0x0, 0x0, 0x0) 1.726785779s ago: executing program 2 (id=440): sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="e4bd9dd29bc6a30e7b0039b6622f6b2467f17fc7d52a61e1ddda34e1d18c63f037bd3ac0cbad5fc38ebc8ea06f4dfead8a5c0ceae4ae162d16276c08a8515366a07b9c8a4e398610ce1d9562e1cd7a7270e2558e12d18711fb1d28f8107a59a9d2c2c9f5b5f4f265251893c61c499dd19c42a5efa06499", 0x77}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900320003003000000060000000400c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.414512567s ago: executing program 2 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, r2, 0x1, 0x70bd2d, 0x21dfdc01, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80001}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40810) 1.257640597s ago: executing program 2 (id=442): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x107642, 0x85) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1d31, &(0x7f0000000040)={0x0, 0xc8a3, 0xc001, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x63a, 0x7721, 0x16, 0x0, 0x0) 1.20401453s ago: executing program 3 (id=443): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, 0x0) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000080)={[{@mblk_io_submit}, {@grpjquota}]}, 0x1, 0x732, &(0x7f0000000780)="$eJzs3U9rXFUUAPDzXjNObKOJoOIfkIpixdJJE1tKV9aF6KYYKbhNQzIJMZO+mJmpTegiXbkVURTc6Hdw40px7QfwKyiIlrioq8ibP2mbzrRjnWRK5veDN3Pue284986EeyB3mBvA0DqeP6QRz0fETBIx3jqfREShEY1EXGjet33z+nx+JLGzc+nPpHFP3o47XpM7FhFbEfFcRPxciDiZ3pu3urG5MleplNdb7cna6tpkdWPz1PLq3FJ5qXzl/Jkz02fOnT1/vn9jfeP9D58tnX1n7IeZxdkTU799n8SFGGtdu3Mc/dR8Twr5W3iXd/cj2QAlg+4AD2UkIo60np+J8TjSiACAw2ynGLEDAAyZRP0HgCHT/j9Ae21vv9bBuvnj7YgY7ZR/pLVmNtpYhzy6ndy1MpFExMRBdpRDaetGRFyeOH7v319yz5rtf3W6Hx1kX/2Uzz8XOs0/6e78Ex3mn9H2dyf+p+7z3+38R7rMfzM95njvxXrWNf+NiBdGOuVPdvMnXfJf7jH/j7cW/ul2bee7iNc61p/krlzdvx8yubhcKZ9uPnbOcbx+/aP7jf9ol/xbDxj/Wo/jH/v85V+27pP/9Vfu//l3yp/XxM96zP9p4a0vu13L8y90Gf+DPv9ve8x/7qWPN3u8FQAAAAAAAAAAAAAAAAAAAAAAAAAAAA6FNCLGIklLu3GalkrNPbyfjqNpJavWTi5m9SsL0dgreyIKafunlseb7SRvT7V+j7/dnm7E27vtNyPiqYj4ovh4o12azyoLgx48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALQc27P//9/F5v7/AMAhNzroDgAAB079B4Dho/4DwPBR/wFg+Kj/ADB81H8AGD4PUf+L+9EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbGzMWL+fHB9s3r83l74epGfSW7emqhXF0prdbnS/PZ+lppKcuWKuXSfLa69/XJnnYly9amp6N+bbJWrtYmqxubs6tZ/Uptdnl1bqk8Wy4c2MgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHdjjSNJSxGRNuI0LZUinoiIiSgki8uV8umIeDIifi0Winl7atCdBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA+q25srsxVKuV1geDRC9J4JLoxjMGgZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4eLc3/R50TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgkNLfk4jIjxPjr47tvfpYcqvYeI6IT7659NW1uVptfSo//9fu+drXrfPTg+g/APAg7TrdruMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0El1Y3NlrlIprzeDWztNt8/0IRj0GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6J9/AwAA///FHNK6") 1.140283323s ago: executing program 2 (id=444): syz_mount_image$nilfs2(&(0x7f00000005c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f00000002c0)=ANY=[], 0x1, 0xad4, &(0x7f0000001540)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x2) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) truncate(&(0x7f0000000080)='./file2\x00', 0x1ffd) 980.199073ms ago: executing program 3 (id=445): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) 784.048594ms ago: executing program 5 (id=446): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0x18000, 0x6, 0x20000005, 0x0, 0x7ff}) 783.668994ms ago: executing program 3 (id=447): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x100000000000035) tkill(r0, 0x12) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) 504.76061ms ago: executing program 5 (id=448): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x0, 0x8, 0x2, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 43.379187ms ago: executing program 6 (id=449): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) recvmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)}, 0x4}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 0s ago: executing program 5 (id=450): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e7854a48", 0x8}, {&(0x7f0000000140)="02", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.170' (ED25519) to the list of known hosts. [ 73.908563][ T5753] cgroup: Unknown subsys name 'net' [ 74.074935][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.788050][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.453442][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.458780][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.463937][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.476706][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.486850][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.488523][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.497582][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.508975][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.516562][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.524379][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.536851][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.552090][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.559871][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.569408][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.578290][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.585235][ T5769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.593734][ T5769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.599708][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.617364][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.624892][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.632722][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.637949][ T5769] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.656789][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.664557][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.088896][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 78.267785][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.274995][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.284712][ T5767] bridge_slave_0: entered allmulticast mode [ 78.292809][ T5767] bridge_slave_0: entered promiscuous mode [ 78.312861][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 78.328381][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.335644][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.343050][ T5767] bridge_slave_1: entered allmulticast mode [ 78.350912][ T5767] bridge_slave_1: entered promiscuous mode [ 78.372598][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 78.421270][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 78.471449][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.503543][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.627641][ T5767] team0: Port device team_slave_0 added [ 78.642542][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.649956][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.657674][ T5765] bridge_slave_0: entered allmulticast mode [ 78.665031][ T5765] bridge_slave_0: entered promiscuous mode [ 78.672481][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.680185][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.687670][ T5768] bridge_slave_0: entered allmulticast mode [ 78.694801][ T5768] bridge_slave_0: entered promiscuous mode [ 78.704572][ T5767] team0: Port device team_slave_1 added [ 78.730086][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.737959][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.745622][ T5765] bridge_slave_1: entered allmulticast mode [ 78.753236][ T5765] bridge_slave_1: entered promiscuous mode [ 78.760365][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.768820][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.776412][ T5768] bridge_slave_1: entered allmulticast mode [ 78.784039][ T5768] bridge_slave_1: entered promiscuous mode [ 78.858417][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.865438][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.891581][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.908215][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.921189][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.931712][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.939187][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.946531][ T5776] bridge_slave_0: entered allmulticast mode [ 78.953584][ T5776] bridge_slave_0: entered promiscuous mode [ 78.971147][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.978765][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.005610][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.032085][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.039320][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.049542][ T5776] bridge_slave_1: entered allmulticast mode [ 79.057016][ T5776] bridge_slave_1: entered promiscuous mode [ 79.075696][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.134224][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.145890][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.169997][ T5768] team0: Port device team_slave_0 added [ 79.192705][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.216630][ T5768] team0: Port device team_slave_1 added [ 79.227210][ T5765] team0: Port device team_slave_0 added [ 79.239508][ T5767] hsr_slave_0: entered promiscuous mode [ 79.247322][ T5767] hsr_slave_1: entered promiscuous mode [ 79.291251][ T5765] team0: Port device team_slave_1 added [ 79.310014][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.320115][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.346332][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.384005][ T5776] team0: Port device team_slave_0 added [ 79.393408][ T5776] team0: Port device team_slave_1 added [ 79.400523][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.408358][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.434912][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.464827][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.472512][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.499283][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.543041][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.550385][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.576451][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.621230][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.628703][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.649694][ T5777] Bluetooth: hci2: command tx timeout [ 79.655291][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.661286][ T51] Bluetooth: hci1: command tx timeout [ 79.676593][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.683717][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.710242][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.726175][ T51] Bluetooth: hci3: command tx timeout [ 79.731954][ T51] Bluetooth: hci0: command tx timeout [ 79.760970][ T5768] hsr_slave_0: entered promiscuous mode [ 79.768148][ T5768] hsr_slave_1: entered promiscuous mode [ 79.774742][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.783936][ T5768] Cannot create hsr debugfs directory [ 79.853735][ T5765] hsr_slave_0: entered promiscuous mode [ 79.862264][ T5765] hsr_slave_1: entered promiscuous mode [ 79.868904][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.876951][ T5765] Cannot create hsr debugfs directory [ 79.888622][ T5776] hsr_slave_0: entered promiscuous mode [ 79.895804][ T5776] hsr_slave_1: entered promiscuous mode [ 79.904604][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.912433][ T5776] Cannot create hsr debugfs directory [ 80.368840][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.388956][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.401063][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.412059][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.488741][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.502665][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.521297][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.571452][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.592246][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.607674][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.629066][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.641794][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.729009][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.741158][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.759724][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.772572][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.959999][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.019020][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.038687][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.071099][ T4056] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.078548][ T4056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.104352][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.125014][ T4056] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.132282][ T4056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.143791][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.185740][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.192970][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.228722][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.236025][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.252336][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.273304][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.313703][ T4056] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.320931][ T4056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.355458][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.374707][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.389070][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.396329][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.461842][ T3421] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.469111][ T3421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.547963][ T4056] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.555212][ T4056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.726751][ T51] Bluetooth: hci1: command tx timeout [ 81.732438][ T51] Bluetooth: hci2: command tx timeout [ 81.806246][ T5777] Bluetooth: hci3: command tx timeout [ 81.811835][ T51] Bluetooth: hci0: command tx timeout [ 81.879426][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.063976][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.089701][ T5767] veth0_vlan: entered promiscuous mode [ 82.133068][ T5767] veth1_vlan: entered promiscuous mode [ 82.211207][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.230313][ T5765] veth0_vlan: entered promiscuous mode [ 82.268150][ T5767] veth0_macvtap: entered promiscuous mode [ 82.288869][ T5765] veth1_vlan: entered promiscuous mode [ 82.299463][ T5767] veth1_macvtap: entered promiscuous mode [ 82.355089][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.400078][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.413516][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.435773][ T5776] veth0_vlan: entered promiscuous mode [ 82.458035][ T5767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.468060][ T5767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.477083][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.485857][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.509813][ T5776] veth1_vlan: entered promiscuous mode [ 82.547504][ T5765] veth0_macvtap: entered promiscuous mode [ 82.563609][ T5765] veth1_macvtap: entered promiscuous mode [ 82.614513][ T5768] veth0_vlan: entered promiscuous mode [ 82.643849][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.658740][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.672325][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.684970][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.700396][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.712802][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.752156][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.765718][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.776113][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.784892][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.799095][ T5768] veth1_vlan: entered promiscuous mode [ 82.807747][ T5776] veth0_macvtap: entered promiscuous mode [ 82.853612][ T5776] veth1_macvtap: entered promiscuous mode [ 82.893552][ T4056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.906069][ T4056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.973829][ T5768] veth0_macvtap: entered promiscuous mode [ 83.005731][ T3421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.021121][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.034041][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.044077][ T3421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.057624][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.068705][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.080773][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.096324][ T5768] veth1_macvtap: entered promiscuous mode [ 83.150273][ T3421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.161163][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.176894][ T3421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.178336][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.195518][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.207205][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.220220][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.235625][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.251231][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.262272][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.273358][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.283608][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.295690][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.308793][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.348247][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.360290][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.369485][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.379361][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.402616][ T4056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.436855][ T4056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.453461][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.465170][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.477037][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.487731][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.502948][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.514345][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.527019][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.539359][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.548273][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.581463][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.593158][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.626651][ T28] audit: type=1326 audit(1770969049.814:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz.3.4" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f092719bf79 code=0x0 [ 83.806242][ T51] Bluetooth: hci2: command tx timeout [ 83.811836][ T51] Bluetooth: hci1: command tx timeout [ 83.844769][ T4056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.873662][ T4056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.887387][ T5777] Bluetooth: hci3: command tx timeout [ 83.893128][ T51] Bluetooth: hci0: command tx timeout [ 83.952930][ T3421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.963870][ T3421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.037797][ T4056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.045678][ T4056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.195560][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.205251][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.819462][ T5871] syz.2.7[5871]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.891746][ T5871] loop2: detected capacity change from 0 to 1024 [ 85.010144][ T5871] EXT4-fs error (device loop2): ext4_quota_enable:7140: inode #3: comm syz.2.7: iget: bad extended attribute block 5 [ 85.024051][ T5877] ======================================================= [ 85.024051][ T5877] WARNING: The mand mount option has been deprecated and [ 85.024051][ T5877] and is ignored by this kernel. Remove the mand [ 85.024051][ T5877] option from the mount to silence this warning. [ 85.024051][ T5877] ======================================================= [ 85.075614][ T5871] EXT4-fs error (device loop2): ext4_quota_enable:7143: comm syz.2.7: Bad quota inode: 3, type: 0 [ 85.105625][ T5871] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 85.153982][ T5871] EXT4-fs (loop2): mount failed [ 85.886293][ T5777] Bluetooth: hci2: command tx timeout [ 85.891813][ T51] Bluetooth: hci1: command tx timeout [ 85.966789][ T51] Bluetooth: hci0: command tx timeout [ 85.972403][ T5777] Bluetooth: hci3: command tx timeout [ 86.520203][ T787] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.731710][ T787] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 86.746563][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.776550][ T787] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 86.785677][ T787] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 86.794347][ T787] usb 4-1: Manufacturer: syz [ 86.819562][ T787] usb 4-1: config 0 descriptor?? [ 87.042822][ T787] rc_core: IR keymap rc-hauppauge not found [ 87.067627][ T787] Registered IR keymap rc-empty [ 87.097212][ T5898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.114288][ T787] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 87.126788][ T5898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.181700][ T787] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 87.271002][ T787] usb 4-1: USB disconnect, device number 2 [ 87.403631][ T5915] loop1: detected capacity change from 0 to 64 [ 87.569899][ T28] audit: type=1800 audit(1770969053.754:3): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.22" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 87.738483][ T5915] syz.1.22: attempt to access beyond end of device [ 87.738483][ T5915] loop1: rw=34817, sector=167, nr_sectors = 1 limit=64 [ 87.802415][ T5915] syz.1.22: attempt to access beyond end of device [ 87.802415][ T5915] loop1: rw=34817, sector=169, nr_sectors = 1 limit=64 [ 87.866172][ T5915] syz.1.22: attempt to access beyond end of device [ 87.866172][ T5915] loop1: rw=34817, sector=171, nr_sectors = 4 limit=64 [ 89.216053][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.239228][ T5943] loop1: detected capacity change from 0 to 2048 [ 89.323705][ T5943] loop1: p1 < > p4 < > [ 89.339641][ T5943] loop1: partition table partially beyond EOD, truncated [ 89.374513][ T5943] loop1: p4 start 42180 is beyond EOD, truncated [ 89.408567][ T23] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 89.440112][ T23] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 89.476268][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 89.485401][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.563578][ T5941] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 89.602389][ T23] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 89.962976][ T5755] usb 3-1: USB disconnect, device number 2 [ 90.066013][ T967] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.246806][ T967] usb 2-1: Using ep0 maxpacket: 32 [ 90.258445][ T967] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 90.274930][ T967] usb 2-1: config 0 has no interface number 0 [ 90.282022][ T967] usb 2-1: config 0 interface 12 has no altsetting 0 [ 90.292386][ T967] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 90.305696][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.314645][ T967] usb 2-1: Product: syz [ 90.319224][ T967] usb 2-1: Manufacturer: syz [ 90.323885][ T967] usb 2-1: SerialNumber: syz [ 90.340838][ T967] usb 2-1: config 0 descriptor?? [ 90.986864][ T5953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.39'. [ 90.995738][ T5953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.39'. [ 91.024598][ T5953] Zero length message leads to an empty skb [ 91.031336][ T5951] loop3: detected capacity change from 0 to 32768 [ 91.072537][ T5951] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.38 (5951) [ 91.167881][ T5951] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 91.196321][ T5951] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 91.207852][ T5951] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 91.231481][ T5951] BTRFS info (device loop3): use zstd compression, level 3 [ 91.244239][ T5951] BTRFS info (device loop3): using free space tree [ 91.464728][ T5951] BTRFS info (device loop3): enabling ssd optimizations [ 91.492288][ T5951] BTRFS info (device loop3): auto enabling async discard [ 91.615069][ T967] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 91.627086][ T967] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 91.634476][ T967] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 91.651045][ T967] f81534: probe of 2-1:0.12 failed with error -71 [ 91.687309][ T967] usb 2-1: USB disconnect, device number 2 [ 92.051912][ T5767] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 92.068869][ T27] cfg80211: failed to load regulatory.db [ 93.332882][ T5977] loop1: detected capacity change from 0 to 32768 [ 93.448699][ T5997] warning: `syz.3.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.491712][ T5977] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 93.962607][ T5768] ocfs2: Unmounting device (7,1) on (node local) [ 94.780864][ T6025] loop1: detected capacity change from 0 to 256 [ 94.809667][ T6023] netlink: 'syz.3.61': attribute type 5 has an invalid length. [ 94.878208][ T6025] FAT-fs (loop1): Directory bread(block 64) failed [ 94.887548][ T6025] FAT-fs (loop1): Directory bread(block 65) failed [ 94.902130][ T6027] Illegal XDP return value 4294967274 on prog (id 2) dev syz_tun, expect packet loss! [ 94.912534][ T6025] FAT-fs (loop1): Directory bread(block 66) failed [ 94.922632][ T6025] FAT-fs (loop1): Directory bread(block 67) failed [ 94.933830][ T6025] FAT-fs (loop1): Directory bread(block 68) failed [ 94.944851][ T6025] FAT-fs (loop1): Directory bread(block 69) failed [ 94.966576][ T6025] FAT-fs (loop1): Directory bread(block 70) failed [ 94.981550][ T6025] FAT-fs (loop1): Directory bread(block 71) failed [ 95.013390][ T6025] FAT-fs (loop1): Directory bread(block 72) failed [ 95.029057][ T6025] FAT-fs (loop1): Directory bread(block 73) failed [ 95.180861][ T6025] netlink: 104 bytes leftover after parsing attributes in process `syz.1.62'. [ 95.414060][ T6036] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.514607][ T6050] loop1: detected capacity change from 0 to 128 [ 96.822297][ T6055] fuse: Bad value for 'fd' [ 97.338075][ T6059] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.636729][ T6065] loop1: detected capacity change from 0 to 2048 [ 97.757627][ T6065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.903687][ T6065] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 97.946486][ T6065] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 98.016023][ T6065] EXT4-fs (loop1): This should not happen!! Data will be lost [ 98.016023][ T6065] [ 98.051582][ T6065] EXT4-fs (loop1): Total free blocks count 0 [ 98.065444][ T6065] EXT4-fs (loop1): Free/Dirty block details [ 98.086128][ T6065] EXT4-fs (loop1): free_blocks=2415919104 [ 98.091998][ T6065] EXT4-fs (loop1): dirty_blocks=16 [ 98.126049][ T6065] EXT4-fs (loop1): Block reservation details [ 98.142414][ T6065] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 98.194712][ T6065] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 98.252051][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 98.356099][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.474985][ T6082] ubi0: attaching mtd0 [ 98.546073][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 98.568444][ T27] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.613109][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 98.621525][ T27] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 98.634887][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.647950][ T6085] syz.1.87: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 98.682781][ T27] usb 3-1: config 0 descriptor?? [ 98.686305][ T6085] CPU: 0 PID: 6085 Comm: syz.1.87 Not tainted syzkaller #0 [ 98.695041][ T6085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 98.705518][ T6085] Call Trace: [ 98.708871][ T6085] [ 98.711852][ T6085] dump_stack_lvl+0x18c/0x250 [ 98.716620][ T6085] ? show_regs_print_info+0x20/0x20 [ 98.721931][ T6085] ? load_image+0x400/0x400 [ 98.726509][ T6085] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 98.733078][ T6085] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 98.739677][ T6085] warn_alloc+0x246/0x340 [ 98.744116][ T6085] ? stack_trace_save+0xaa/0x100 [ 98.749113][ T6085] ? zone_watermark_ok_safe+0x230/0x230 [ 98.754758][ T6085] ? kasan_set_track+0x5f/0x70 [ 98.759574][ T6085] ? kasan_set_track+0x4e/0x70 [ 98.764399][ T6085] ? __kasan_kmalloc+0x8f/0xa0 [ 98.769211][ T6085] ? xsk_init_queue+0xad/0x100 [ 98.774024][ T6085] ? xsk_setsockopt+0x4e5/0x760 [ 98.778928][ T6085] ? do_sock_setsockopt+0x175/0x1a0 [ 98.784184][ T6085] ? __x64_sys_setsockopt+0x182/0x200 [ 98.789654][ T6085] __vmalloc_node_range+0x126/0x1330 [ 98.795028][ T6085] ? free_vm_area+0x50/0x50 [ 98.799681][ T6085] vmalloc_user+0x74/0x80 [ 98.804072][ T6085] ? xskq_create+0xbf/0x170 [ 98.808719][ T6085] xskq_create+0xbf/0x170 [ 98.813102][ T6085] xsk_init_queue+0xad/0x100 [ 98.817826][ T6085] xsk_setsockopt+0x4e5/0x760 [ 98.822554][ T6085] ? xsk_poll+0x680/0x680 [ 98.826942][ T6085] ? __fget_files+0x28/0x4b0 [ 98.831583][ T6085] ? __fget_files+0x28/0x4b0 [ 98.836220][ T6085] ? aa_sock_opt_perm+0x74/0x100 [ 98.841206][ T6085] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 98.846791][ T6085] ? security_socket_setsockopt+0x7e/0xa0 [ 98.852556][ T6085] ? xsk_poll+0x680/0x680 [ 98.856926][ T6085] do_sock_setsockopt+0x175/0x1a0 [ 98.862022][ T6085] ? __fdget+0x180/0x210 [ 98.866311][ T6085] __x64_sys_setsockopt+0x182/0x200 [ 98.871654][ T6085] do_syscall_64+0x55/0xa0 [ 98.876110][ T6085] ? clear_bhb_loop+0x40/0x90 [ 98.880820][ T6085] ? clear_bhb_loop+0x40/0x90 [ 98.885525][ T6085] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.891456][ T6085] RIP: 0033:0x7fe7c659bf79 [ 98.895923][ T6085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.915591][ T6085] RSP: 002b:00007fe7c7400028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 98.924043][ T6085] RAX: ffffffffffffffda RBX: 00007fe7c6815fa0 RCX: 00007fe7c659bf79 [ 98.932054][ T6085] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 98.940064][ T6085] RBP: 00007fe7c66327e0 R08: 0000000000000004 R09: 0000000000000000 [ 98.948067][ T6085] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 98.956075][ T6085] R13: 00007fe7c6816038 R14: 00007fe7c6815fa0 R15: 00007ffe5d1e1458 [ 98.964102][ T6085] [ 98.967185][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.989990][ T6085] Mem-Info: [ 98.993233][ T6085] active_anon:5630 inactive_anon:0 isolated_anon:0 [ 98.993233][ T6085] active_file:1159 inactive_file:39944 isolated_file:0 [ 98.993233][ T6085] unevictable:768 dirty:654 writeback:0 [ 98.993233][ T6085] slab_reclaimable:18489 slab_unreclaimable:94092 [ 98.993233][ T6085] mapped:24469 shmem:1367 pagetables:549 [ 98.993233][ T6085] sec_pagetables:0 bounce:0 [ 98.993233][ T6085] kernel_misc_reclaimable:0 [ 98.993233][ T6085] free:1357631 free_pcp:7039 free_cma:0 [ 99.058430][ T6085] Node 0 active_anon:22532kB inactive_anon:0kB active_file:4636kB inactive_file:159580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97924kB dirty:2612kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11168kB pagetables:2204kB sec_pagetables:0kB all_unreclaimable? no [ 99.100799][ T6085] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 99.145216][ T6085] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.183266][ T6085] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 99.189922][ T6085] Node 0 DMA32 free:1524700kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22564kB inactive_anon:0kB active_file:4636kB inactive_file:158700kB unevictable:1536kB writepending:2620kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:6792kB local_pcp:1984kB free_cma:0kB [ 99.229244][ T6085] lowmem_reserve[]: 0 0 0 0 0 [ 99.234220][ T6085] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:8kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 99.274724][ T6085] lowmem_reserve[]: 0 0 0 0 0 [ 99.300018][ T6085] Node 1 Normal free:3889748kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:16kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21188kB local_pcp:13376kB free_cma:0kB [ 99.329721][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.336454][ T6085] lowmem_reserve[]: 0 0 0 0 0 [ 99.341373][ T6085] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 99.361710][ T27] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 99.395117][ T6085] Node 0 DMA32: 1641*4kB (U) 1155*8kB (UME) 715*16kB (UME) 81*32kB (UM) 52*64kB (UM) 33*128kB (UME) 22*256kB (UME) 15*512kB (UME) 9*1024kB (ME) 3*2048kB (UM) 356*4096kB (M) = 1524236kB [ 99.435353][ T6085] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 99.500409][ T6085] Node 1 Normal: 203*4kB (UM) 47*8kB (UME) 39*16kB (UME) 62*32kB (UME) 18*64kB (UME) 6*128kB (UME) 2*256kB (ME) 1*512kB (E) 0*1024kB 2*2048kB (UE) 947*4096kB (M) = 3889748kB [ 99.546245][ T6085] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.568019][ T6085] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.579786][ T6085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.628849][ T6085] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.651423][ T6085] 42479 total pagecache pages [ 99.657577][ T6085] 0 pages in swap cache [ 99.662042][ T6085] Free swap = 124984kB [ 99.666718][ T6085] Total swap = 124996kB [ 99.671190][ T6085] 2097051 pages RAM [ 99.681925][ T6085] 0 pages HighMem/MovableOnly [ 99.686960][ T6085] 416922 pages reserved [ 99.691205][ T6085] 0 pages cma reserved [ 99.838015][ T967] usb 3-1: USB disconnect, device number 3 [ 99.843842][ T6093] Bluetooth: MGMT ver 1.22 [ 100.623623][ T6115] fuse: Bad value for 'fd' [ 100.648053][ T6115] capability: warning: `syz.3.94' uses deprecated v2 capabilities in a way that may be insecure [ 101.386792][ T6132] loop2: detected capacity change from 0 to 512 [ 101.397350][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.408689][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.426311][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.448629][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.469210][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 101.479073][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.513551][ T6132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.536240][ T6132] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.763204][ T3421] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.847412][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.074023][ T3421] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.163380][ T6145] loop1: detected capacity change from 0 to 512 [ 102.301084][ T3421] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.315168][ T6145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.341065][ T6145] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.588627][ T3421] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.999923][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.118798][ T6133] chnl_net:caif_netlink_parms(): no params data found [ 103.567132][ T5777] Bluetooth: hci0: command tx timeout [ 103.698850][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.735098][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.757486][ T6133] bridge_slave_0: entered allmulticast mode [ 103.764997][ T6133] bridge_slave_0: entered promiscuous mode [ 103.896047][ T967] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.987423][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.015476][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.041329][ T6133] bridge_slave_1: entered allmulticast mode [ 104.059449][ T6133] bridge_slave_1: entered promiscuous mode [ 104.108584][ T967] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.130103][ T967] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 104.170921][ T967] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.204748][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.226222][ T6166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 104.239521][ T967] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 104.641942][ T27] usb 3-1: USB disconnect, device number 4 [ 104.768110][ T6133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.809530][ T6133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.249012][ T6133] team0: Port device team_slave_0 added [ 105.328533][ T6133] team0: Port device team_slave_1 added [ 105.445140][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.489305][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.620764][ T6133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.646538][ T5777] Bluetooth: hci0: command tx timeout [ 105.733551][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.748854][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.821815][ T6133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.849219][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 105.876076][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 105.903082][ T6188] netlink: 'syz.2.116': attribute type 12 has an invalid length. [ 105.940972][ T6188] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.950232][ T6188] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.959035][ T6188] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.967864][ T6188] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.217759][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 106.263451][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 106.305543][ T6188] netlink: 'syz.2.116': attribute type 12 has an invalid length. [ 106.362286][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.376627][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.390586][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.417213][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.437965][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 106.445598][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.722110][ T6133] hsr_slave_0: entered promiscuous mode [ 106.746800][ T6133] hsr_slave_1: entered promiscuous mode [ 106.767650][ T6133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.775872][ T6133] Cannot create hsr debugfs directory [ 107.445857][ T6201] loop2: detected capacity change from 0 to 4096 [ 107.458261][ T6201] EXT4-fs: inline encryption not supported [ 107.679665][ T3421] hsr_slave_0: left promiscuous mode [ 107.695703][ T3421] hsr_slave_1: left promiscuous mode [ 107.702213][ T3421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.709958][ T3421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.726160][ T51] Bluetooth: hci0: command tx timeout [ 107.737752][ T3421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.745821][ T3421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.767274][ T3421] bridge_slave_1: left allmulticast mode [ 107.773009][ T3421] bridge_slave_1: left promiscuous mode [ 107.827783][ T3421] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.875326][ T6201] EXT4-fs (loop2): Test dummy encryption mode enabled [ 107.894898][ T3421] bridge_slave_0: left allmulticast mode [ 107.926024][ T3421] bridge_slave_0: left promiscuous mode [ 107.940924][ T6201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.942597][ T3421] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.110179][ T6201] fs-verity: sha512 using implementation "sha512-avx2" [ 108.205855][ T3421] veth1_macvtap: left promiscuous mode [ 108.216363][ T3421] veth0_macvtap: left promiscuous mode [ 108.234450][ T3421] veth1_vlan: left promiscuous mode [ 108.260078][ T3421] veth0_vlan: left promiscuous mode [ 108.385476][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.526447][ T51] Bluetooth: hci2: command tx timeout [ 109.809184][ T51] Bluetooth: hci0: command tx timeout [ 110.044650][ T3421] team0 (unregistering): Port device team_slave_1 removed [ 110.113673][ T3421] team0 (unregistering): Port device team_slave_0 removed [ 110.174310][ T3421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.252540][ T3421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.608310][ T51] Bluetooth: hci2: command tx timeout [ 110.786839][ T3421] bond0 (unregistering): Released all slaves [ 111.147790][ T6256] fuse: Invalid user_id [ 111.370494][ T6133] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.384189][ T6133] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.419649][ T6133] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.456202][ T6133] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.536120][ T6194] chnl_net:caif_netlink_parms(): no params data found [ 111.831474][ T6278] netlink: 'syz.3.138': attribute type 1 has an invalid length. [ 111.859681][ T6278] netlink: 'syz.3.138': attribute type 2 has an invalid length. [ 111.896410][ T6194] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.903628][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.948979][ T6194] bridge_slave_0: entered allmulticast mode [ 111.977186][ T6194] bridge_slave_0: entered promiscuous mode [ 111.995654][ T6194] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.003200][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.018704][ T6194] bridge_slave_1: entered allmulticast mode [ 112.035286][ T6194] bridge_slave_1: entered promiscuous mode [ 112.046804][ T6285] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.251192][ T3421] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.360013][ T6194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.430835][ T3421] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.504265][ T6194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.649442][ T3421] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.715615][ T51] Bluetooth: hci2: command tx timeout [ 112.741157][ T6194] team0: Port device team_slave_0 added [ 112.788480][ T6194] team0: Port device team_slave_1 added [ 112.918662][ T3421] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.931532][ T6303] loop2: detected capacity change from 0 to 1024 [ 112.950626][ T6305] netlink: 'syz.3.146': attribute type 32 has an invalid length. [ 112.989526][ T6303] EXT4-fs: Ignoring removed orlov option [ 113.010920][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.019653][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.047790][ T6194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.074455][ T6303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.140646][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.161212][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.192738][ T6194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.241393][ T6133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.261434][ T28] audit: type=1800 audit(1770969079.454:4): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.145" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 113.360343][ T6194] hsr_slave_0: entered promiscuous mode [ 113.376168][ T6194] hsr_slave_1: entered promiscuous mode [ 113.392226][ T6194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.401383][ T6194] Cannot create hsr debugfs directory [ 113.558602][ T6133] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.620051][ T4056] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.627273][ T4056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.644800][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.678122][ T4056] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.685323][ T4056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.534727][ T6194] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.579765][ T6194] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.671184][ T6194] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.757685][ T6194] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.769044][ T51] Bluetooth: hci2: command tx timeout [ 115.131003][ T6133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.238401][ T3421] hsr_slave_0: left promiscuous mode [ 115.266625][ T3421] hsr_slave_1: left promiscuous mode [ 115.296487][ T3421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.304158][ T3421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.323681][ T3421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.344954][ T3421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.371148][ T3421] bridge_slave_1: left allmulticast mode [ 115.391574][ T3421] bridge_slave_1: left promiscuous mode [ 115.408866][ T3421] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.436917][ T3421] bridge_slave_0: left allmulticast mode [ 115.455934][ T3421] bridge_slave_0: left promiscuous mode [ 115.462703][ T6342] loop2: detected capacity change from 0 to 32768 [ 115.469683][ T3421] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.572781][ T6342] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 115.611136][ T3421] veth1_macvtap: left promiscuous mode [ 115.638718][ T3421] veth0_macvtap: left promiscuous mode [ 115.644479][ T3421] veth1_vlan: left promiscuous mode [ 115.706316][ T3421] veth0_vlan: left promiscuous mode [ 116.033262][ T6373] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 116.055434][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 116.432543][ T6380] process 'syz.3.156' launched './file0' with NULL argv: empty string added [ 117.325079][ T3421] team0 (unregistering): Port device team_slave_1 removed [ 117.373328][ T3421] team0 (unregistering): Port device team_slave_0 removed [ 117.420889][ T3421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.473337][ T3421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.853245][ T3421] bond0 (unregistering): Released all slaves [ 118.009729][ T6389] netlink: 'syz.2.160': attribute type 1 has an invalid length. [ 118.030416][ T6389] netlink: 'syz.2.160': attribute type 2 has an invalid length. [ 118.069730][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 118.101805][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 118.290113][ T6194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.386802][ T6194] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.439130][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.446389][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.540029][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.547370][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.835252][ T6133] veth0_vlan: entered promiscuous mode [ 118.890865][ T6133] veth1_vlan: entered promiscuous mode [ 119.039812][ T6133] veth0_macvtap: entered promiscuous mode [ 119.078920][ T6133] veth1_macvtap: entered promiscuous mode [ 119.143072][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.175100][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.206059][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.238238][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.277840][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.309971][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.331271][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.355968][ T6133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.379288][ T6133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.401439][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.452316][ T6133] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.481592][ T6133] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.515967][ T6133] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.538255][ T6133] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.748893][ T6415] loop2: detected capacity change from 0 to 32768 [ 119.771162][ T6194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.801698][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.823502][ T6415] (syz.2.168,6415,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 119.854733][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.873004][ T6415] (syz.2.168,6415,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 119.954202][ T4056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.004397][ T6415] JBD2: Ignoring recovery information on journal [ 120.019408][ T4056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.216876][ T6415] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 120.984230][ T6194] veth0_vlan: entered promiscuous mode [ 121.044124][ T6194] veth1_vlan: entered promiscuous mode [ 121.161218][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 121.233980][ T6194] veth0_macvtap: entered promiscuous mode [ 121.275681][ T6194] veth1_macvtap: entered promiscuous mode [ 121.368517][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.394376][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.409443][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.436088][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.458722][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.481776][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.508029][ T6194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.561307][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.603125][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.620067][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.631157][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.645023][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.666645][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.698866][ T6194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.720836][ T6194] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.738643][ T6194] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.776075][ T6194] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.795753][ T6194] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.081509][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.128563][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.169224][ T4056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.184797][ T6495] netlink: 'syz.4.181': attribute type 10 has an invalid length. [ 122.205991][ T4056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.226070][ T6495] netlink: 2 bytes leftover after parsing attributes in process `syz.4.181'. [ 122.243170][ T6495] team0: entered promiscuous mode [ 122.249043][ T6495] team_slave_0: entered promiscuous mode [ 122.255256][ T6495] team_slave_1: entered promiscuous mode [ 122.267680][ T6495] bridge0: port 3(team0) entered blocking state [ 122.274249][ T6495] bridge0: port 3(team0) entered disabled state [ 122.281974][ T6495] team0: entered allmulticast mode [ 122.288260][ T6495] team_slave_0: entered allmulticast mode [ 122.294138][ T6495] team_slave_1: entered allmulticast mode [ 122.303662][ T6495] bridge0: port 3(team0) entered blocking state [ 122.311619][ T6495] bridge0: port 3(team0) entered forwarding state [ 122.655302][ T6487] loop2: detected capacity change from 0 to 32768 [ 122.810328][ T6487] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 122.939635][ T6487] XFS (loop2): Ending clean mount [ 123.013089][ T6487] XFS (loop2): Quotacheck needed: Please wait. [ 123.123379][ T6487] XFS (loop2): Quotacheck: Done. [ 123.217392][ T967] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 123.451734][ T967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.493401][ T967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.536668][ T967] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.562551][ T5776] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 123.598096][ T967] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.611628][ T967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.623471][ T967] usb 6-1: config 0 descriptor?? [ 124.085676][ T967] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 124.136461][ T967] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 124.159996][ T967] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 124.183942][ T967] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 124.228428][ T967] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 124.255134][ T967] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 124.321811][ T967] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 124.350608][ T967] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 124.380780][ T967] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 124.406029][ T967] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 124.423705][ T967] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 124.451781][ T967] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 124.485970][ T967] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 124.518305][ T967] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 124.525809][ T967] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 124.563903][ T967] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 124.641238][ T967] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 124.715584][ T967] usb 6-1: USB disconnect, device number 2 [ 124.896848][ T6560] fido_id[6560]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 125.032809][ T6543] loop4: detected capacity change from 0 to 32768 [ 125.184932][ T6543] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.383107][ T6543] XFS (loop4): Ending clean mount [ 125.423496][ T6543] XFS (loop4): Quotacheck needed: Please wait. [ 125.545296][ T6543] XFS (loop4): Quotacheck: Done. [ 125.625955][ T6583] bridge0: port 3(gretap0) entered blocking state [ 125.636209][ T6583] bridge0: port 3(gretap0) entered disabled state [ 125.643149][ T6583] gretap0: entered allmulticast mode [ 125.660688][ T6555] loop2: detected capacity change from 0 to 40427 [ 125.688807][ T6583] gretap0: entered promiscuous mode [ 125.702277][ T6583] bridge0: port 3(gretap0) entered blocking state [ 125.709418][ T6583] bridge0: port 3(gretap0) entered forwarding state [ 125.734965][ T6555] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 125.773793][ T6555] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 125.821676][ T6586] gretap0: left allmulticast mode [ 125.839722][ T6586] gretap0: left promiscuous mode [ 125.846686][ T6586] bridge0: port 3(gretap0) entered disabled state [ 125.916853][ T6555] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.105931][ T6555] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 126.113338][ T6555] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 126.136965][ T6133] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 126.351709][ T6593] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 126.495284][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 126.706016][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 126.714525][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.742814][ T23] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 126.772627][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.803918][ T23] usb 6-1: config 0 descriptor?? [ 126.832591][ T23] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 127.116082][ T5866] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.309586][ T5866] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 127.334098][ T5866] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.344008][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 127.361140][ T5866] usb 5-1: SerialNumber: syz [ 128.063550][ T5866] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 128.082336][ T23] gspca_vc032x: reg_w err -71 [ 128.090319][ T23] vc032x: probe of 6-1:0.0 failed with error -71 [ 128.113810][ T23] usb 6-1: USB disconnect, device number 3 [ 128.517007][ T6623] loop2: detected capacity change from 0 to 32768 [ 128.574842][ T6623] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.721761][ T6623] XFS (loop2): Ending clean mount [ 128.792139][ T6623] XFS (loop2): Quotacheck needed: Please wait. [ 128.919783][ T6623] XFS (loop2): Quotacheck: Done. [ 129.223073][ T5776] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.915990][ T27] usb 5-1: USB disconnect, device number 2 [ 129.941654][ T27] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 130.640709][ T6705] loop5: detected capacity change from 0 to 512 [ 130.707798][ T6705] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 130.748277][ T6705] System zones: 1-12 [ 130.808170][ T6705] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.230: missing EA_INODE flag [ 130.900173][ T6705] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.230: error while reading EA inode 12 err=-117 [ 130.957065][ T6705] EXT4-fs (loop5): 1 orphan inode deleted [ 130.996605][ T6705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.060332][ T6718] netlink: 'syz.2.233': attribute type 10 has an invalid length. [ 131.111100][ T6718] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.120138][ T6718] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.224631][ T6718] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.232136][ T6718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.239787][ T6718] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.247036][ T6718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.318858][ T6705] overlayfs: invalid origin (0000007900ef9e535f1cf5bf49dbbdeefb17f384faf4fca0bf4f369df707dacdfa03a5d561779e0f93fdfd81f6f6e7e936ca31735faf1c000000000000000000) [ 131.361630][ T6718] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 131.665356][ T6194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.945456][ T6736] loop5: detected capacity change from 0 to 256 [ 131.983705][ T6736] exfat: Deprecated parameter 'utf8' [ 132.024199][ T6736] exfat: Deprecated parameter 'utf8' [ 132.050956][ T6736] exfat: Deprecated parameter 'utf8' [ 132.168205][ T6736] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 132.975291][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.244'. [ 133.013956][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.026086][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.173314][ T6774] loop4: detected capacity change from 0 to 512 [ 133.197754][ T6774] EXT4-fs: inline encryption not supported [ 133.234327][ T6774] EXT4-fs (loop4): orphan cleanup on readonly fs [ 133.293881][ T6774] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz.4.248: corrupted in-inode xattr: invalid size in ea xattr [ 133.313909][ T6774] EXT4-fs (loop4): Remounting filesystem read-only [ 133.322273][ T6774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.396358][ T6778] tipc: Started in network mode [ 133.401282][ T6778] tipc: Node identity 4, cluster identity 4711 [ 133.443649][ T6778] tipc: Node number set to 4 [ 133.609265][ T6133] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.735138][ T6782] atomic_op ffff88807be2d998 conn xmit_atomic 0000000000000000 [ 134.026145][ T6771] loop5: detected capacity change from 0 to 32768 [ 134.048690][ T6771] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.247 (6771) [ 134.113428][ T6794] netlink: 'syz.3.254': attribute type 1 has an invalid length. [ 134.146806][ T6794] netlink: 'syz.3.254': attribute type 4 has an invalid length. [ 134.154535][ T6794] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.254'. [ 134.178477][ T6771] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.216641][ T6771] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 134.241137][ T6771] BTRFS info (device loop5): using free space tree [ 134.410799][ T6771] BTRFS info (device loop5): enabling ssd optimizations [ 134.428446][ T6771] BTRFS info (device loop5): auto enabling async discard [ 134.735676][ T6822] loop4: detected capacity change from 0 to 4096 [ 134.757082][ T6822] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.808669][ T6822] EXT4-fs (loop4): Test dummy encryption mode enabled [ 134.849455][ T6822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.988959][ T6822] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 135.013820][ T6194] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.057720][ T6822] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.112449][ T6822] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 135.280818][ T6133] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.364470][ T5780] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (5780) [ 135.887583][ T6842] loop4: detected capacity change from 4096 to 0 [ 136.706166][ T5850] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.906001][ T5850] usb 5-1: Using ep0 maxpacket: 16 [ 136.934570][ T5850] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 136.966150][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.996063][ T5850] usb 5-1: Product: syz [ 137.003795][ T5850] usb 5-1: Manufacturer: syz [ 137.029629][ T5850] usb 5-1: SerialNumber: syz [ 137.054007][ T5850] usb 5-1: config 0 descriptor?? [ 137.073713][ T5850] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 137.310064][ T5850] usb 5-1: USB disconnect, device number 3 [ 137.480316][ T6883] loop5: detected capacity change from 0 to 512 [ 137.528898][ T6883] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.582885][ T6883] EXT4-fs (loop5): orphan cleanup on readonly fs [ 137.605455][ T6883] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4047: comm syz.5.274: Allocating blocks 41-42 which overlap fs metadata [ 137.624453][ T6883] Quota error (device loop5): write_blk: dquota write failed [ 137.633988][ T6883] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 137.644426][ T6883] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.274: Failed to acquire dquot type 0 [ 137.658490][ T6883] EXT4-fs error (device loop5): mb_free_blocks:1954: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 137.676211][ T6883] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #12: comm syz.5.274: corrupted inode contents [ 137.748953][ T6883] EXT4-fs error (device loop5): ext4_dirty_inode:6124: inode #12: comm syz.5.274: mark_inode_dirty error [ 137.823080][ T6883] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #12: comm syz.5.274: corrupted inode contents [ 137.869718][ T6883] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #12: comm syz.5.274: mark_inode_dirty error [ 137.921395][ T6883] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #12: comm syz.5.274: corrupted inode contents [ 137.959414][ T6883] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 137.981925][ T6883] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #12: comm syz.5.274: corrupted inode contents [ 138.018528][ T6883] EXT4-fs error (device loop5): ext4_truncate:4294: inode #12: comm syz.5.274: mark_inode_dirty error [ 138.058942][ T6883] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 138.087589][ T6883] EXT4-fs (loop5): 1 truncate cleaned up [ 138.093589][ T6883] EXT4-fs (loop5): pa ffff888077dfc1d0: logic 1, phys. 41, len 23 [ 138.102104][ T6883] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5388: group 0, free 22, pa_free 23 [ 138.134534][ T6895] serio: Serial port ttynull [ 138.155543][ T6883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.355094][ T6875] loop2: detected capacity change from 0 to 32768 [ 138.363353][ T6194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.465761][ T6875] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.649762][ T6915] netlink: 20 bytes leftover after parsing attributes in process `syz.5.281'. [ 138.665326][ T6915] netlink: 20 bytes leftover after parsing attributes in process `syz.5.281'. [ 138.697289][ T6875] XFS (loop2): Ending clean mount [ 138.720837][ T6875] XFS (loop2): Quotacheck needed: Please wait. [ 138.768317][ T6917] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 138.806461][ T6917] netlink: 15150 bytes leftover after parsing attributes in process `syz.3.282'. [ 138.925407][ T6875] XFS (loop2): Quotacheck: Done. [ 138.959763][ T6921] Bluetooth: MGMT ver 1.22 [ 139.199691][ T5776] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 139.579158][ T6934] loop4: detected capacity change from 0 to 512 [ 139.673722][ T6934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.702473][ T6942] loop5: detected capacity change from 0 to 512 [ 139.797819][ T6942] EXT4-fs: inline encryption not supported [ 139.827386][ T6942] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 139.847272][ T6942] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 139.869080][ T6942] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 139.897542][ T6934] loop4: detected capacity change from 512 to 0 [ 139.924141][ T6942] EXT4-fs (loop5): 1 truncate cleaned up [ 139.933849][ T12] loop: Write error at byte offset 9223372036854776831, length 1024. [ 139.955382][ T6942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.970664][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 139.980374][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 139.990781][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 139.999124][ T6946] EXT4-fs (loop4): I/O error while writing superblock [ 140.159493][ T6133] syz-executor: attempt to access beyond end of device [ 140.159493][ T6133] loop4: rw=12288, sector=8, nr_sectors = 2 limit=0 [ 140.205007][ T6133] EXT4-fs error (device loop4): ext4_check_bdev_write_error:225: comm syz-executor: Error while async write back metadata [ 140.257454][ T6133] syz-executor: attempt to access beyond end of device [ 140.257454][ T6133] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 140.292169][ T6194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.332650][ T6133] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 140.386842][ T6133] EXT4-fs (loop4): I/O error while writing superblock [ 140.513290][ T6133] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.559286][ T6962] loop2: detected capacity change from 0 to 64 [ 140.616933][ T6133] syz-executor: attempt to access beyond end of device [ 140.616933][ T6133] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 140.704880][ T6133] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 140.756101][ T6133] EXT4-fs (loop4): I/O error while writing superblock [ 141.195898][ C1] sched: RT throttling activated [ 141.204096][ T6938] kmmpd-loop4: attempt to access beyond end of device [ 141.204096][ T6938] loop4: rw=14337, sector=34, nr_sectors = 2 limit=0 [ 141.243372][ T6966] loop2: detected capacity change from 0 to 8192 [ 141.331847][ T6938] Buffer I/O error on dev loop4, logical block 17, lost sync page write [ 142.820315][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.974860][ T6980] loop5: detected capacity change from 0 to 8192 [ 143.372168][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.679368][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.734198][ T4056] failed to send hello msg [ 143.742226][ T6990] loop2: detected capacity change from 0 to 512 [ 143.755993][ T4056] failed while handling packet from 1:60042 [ 143.842191][ T6990] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.304: corrupted in-inode xattr: e_value size too large [ 143.939962][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.958080][ T6990] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.304: couldn't read orphan inode 15 (err -117) [ 143.983919][ T6990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.059015][ T6998] loop5: detected capacity change from 0 to 128 [ 144.197984][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.659505][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.694136][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.706336][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.736294][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.745039][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.752831][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.254515][ T7028] loop5: detected capacity change from 0 to 1024 [ 145.299309][ T7028] EXT4-fs: Ignoring removed bh option [ 145.366810][ T7028] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 145.482100][ T7028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.689190][ T7043] tipc: Started in network mode [ 145.694188][ T7043] tipc: Node identity ac14140f, cluster identity 4711 [ 145.730795][ T7043] tipc: Enabled bearer , priority 10 [ 145.751519][ T6194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.202153][ T7011] chnl_net:caif_netlink_parms(): no params data found [ 146.846749][ T51] Bluetooth: hci0: command tx timeout [ 146.857340][ T23] tipc: Node number set to 2886997007 [ 146.883319][ T7090] Bluetooth: MGMT ver 1.22 [ 147.008660][ T12] hsr_slave_0: left promiscuous mode [ 147.054026][ T12] hsr_slave_1: left promiscuous mode [ 147.091771][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.103462][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.118544][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.131925][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.145137][ T12] team0: left allmulticast mode [ 147.160539][ T12] team_slave_0: left allmulticast mode [ 147.179381][ T12] team_slave_1: left allmulticast mode [ 147.191780][ T12] bridge0: port 3(team0) entered disabled state [ 147.216608][ T12] bridge_slave_1: left allmulticast mode [ 147.226005][ T12] bridge_slave_1: left promiscuous mode [ 147.238556][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.267971][ T12] bridge_slave_0: left allmulticast mode [ 147.276069][ T12] bridge_slave_0: left promiscuous mode [ 147.290594][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.411398][ T12] veth1_macvtap: left promiscuous mode [ 147.419767][ T12] veth0_macvtap: left promiscuous mode [ 147.425546][ T12] veth1_vlan: left promiscuous mode [ 147.451787][ T12] veth0_vlan: left promiscuous mode [ 148.483419][ T12] team_slave_1 (unregistering): left promiscuous mode [ 148.501342][ T12] team0 (unregistering): Port device team_slave_1 removed [ 148.598370][ T12] team_slave_0 (unregistering): left promiscuous mode [ 148.614519][ T12] team0 (unregistering): Port device team_slave_0 removed [ 148.646154][ T5866] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 148.712221][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.801378][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.837978][ T5866] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 148.856114][ T5866] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 148.880414][ T5866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 148.906389][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 148.926001][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 148.942721][ T51] Bluetooth: hci0: command tx timeout [ 148.957943][ T5866] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 148.976045][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 148.994347][ T5866] usb 3-1: Product: syz [ 148.998659][ T5866] usb 3-1: Manufacturer: syz [ 149.052112][ T5866] cdc_wdm 3-1:1.0: skipping garbage [ 149.066112][ T5866] cdc_wdm 3-1:1.0: skipping garbage [ 149.094805][ T5866] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 149.101385][ T5866] cdc_wdm 3-1:1.0: Unknown control protocol [ 149.303618][ T5850] usb 3-1: USB disconnect, device number 5 [ 149.524563][ T12] bond0 (unregistering): Released all slaves [ 149.661854][ T7011] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.669181][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.678629][ T7011] bridge_slave_0: entered allmulticast mode [ 149.685799][ T7011] bridge_slave_0: entered promiscuous mode [ 149.747095][ T7011] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.755005][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.771739][ T7011] bridge_slave_1: entered allmulticast mode [ 149.779699][ T7011] bridge_slave_1: entered promiscuous mode [ 149.879261][ T7011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.928662][ T7011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.044388][ T7011] team0: Port device team_slave_0 added [ 150.052678][ T7133] loop5: detected capacity change from 0 to 2048 [ 150.064765][ T7011] team0: Port device team_slave_1 added [ 150.187817][ T7141] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.227870][ T7011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.255953][ T7011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.333383][ T7138] loop2: detected capacity change from 0 to 8192 [ 150.384131][ T7011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.397540][ T7011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.404558][ T7011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.426295][ T7133] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 150.437025][ T7138] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 150.461219][ T7138] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 150.471841][ T7011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.482994][ T7138] REISERFS (device loop2): using ordered data mode [ 150.516043][ T7138] reiserfs: using flush barriers [ 150.549309][ T7138] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 150.583298][ T7133] Remounting filesystem read-only [ 150.606820][ T7146] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 150.647743][ T7138] REISERFS (device loop2): checking transaction log (loop2) [ 150.689644][ T7011] hsr_slave_0: entered promiscuous mode [ 150.711846][ T7011] hsr_slave_1: entered promiscuous mode [ 150.764554][ T7011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.790341][ T7011] Cannot create hsr debugfs directory [ 151.006079][ T51] Bluetooth: hci0: command tx timeout [ 151.100961][ T7138] REISERFS (device loop2): Using tea hash to sort names [ 151.129190][ T7138] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 151.468440][ T7011] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 151.486016][ T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 151.505045][ T7011] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 151.539457][ T7011] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 151.577871][ T7011] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 151.666994][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 151.691416][ T23] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 151.714182][ T23] usb 6-1: config 0 has no interface number 0 [ 151.773956][ T23] usb 6-1: config 0 interface 184 has no altsetting 0 [ 151.802368][ T23] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 151.838518][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.864620][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'. [ 151.870836][ T23] usb 6-1: Product: syz [ 151.879013][ T23] usb 6-1: Manufacturer: syz [ 151.883768][ T23] usb 6-1: SerialNumber: syz [ 151.895409][ T23] usb 6-1: config 0 descriptor?? [ 151.921603][ T23] smsc75xx v1.0.0 [ 152.048151][ T7011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.115404][ T7011] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.146782][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.153998][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.190210][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.197528][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.915642][ T7011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.935231][ T23] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 153.103144][ T51] Bluetooth: hci0: command tx timeout [ 153.146978][ T23] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 153.199917][ T23] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 153.224157][ T23] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 153.240817][ T23] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 153.282808][ T23] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 153.316263][ T23] usb 6-1: USB disconnect, device number 4 [ 154.002563][ T7011] veth0_vlan: entered promiscuous mode [ 154.058811][ T7011] veth1_vlan: entered promiscuous mode [ 154.189715][ T7011] veth0_macvtap: entered promiscuous mode [ 154.221719][ T7011] veth1_macvtap: entered promiscuous mode [ 154.291644][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.335976][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.363323][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.375538][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.398660][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.411190][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.444122][ T7011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.478793][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.511986][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.523960][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.543918][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.555510][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.577381][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.608259][ T7011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.667987][ T7011] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.713015][ T7011] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.722102][ T7011] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.731332][ T7011] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.907883][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.938673][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.999123][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.012175][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.214488][ T7261] netlink: 'syz.6.302': attribute type 12 has an invalid length. [ 155.229560][ T7261] netlink: 'syz.6.302': attribute type 29 has an invalid length. [ 155.242323][ T7261] netlink: 148 bytes leftover after parsing attributes in process `syz.6.302'. [ 155.254413][ T7261] netlink: 'syz.6.302': attribute type 2 has an invalid length. [ 155.258539][ T7263] syz.3.369 uses obsolete (PF_INET,SOCK_PACKET) [ 155.589641][ T7272] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000005 [ 156.270503][ T7307] loop5: detected capacity change from 0 to 512 [ 156.357668][ T7307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.393596][ T7312] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 156.393596][ T7312] Q&|xùX [ 156.500970][ T7307] ext4 filesystem being mounted at /40/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.951041][ T6194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.846421][ T5081] Bluetooth: hci4: command 0x1003 tx timeout [ 158.846460][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 159.106546][ T28] audit: type=1326 audit(1770969125.294:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.6.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ff19bf79 code=0x7ffc0000 [ 159.156068][ T28] audit: type=1326 audit(1770969125.294:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.6.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ff19bf79 code=0x7ffc0000 [ 159.225999][ T28] audit: type=1326 audit(1770969125.324:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.6.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa1ff19bf79 code=0x7ffc0000 [ 159.252347][ T28] audit: type=1326 audit(1770969125.324:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.6.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ff19bf79 code=0x7ffc0000 [ 159.317860][ T28] audit: type=1326 audit(1770969125.324:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.6.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ff19bf79 code=0x7ffc0000 [ 159.340585][ T5777] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 159.347323][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 159.391108][ T28] audit: type=1326 audit(1770969125.324:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.6.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa1ff19bf79 code=0x7ffc0000 [ 159.470629][ T28] audit: type=1326 audit(1770969125.324:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.6.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ff19bf79 code=0x7ffc0000 [ 159.521742][ T28] audit: type=1326 audit(1770969125.324:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.6.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fa1ff19bf79 code=0x7ffc0000 [ 159.593059][ T28] audit: type=1326 audit(1770969125.324:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.6.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ff19bf79 code=0x7ffc0000 [ 159.621547][ T28] audit: type=1326 audit(1770969125.324:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.6.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1ff19bf79 code=0x7ffc0000 [ 159.706012][ T5850] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 159.889378][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.910741][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.946285][ T5850] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 159.979227][ T5850] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 160.024732][ T5850] usb 7-1: Manufacturer: syz [ 160.133462][ T5850] usb 7-1: config 0 descriptor?? [ 160.258959][ T7412] loop5: detected capacity change from 0 to 1024 [ 160.302908][ T7412] EXT4-fs: Ignoring removed bh option [ 160.418277][ T7412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 160.590064][ T7416] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.405: corrupted in-inode xattr: e_value out of bounds [ 160.807519][ T6194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 160.905596][ T7404] loop2: detected capacity change from 0 to 131072 [ 160.919690][ T7404] F2FS-fs (loop2): invalid crc value [ 160.970507][ T7404] F2FS-fs (loop2): Found nat_bits in checkpoint [ 161.067108][ T7404] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 161.236825][ T5850] uclogic 0003:256C:006D.0003: v1 frame probing failed: -71 [ 161.244299][ T5850] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 161.296450][ T5850] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 161.346614][ T5850] usb 7-1: USB disconnect, device number 2 [ 161.576412][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 161.780888][ T23] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 161.811789][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.840798][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 161.851732][ T23] usb 6-1: config 0 descriptor?? [ 161.869295][ T23] cp210x 6-1:0.0: cp210x converter detected [ 162.306835][ T23] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 162.347700][ T23] usb 6-1: cp210x converter now attached to ttyUSB0 [ 162.524828][ T23] usb 6-1: USB disconnect, device number 5 [ 162.550241][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 162.603541][ T23] cp210x 6-1:0.0: device disconnected [ 163.422081][ T7481] loop5: detected capacity change from 0 to 1024 [ 163.650870][ T31] hfsplus: b-tree write err: -5, ino 4 [ 164.161713][ T7468] loop2: detected capacity change from 0 to 40427 [ 164.201316][ T7468] F2FS-fs (loop2): heap/no_heap options were deprecated [ 164.227113][ T7468] F2FS-fs (loop2): Image doesn't support compression [ 164.251225][ T7468] F2FS-fs (loop2): heap/no_heap options were deprecated [ 164.306881][ T7468] F2FS-fs (loop2): invalid crc value [ 164.358345][ T7468] F2FS-fs (loop2): Found nat_bits in checkpoint [ 164.586336][ T7468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 164.726765][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 164.726783][ T28] audit: type=1800 audit(1770969130.914:20): pid=7468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.416" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 164.804840][ T7468] syz.2.416: attempt to access beyond end of device [ 164.804840][ T7468] loop2: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 164.852436][ T7506] syz.2.416: attempt to access beyond end of device [ 164.852436][ T7506] loop2: rw=524288, sector=77824, nr_sectors = 8 limit=40427 [ 164.887346][ T7506] syz.2.416: attempt to access beyond end of device [ 164.887346][ T7506] loop2: rw=524288, sector=77840, nr_sectors = 8 limit=40427 [ 164.916413][ T7506] syz.2.416: attempt to access beyond end of device [ 164.916413][ T7506] loop2: rw=524288, sector=77880, nr_sectors = 8 limit=40427 [ 164.946700][ T7506] syz.2.416: attempt to access beyond end of device [ 164.946700][ T7506] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 164.976450][ T28] audit: type=1800 audit(1770969131.174:21): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.416" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 165.107817][ T5776] syz-executor: attempt to access beyond end of device [ 165.107817][ T5776] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.158790][ T5776] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 165.387703][ T7503] loop6: detected capacity change from 0 to 32768 [ 165.443090][ T7503] (syz.6.424,7503,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 165.482596][ T7503] (syz.6.424,7503,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 165.506232][ T967] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 165.600399][ T7503] JBD2: Ignoring recovery information on journal [ 165.683314][ T7503] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 165.734417][ T967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 165.766600][ T967] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 165.775720][ T967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.852836][ T967] usb 6-1: config 0 descriptor?? [ 165.866710][ T7513] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 166.001943][ T28] audit: type=1800 audit(1770969132.194:22): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.424" name="file1" dev="loop6" ino=16979 res=0 errno=0 [ 166.362102][ T967] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 166.377070][ T7011] ocfs2: Unmounting device (7,6) on (node local) [ 166.571584][ T967] usb 6-1: USB disconnect, device number 6 [ 166.680296][ T7541] fido_id[7541]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 167.146161][ T967] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 167.233911][ T7565] loop2: detected capacity change from 0 to 256 [ 167.380174][ T967] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 167.406281][ T967] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.414412][ T967] usb 7-1: Product: syz [ 167.436032][ T967] usb 7-1: Manufacturer: syz [ 167.440731][ T967] usb 7-1: SerialNumber: syz [ 167.480265][ T967] usb 7-1: config 0 descriptor?? [ 167.699826][ T967] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 168.194928][ T7588] loop2: detected capacity change from 0 to 2048 [ 168.289136][ T7594] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.508440][ T967] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 168.554160][ T967] usb 7-1: USB disconnect, device number 3 [ 168.583795][ T7594] NILFS (loop2): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 168.626119][ T7594] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=2) [ 168.663862][ T7594] Remounting filesystem read-only [ 168.678401][ T62] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 168.685453][ T62] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 168.706203][ T7601] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 168.731167][ T62] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 168.748055][ T62] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 168.757581][ T62] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 168.770960][ T62] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 168.778244][ T62] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 168.785828][ T62] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 168.816705][ T62] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 168.832747][ T62] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 168.849388][ T62] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 168.866430][ T62] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 168.882449][ T62] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 168.892764][ T62] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 168.908130][ T62] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 168.921842][ T62] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 168.932363][ T62] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 168.943076][ T62] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 168.961200][ T62] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 168.989260][ T62] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.001991][ T62] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 169.019473][ T62] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 169.030966][ T62] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.069449][ T62] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.100913][ T62] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 169.147208][ T7588] NILFS (loop2): mounting fs with errors [ 169.312234][ T7594] ------------[ cut here ]------------ [ 169.318551][ T7594] WARNING: CPU: 0 PID: 7594 at fs/buffer.c:1188 mark_buffer_dirty+0x2bb/0x4c0 [ 169.328355][ T7594] Modules linked in: [ 169.332368][ T7594] CPU: 0 PID: 7594 Comm: segctord Not tainted syzkaller #0 [ 169.339872][ T7594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 169.350104][ T7594] RIP: 0010:mark_buffer_dirty+0x2bb/0x4c0 [ 169.356006][ T7594] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 9f 9a fc ff e8 fa c4 88 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 0a 09 e8 ff e8 e5 c4 88 ff <0f> 0b e9 84 fd ff ff e8 d9 c4 88 ff 0f 0b e9 b0 fd ff ff e8 cd c4 [ 169.376087][ T7594] RSP: 0018:ffffc900053276f0 EFLAGS: 00010293 [ 169.382233][ T7594] RAX: ffffffff81fe4ebb RBX: ffff888077fbd2b8 RCX: ffff88802bb45a00 [ 169.390798][ T7594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 169.399219][ T7594] RBP: ffffc90005327b01 R08: ffff888077fbd2bf R09: 1ffff1100eff7a57 [ 169.407832][ T7594] R10: dffffc0000000000 R11: ffffed100eff7a58 R12: 1ffff1100b1360f4 [ 169.416766][ T7594] R13: ffff8880589b07b0 R14: ffff88807e336328 R15: 1ffff1100b1360f6 [ 169.424861][ T7594] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 169.434292][ T7594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.441005][ T7594] CR2: 00007fa1fffbcd58 CR3: 00000000630a2000 CR4: 00000000003506f0 [ 169.449068][ T7594] DR0: 000000000000afe8 DR1: 0000000000000000 DR2: 0000000000000000 [ 169.457172][ T7594] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 169.465192][ T7594] Call Trace: [ 169.468555][ T7594] [ 169.471559][ T7594] nilfs_segctor_do_construct+0x307/0x68a0 [ 169.477634][ T7594] ? verify_lock_unused+0x140/0x140 [ 169.482930][ T7594] ? verify_lock_unused+0x140/0x140 [ 169.488922][ T7594] ? nilfs_transaction_unlock+0x220/0x220 [ 169.494754][ T7594] ? nilfs_bmap_test_and_clear_dirty+0x50/0x70 [ 169.501096][ T7594] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 169.506705][ T7594] ? __lock_acquire+0x7d40/0x7d40 [ 169.512235][ T7594] ? __rwlock_init+0x150/0x150 [ 169.517621][ T7594] ? do_raw_spin_unlock+0x121/0x230 [ 169.522911][ T7594] ? _raw_spin_unlock+0x28/0x40 [ 169.527970][ T7594] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 169.533511][ T7594] nilfs_segctor_construct+0x17b/0x690 [ 169.539138][ T7594] nilfs_segctor_thread+0x536/0x10d0 [ 169.544553][ T7594] ? nilfs_iput_work_func+0x70/0x70 [ 169.549901][ T7594] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 169.555946][ T7594] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 169.561958][ T7594] ? wake_bit_function+0x200/0x200 [ 169.567196][ T7594] ? __kthread_parkme+0x7a/0x1c0 [ 169.572213][ T7594] kthread+0x2fa/0x390 [ 169.576391][ T7594] ? nilfs_iput_work_func+0x70/0x70 [ 169.581662][ T7594] ? kthread_blkcg+0xd0/0xd0 [ 169.586385][ T7594] ret_from_fork+0x48/0x80 [ 169.590864][ T7594] ? kthread_blkcg+0xd0/0xd0 [ 169.595514][ T7594] ret_from_fork_asm+0x11/0x20 [ 169.600395][ T7594] [ 169.603465][ T7594] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 169.610789][ T7594] CPU: 0 PID: 7594 Comm: segctord Not tainted syzkaller #0 [ 169.618042][ T7594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 169.628149][ T7594] Call Trace: [ 169.631466][ T7594] [ 169.634431][ T7594] dump_stack_lvl+0x18c/0x250 [ 169.639164][ T7594] ? show_regs_print_info+0x20/0x20 [ 169.644427][ T7594] ? load_image+0x400/0x400 [ 169.649002][ T7594] panic+0x2dc/0x730 [ 169.652946][ T7594] ? bpf_jit_dump+0xd0/0xd0 [ 169.657497][ T7594] ? ret_from_fork_asm+0x11/0x20 [ 169.662471][ T7594] __warn+0x2e0/0x470 [ 169.666478][ T7594] ? mark_buffer_dirty+0x2bb/0x4c0 [ 169.671626][ T7594] ? mark_buffer_dirty+0x2bb/0x4c0 [ 169.676772][ T7594] report_bug+0x2be/0x4f0 [ 169.681135][ T7594] ? mark_buffer_dirty+0x2bb/0x4c0 [ 169.686282][ T7594] ? mark_buffer_dirty+0x2bb/0x4c0 [ 169.691516][ T7594] ? mark_buffer_dirty+0x2bd/0x4c0 [ 169.696683][ T7594] handle_bug+0xcf/0x120 [ 169.700958][ T7594] exc_invalid_op+0x1a/0x50 [ 169.705501][ T7594] asm_exc_invalid_op+0x1a/0x20 [ 169.710379][ T7594] RIP: 0010:mark_buffer_dirty+0x2bb/0x4c0 [ 169.716191][ T7594] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 9f 9a fc ff e8 fa c4 88 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 0a 09 e8 ff e8 e5 c4 88 ff <0f> 0b e9 84 fd ff ff e8 d9 c4 88 ff 0f 0b e9 b0 fd ff ff e8 cd c4 [ 169.735833][ T7594] RSP: 0018:ffffc900053276f0 EFLAGS: 00010293 [ 169.741933][ T7594] RAX: ffffffff81fe4ebb RBX: ffff888077fbd2b8 RCX: ffff88802bb45a00 [ 169.749935][ T7594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 169.757934][ T7594] RBP: ffffc90005327b01 R08: ffff888077fbd2bf R09: 1ffff1100eff7a57 [ 169.765942][ T7594] R10: dffffc0000000000 R11: ffffed100eff7a58 R12: 1ffff1100b1360f4 [ 169.773971][ T7594] R13: ffff8880589b07b0 R14: ffff88807e336328 R15: 1ffff1100b1360f6 [ 169.782001][ T7594] ? mark_buffer_dirty+0x2bb/0x4c0 [ 169.787170][ T7594] nilfs_segctor_do_construct+0x307/0x68a0 [ 169.793041][ T7594] ? verify_lock_unused+0x140/0x140 [ 169.798287][ T7594] ? verify_lock_unused+0x140/0x140 [ 169.803534][ T7594] ? nilfs_transaction_unlock+0x220/0x220 [ 169.809303][ T7594] ? nilfs_bmap_test_and_clear_dirty+0x50/0x70 [ 169.815504][ T7594] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 169.820996][ T7594] ? __lock_acquire+0x7d40/0x7d40 [ 169.826059][ T7594] ? __rwlock_init+0x150/0x150 [ 169.830871][ T7594] ? do_raw_spin_unlock+0x121/0x230 [ 169.836105][ T7594] ? _raw_spin_unlock+0x28/0x40 [ 169.841022][ T7594] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 169.846516][ T7594] nilfs_segctor_construct+0x17b/0x690 [ 169.852027][ T7594] nilfs_segctor_thread+0x536/0x10d0 [ 169.857384][ T7594] ? nilfs_iput_work_func+0x70/0x70 [ 169.862609][ T7594] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 169.868540][ T7594] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 169.874462][ T7594] ? wake_bit_function+0x200/0x200 [ 169.879606][ T7594] ? __kthread_parkme+0x7a/0x1c0 [ 169.884585][ T7594] kthread+0x2fa/0x390 [ 169.888686][ T7594] ? nilfs_iput_work_func+0x70/0x70 [ 169.893916][ T7594] ? kthread_blkcg+0xd0/0xd0 [ 169.898535][ T7594] ret_from_fork+0x48/0x80 [ 169.902985][ T7594] ? kthread_blkcg+0xd0/0xd0 [ 169.907692][ T7594] ret_from_fork_asm+0x11/0x20 [ 169.912497][ T7594] [ 169.916108][ T7594] Kernel Offset: disabled [ 169.920578][ T7594] Rebooting in 86400 seconds..