last executing test programs: 5m57.740291628s ago: executing program 32 (id=47): r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) prlimit64(0x0, 0x1, &(0x7f0000000100)={0xb, 0x8b}, 0x0) 3m13.692073124s ago: executing program 33 (id=1287): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x4048014, &(0x7f00000001c0)={0x11, 0x888e, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 3m13.070569479s ago: executing program 34 (id=1290): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="000000098504"}) 2m49.201264002s ago: executing program 35 (id=1432): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x28011, r1, 0xc3af000) madvise(&(0x7f0000201000/0x2000)=nil, 0x2000, 0x9) 2m22.006629022s ago: executing program 7 (id=1586): r0 = socket$kcm(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000003180)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x4e23, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, [@mark={0xc, 0x15, {0x35075b, 0xfffffff7}}]}, 0xc4}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}, 0x40810) 2m21.787151487s ago: executing program 7 (id=1589): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000180)={0x1, 0x0, 0x2, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000500)=0x7) 2m21.41349139s ago: executing program 7 (id=1592): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002200)=@base={0x12, 0x22, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000300), 0x0}, 0x20) 2m21.078101613s ago: executing program 7 (id=1594): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0xa, 0x522, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 2m20.388285444s ago: executing program 7 (id=1597): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f00000000c0)='.\x00', 0x517002, 0x0) 2m18.140113122s ago: executing program 7 (id=1602): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r1, 0x4, 0x10001}, 0xc) 2m17.061423745s ago: executing program 36 (id=1602): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r1, 0x4, 0x10001}, 0xc) 1m28.590859864s ago: executing program 9 (id=1900): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r2}, 0xc) 1m28.306811054s ago: executing program 9 (id=1903): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) close(r1) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x2204803, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m27.954692288s ago: executing program 9 (id=1905): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000005880)={[{@barrier}, {@autodefrag}, {@noacl}, {@compress_algo={'compress', 0x3d, 'no'}}, {@max_inline={'max_inline', 0x3d, [0x30, 0x30, 0x32, 0x74, 0x74, 0x0]}}, {@noautodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x6d]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x0) 1m24.578122836s ago: executing program 9 (id=1926): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 1m22.45157286s ago: executing program 9 (id=1943): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x7ff) 1m21.846047829s ago: executing program 9 (id=1946): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, 0x0) 1m21.272671503s ago: executing program 37 (id=1946): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, 0x0) 57.136656574s ago: executing program 1 (id=2091): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x58, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 56.644675702s ago: executing program 1 (id=2095): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="10080400895504002c001280110001006262696467655f73a8b2c183ee8ea4f314000580080028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) 56.059228244s ago: executing program 1 (id=2099): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) 55.673626464s ago: executing program 1 (id=2101): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000009c0)={[{@noload}, {@noauto_da_alloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noload}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@nouid32}]}, 0xff, 0x47b, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x389492, 0x0, 0xfd, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 54.819101082s ago: executing program 1 (id=2105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000002c0)={0x68, r1, 0x1, 0x70bd2a, 0x25dfdc00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x46, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_a, @device_a, @initial, {0x4, 0xc78}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x1}}, 0x0, @random=0x7, 0x80, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6, {0xfe, 0x9, 0x6afb}}, @void, @void, @val={0x72, 0x6}, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x2c048010) 53.314183708s ago: executing program 1 (id=2110): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) 52.504591435s ago: executing program 38 (id=2110): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) 39.202167117s ago: executing program 2 (id=2190): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffff7, 0x84a8, 0x515f3157, 0x4, "78e1141009fd93233bce43f20613281f43d01f"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 37.089603134s ago: executing program 2 (id=2200): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 36.597762581s ago: executing program 2 (id=2203): r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xe000200c}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 35.541274682s ago: executing program 2 (id=2209): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000191c0)='./file0\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 34.672550169s ago: executing program 2 (id=2215): openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, &(0x7f0000000180)={0x0, 0xfff, 0x100fe}) 33.946213327s ago: executing program 2 (id=2220): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') inotify_add_watch(r0, &(0x7f0000000180)='./file1\x00', 0x20000000) 33.237327953s ago: executing program 39 (id=2220): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') inotify_add_watch(r0, &(0x7f0000000180)='./file1\x00', 0x20000000) 6.627623776s ago: executing program 4 (id=2353): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1cfe) socket$nl_route(0x10, 0x3, 0x0) 6.438184895s ago: executing program 5 (id=2356): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2000000) 5.639198424s ago: executing program 0 (id=2360): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f00009c3000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 5.171923418s ago: executing program 8 (id=2364): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @loopback}]}, &(0x7f0000000000)=0x10) 4.927966681s ago: executing program 0 (id=2365): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x800, &(0x7f0000000680)={[{@debug}, {@nolazytime}, {@dax_inode}, {@jqfmt_vfsv0}, {@dioread_lock}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@test_dummy_encryption}]}, 0x3, 0x236, &(0x7f0000000300)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000200)='./file0\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) 4.89335054s ago: executing program 6 (id=2366): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 4.350257232s ago: executing program 8 (id=2367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x34, r1, 0x101, 0x20000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d92d38b413de"}]}, 0x34}, 0x1, 0x0, 0x0, 0xc805}, 0x0) 4.284363982s ago: executing program 3 (id=2368): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_open_dev$usbmon(&(0x7f0000000800), 0x3, 0xa02) syz_open_dev$usbmon(&(0x7f0000000740), 0x0, 0x20402) close_range(r0, 0xffffffffffffffff, 0x0) 4.155243113s ago: executing program 6 (id=2369): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x8001, 0x4) r1 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x9e2696008603fac1}) 4.152705542s ago: executing program 5 (id=2370): r0 = socket(0xa, 0x3, 0xff) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) setfsuid(r1) 4.094898966s ago: executing program 0 (id=2371): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x25dfdbfc, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff5}, @broadcast, @private=0xa010101, 0xffffff00, 0x1}}]}, {0xfffffffffffffce0}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.093324276s ago: executing program 6 (id=2372): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x8001}}}}}}, 0x0) 3.869339602s ago: executing program 8 (id=2373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_WME={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.741529351s ago: executing program 5 (id=2374): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x3c}}, 0x0) 3.701048473s ago: executing program 6 (id=2375): socket$inet6(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, [{0x4, 0x20, "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"}]}}}}}}, 0x0) 3.650176901s ago: executing program 4 (id=2376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x2, 0x4432, &(0x7f00000088c0)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.530374839s ago: executing program 3 (id=2377): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x400007f) write$FUSE_DIRENT(r0, &(0x7f0000000340)=ANY=[@ANYRESHEX], 0x128) read(r0, &(0x7f0000000280)=""/1, 0x1) 3.495152402s ago: executing program 8 (id=2378): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2], 0x7c}}, 0x20000000) 3.12896076s ago: executing program 6 (id=2379): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000001780)='%', 0x1, 0x24000800, 0x0, 0x0) 3.019334105s ago: executing program 0 (id=2380): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x10012, &(0x7f00000004c0)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d2ffd5dbc39d475a3efbcc5666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7a84c585f22f2397bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db392743800000004002300"/111, @ANYRES8], 0x4, 0x339, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) unlink(&(0x7f0000000000)='./file0\x00') 2.974591259s ago: executing program 5 (id=2381): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x1529, &(0x7f0000003f00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x58) 2.931455383s ago: executing program 3 (id=2382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x1f4, 0x4e, 0x0, &(0x7f0000000a80)="ff410800b083dcc1010b3efc88643acd3aaf0ae90057bd21762ae38f0000000000000053", 0x0, 0x2fe, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 2.7328687s ago: executing program 4 (id=2383): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x3f6, 0x400, 0x70bd2a, 0x25dfdbff}, 0x61}, 0x1, 0x0, 0x0, 0x8044}, 0xc014) 2.638796873s ago: executing program 6 (id=2384): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180)={[{@pquota}, {@discard}, {@nolargeio}, {@lazytime}, {@nogrpid}, {@bsdgroups}, {@quota}, {@nolazytime}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145042, 0x1ca) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.458154881s ago: executing program 0 (id=2385): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x96, 0x47, 0x3f, 0x20, 0x10c4, 0x8244, 0x7275, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8b, 0x4b, 0x28, 0x6, "", [{{0x9, 0x4, 0x31, 0xe, 0x0, 0x3, 0x0, 0x0, 0x1}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002840)={0x24, 0x0, &(0x7f0000002740)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000002ac0)={0x14, 0x0, &(0x7f0000001500)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.330741274s ago: executing program 5 (id=2386): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x11, r0, 0x0) io_setup(0xc00, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000000040)="f2be", 0x2, 0x4b, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3, r0, 0x0, 0x0, 0x9, 0x0, 0x2}]) 2.148615448s ago: executing program 3 (id=2387): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xf0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) 1.843661661s ago: executing program 3 (id=2388): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000280)={[{@norecovery}, {@block_validity}, {@nodelalloc}, {@discard}, {@bh}, {@jqfmt_vfsv1}, {@mblk_io_submit}, {@nombcache}, {@errors_remount}]}, 0x26, 0x76b, &(0x7f0000000b00)="$eJzs3M9rHGUfAPDvTLJNf+R9Ny+88L56EKGFFkonSXNpT40Xb4VCwWsNySSETLIhu6ndWLD1LNTmoiCIevboVSj1D/AmBQXvgmiNB/GyMptN2sbNjzZpt7afD0zmeZ6dme/3mx2ezEBmAnhpvV7+SCIGI+JSRFQ742lEHGq3DkfcWN9u7f71yXJJotW6/EtS7hZrrermsZLO+li0d4n/R8TdSsTp9/8et95cmZsoinyp0x9uzC8O15srZ2bnJ2bymXxhdOz8yLmxsXMjY7vW8L/11UOZdHfirfNHbn/75urqd181br3WfyaJ8Xbd0alt10C76O8ytv47qcT4lvGF/QZ7ziS9TgAAgD0pr/P7OteulahGX9erWAAAAOCfrDXQAgAAAF54SfQ6AwAAAODp2vg/gI1new/iOdjH8fMbETHULX5/+xniiMNRiYija8kjTyYk67vBvty4GRF3xreef1+UZ9iNfR57ZEv/0WekD+3z6ByEO+X8M95t/kk355/oMv/0b7w7YZ+2n/8exO/bZv67tMNxBx5qf/3pK5Vt49+MeLW/W/xkM36yTfy391jjrdUPbm/3WevziJNd//4kj8Ta4f0Q49OzxY6vH7j756l7O9V/tB2/1RexJX6yc/2Le6z/3bXf5rabS8r4p47v/P13i1+eEx928kgj4nZnXfZXt8Q4Pv/9N12Dt1rt+FMRrSf5/j/bY/0/fjlwbY+bAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQFsaEYORpNlmO02zLOJYRPw3jqZFrd44PV1bXpgqP4sYiko6PVvkIxFRXe8nZX+03X7QP7ulPxYR//nhyHrQ2SLPJmvFVK+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNOxiBiMJM0iIo2I36tpmmUR/XvYd+AZ5AcAAAAckKFeJwAAAAA8de7/AQAA4MX3pPf/yQHnAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzQLl28WC6ttfvXJ8v+1NXm8lzt6pmpvD6XzS9PZpO1pcVsplabKfJssja/2/GKWm1x9HwsXxtu5PXGcL25cmW+trzQuDI7PzGTX8krz6QqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHtdge0nSLCLSdjtNsyziXxExFJVkerbIRyLi3xFxr1oZKPujvU4aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA1dvrsxNFEW+pKGh8cwa70XEc5DGDo1ez0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRCvbkyN1EU+VK915kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQW+lPSUSUy8nqicGtnx5K/qi21xHxzieXP7o20WgsjZbjv26ONz7ujJ/tRf4AAADwUrjwOBtv3Kdv3McDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsVb25MjdRFPnS/hoXornSSrbZptc1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT+avAAAA//9vyMiO") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x80, 0x0, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x82400, 0x42) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.570913033s ago: executing program 5 (id=2389): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[], 0xff, 0x5e5c, &(0x7f0000005d80)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) truncate(&(0x7f0000000180)='./file1\x00', 0x6) 1.369812405s ago: executing program 4 (id=2390): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002300)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd26, 0x25dfdbed, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xffe0, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "f16bc1ea12f2ab9702e74eaac146a398"}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.267250262s ago: executing program 8 (id=2391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000030000001200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060048021100ddffffff1c0081"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 946.475972ms ago: executing program 4 (id=2392): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x5, r0, 0x1}) fchown(r2, 0x0, 0x0) 800.68223ms ago: executing program 8 (id=2393): unshare(0x2c020400) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, 0x0, 0x2c}, 0x10) 541.732438ms ago: executing program 3 (id=2394): chdir(&(0x7f0000000540)='./cgroup\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 472.261794ms ago: executing program 4 (id=2395): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 0s ago: executing program 0 (id=2396): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000040000000800000003000000001000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000750812a743e388e2156864509e266b83066dc77e077a"], 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000180)=0x8) kernel console output (not intermixed with test programs): has an endpoint descriptor with address 0xF3, changing to 0x83 [ 348.430984][T11423] ntfs3(loop3): ino=1e, "file1" attr_set_size_ex [ 348.466795][ T789] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 348.572579][ T789] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 348.623298][ T789] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.730928][ T789] usb 10-1: Product: syz [ 348.750607][ T789] usb 10-1: Manufacturer: syz [ 348.768356][ T789] usb 10-1: SerialNumber: syz [ 348.805180][ T12] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 348.805932][ T789] usb 10-1: config 0 descriptor?? [ 348.878582][ T5823] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 348.908324][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.929272][ T5823] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 348.948355][ T789] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 348.986573][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.015094][ T5823] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 349.023924][ T789] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 349.054113][ T36] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 349.065723][ T7767] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 349.193856][ T7847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.238543][ T7847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.569561][ T789] em28xx 10-1:0.0: chip ID is em2870 [ 349.804865][ T1203] Process accounting resumed [ 349.889748][ T24] usb 10-1: USB disconnect, device number 4 [ 349.932726][ T24] em28xx 10-1:0.0: Disconnecting em28xx [ 349.963539][T11474] loop2: detected capacity change from 0 to 64 [ 350.070377][ T24] em28xx 10-1:0.0: Freeing device [ 350.170095][T11474] BFS-fs: bfs_readdir(): Bad f_pos=00000101 for loop2:00000002 [ 350.490523][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1603'. [ 350.701582][T11489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 350.708955][T11489] IPv6: NLM_F_CREATE should be set when creating new route [ 350.716270][T11489] IPv6: NLM_F_CREATE should be set when creating new route [ 350.723571][T11489] IPv6: NLM_F_CREATE should be set when creating new route [ 350.744938][T11486] loop8: detected capacity change from 0 to 256 [ 350.766165][T11489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 350.835621][T11486] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 350.921867][T11496] loop4: detected capacity change from 0 to 128 [ 350.959606][T11496] EXT4-fs: Ignoring removed nobh option [ 351.054101][T11496] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 351.167306][T11496] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 351.250096][T11496] fscrypt (loop4, inode 12): Unsupported log2_data_unit_size in encryption policy: 8 [ 351.507031][T11028] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 351.828842][T11516] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 352.214078][T11527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.221429][T11527] IPv6: NLM_F_CREATE should be set when creating new route [ 352.228798][T11527] IPv6: NLM_F_CREATE should be set when creating new route [ 352.236084][T11527] IPv6: NLM_F_CREATE should be set when creating new route [ 352.246513][T11527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.531335][T11503] loop2: detected capacity change from 0 to 32768 [ 352.788566][T11503] UFO tlock:0xffffc9000287a1f8 [ 353.363646][T11556] program syz.1.1757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.777038][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1761'. [ 354.309677][T11551] loop3: detected capacity change from 0 to 32768 [ 354.373728][T11584] sch_tbf: burst 20736 is lower than device lo mtu (65550) ! [ 354.402868][T11551] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 354.610981][T11551] XFS (loop3): Ending clean mount [ 354.840895][T11602] loop4: detected capacity change from 0 to 1024 [ 354.864727][ T5823] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 354.875005][T11602] EXT4-fs: Ignoring removed orlov option [ 354.922602][T11602] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 354.961042][T11602] System zones: 0-1, 3-12 [ 354.968101][T11602] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.285654][T11028] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 355.968130][T11630] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1777'. [ 356.004710][T11624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.437901][T11637] loop8: detected capacity change from 0 to 2048 [ 356.493822][T11637] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.561321][T11637] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.007690][T11619] loop4: detected capacity change from 0 to 32768 [ 357.110902][T11619] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 357.141011][ T9814] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.550599][T11675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.587371][T11619] XFS (loop4): Starting recovery (logdev: internal) [ 357.617173][T11682] netlink: 71 bytes leftover after parsing attributes in process `syz.9.1792'. [ 357.653644][T11679] loop1: detected capacity change from 0 to 2048 [ 357.704293][T11679] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 357.762768][T11679] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 357.822994][T11619] XFS (loop4): Ending recovery (logdev: internal) [ 358.054253][T11028] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 358.716381][T11713] sch_fq: defrate 0 ignored. [ 359.658092][T11708] loop9: detected capacity change from 0 to 131072 [ 359.704976][T11708] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0) [ 359.713253][T11708] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 359.724940][T11708] F2FS-fs (loop9): invalid crc value [ 359.847124][T11708] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 359.898142][T11708] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 359.905265][T11708] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 360.035631][T11732] loop4: detected capacity change from 0 to 128 [ 360.095000][T11732] EXT4-fs (loop4): Test dummy encryption mode enabled [ 360.173868][T11732] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 360.209472][T11732] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 360.562567][T11028] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 360.648134][T11747] program syz.8.1808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 360.660999][T11735] loop3: detected capacity change from 0 to 4096 [ 360.892346][T11752] loop4: detected capacity change from 0 to 512 [ 360.967457][T11752] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 361.128073][T11752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.196447][T11764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1812'. [ 361.217626][T11752] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 361.265684][T11764] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1812'. [ 361.650819][T11028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.970943][ T6012] hid-generic 0005:0C45:1010.000A: item fetching failed at offset 0/1 [ 362.035671][ T6012] hid-generic 0005:0C45:1010.000A: probe with driver hid-generic failed with error -22 [ 362.143407][T11782] loop1: detected capacity change from 0 to 64 [ 362.241245][ T30] audit: type=1800 audit(1776263186.967:86): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1817" name="file1" dev="loop1" ino=22 res=0 errno=0 [ 362.616980][ T7767] hfs: node 4:3 still has 1 user(s)! [ 362.847375][T11759] loop8: detected capacity change from 0 to 32768 [ 362.849745][T11795] netlink: 1 bytes leftover after parsing attributes in process `syz.9.1824'. [ 362.977135][T11759] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 363.047696][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1825'. [ 363.363294][T11812] loop1: detected capacity change from 0 to 64 [ 363.583433][T11818] loop2: detected capacity change from 0 to 512 [ 363.637307][T11818] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 363.801702][T11818] EXT4-fs (loop2): 1 orphan inode deleted [ 363.875994][T11818] EXT4-fs (loop2): 1 truncate cleaned up [ 363.909139][T11818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.920779][ T7767] syz-executor: attempt to access beyond end of device [ 363.920779][ T7767] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 363.963307][ T7767] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 364.052513][ T7767] syz-executor: attempt to access beyond end of device [ 364.052513][ T7767] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 364.078618][T11826] loop3: detected capacity change from 0 to 256 [ 364.111012][ T9814] ocfs2: Unmounting device (7,8) on (node local) [ 364.119142][T11826] exfat: Deprecated parameter 'utf8' [ 364.147058][ T7767] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 364.278820][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.398480][T11826] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 364.500186][ T7767] Trying to free block not in datazone [ 365.056567][T11841] loop8: detected capacity change from 0 to 2048 [ 365.148586][T11841] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.402401][ T9814] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.696486][T11861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.779220][ T5920] kernel read not supported for file /dsp1 (pid: 5920 comm: kworker/0:6) [ 366.085126][T11870] loop1: detected capacity change from 0 to 256 [ 366.132344][T11870] exfat: Deprecated parameter 'utf8' [ 366.159947][T11870] exfat: Deprecated parameter 'namecase' [ 366.189692][T11870] exfat: Deprecated parameter 'utf8' [ 366.296585][T11870] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 366.503013][T11884] loop4: detected capacity change from 0 to 1024 [ 366.518811][T11885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.643022][T11884] hfsplus: can't free extent: start 2889, count 1 [ 367.300378][T11903] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1854'. [ 367.311090][T11901] loop8: detected capacity change from 0 to 764 [ 367.460477][T11877] loop3: detected capacity change from 0 to 32768 [ 367.644649][T11877] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 367.850539][T11918] netlink: 'syz.8.1857': attribute type 1 has an invalid length. [ 368.262182][T11930] (syz.3.1846,11930,0):ocfs2_rename:1287 ERROR: status = -2 [ 368.304530][T11930] (syz.3.1846,11930,0):ocfs2_rename:1700 ERROR: status = -2 [ 368.744738][ T5823] ocfs2: Unmounting device (7,3) on (node local) [ 368.815937][ T789] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 368.890901][T11951] xt_hashlimit: size too large, truncated to 1048576 [ 368.997902][ T789] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 369.048143][ T789] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 369.123479][ T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 369.155891][ T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 369.205517][ T789] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 369.247552][ T789] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 369.278160][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.319636][ T789] usb 3-1: Product: syz [ 369.337733][ T789] usb 3-1: Manufacturer: syz [ 369.368888][ T789] usb 3-1: SerialNumber: syz [ 369.408896][ T789] usb 3-1: config 0 descriptor?? [ 369.438487][T11943] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 369.480009][ T789] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 369.815138][ C0] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 369.834527][ T5920] usb 3-1: USB disconnect, device number 10 [ 370.121350][T11958] loop4: detected capacity change from 0 to 32768 [ 370.203576][T11958] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 370.320672][T11991] loop1: detected capacity change from 0 to 1024 [ 370.347772][T11958] XFS (loop4): Ending clean mount [ 370.383692][T11995] loop8: detected capacity change from 0 to 256 [ 370.397702][T11991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.411907][T11991] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.441785][T11991] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.1875: lblock 0 mapped to illegal pblock 0 (length 1) [ 370.466798][T11991] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 370.480826][T11991] EXT4-fs (loop1): This should not happen!! Data will be lost [ 370.480826][T11991] [ 370.493917][T11996] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 370.550035][T11995] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 370.640686][ T7767] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 370.720950][ T7767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 370.763949][T11028] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 371.229566][T12010] netlink: 5720 bytes leftover after parsing attributes in process `syz.1.1880'. [ 371.265416][T12010] netlink: 5720 bytes leftover after parsing attributes in process `syz.1.1880'. [ 371.679285][T12021] loop3: detected capacity change from 0 to 64 [ 371.865569][T12025] loop1: detected capacity change from 0 to 256 [ 372.390015][T12039] netlink: 'syz.1.1890': attribute type 9 has an invalid length. [ 372.416984][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 372.529402][T12039] team_slave_0: entered promiscuous mode [ 372.538348][T12039] team_slave_1: entered promiscuous mode [ 372.652955][T12039] macvlan2: entered promiscuous mode [ 372.738218][T12039] team0: entered promiscuous mode [ 372.794427][T12039] macvlan2: entered allmulticast mode [ 372.854147][T12039] team0: entered allmulticast mode [ 372.908207][T12039] team_slave_0: entered allmulticast mode [ 372.955273][T12039] team_slave_1: entered allmulticast mode [ 373.020373][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1895'. [ 373.037683][T12039] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 373.590265][T12043] loop8: detected capacity change from 0 to 131072 [ 373.602425][T12043] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(0) [ 373.610696][T12043] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 373.627908][T12043] F2FS-fs (loop8): invalid crc value [ 373.638144][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1896'. [ 373.692329][T12059] netlink: 568 bytes leftover after parsing attributes in process `syz.4.1896'. [ 373.754120][T12061] loop1: detected capacity change from 0 to 256 [ 373.835335][T12043] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 373.862087][T12043] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 373.869976][T12043] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 373.963395][T12061] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xecc0b056, utbl_chksum : 0xe619d30d) [ 375.248126][T12093] loop3: detected capacity change from 0 to 256 [ 375.623283][ T5920] kernel write not supported for file bpf-map (pid: 5920 comm: kworker/0:6) [ 376.468279][T12081] loop9: detected capacity change from 0 to 32768 [ 376.510476][T12081] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1905 (12081) [ 376.595072][T12081] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 376.641288][T12081] BTRFS info (device loop9): using sha256 checksum algorithm [ 376.957820][T12081] BTRFS info (device loop9): enabling ssd optimizations [ 377.014200][T12081] BTRFS info (device loop9): turning on async discard [ 377.061390][T12081] BTRFS info (device loop9): enabling free space tree [ 377.098349][T12081] BTRFS info (device loop9): enabling auto defrag [ 377.128211][T12081] BTRFS info (device loop9): max_inline set to 4096 [ 377.139069][T12145] loop2: detected capacity change from 0 to 512 [ 377.243650][T12145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.541214][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.723019][T12152] binder: 12150:12152 ioctl c0306201 200000000640 returned -22 [ 377.963303][ T5829] Bluetooth: hci2: command tx timeout [ 377.970299][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.978858][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.180516][T12165] loop4: detected capacity change from 0 to 512 [ 378.201107][T12165] EXT4-fs: Ignoring removed nobh option [ 378.255510][T12165] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 378.399028][T12165] EXT4-fs (loop4): 1 truncate cleaned up [ 378.466282][T12165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.478384][T10312] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 378.929790][T12182] loop9: detected capacity change from 0 to 512 [ 379.056641][T12188] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1936'. [ 379.081661][T12182] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1926: bg 0: block 393: padding at end of block bitmap is not set [ 379.147723][T12182] loop9: lost filesystem error report for type 5 error -117 [ 379.154628][T12182] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 379.162071][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 379.162098][ C0] EXT4-fs (loop9): initial error at time 1776263203: ext4_validate_block_bitmap:441 [ 379.162129][ C0] EXT4-fs (loop9): last error at time 1776263203: ext4_validate_block_bitmap:441 [ 379.177372][T11028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.271475][T12182] loop9: lost filesystem error report for type 5 error -117 [ 379.302011][T12182] EXT4-fs (loop9): 2 truncates cleaned up [ 379.364256][T12193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1937'. [ 379.412643][T12182] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.427159][ T5919] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 379.437737][T12193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1937'. [ 379.477587][T12197] loop4: detected capacity change from 0 to 128 [ 379.531790][T12197] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 379.605152][T12197] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 379.667629][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 379.701255][ T5919] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 379.761065][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.830253][ T5919] usb 3-1: config 0 descriptor?? [ 379.877196][T12189] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 380.333186][ T5919] hid (null): nested delimiters [ 380.355390][ T1203] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 380.380372][ T5919] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 380.397699][ T5919] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 380.408607][ T5919] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 380.433185][ T5919] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 380.444625][ T5919] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 380.472989][ T5919] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 380.483305][T10312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.503617][ T5919] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 380.547885][ T5919] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 380.562865][ T5919] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 380.563084][ T1203] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 380.585337][ T5919] asus 0003:0B05:1ABE.000B: unknown main item tag 0x0 [ 380.611434][ T5919] asus 0003:0B05:1ABE.000B: nested delimiters [ 380.620503][ T1203] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.638772][ T5919] asus 0003:0B05:1ABE.000B: item 0 2 2 10 parsing failed [ 380.663697][ T1203] usb 9-1: config 0 descriptor?? [ 380.673539][ T5919] asus 0003:0B05:1ABE.000B: Asus hid parse failed: -22 [ 380.689880][ T1203] cp210x 9-1:0.0: cp210x converter detected [ 380.700796][ T5919] asus 0003:0B05:1ABE.000B: probe with driver asus failed with error -22 [ 380.753540][ T5919] usb 3-1: USB disconnect, device number 11 [ 380.787888][ T57] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.034686][ T57] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.116493][ T1203] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 381.151789][ T1203] usb 9-1: cp210x converter now attached to ttyUSB0 [ 381.161633][ T57] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.358646][ T5964] usb 9-1: USB disconnect, device number 2 [ 381.439433][ T57] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.579354][ T5964] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 381.639422][T12232] loop4: detected capacity change from 0 to 2048 [ 381.717461][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 381.779990][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 381.796815][ T5964] cp210x 9-1:0.0: device disconnected [ 381.814816][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 381.837377][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 381.871011][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 381.910805][T12234] erspan0: entered promiscuous mode [ 381.988323][T12239] loop1: detected capacity change from 0 to 4096 [ 382.267428][ T30] audit: type=1800 audit(1776263206.997:87): pid=12239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1954" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 382.561462][T12257] loop3: detected capacity change from 0 to 2048 [ 382.631888][T12257] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 382.775150][T12265] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.042608][T12253] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 262144 [ 383.086027][T12253] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 383.294129][T12253] Remounting filesystem read-only [ 383.320210][T12253] NILFS (loop3): error -5 truncating bmap (ino=15) [ 383.593020][ T5823] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 383.809845][T12259] loop2: detected capacity change from 0 to 32768 [ 383.850657][T12276] tmpfs: Cannot change global quota limit on remount [ 383.947277][ T5829] Bluetooth: hci4: command tx timeout [ 384.023352][T12259] ERROR: (device loop2): dbAllocAG: unable to allocate blocks [ 384.023352][T12259] [ 384.085158][T12259] ERROR: (device loop2): dbDiscardAG: -EIO [ 384.085158][T12259] [ 384.353113][ T57] bridge_slave_1: left allmulticast mode [ 384.364956][ T57] bridge_slave_1: left promiscuous mode [ 384.371805][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.387665][T12288] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1966'. [ 384.405540][ T57] bridge_slave_0: left allmulticast mode [ 384.419213][ T57] bridge_slave_0: left promiscuous mode [ 384.435717][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.037314][T12299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1971'. [ 385.532642][T12293] loop2: detected capacity change from 0 to 32768 [ 385.580735][T12293] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1968 (12293) [ 385.631395][T12293] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 385.674462][T12293] BTRFS info (device loop2): using crc32c checksum algorithm [ 385.695188][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.794177][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.894052][ T57] bond0 (unregistering): Released all slaves [ 385.949757][T12293] BTRFS info (device loop2): enabling ssd optimizations [ 385.991632][T12293] BTRFS info (device loop2): turning on flush-on-commit [ 386.018895][T12293] BTRFS info (device loop2): enabling free space tree [ 386.036251][ T5829] Bluetooth: hci4: command tx timeout [ 386.045607][T12293] BTRFS info (device loop2): enabling auto defrag [ 386.078930][T12293] BTRFS info (device loop2): use lzo compression, level 1 [ 386.087277][T12293] BTRFS info (device loop2): max_inline set to 4096 [ 386.184076][T12301] loop3: detected capacity change from 0 to 32768 [ 386.202625][T12327] loop4: detected capacity change from 0 to 64 [ 386.277577][T12301] JBD2: Ignoring recovery information on journal [ 386.458081][T12301] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 386.914262][T12336] loop4: detected capacity change from 0 to 512 [ 386.955330][T12336] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 386.963477][T12235] chnl_net:caif_netlink_parms(): no params data found [ 387.073232][T12336] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 387.105933][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 387.112455][ C0] EXT4-fs (loop4): initial error at time 1776263211: ext4_mb_generate_buddy:1317 [ 387.121638][ C0] EXT4-fs (loop4): last error at time 1776263211: ext4_mb_generate_buddy:1317 [ 387.214452][ T5822] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 387.311379][T12336] EXT4-fs (loop4): 1 truncate cleaned up [ 387.321226][ T5823] ocfs2: Unmounting device (7,3) on (node local) [ 387.392958][T12336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.479968][T12336] EXT4-fs error (device loop4) in ext4_setattr:6030: error 28 [ 387.492801][ T30] audit: type=1800 audit(1776263212.207:88): pid=12336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1979" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 387.820152][ T5964] hid-generic 0005:16C0:05DF.000C: item fetching failed at offset 0/1 [ 387.844205][T11028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.915185][ T5964] hid-generic 0005:16C0:05DF.000C: probe with driver hid-generic failed with error -22 [ 388.123488][ T5829] Bluetooth: hci4: command tx timeout [ 388.293685][T12361] loop1: detected capacity change from 0 to 512 [ 388.330537][T12361] EXT4-fs: Ignoring removed oldalloc option [ 388.359075][T12361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 388.415513][T12364] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1981'. [ 388.467840][T12361] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 388.530954][T12361] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 388.606036][T12361] EXT4-fs (loop1): orphan cleanup on readonly fs [ 388.641073][T12361] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 388.650364][T12369] program syz.8.1987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.660299][T12361] EXT4-fs warning (device loop1): ext4_enable_quotas:7263: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 388.690239][T12361] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 388.906286][T12235] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.916038][T12235] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.933123][T12235] bridge_slave_0: entered allmulticast mode [ 388.938800][T12361] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1986: bg 0: block 40: padding at end of block bitmap is not set [ 388.954189][T12235] bridge_slave_0: entered promiscuous mode [ 389.008721][T12361] loop1: lost filesystem error report for type 5 error -117 [ 389.009206][T12361] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 389.016738][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 389.016781][ C0] EXT4-fs (loop1): initial error at time 1776263213: ext4_validate_block_bitmap:441 [ 389.016817][ C0] EXT4-fs (loop1): last error at time 1776263213: ext4_validate_block_bitmap:441 [ 389.046590][ T5481] 8021q: adding VLAN 0 to HW filter on device eth1 [ 389.153388][T12235] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.216791][T12235] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.259832][T12235] bridge_slave_1: entered allmulticast mode [ 389.272858][T12361] loop1: lost filesystem error report for type 5 error -117 [ 389.277089][T12361] EXT4-fs (loop1): 1 truncate cleaned up [ 389.302831][T12235] bridge_slave_1: entered promiscuous mode [ 389.354104][T12361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 389.396017][ T57] hsr_slave_0: left promiscuous mode [ 389.427378][ T57] hsr_slave_1: left promiscuous mode [ 389.446784][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.466233][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.502137][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.519904][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.543607][T12361] EXT4-fs (loop1): shut down requested (2) [ 389.618505][ T57] veth1_macvtap: left promiscuous mode [ 389.637803][ T57] veth0_macvtap: left promiscuous mode [ 389.655307][ T57] veth1_vlan: left promiscuous mode [ 389.679140][ T57] veth0_vlan: left promiscuous mode [ 389.758613][ T7767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.216264][ T5829] Bluetooth: hci4: command tx timeout [ 390.414427][T12374] loop2: detected capacity change from 0 to 32768 [ 390.543526][T12374] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 390.700805][T12374] XFS (loop2): Ending clean mount [ 390.984593][ T57] team0 (unregistering): Port device team_slave_1 removed [ 391.021272][ T57] team0 (unregistering): Port device team_slave_0 removed [ 391.422126][ T5822] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 391.927471][T12235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.040468][T12235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.311575][T12420] loop1: detected capacity change from 0 to 512 [ 392.382238][T12235] team0: Port device team_slave_0 added [ 392.472215][T12235] team0: Port device team_slave_1 added [ 392.742384][T12427] tipc: Started in network mode [ 392.768513][T12427] tipc: Node identity 00000000000000000040ffffe0000001, cluster identity 4711 [ 392.817685][T12427] tipc: Enabling of bearer rejected, failed to enable media [ 392.963251][T12235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.984623][T12235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.171973][T12235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.224361][T12441] loop3: detected capacity change from 0 to 256 [ 393.241399][T12235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.282956][T12235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.287139][T12439] loop1: detected capacity change from 0 to 2048 [ 393.378049][T12235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.399272][T12439] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 393.439773][T12441] FAT-fs (loop3): Directory bread(block 64) failed [ 393.495920][T12441] FAT-fs (loop3): Directory bread(block 65) failed [ 393.512113][T12441] FAT-fs (loop3): Directory bread(block 66) failed [ 393.539703][T12439] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 393.603632][T12439] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 393.604205][T12441] FAT-fs (loop3): Directory bread(block 67) failed [ 393.619009][T12235] hsr_slave_0: entered promiscuous mode [ 393.663267][T12235] hsr_slave_1: entered promiscuous mode [ 393.744003][T12441] FAT-fs (loop3): Directory bread(block 68) failed [ 393.793437][T12441] FAT-fs (loop3): Directory bread(block 69) failed [ 393.823142][T12441] FAT-fs (loop3): Directory bread(block 70) failed [ 393.855282][T12441] FAT-fs (loop3): Directory bread(block 71) failed [ 393.874691][T12441] FAT-fs (loop3): Directory bread(block 72) failed [ 393.914208][T12441] FAT-fs (loop3): Directory bread(block 73) failed [ 395.380509][T12482] loop3: detected capacity change from 0 to 512 [ 395.398176][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 395.674376][T12482] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #16: comm syz.3.2020: corrupted inode contents [ 395.757974][T12482] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 395.763169][T12482] EXT4-fs error (device loop3): ext4_dirty_inode:6497: inode #16: comm syz.3.2020: mark_inode_dirty error [ 395.772539][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 395.772568][ C0] EXT4-fs (loop3): initial error at time 1776263220: ext4_do_update_inode:5604: inode 16 [ 395.772611][ C0] EXT4-fs (loop3): last error at time 1776263220: ext4_do_update_inode:5604: inode 16 [ 395.832976][T12482] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 395.833534][T12482] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #16: comm syz.3.2020: corrupted inode contents [ 395.974503][T12482] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 395.975099][T12482] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.2020: mark_inode_dirty error [ 396.054941][T12501] loop2: detected capacity change from 0 to 64 [ 396.061099][T12482] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 396.063499][T12482] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #16: comm syz.3.2020: corrupted inode contents [ 396.133732][T12482] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 396.134192][T12482] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 396.194568][T12482] loop3: lost filesystem error report for type 5 error -117 [ 396.198786][T12482] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #16: comm syz.3.2020: corrupted inode contents [ 396.280031][T12482] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 396.281004][T12482] EXT4-fs error (device loop3): ext4_truncate:4604: inode #16: comm syz.3.2020: mark_inode_dirty error [ 396.399176][T12482] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 396.400996][T12482] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 396.426865][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'. [ 396.445207][T12482] loop3: lost filesystem error report for type 5 error -117 [ 396.455426][T12482] EXT4-fs (loop3): 1 truncate cleaned up [ 396.469379][ T1076] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 396.500520][ T1076] EXT4-fs error (device loop3): ext4_release_dquot:7064: comm kworker/u8:7: Failed to release dquot type 1 [ 396.529989][T12482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.540858][ T1076] loop3: lost filesystem error report for type 5 error -117 [ 396.583987][T12482] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.629344][ T5481] 8021q: adding VLAN 0 to HW filter on device eth2 [ 396.662649][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'. [ 396.856727][ T30] audit: type=1800 audit(1776263221.587:89): pid=12482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2020" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 397.077097][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.354655][T12552] loop1: detected capacity change from 0 to 512 [ 398.404200][T12552] EXT4-fs: inline encryption not supported [ 398.452684][T12554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2037'. [ 398.523068][T12552] EXT4-fs (loop1): 1 truncate cleaned up [ 398.535627][T12552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.683730][ T30] audit: type=1326 audit(1776263223.387:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.2.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecbb9c819 code=0x7ffc0000 [ 398.737144][ T30] audit: type=1326 audit(1776263223.407:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.2.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecbb9c819 code=0x7ffc0000 [ 398.769947][ T30] audit: type=1326 audit(1776263223.407:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.2.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fbecbb9c819 code=0x7ffc0000 [ 398.793171][ T30] audit: type=1326 audit(1776263223.407:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.2.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecbb9c819 code=0x7ffc0000 [ 398.857033][ T30] audit: type=1326 audit(1776263223.407:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.2.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecbb9c819 code=0x7ffc0000 [ 398.881842][T12562] loop4: detected capacity change from 0 to 512 [ 398.916922][T12562] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 398.949290][ T7767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.963396][ T30] audit: type=1326 audit(1776263223.407:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.2.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbecbb9c819 code=0x7ffc0000 [ 398.965997][T12562] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.2041: invalid block [ 399.002545][T12562] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 399.003693][ T30] audit: type=1326 audit(1776263223.407:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.2.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecbb9c819 code=0x7ffc0000 [ 399.012958][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 399.012980][ C1] EXT4-fs (loop4): initial error at time 1776263223: ext4_get_branch:178: inode 11: block 4294967295 [ 399.013026][ C1] EXT4-fs (loop4): last error at time 1776263223: ext4_get_branch:178: inode 11: block 4294967295 [ 399.026856][T12562] EXT4-fs (loop4): Remounting filesystem read-only [ 399.035466][ T30] audit: type=1326 audit(1776263223.407:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12559 comm="syz.2.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecbb9c819 code=0x7ffc0000 [ 399.119499][T12562] EXT4-fs (loop4): 2 truncates cleaned up [ 399.213248][T12562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.289537][ T5481] 8021q: adding VLAN 0 to HW filter on device eth3 [ 399.494812][T12573] loop8: detected capacity change from 0 to 512 [ 399.570822][T12573] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 399.694921][T12573] EXT4-fs (loop8): 1 truncate cleaned up [ 399.730249][T12579] loop2: detected capacity change from 0 to 256 [ 399.740110][T12582] netlink: 'syz.1.2049': attribute type 11 has an invalid length. [ 399.741193][T12579] exfat: Deprecated parameter 'utf8' [ 399.754051][T12579] exfat: Deprecated parameter 'namecase' [ 399.778848][T11028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.811256][T12579] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 399.827836][T12573] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.182923][T12587] loop3: detected capacity change from 0 to 4096 [ 400.233360][T12587] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 400.280269][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 400.360768][T12235] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 400.388333][T12587] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 400.399292][ T9814] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.452758][T12235] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.532246][T12235] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 400.631822][T12235] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.698632][T12235] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 400.719497][T12599] loop4: detected capacity change from 0 to 8 [ 400.827642][T12235] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.871140][T12599] SQUASHFS error: Failed to read block 0x18e: -5 [ 400.881500][T12235] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 400.923524][T12599] SQUASHFS error: Unable to read metadata cache entry [18c] [ 401.037021][T12235] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.203634][T12616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2054'. [ 401.233681][T12617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2057'. [ 401.267190][T12616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2054'. [ 401.275840][T12607] loop3: detected capacity change from 0 to 2048 [ 401.297478][T12617] erspan0: entered promiscuous mode [ 401.325598][T12607] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 401.456484][T12619] loop4: detected capacity change from 0 to 2048 [ 401.590273][T12619] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 401.660708][T12619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 401.704927][T12235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.734307][T12624] loop1: detected capacity change from 0 to 512 [ 401.808761][T12624] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 401.837440][T12235] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.857761][T12624] System zones: 1-20 [ 401.858856][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.869065][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.962461][T12624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.042183][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.049472][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.297018][T12624] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 403.338688][T12669] loop3: detected capacity change from 0 to 256 [ 403.417281][T12656] loop8: detected capacity change from 0 to 4096 [ 403.448985][T12235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.515493][ T7767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.486160][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 404.486181][ T30] audit: type=1800 audit(1776263229.217:102): pid=12656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2070" name="file1" dev="loop8" ino=0 res=0 errno=0 [ 404.722590][T12702] loop1: detected capacity change from 0 to 512 [ 404.767510][T12702] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 404.829244][T12702] EXT4-fs (loop1): 1 truncate cleaned up [ 404.953245][T12702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.054340][T12235] veth0_vlan: entered promiscuous mode [ 405.073888][T12702] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2083: bg 0: block 4: invalid block bitmap [ 405.162039][T12235] veth1_vlan: entered promiscuous mode [ 405.180100][T12717] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2087'. [ 405.385968][ T7767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.411300][T12235] veth0_macvtap: entered promiscuous mode [ 405.508611][T12235] veth1_macvtap: entered promiscuous mode [ 405.631232][T12235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.715149][T12235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.780680][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.812838][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.953734][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.992329][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.098734][T12700] loop2: detected capacity change from 0 to 32768 [ 406.171457][T12700] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2082 (12700) [ 406.282105][T12738] netlink: 'syz.1.2095': attribute type 40 has an invalid length. [ 406.323352][T12700] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 406.348335][T12700] BTRFS info (device loop2): using crc32c checksum algorithm [ 406.386975][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.434802][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.600655][T12700] BTRFS info (device loop2): enabling ssd optimizations [ 406.608792][ T7847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.662805][ T7847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.677810][T12700] BTRFS info (device loop2): turning on flush-on-commit [ 406.752655][T12700] BTRFS info (device loop2): enabling free space tree [ 406.795622][T12700] BTRFS info (device loop2): enabling auto defrag [ 406.838039][T12700] BTRFS info (device loop2): use lzo compression, level 1 [ 406.878369][T12700] BTRFS info (device loop2): max_inline set to 4096 [ 407.017035][T12772] loop1: detected capacity change from 0 to 512 [ 407.114709][T12772] EXT4-fs (loop1): 1 truncate cleaned up [ 407.239318][T12772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.393414][T12772] overlayfs: upper fs needs to support d_type. [ 407.463109][ T5822] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 407.726478][T12785] loop4: detected capacity change from 0 to 1024 [ 407.847308][ T7767] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 407.879010][T12785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.966425][ T7767] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 408.224233][T12746] loop3: detected capacity change from 0 to 40427 [ 408.233493][T11028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.265559][T12746] F2FS-fs (loop3): build fault injection rate: 771 [ 408.320008][T12746] F2FS-fs (loop3): invalid crc value [ 408.362616][ T9821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.380783][T12734] loop8: detected capacity change from 0 to 32768 [ 408.429499][T12734] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2093 (12734) [ 408.524037][T12734] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 408.564378][T12734] BTRFS info (device loop8): using crc32c checksum algorithm [ 408.942979][T12778] loop6: detected capacity change from 0 to 32768 [ 409.019947][T12746] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 409.121661][T12746] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 409.156960][T12778] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 409.183637][T12734] BTRFS error (device loop8): open_ctree failed: -4 [ 409.607023][T12778] (syz.6.1947,12778,0):ocfs2_rename:1287 ERROR: status = -2 [ 409.643966][T12778] (syz.6.1947,12778,0):ocfs2_rename:1700 ERROR: status = -2 [ 410.283590][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 410.299419][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 410.313440][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 410.322482][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 410.335589][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 410.477383][ T5823] syz-executor: attempt to access beyond end of device [ 410.477383][ T5823] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 410.510021][ T1076] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.573418][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 410.573460][ T5823] Tainted: [L]=SOFTLOCKUP [ 410.573470][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 410.573486][ T5823] Call Trace: [ 410.573496][ T5823] [ 410.573506][ T5823] dump_stack_lvl+0xe8/0x150 [ 410.573550][ T5823] f2fs_handle_critical_error+0x37c/0x540 [ 410.573593][ T5823] f2fs_write_end_io+0xcdb/0xff0 [ 410.573650][ T5823] __submit_merged_bio+0x256/0x6a0 [ 410.573689][ T5823] __submit_merged_write_cond+0x3c9/0x4e0 [ 410.573729][ T5823] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 410.573781][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.573822][ T5823] f2fs_write_data_pages+0x2975/0x35e0 [ 410.573856][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.573885][ T5823] ? __lock_acquire+0x6b5/0x2cf0 [ 410.573960][ T5823] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 410.574011][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.574041][ T5823] ? css_rstat_updated+0x23a/0x530 [ 410.574102][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.574132][ T5823] ? rcu_is_watching+0x15/0xb0 [ 410.574175][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.574204][ T5823] ? __lock_acquire+0x6b5/0x2cf0 [ 410.574255][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.574285][ T5823] ? __lock_acquire+0x6b5/0x2cf0 [ 410.574330][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.574360][ T5823] ? do_raw_spin_lock+0x12b/0x2f0 [ 410.574395][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.574429][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.574459][ T5823] ? do_raw_spin_unlock+0xf5/0x210 [ 410.574488][ T5823] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 410.574525][ T5823] do_writepages+0x32e/0x550 [ 410.574560][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.574593][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.574630][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.574661][ T5823] ? do_raw_spin_unlock+0xf5/0x210 [ 410.574694][ T5823] filemap_fdatawrite+0x1e9/0x2f0 [ 410.574733][ T5823] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 410.574820][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.574852][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.574886][ T5823] ? do_raw_spin_unlock+0xf5/0x210 [ 410.574919][ T5823] f2fs_sync_dirty_inodes+0x30e/0x830 [ 410.574973][ T5823] f2fs_write_checkpoint+0x9df/0x26a0 [ 410.575047][ T5823] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 410.575128][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.575154][ T5823] ? kfree+0x1c1/0x620 [ 410.575187][ T5823] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 410.575237][ T5823] kill_f2fs_super+0x314/0x720 [ 410.575281][ T5823] ? __pfx_kill_f2fs_super+0x10/0x10 [ 410.575331][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.575361][ T5823] ? lockdep_hardirqs_on+0x7a/0x110 [ 410.575394][ T5823] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.575439][ T5823] deactivate_locked_super+0xbc/0x130 [ 410.575479][ T5823] cleanup_mnt+0x437/0x4d0 [ 410.575518][ T5823] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.575552][ T5823] task_work_run+0x1d9/0x270 [ 410.575585][ T5823] ? __pfx_task_work_run+0x10/0x10 [ 410.575623][ T5823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.575651][ T5823] exit_to_user_mode_loop+0xed/0x480 [ 410.575683][ T5823] ? rcu_is_watching+0x15/0xb0 [ 410.575723][ T5823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.575758][ T5823] do_syscall_64+0x33e/0xf80 [ 410.575790][ T5823] ? trace_irq_disable+0x3b/0x140 [ 410.575825][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.575851][ T5823] RIP: 0033:0x7f84e799da57 [ 410.575875][ T5823] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 410.575897][ T5823] RSP: 002b:00007ffee9404e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 410.575923][ T5823] RAX: 0000000000000000 RBX: 00007f84e7a32048 RCX: 00007f84e799da57 [ 410.575939][ T5823] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee9404f10 [ 410.575953][ T5823] RBP: 00007ffee9404f10 R08: 00007ffee9405f10 R09: 00000000ffffffff [ 410.575969][ T5823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee9405fa0 [ 410.575983][ T5823] R13: 00007f84e7a32048 R14: 0000000000063fa5 R15: 00007ffee9405fe0 [ 410.576019][ T5823] [ 411.030047][ T5823] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 411.163798][T12235] ocfs2: Unmounting device (7,6) on (node local) [ 411.480343][T12854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 411.487723][T12854] IPv6: NLM_F_CREATE should be set when creating new route [ 411.495024][T12854] IPv6: NLM_F_CREATE should be set when creating new route [ 411.664604][ T1076] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.668270][T12859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 411.848820][T12863] bridge0: port 3(vlan2) entered blocking state [ 411.892278][T12863] bridge0: port 3(vlan2) entered disabled state [ 411.913955][T12863] vlan2: entered allmulticast mode [ 411.932455][T12863] bridge0: entered allmulticast mode [ 411.958282][T12863] vlan2: left allmulticast mode [ 411.966923][T12863] bridge0: left allmulticast mode [ 412.164408][ T1076] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.434218][ T5838] Bluetooth: hci0: command tx timeout [ 412.457143][ T1076] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.176751][T12841] chnl_net:caif_netlink_parms(): no params data found [ 413.193155][T12904] loop6: detected capacity change from 0 to 2640 [ 413.235071][T12904] Buffer I/O error on dev loop6, logical block 0, async page read [ 413.260975][T12904] Buffer I/O error on dev loop6, logical block 0, async page read [ 413.281631][T12904] Buffer I/O error on dev loop6, logical block 0, async page read [ 413.320843][T12904] Buffer I/O error on dev loop6, logical block 0, async page read [ 413.338389][T12904] Buffer I/O error on dev loop6, logical block 0, async page read [ 413.349393][T12904] Buffer I/O error on dev loop6, logical block 0, async page read [ 413.371103][T12904] Buffer I/O error on dev loop6, logical block 0, async page read [ 413.380155][T12904] Buffer I/O error on dev loop6, logical block 0, async page read [ 413.393355][T12904] ldm_validate_partition_table(): Disk read failed. [ 413.401530][T12904] Buffer I/O error on dev loop6, logical block 0, async page read [ 413.410287][T12904] Buffer I/O error on dev loop6, logical block 0, async page read [ 413.421919][T12904] Dev loop6: unable to read RDB block 0 [ 413.428403][T12904] loop6: unable to read partition table [ 413.449990][T12904] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 413.474659][T12908] loop4: detected capacity change from 0 to 4096 [ 413.986289][ T5964] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 414.004962][T12927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2141'. [ 414.014248][T12927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2141'. [ 414.197121][ T5964] usb 9-1: Using ep0 maxpacket: 32 [ 414.242156][ T5964] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 414.277002][T12892] loop3: detected capacity change from 0 to 32768 [ 414.289575][ T5964] usb 9-1: config 0 has no interface number 0 [ 414.312074][ T5964] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 414.341155][T12892] (syz.3.2127,12892,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 414.348817][ T5964] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 414.379014][ T1076] bridge_slave_1: left allmulticast mode [ 414.393892][ T1076] bridge_slave_1: left promiscuous mode [ 414.405526][T12892] (syz.3.2127,12892,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 414.416880][ T5964] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.423183][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.472019][T12892] JBD2: Ignoring recovery information on journal [ 414.484783][ T1076] bridge_slave_0: left allmulticast mode [ 414.491592][ T5964] usb 9-1: Product: syz [ 414.496259][ T5964] usb 9-1: Manufacturer: syz [ 414.500885][ T5964] usb 9-1: SerialNumber: syz [ 414.507166][ T5893] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 414.515116][ T5838] Bluetooth: hci0: command tx timeout [ 414.527395][ T5964] usb 9-1: config 0 descriptor?? [ 414.543952][ T5964] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 414.552853][ T1076] bridge_slave_0: left promiscuous mode [ 414.560012][ T5964] em28xx 9-1:0.132: Video interface 132 found: [ 414.584416][T12942] loop4: detected capacity change from 0 to 4096 [ 414.594257][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.633201][T12942] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 414.701908][ T1076] batman_adv: batadv0: Interface deactivated: gretap1 [ 414.731489][ T5893] usb 3-1: unable to get BOS descriptor or descriptor too short [ 414.752559][T12942] ntfs3(loop4): Failed to load $Extend (-22). [ 414.768854][T12892] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 414.775684][ T5893] usb 3-1: config 1 interface 0 has no altsetting 0 [ 414.781897][T12942] ntfs3(loop4): Failed to initialize $Extend. [ 414.821755][ T5893] usb 3-1: string descriptor 0 read error: -22 [ 414.854637][ T5893] usb 3-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.40 [ 414.902614][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.963056][ T5964] em28xx 9-1:0.132: chip ID is em2884 [ 415.118817][ T5823] ocfs2: Unmounting device (7,3) on (node local) [ 415.397579][ T5964] em28xx 9-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 415.483204][ T5893] hid_parser_main: 301 callbacks suppressed [ 415.483234][ T5893] aquacomputer_d5next 0003:0C70:F014.000D: unknown main item tag 0x0 [ 415.519526][ T5964] em28xx 9-1:0.132: board has no eeprom [ 415.524318][ T5893] aquacomputer_d5next 0003:0C70:F014.000D: unknown main item tag 0x0 [ 415.544278][ T5893] aquacomputer_d5next 0003:0C70:F014.000D: unknown main item tag 0x0 [ 415.558473][ T5893] aquacomputer_d5next 0003:0C70:F014.000D: unknown main item tag 0x0 [ 415.582477][ T5893] aquacomputer_d5next 0003:0C70:F014.000D: unknown main item tag 0x0 [ 415.599118][ T5893] aquacomputer_d5next 0003:0C70:F014.000D: unknown main item tag 0x0 [ 415.613972][ T5964] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 415.631527][ T5964] em28xx 9-1:0.132: analog set to bulk mode. [ 415.632203][ T5893] aquacomputer_d5next 0003:0C70:F014.000D: unknown main item tag 0x0 [ 415.649616][ T5931] em28xx 9-1:0.132: Registering V4L2 extension [ 415.661275][ T5893] aquacomputer_d5next 0003:0C70:F014.000D: unknown main item tag 0x0 [ 415.687915][ T5964] usb 9-1: USB disconnect, device number 3 [ 415.694826][ T5893] aquacomputer_d5next 0003:0C70:F014.000D: unknown main item tag 0x0 [ 415.720426][ T5964] em28xx 9-1:0.132: Disconnecting em28xx [ 415.741972][ T5893] aquacomputer_d5next 0003:0C70:F014.000D: unknown main item tag 0x0 [ 415.750991][ T5893] aquacomputer_d5next 0003:0C70:F014.000D: unexpected long global item [ 415.771934][ T5893] aquacomputer_d5next 0003:0C70:F014.000D: probe with driver aquacomputer_d5next failed with error -22 [ 415.804407][ T5893] usb 3-1: USB disconnect, device number 12 [ 415.845441][ T1076] batman_adv: batadv0: Removing interface: gretap1 [ 416.040913][ T1076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.068744][ T1076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.092186][ T1076] bond0 (unregistering): Released all slaves [ 416.124039][ T5931] em28xx 9-1:0.132: Config register raw data: 0xffffffed [ 416.134368][T12841] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.147544][ T5931] em28xx 9-1:0.132: AC97 chip type couldn't be determined [ 416.158781][T12841] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.169311][T12841] bridge_slave_0: entered allmulticast mode [ 416.176614][ T5931] em28xx 9-1:0.132: No AC97 audio processor [ 416.192165][T12841] bridge_slave_0: entered promiscuous mode [ 416.242483][T12841] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.276479][T12841] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.286241][ T5931] usb 9-1: Decoder not found [ 416.297151][T12841] bridge_slave_1: entered allmulticast mode [ 416.303182][ T5931] em28xx 9-1:0.132: failed to create media graph [ 416.355503][ T5931] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 416.366998][T12841] bridge_slave_1: entered promiscuous mode [ 416.436284][ T5931] em28xx 9-1:0.132: Remote control support is not available for this card. [ 416.529216][ T5964] em28xx 9-1:0.132: Closing input extension [ 416.559719][T12971] program syz.6.2148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 416.588396][ T5838] Bluetooth: hci0: command tx timeout [ 416.668393][T12975] loop4: detected capacity change from 0 to 512 [ 416.777843][T12975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.815317][T12975] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.957668][T12841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.974929][ T5964] em28xx 9-1:0.132: Freeing device [ 417.030130][T12988] loop8: detected capacity change from 0 to 512 [ 417.060447][T12841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.084458][T12988] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 417.154284][T12988] EXT4-fs (loop8): 1 truncate cleaned up [ 417.191916][T12988] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.224043][T11028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.381568][ T9814] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.641684][T12841] team0: Port device team_slave_0 added [ 417.696660][T12841] team0: Port device team_slave_1 added [ 417.852863][ T1076] hsr_slave_0: left promiscuous mode [ 417.860365][ T6012] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 417.880677][ T1076] hsr_slave_1: left promiscuous mode [ 417.887727][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.895209][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.912474][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.931221][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.941468][T12977] loop3: detected capacity change from 0 to 32768 [ 418.007112][ T1076] team0: left allmulticast mode [ 418.022336][ T1076] team_slave_0: left allmulticast mode [ 418.039737][ T1076] team_slave_1: left allmulticast mode [ 418.040093][ T6012] usb 5-1: Using ep0 maxpacket: 16 [ 418.054135][ T1076] team0: left promiscuous mode [ 418.063217][ T6012] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.075594][ T1076] team_slave_0: left promiscuous mode [ 418.081880][ T1076] team_slave_1: left promiscuous mode [ 418.086799][ T6012] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 418.114034][ T6012] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 418.119544][ T1076] veth1_macvtap: left promiscuous mode [ 418.132515][ T6012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.149595][ T1076] veth0_macvtap: left promiscuous mode [ 418.154997][ T6012] usb 5-1: Product: syz [ 418.164903][ T6012] usb 5-1: Manufacturer: syz [ 418.168010][ T1076] veth1_vlan: left promiscuous mode [ 418.177393][ T6012] usb 5-1: SerialNumber: syz [ 418.185595][ T1076] veth0_vlan: left promiscuous mode [ 418.635375][ T6012] usb 5-1: cannot find UAC_HEADER [ 418.666702][ T5838] Bluetooth: hci0: command tx timeout [ 418.812222][T13021] loop8: detected capacity change from 0 to 512 [ 418.845327][T13021] EXT4-fs: inline encryption not supported [ 418.903010][T13021] EXT4-fs (loop8): 1 truncate cleaned up [ 418.950851][T13021] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.049555][ T6012] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 419.064909][ T6012] usb 5-1: USB disconnect, device number 2 [ 419.164680][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.185346][ T1076] team0 (unregistering): Port device team_slave_1 removed [ 419.218305][ T9814] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.263163][ T1076] team0 (unregistering): Port device team_slave_0 removed [ 419.395001][T13038] loop8: detected capacity change from 0 to 512 [ 419.435310][T13038] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 419.520721][T13038] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.2166: invalid indirect mapped block 4294967295 (level 0) [ 419.535430][T13038] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 419.566859][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 419.582533][ C1] EXT4-fs (loop8): initial error at time 1776263244: ext4_free_branches:1023: inode 16 [ 419.592338][ C1] EXT4-fs (loop8): last error at time 1776263244: ext4_free_branches:1023: inode 16 [ 419.735621][T13038] EXT4-fs (loop8): Remounting filesystem read-only [ 419.776389][T13038] EXT4-fs (loop8): 1 orphan inode deleted [ 419.798174][T13038] EXT4-fs (loop8): 1 truncate cleaned up [ 419.819411][T13038] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.883966][ T9814] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.100857][T12841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.110026][T13047] loop8: detected capacity change from 0 to 2048 [ 420.131774][T12841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.228358][T12841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.251612][T13051] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 420.344322][T12841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.392573][T12841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.487533][T13043] loop3: detected capacity change from 0 to 32768 [ 420.500691][T12841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.578322][T13043] JBD2: Ignoring recovery information on journal [ 420.742854][T13043] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 420.960863][T13066] netlink: 212356 bytes leftover after parsing attributes in process `syz.6.2174'. [ 421.073543][T13043] (syz.3.2168,13043,0):ocfs2_check_dir_entry:314 ERROR: directory entry (#65: offset=312) too close to end or out-of-bounds [ 421.089162][T12841] hsr_slave_0: entered promiscuous mode [ 421.229114][T12841] hsr_slave_1: entered promiscuous mode [ 421.267005][T12841] debugfs: 'hsr0' already exists in 'hsr' [ 421.300864][T13072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.327186][T12841] Cannot create hsr debugfs directory [ 421.552806][ T5823] ocfs2: Unmounting device (7,3) on (node local) [ 422.266863][T13054] loop2: detected capacity change from 0 to 40427 [ 422.335820][T13054] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 422.379050][T13054] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 422.417087][T13054] F2FS-fs (loop2): invalid crc value [ 422.949431][T13054] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 423.006337][T13054] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 423.052504][T13054] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 423.263383][ T5822] syz-executor: attempt to access beyond end of device [ 423.263383][ T5822] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 423.320589][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 423.320630][ T5822] Tainted: [L]=SOFTLOCKUP [ 423.320640][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 423.320655][ T5822] Call Trace: [ 423.320664][ T5822] [ 423.320675][ T5822] dump_stack_lvl+0xe8/0x150 [ 423.320719][ T5822] f2fs_handle_critical_error+0x37c/0x540 [ 423.320757][ T5822] f2fs_write_end_io+0xcdb/0xff0 [ 423.320814][ T5822] __submit_merged_bio+0x256/0x6a0 [ 423.320853][ T5822] __submit_merged_write_cond+0x3c9/0x4e0 [ 423.320894][ T5822] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 423.320940][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.320981][ T5822] f2fs_write_data_pages+0x2975/0x35e0 [ 423.321020][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.321049][ T5822] ? __lock_acquire+0x6b5/0x2cf0 [ 423.321124][ T5822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 423.321173][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.321203][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.321233][ T5822] ? css_rstat_updated+0x23a/0x530 [ 423.321294][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.321324][ T5822] ? rcu_is_watching+0x15/0xb0 [ 423.321362][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.321392][ T5822] ? mod_memcg_lruvec_state+0x1a7/0x350 [ 423.321428][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.321458][ T5822] ? lru_gen_update_size+0x7c9/0xd10 [ 423.321500][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.321529][ T5822] ? __lock_acquire+0x6b5/0x2cf0 [ 423.321593][ T5822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 423.321631][ T5822] do_writepages+0x32e/0x550 [ 423.321667][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.321704][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.321742][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.321773][ T5822] ? do_raw_spin_unlock+0xf5/0x210 [ 423.321807][ T5822] filemap_fdatawrite+0x1e9/0x2f0 [ 423.321846][ T5822] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 423.321922][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.321956][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.321996][ T5822] ? do_raw_spin_unlock+0xf5/0x210 [ 423.322033][ T5822] f2fs_sync_dirty_inodes+0x30e/0x830 [ 423.322089][ T5822] f2fs_write_checkpoint+0x9df/0x26a0 [ 423.322126][ T5822] ? __lock_acquire+0x6b5/0x2cf0 [ 423.322198][ T5822] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 423.322234][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.322327][ T5822] kill_f2fs_super+0x314/0x720 [ 423.322372][ T5822] ? __pfx_kill_f2fs_super+0x10/0x10 [ 423.322422][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.322453][ T5822] ? lockdep_hardirqs_on+0x7a/0x110 [ 423.322486][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.322533][ T5822] deactivate_locked_super+0xbc/0x130 [ 423.322572][ T5822] cleanup_mnt+0x437/0x4d0 [ 423.322611][ T5822] ? _raw_spin_unlock_irq+0x23/0x50 [ 423.322645][ T5822] task_work_run+0x1d9/0x270 [ 423.322679][ T5822] ? __pfx_task_work_run+0x10/0x10 [ 423.322717][ T5822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.322745][ T5822] exit_to_user_mode_loop+0xed/0x480 [ 423.322772][ T5822] ? rcu_is_watching+0x15/0xb0 [ 423.322809][ T5822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.322837][ T5822] do_syscall_64+0x33e/0xf80 [ 423.322869][ T5822] ? trace_irq_disable+0x3b/0x140 [ 423.322909][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.322936][ T5822] RIP: 0033:0x7fbecbb9da57 [ 423.322961][ T5822] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 423.322982][ T5822] RSP: 002b:00007ffd5577cde8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 423.323018][ T5822] RAX: 0000000000000000 RBX: 00007fbecbc32048 RCX: 00007fbecbb9da57 [ 423.323036][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5577cea0 [ 423.323089][ T5822] RBP: 00007ffd5577cea0 R08: 00007ffd5577dea0 R09: 00000000ffffffff [ 423.323107][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd5577df30 [ 423.323124][ T5822] R13: 00007fbecbc32048 R14: 00000000000674d6 R15: 00007ffd5577df70 [ 423.323167][ T5822] [ 423.785980][ T5822] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 423.856451][T13106] loop4: detected capacity change from 0 to 32768 [ 423.913937][ T30] audit: type=1800 audit(1776263248.637:103): pid=13106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2187" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 424.805591][T13128] loop8: detected capacity change from 0 to 256 [ 424.861915][T13128] vfat: Deprecated parameter 'posix' [ 424.899381][T13128] FAT-fs: "posix" option is obsolete, not supported now [ 425.293952][T13117] loop6: detected capacity change from 0 to 40427 [ 425.338678][T13117] F2FS-fs (loop6): build fault injection rate: 174 [ 425.362778][T13117] F2FS-fs (loop6): build fault injection type: 0x3bfe8c [ 425.385044][T13117] F2FS-fs (loop6): invalid crc value [ 425.435427][T12841] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 425.497143][T12841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.537414][T12841] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 425.599129][T12841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.642936][T12841] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 425.684588][T12841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.711277][T13139] loop3: detected capacity change from 0 to 512 [ 425.720707][T13117] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 425.726812][T12841] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 425.777448][T13117] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 425.791537][T12841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.792724][ T1203] IPVS: starting estimator thread 0... [ 425.849015][T13139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.882934][T13139] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.941083][T13127] loop4: detected capacity change from 0 to 32768 [ 426.008713][T13147] IPVS: using max 30 ests per chain, 72000 per kthread [ 426.024515][T13127] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2196 (13127) [ 426.049884][ T30] audit: type=1326 audit(1776263250.767:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13156 comm="syz.2.2203" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbecbb9c819 code=0x0 [ 426.141732][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.239962][T13127] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 426.262586][T12841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.273559][T13127] BTRFS info (device loop4): using crc32c checksum algorithm [ 426.417847][T12841] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.482866][T13127] BTRFS info (device loop4): enabling ssd optimizations [ 426.491002][T13177] loop3: detected capacity change from 0 to 2048 [ 426.494597][ T7847] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.504595][ T7847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.510975][T13178] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2207'. [ 426.522433][T13127] BTRFS info (device loop4): turning on flush-on-commit [ 426.533409][T13127] BTRFS info (device loop4): enabling free space tree [ 426.540867][T13127] BTRFS info (device loop4): enabling auto defrag [ 426.547601][T13127] BTRFS info (device loop4): use lzo compression, level 1 [ 426.554794][T13127] BTRFS info (device loop4): max_inline set to 4096 [ 426.581401][T13179] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 426.604162][ T7847] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.611560][ T7847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.144150][T13179] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 427.159112][T13186] loop2: detected capacity change from 0 to 512 [ 427.198807][T11028] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 427.212881][T13179] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 427.253875][T13186] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #11: comm syz.2.2209: unexpected EA_INODE flag [ 427.289443][T13179] Remounting filesystem read-only [ 427.290943][T13186] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 427.306030][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 427.312554][T13186] EXT4-fs (loop2): Remounting filesystem read-only [ 427.315480][ C0] EXT4-fs (loop2): initial error at time 1776263252: ext4_orphan_get:1397: inode 11 [ 427.337938][ C0] EXT4-fs (loop2): last error at time 1776263252: ext4_orphan_get:1397: inode 11 [ 427.359545][ T5823] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 427.431785][T13186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.637421][ T5805] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 427.756297][T13197] netlink: 'syz.3.2212': attribute type 4 has an invalid length. [ 427.805048][T13202] loop4: detected capacity change from 0 to 128 [ 427.843506][ T5805] usb 7-1: Using ep0 maxpacket: 8 [ 427.902268][ T5805] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.924793][ T5805] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 427.954154][ T5805] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.012139][ T5805] usb 7-1: config 0 descriptor?? [ 428.045631][T12841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.107716][ T5805] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 428.400668][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.898066][ T1076] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.957124][ T5805] gspca_vc032x: reg_w err -71 [ 428.973630][ T5805] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 429.037647][ T5805] usb 7-1: USB disconnect, device number 7 [ 429.373536][ T1076] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.431410][T13228] netlink: 'syz.4.2225': attribute type 12 has an invalid length. [ 429.725482][ T1076] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.871806][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 429.888814][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 429.901236][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 429.914087][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 429.923924][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 430.053252][T13216] loop3: detected capacity change from 0 to 40427 [ 430.084539][T13216] F2FS-fs (loop3): invalid crc value [ 430.239574][ T1076] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.453528][T13257] usb usb2: usbfs: process 13257 (syz.6.2232) did not claim interface 0 before use [ 430.499561][T13257] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 430.518627][T13216] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 430.549587][T13259] usb usb2: Process 13259 (syz.6.2232) called USBDEVFS_RESETEP for active endpoint 0x81 [ 430.571436][T13216] F2FS-fs (loop3): Start checkpoint disabled! [ 430.601883][T13216] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 430.646808][T13216] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 430.717819][T13263] loop4: detected capacity change from 0 to 128 [ 430.748585][T12841] veth0_vlan: entered promiscuous mode [ 430.837879][T13267] loop6: detected capacity change from 0 to 512 [ 430.880491][T13267] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 430.911413][T13267] System zones: 1-20 [ 430.936827][T13267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.015526][T12841] veth1_vlan: entered promiscuous mode [ 431.196486][T13267] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 431.607953][T12235] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.859780][T13285] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 431.884557][T13285] pim6reg1: linktype set to 768 [ 432.029262][ T5829] Bluetooth: hci1: command tx timeout [ 432.233331][T13241] chnl_net:caif_netlink_parms(): no params data found [ 432.406265][ T5893] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 432.418904][T13308] loop6: detected capacity change from 0 to 128 [ 432.443677][ T1076] bridge_slave_1: left promiscuous mode [ 432.455973][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.515168][ T1076] bridge_slave_0: left allmulticast mode [ 432.523078][T13308] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 432.531177][ T1076] bridge_slave_0: left promiscuous mode [ 432.566137][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.582627][T13308] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 432.593098][ T5893] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 432.651136][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.729237][ T5893] usb 4-1: config 0 descriptor?? [ 432.761882][ T5893] cp210x 4-1:0.0: cp210x converter detected [ 432.807818][T12235] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 433.168989][ T5893] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 433.193020][ T5893] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 433.214744][ T5893] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 433.284653][ T5893] usb 4-1: cp210x converter now attached to ttyUSB0 [ 433.371631][ T5893] usb 4-1: USB disconnect, device number 10 [ 433.468938][ T5893] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 433.552064][ T5893] cp210x 4-1:0.0: device disconnected [ 433.989583][ T1076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.072650][ T1076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.106933][ T5829] Bluetooth: hci1: command tx timeout [ 434.151022][ T1076] bond0 (unregistering): Released all slaves [ 434.604727][T12841] veth0_macvtap: entered promiscuous mode [ 434.965877][T12841] veth1_macvtap: entered promiscuous mode [ 435.225580][T13356] loop6: detected capacity change from 0 to 2048 [ 435.333458][T13356] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 435.792556][T13241] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.853202][T13241] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.874597][T13241] bridge_slave_0: entered allmulticast mode [ 435.914933][T13241] bridge_slave_0: entered promiscuous mode [ 436.088834][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2257'. [ 436.198416][ T5829] Bluetooth: hci1: command tx timeout [ 436.212980][T13241] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.228725][T13241] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.237921][T13241] bridge_slave_1: entered allmulticast mode [ 436.247763][T13241] bridge_slave_1: entered promiscuous mode [ 436.261335][T12841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.274656][T13373] macvlan0: entered promiscuous mode [ 436.318608][T13373] netlink: 'syz.8.2257': attribute type 1 has an invalid length. [ 436.351551][T13373] netlink: 'syz.8.2257': attribute type 2 has an invalid length. [ 436.368978][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2257'. [ 436.470307][T12841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.643360][T13382] loop8: detected capacity change from 0 to 256 [ 436.854092][T13241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.014539][T13241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.135404][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.142630][T13387] loop4: detected capacity change from 0 to 512 [ 437.148704][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.254422][T13387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.267491][T13387] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 437.279863][ T1076] hsr_slave_0: left promiscuous mode [ 437.301140][T13387] EXT4-fs (loop4): shut down requested (1) [ 437.311988][ T1076] hsr_slave_1: left promiscuous mode [ 437.350670][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.363619][T11028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.378567][ T5805] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 437.393834][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.462009][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.491676][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.568544][ T5805] usb 4-1: Using ep0 maxpacket: 8 [ 437.585302][ T1076] veth1_macvtap: left promiscuous mode [ 437.597233][ T1076] veth0_macvtap: left promiscuous mode [ 437.618870][ T1076] veth1_vlan: left promiscuous mode [ 437.629961][ T5805] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 437.654254][ T1076] veth0_vlan: left promiscuous mode [ 437.671457][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.700324][ T5805] usb 4-1: Product: syz [ 437.728992][ T5805] usb 4-1: Manufacturer: syz [ 437.740365][ T5805] usb 4-1: SerialNumber: syz [ 437.770990][ T5805] usb 4-1: config 0 descriptor?? [ 437.807389][ T5805] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 438.268018][ T5829] Bluetooth: hci1: command tx timeout [ 438.575276][T13420] loop4: detected capacity change from 0 to 2048 [ 438.651459][ T5805] gspca_sonixj: reg_r err -71 [ 438.679573][ T5805] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 438.717355][T13425] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 438.781378][ T5805] usb 4-1: USB disconnect, device number 11 [ 438.862300][ T1076] team0 (unregistering): Port device team_slave_1 removed [ 438.897174][ T5931] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 438.925342][ T1076] team0 (unregistering): Port device team_slave_0 removed [ 439.067956][ T5931] usb 7-1: Using ep0 maxpacket: 16 [ 439.081835][ T5931] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.103491][ T5931] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.139542][ T5931] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 439.155825][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.170095][ T5931] usb 7-1: Product: syz [ 439.183383][ T5931] usb 7-1: Manufacturer: syz [ 439.214689][ T5931] usb 7-1: SerialNumber: syz [ 439.402077][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.410010][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.672514][ T5931] usb 7-1: cannot find UAC_HEADER [ 439.809624][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.844648][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.901111][T13241] team0: Port device team_slave_0 added [ 439.922827][T13241] team0: Port device team_slave_1 added [ 440.225559][T13448] loop8: detected capacity change from 0 to 512 [ 440.283570][T13241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.284170][T13448] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 440.298880][T13241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.326232][T13448] System zones: 1-20 [ 440.363554][T13241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.389535][T13241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.408958][T13241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.434057][ T5931] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 440.447650][T13448] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.501251][T13241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.505185][ T5931] usb 7-1: USB disconnect, device number 8 [ 440.522644][T13437] loop3: detected capacity change from 0 to 32768 [ 440.590651][T13437] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2271 (13437) [ 440.819775][T13437] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 440.906183][T13437] BTRFS info (device loop3): using blake2b checksum algorithm [ 440.943517][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 441.140386][ T9814] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.248834][T13437] BTRFS info (device loop3): enabling ssd optimizations [ 441.299892][T13443] loop4: detected capacity change from 0 to 40427 [ 441.306687][T13437] BTRFS info (device loop3): turning on async discard [ 441.325878][T13437] BTRFS info (device loop3): enabling free space tree [ 441.334239][T13437] BTRFS info (device loop3): use zstd compression, level 3 [ 441.371262][T13443] F2FS-fs (loop4): invalid crc value [ 441.427886][T13241] hsr_slave_0: entered promiscuous mode [ 441.453731][ T30] audit: type=1800 audit(1776263266.177:105): pid=13437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2271" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 441.481551][T13241] hsr_slave_1: entered promiscuous mode [ 441.531090][T13241] debugfs: 'hsr0' already exists in 'hsr' [ 441.580479][T13241] Cannot create hsr debugfs directory [ 441.614280][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.663231][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.809360][T13443] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 441.870251][T13443] F2FS-fs (loop4): Start checkpoint disabled! [ 441.913174][T13443] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 441.955105][T13443] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 442.001466][ T5823] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 442.056150][ T5964] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 442.233233][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.246049][ T5964] usb 7-1: Using ep0 maxpacket: 16 [ 442.256498][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.278294][T13492] 9p: Bad value for 'rfdno' [ 442.312699][ T5964] usb 7-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 442.359057][ T5964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.394446][ T5964] usb 7-1: Product: syz [ 442.413570][ T5964] usb 7-1: Manufacturer: syz [ 442.450762][ T5964] usb 7-1: SerialNumber: syz [ 442.523163][ T5964] usb 7-1: config 0 descriptor?? [ 442.524273][ T13] kworker/u8:1: attempt to access beyond end of device [ 442.524273][ T13] loop4: rw=1, sector=45096, nr_sectors = 120 limit=40427 [ 442.588075][ T5964] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 442.673054][ T13] kworker/u8:1: attempt to access beyond end of device [ 442.673054][ T13] loop4: rw=2049, sector=45216, nr_sectors = 8 limit=40427 [ 442.765068][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.765110][ T13] Tainted: [L]=SOFTLOCKUP [ 442.765120][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 442.765137][ T13] Workqueue: writeback wb_workfn (flush-7:4) [ 442.765174][ T13] Call Trace: [ 442.765184][ T13] [ 442.765195][ T13] dump_stack_lvl+0xe8/0x150 [ 442.765237][ T13] f2fs_handle_critical_error+0x37c/0x540 [ 442.765277][ T13] f2fs_write_end_io+0xcdb/0xff0 [ 442.765339][ T13] __submit_merged_bio+0x256/0x6a0 [ 442.765380][ T13] __submit_merged_write_cond+0x3c9/0x4e0 [ 442.765421][ T13] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 442.765471][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.765515][ T13] f2fs_write_data_pages+0x2975/0x35e0 [ 442.765549][ T13] ? f2fs_build_free_nids+0xdc/0x1810 [ 442.765632][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 442.765687][ T13] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 442.765782][ T13] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 442.765842][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.765872][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 442.765928][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.765958][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 442.766000][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 442.766036][ T13] do_writepages+0x32e/0x550 [ 442.766079][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.766109][ T13] ? reacquire_held_locks+0x104/0x190 [ 442.766149][ T13] ? writeback_sb_inodes+0x463/0x19d0 [ 442.766190][ T13] __writeback_single_inode+0x133/0x10e0 [ 442.766225][ T13] ? do_raw_spin_unlock+0xf5/0x210 [ 442.766261][ T13] writeback_sb_inodes+0x979/0x19d0 [ 442.766291][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 442.766335][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.766381][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.766425][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 442.766455][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 442.766540][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.766570][ T13] ? rcu_is_watching+0x15/0xb0 [ 442.766609][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.766652][ T13] wb_writeback+0x445/0xb00 [ 442.766689][ T13] ? queue_io+0x291/0x470 [ 442.766732][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 442.766760][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 442.766817][ T13] wb_workfn+0x3f8/0xf10 [ 442.766839][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.766870][ T13] ? look_up_lock_class+0x57/0x110 [ 442.766930][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 442.766969][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.767003][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.767039][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.767069][ T13] ? do_raw_spin_unlock+0xf5/0x210 [ 442.767106][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.767141][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.767180][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.767215][ T13] ? process_scheduled_works+0xa70/0x1860 [ 442.767251][ T13] ? process_scheduled_works+0xa70/0x1860 [ 442.767292][ T13] process_scheduled_works+0xb5d/0x1860 [ 442.767328][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.767404][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 442.767451][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.767481][ T13] ? assign_work+0x3d5/0x5e0 [ 442.767526][ T13] worker_thread+0xa53/0xfc0 [ 442.767589][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.767634][ T13] kthread+0x388/0x470 [ 442.767662][ T13] ? __pfx_worker_thread+0x10/0x10 [ 442.767697][ T13] ? __pfx_kthread+0x10/0x10 [ 442.767727][ T13] ret_from_fork+0x514/0xb70 [ 442.767769][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 442.767815][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 442.767845][ T13] ? __switch_to+0xc79/0x1410 [ 442.767881][ T13] ? __pfx_kthread+0x10/0x10 [ 442.767910][ T13] ret_from_fork_asm+0x1a/0x30 [ 442.767976][ T13] [ 442.780955][ T5964] pwc: Warning: more than 1 configuration available. [ 442.919355][ T13] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 442.976006][ T5964] pwc: Failed to set LED on/off time (-71) [ 443.211853][ T5964] pwc: send_video_command error -71 [ 443.217265][ T5964] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 443.230202][ T5964] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 443.266494][ T5964] usb 7-1: USB disconnect, device number 9 [ 444.498218][T13532] loop3: detected capacity change from 0 to 2048 [ 444.534019][T13532] EXT4-fs: Ignoring removed oldalloc option [ 444.628534][T13532] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 444.638426][T13532] System zones: 0-7 [ 444.706270][T13532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.733004][T13532] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.2290: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 444.760858][T13532] EXT4-fs (loop3): Remounting filesystem read-only [ 444.888951][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.958039][ T5964] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 445.010430][T13517] loop5: detected capacity change from 0 to 32768 [ 445.039270][T13517] (syz.5.2286,13517,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 445.116512][ T5964] usb 7-1: Using ep0 maxpacket: 8 [ 445.144221][T13517] (syz.5.2286,13517,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 445.146143][ T5964] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 445.166172][T13543] loop4: detected capacity change from 0 to 512 [ 445.196052][ T5964] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 445.239202][T13517] JBD2: Ignoring recovery information on journal [ 445.251226][ T5964] usb 7-1: Product: syz [ 445.269676][ T5964] usb 7-1: Manufacturer: syz [ 445.272736][T13543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.285217][ T5964] usb 7-1: SerialNumber: syz [ 445.332195][ T5964] usb 7-1: config 0 descriptor?? [ 445.402675][T13543] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.514802][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2295'. [ 445.558799][T13517] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 445.688674][T11028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.977047][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2297'. [ 446.127719][T13517] (syz.5.2286,13517,0):ocfs2_file_write_iter:2453 ERROR: status = -27 [ 446.164517][T13563] ip6gre1: entered promiscuous mode [ 446.186935][T13563] ip6gre1: entered allmulticast mode [ 446.500633][ T5964] usb 7-1: USB disconnect, device number 10 [ 446.535465][T12841] ocfs2: Unmounting device (7,5) on (node local) [ 446.557941][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.649453][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.659730][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.767225][T13573] loop4: detected capacity change from 0 to 4096 [ 446.910542][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.127986][T13580] loop3: detected capacity change from 0 to 4096 [ 447.200661][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 447.263041][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.843988][T13617] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2315'. [ 448.907551][T13617] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2315'. [ 449.210024][T13626] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2317'. [ 449.314010][T13630] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2317'. [ 449.325155][T13241] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 449.368071][T13241] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.437950][T13241] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 449.490258][T13241] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.527219][T13241] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 449.568736][T13601] loop5: detected capacity change from 0 to 40427 [ 449.617997][T13601] F2FS-fs (loop5): invalid crc value [ 449.624945][T13241] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.689746][T13241] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 449.748977][T13241] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.087900][T13601] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 450.154394][T13601] F2FS-fs (loop5): Start checkpoint disabled! [ 450.211599][T13601] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 450.255430][T13601] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 450.304419][T13241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.410067][T13241] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.483278][T12323] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.490551][T12323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.552327][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 450.594745][T12323] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.602073][T12323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.755230][ T1076] kworker/u8:7: attempt to access beyond end of device [ 450.755230][ T1076] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 450.778896][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 450.838050][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.860767][ T1076] CPU: 1 UID: 0 PID: 1076 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.860812][ T1076] Tainted: [L]=SOFTLOCKUP [ 450.860821][ T1076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 450.860839][ T1076] Workqueue: writeback wb_workfn (flush-7:5) [ 450.860880][ T1076] Call Trace: [ 450.860890][ T1076] [ 450.860900][ T1076] dump_stack_lvl+0xe8/0x150 [ 450.860939][ T1076] f2fs_handle_critical_error+0x37c/0x540 [ 450.860978][ T1076] f2fs_write_end_io+0xcdb/0xff0 [ 450.861035][ T1076] __submit_merged_bio+0x256/0x6a0 [ 450.861073][ T1076] __submit_merged_write_cond+0x3c9/0x4e0 [ 450.861112][ T1076] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 450.861156][ T1076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.861197][ T1076] f2fs_write_data_pages+0x2975/0x35e0 [ 450.861230][ T1076] ? f2fs_build_free_nids+0xdc/0x1810 [ 450.861296][ T1076] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 450.861346][ T1076] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 450.861423][ T1076] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 450.861475][ T1076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.861505][ T1076] ? __lock_acquire+0x6b5/0x2cf0 [ 450.861561][ T1076] ? set_shrinker_bit+0x7c/0x350 [ 450.861590][ T1076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.861624][ T1076] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 450.861659][ T1076] do_writepages+0x32e/0x550 [ 450.861698][ T1076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.861728][ T1076] ? reacquire_held_locks+0x104/0x190 [ 450.861773][ T1076] ? writeback_sb_inodes+0x463/0x19d0 [ 450.861812][ T1076] __writeback_single_inode+0x133/0x10e0 [ 450.861845][ T1076] ? do_raw_spin_unlock+0xf5/0x210 [ 450.861879][ T1076] writeback_sb_inodes+0x979/0x19d0 [ 450.861908][ T1076] ? __lock_acquire+0x6b5/0x2cf0 [ 450.861974][ T1076] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 450.862004][ T1076] ? do_raw_spin_lock+0x12b/0x2f0 [ 450.862075][ T1076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.862105][ T1076] ? rcu_is_watching+0x15/0xb0 [ 450.862144][ T1076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.862183][ T1076] wb_writeback+0x445/0xb00 [ 450.862220][ T1076] ? queue_io+0x291/0x470 [ 450.862259][ T1076] ? __pfx_wb_writeback+0x10/0x10 [ 450.862287][ T1076] ? do_raw_spin_lock+0x12b/0x2f0 [ 450.862334][ T1076] wb_workfn+0x3f8/0xf10 [ 450.862356][ T1076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.862386][ T1076] ? look_up_lock_class+0x57/0x110 [ 450.862441][ T1076] ? __pfx_wb_workfn+0x10/0x10 [ 450.862484][ T1076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.862512][ T1076] ? do_raw_spin_lock+0x12b/0x2f0 [ 450.862537][ T1076] ? lock_acquire+0x106/0x350 [ 450.862570][ T1076] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 450.862600][ T1076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.862632][ T1076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.862666][ T1076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.862699][ T1076] ? process_scheduled_works+0xa70/0x1860 [ 450.862733][ T1076] ? process_scheduled_works+0xa70/0x1860 [ 450.862777][ T1076] process_scheduled_works+0xb5d/0x1860 [ 450.862811][ T1076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.862877][ T1076] ? __pfx_process_scheduled_works+0x10/0x10 [ 450.862918][ T1076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.862945][ T1076] ? assign_work+0x3d5/0x5e0 [ 450.862985][ T1076] worker_thread+0xa53/0xfc0 [ 450.863023][ T1076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.863069][ T1076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.863111][ T1076] kthread+0x388/0x470 [ 450.863138][ T1076] ? __pfx_worker_thread+0x10/0x10 [ 450.863173][ T1076] ? __pfx_kthread+0x10/0x10 [ 450.863199][ T1076] ret_from_fork+0x514/0xb70 [ 450.863239][ T1076] ? __pfx_ret_from_fork+0x10/0x10 [ 450.863272][ T1076] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.863306][ T1076] ? __switch_to+0xc79/0x1410 [ 450.863340][ T1076] ? __pfx_kthread+0x10/0x10 [ 450.863373][ T1076] ret_from_fork_asm+0x1a/0x30 [ 450.863435][ T1076] [ 451.242367][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 451.283424][ T1076] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 451.302609][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.312742][ T29] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 451.321903][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.373494][ T29] usb 5-1: config 0 descriptor?? [ 451.794729][ T29] hid_parser_main: 53 callbacks suppressed [ 451.794761][ T29] corsair 0003:1B1C:1B02.000E: unknown main item tag 0x0 [ 451.814683][ T29] corsair 0003:1B1C:1B02.000E: unknown main item tag 0x0 [ 451.822839][ T29] corsair 0003:1B1C:1B02.000E: unknown main item tag 0x0 [ 451.830500][ T29] corsair 0003:1B1C:1B02.000E: unknown main item tag 0x0 [ 451.838188][ T29] corsair 0003:1B1C:1B02.000E: unknown main item tag 0x0 [ 451.881215][ T29] corsair 0003:1B1C:1B02.000E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 452.281790][T13698] loop6: detected capacity change from 0 to 164 [ 452.294051][T13697] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 452.505585][T13698] Unable to read rock-ridge attributes [ 452.549619][T13698] Unable to read rock-ridge attributes [ 452.678954][ T1203] usb 5-1: USB disconnect, device number 3 [ 452.690150][T13241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.012016][T13241] veth0_vlan: entered promiscuous mode [ 453.059119][T13241] veth1_vlan: entered promiscuous mode [ 453.159730][T13241] veth0_macvtap: entered promiscuous mode [ 453.197150][T13241] veth1_macvtap: entered promiscuous mode [ 453.218011][ T5931] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 453.290114][T13241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.337715][T13241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.387361][ T5931] usb 9-1: Using ep0 maxpacket: 16 [ 453.413013][ T5931] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.424206][ T1076] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.459354][ T5931] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 453.481180][ T1076] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.505902][ T1076] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.532584][ T5931] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.558653][ T1076] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.614638][ T5931] usb 9-1: config 0 descriptor?? [ 453.773036][ T5931] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input15 [ 454.150129][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.203214][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.244673][ T5170] bcm5974 9-1:0.0: could not read from device [ 454.390721][ T5931] usb 9-1: USB disconnect, device number 4 [ 454.398854][ T5170] bcm5974 9-1:0.0: could not read from device [ 454.527860][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.587429][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.914912][T13735] loop8: detected capacity change from 0 to 8 [ 455.134646][T13720] loop5: detected capacity change from 0 to 32768 [ 455.178553][T13720] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2340 (13720) [ 455.250104][T13720] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 455.276286][T13720] BTRFS info (device loop5): using crc32c checksum algorithm [ 455.384067][T13751] loop8: detected capacity change from 0 to 2048 [ 455.528302][T13720] BTRFS info (device loop5): enabling ssd optimizations [ 455.556402][T13720] BTRFS info (device loop5): turning on flush-on-commit [ 455.585949][T13720] BTRFS info (device loop5): enabling free space tree [ 455.608865][T13720] BTRFS info (device loop5): enabling auto defrag [ 455.644256][T13720] BTRFS info (device loop5): use lzo compression, level 1 [ 455.697135][T13720] BTRFS info (device loop5): max_inline set to 4096 [ 455.834464][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2352'. [ 456.138723][T12841] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 456.472511][ T9] Process accounting resumed [ 456.719931][T13781] Process accounting resumed [ 456.777552][T13790] loop8: detected capacity change from 0 to 512 [ 456.903997][T13790] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 456.976065][T13790] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 457.023163][T13790] EXT4-fs (loop8): 1 truncate cleaned up [ 457.114490][T13790] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.199650][T13790] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 457.451360][T13801] sp0: Synchronizing with TNC [ 457.530274][ T9814] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.661475][T13810] loop0: detected capacity change from 0 to 128 [ 457.690188][T13810] EXT4-fs (loop0): Test dummy encryption mode enabled [ 457.703931][T13808] loop3: detected capacity change from 0 to 4096 [ 457.729649][T13810] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 457.859695][T13810] System zones: 1-3, 19-19, 35-36 [ 457.911823][T13810] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 457.988488][T13810] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.492650][T13241] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 458.872699][T13840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2371'. [ 458.932299][T13840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2371'. [ 458.951096][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2374'. [ 459.007104][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2374'. [ 459.029496][T13840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2371'. [ 459.135918][T13840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2371'. [ 459.348684][T13846] loop4: detected capacity change from 0 to 32768 [ 459.401013][T13846] JBD2: Ignoring recovery information on journal [ 459.498518][T13846] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 459.567469][T13856] loop0: detected capacity change from 0 to 64 [ 459.580392][T13846] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 0 but claims that 2046 are free [ 459.602138][T13846] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 459.612981][T13846] OCFS2: File system is now read-only. [ 459.618533][T13846] (syz.4.2376,13846,0):ocfs2_search_chain:1888 ERROR: status = -30 [ 459.627530][T13846] (syz.4.2376,13846,0):ocfs2_search_chain:2011 ERROR: status = -30 [ 459.635465][T13846] (syz.4.2376,13846,0):ocfs2_claim_suballoc_bits:2098 ERROR: status = -30 [ 459.644471][T13846] (syz.4.2376,13846,0):ocfs2_claim_suballoc_bits:2151 ERROR: status = -30 [ 459.653074][T13846] (syz.4.2376,13846,0):ocfs2_claim_new_inode:2392 ERROR: status = -30 [ 459.662948][T13846] (syz.4.2376,13846,0):ocfs2_claim_new_inode:2407 ERROR: status = -30 [ 459.671550][T13846] (syz.4.2376,13846,0):ocfs2_mknod_locked:642 ERROR: status = -30 [ 459.679469][T13846] (syz.4.2376,13846,0):ocfs2_symlink:1954 ERROR: status = -30 [ 459.687811][T13846] (syz.4.2376,13846,0):ocfs2_symlink:2078 ERROR: status = -30 [ 459.859771][T13861] loop5: detected capacity change from 0 to 256 [ 459.975124][T13861] exFAT-fs (loop5): failed to test first cluster bit of root dir(5) [ 460.139685][T11028] ocfs2: Unmounting device (7,4) on (node local) [ 460.506029][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 460.559887][ T5931] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 460.734591][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 460.780778][ T5931] usb 1-1: config 139 has an invalid interface number: 49 but max is 0 [ 460.801417][ T5931] usb 1-1: config 139 has no interface number 0 [ 460.827034][ T5931] usb 1-1: config 139 interface 49 has no altsetting 0 [ 460.862441][ T5829] block nbd0: Receive control failed (result -32) [ 460.880227][ T5931] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 460.889496][ T5829] block nbd0: Receive control failed (result -32) [ 460.900824][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.909588][ T5931] usb 1-1: Product: syz [ 460.913770][T13881] loop3: detected capacity change from 0 to 2048 [ 460.922965][ T5931] usb 1-1: Manufacturer: syz [ 460.928480][ T5931] usb 1-1: SerialNumber: syz [ 460.953423][T13881] EXT4-fs: Ignoring removed bh option [ 461.005170][T13850] nbd0: detected capacity change from 0 to 63 [ 461.007508][T13881] EXT4-fs: Ignoring removed mblk_io_submit option [ 461.116726][T13881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.209580][ T6533] block nbd0: Dead connection, failed to find a fallback [ 461.218337][ T6533] block nbd0: shutting down sockets [ 461.230083][ T6533] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 461.259300][ T6533] buffer_io_error: 11 callbacks suppressed [ 461.259327][ T6533] Buffer I/O error on dev nbd0, logical block 0, async page read [ 461.279809][T13881] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.337931][ T6533] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 461.380549][ T6533] Buffer I/O error on dev nbd0, logical block 1, async page read [ 461.412487][T13896] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2391'. [ 461.423883][ T5931] radio-usb-si4713 1-1:139.49: Si4713 development board discovered: (10C4:8244) [ 461.428139][T13881] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 16: comm syz.3.2388: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 461.456489][ T6533] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 461.482215][T13896] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2391'. [ 461.496046][ T6533] Buffer I/O error on dev nbd0, logical block 2, async page read [ 461.526108][ T6533] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 461.550362][T13881] EXT4-fs (loop3): Remounting filesystem read-only [ 461.556329][ T6533] Buffer I/O error on dev nbd0, logical block 3, async page read [ 461.557365][ T6533] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 461.557399][ T6533] Buffer I/O error on dev nbd0, logical block 0, async page read [ 461.557554][ T6533] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 461.731552][ T6533] Buffer I/O error on dev nbd0, logical block 1, async page read [ 461.780512][ T6533] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 461.809906][T13867] loop6: detected capacity change from 0 to 32768 [ 461.816848][ T6533] Buffer I/O error on dev nbd0, logical block 2, async page read [ 461.839098][ T6533] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 461.847319][ T5931] radio-usb-si4713 1-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 461.892390][T13867] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 461.910296][ T6533] Buffer I/O error on dev nbd0, logical block 3, async page read [ 461.918479][ T5931] usbhid 1-1:139.49: couldn't find an input interrupt endpoint [ 461.930344][ T5931] usb 1-1: USB disconnect, device number 13 [ 461.987861][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.991117][ T6533] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.108878][ T6533] Buffer I/O error on dev nbd0, logical block 0, async page read [ 462.117339][ T6533] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 462.126858][ T6533] Buffer I/O error on dev nbd0, logical block 1, async page read [ 462.155093][ T6533] ldm_validate_partition_table(): Disk read failed. [ 462.165402][ T6533] Dev nbd0: unable to read RDB block 0 [ 462.173916][ T6533] nbd0: unable to read partition table [ 462.251443][T13867] XFS (loop6): Ending clean mount [ 462.294343][T13867] XFS (loop6): Quotacheck needed: Please wait. [ 462.372944][ T6533] ldm_validate_partition_table(): Disk read failed. [ 462.408119][ T6533] Dev nbd0: unable to read RDB block 0 [ 462.467076][ T6533] nbd0: unable to read partition table [ 462.495677][ T6533] [ 462.498115][ T6533] ====================================================== [ 462.505162][ T6533] WARNING: possible circular locking dependency detected [ 462.512302][ T6533] syzkaller #0 Tainted: G L [ 462.518301][ T6533] ------------------------------------------------------ [ 462.525343][ T6533] udevd/6533 is trying to acquire lock: [ 462.530919][ T6533] ffff8880276d4190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: __submit_bio+0x1c0/0x580 [ 462.540929][ T6533] [ 462.540929][ T6533] but task is already holding lock: [ 462.548343][ T6533] ffff8880271442f8 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x991/0x1ef0 [ 462.558675][ T6533] [ 462.558675][ T6533] which lock already depends on the new lock. [ 462.558675][ T6533] [ 462.569107][ T6533] [ 462.569107][ T6533] the existing dependency chain (in reverse order) is: [ 462.578161][ T6533] [ 462.578161][ T6533] -> #8 (mapping.invalidate_lock){++++}-{4:4}: [ 462.586570][ T6533] down_read+0x47/0x2e0 [ 462.591317][ T6533] filemap_fault+0x666/0x1300 [ 462.596582][ T6533] __do_fault+0x138/0x390 [ 462.601561][ T6533] do_pte_missing+0x5c4/0x3490 [ 462.606922][ T6533] handle_mm_fault+0x1bec/0x3310 [ 462.612416][ T6533] do_user_addr_fault+0xa73/0x1340 [ 462.618076][ T6533] exc_page_fault+0x6a/0xc0 [ 462.623122][ T6533] asm_exc_page_fault+0x26/0x30 [ 462.628520][ T6533] [ 462.628520][ T6533] -> #7 (vm_lock){++++}-{0:0}: [ 462.635501][ T6533] __vma_start_exclude_readers+0x28a/0x940 [ 462.641866][ T6533] __vma_start_write+0xdc/0x290 [ 462.647333][ T6533] mprotect_fixup+0x5ee/0xa80 [ 462.652542][ T6533] setup_arg_pages+0x565/0xac0 [ 462.657842][ T6533] load_elf_binary+0xc5e/0x2980 [ 462.663227][ T6533] bprm_execve+0x94a/0x1440 [ 462.668279][ T6533] kernel_execve+0x844/0x930 [ 462.673430][ T6533] try_to_run_init_process+0x13/0x60 [ 462.679345][ T6533] kernel_init+0xad/0x1d0 [ 462.684232][ T6533] ret_from_fork+0x514/0xb70 [ 462.689369][ T6533] ret_from_fork_asm+0x1a/0x30 [ 462.694676][ T6533] [ 462.694676][ T6533] -> #6 (&mm->mmap_lock){++++}-{4:4}: [ 462.702431][ T6533] __might_fault+0xcb/0x130 [ 462.707490][ T6533] _copy_from_iter+0x100/0x1670 [ 462.712889][ T6533] tcp_sendmsg_locked+0x2121/0x5450 [ 462.718616][ T6533] tcp_sendmsg+0x2f/0x50 [ 462.723392][ T6533] sock_write_iter+0x406/0x4f0 [ 462.728688][ T6533] vfs_write+0x61d/0xb90 [ 462.733470][ T6533] ksys_write+0x150/0x270 [ 462.738451][ T6533] do_syscall_64+0x15f/0xf80 [ 462.743668][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.750103][ T6533] [ 462.750103][ T6533] -> #5 (sk_lock-AF_INET){+.+.}-{0:0}: [ 462.757783][ T6533] lock_sock_nested+0x41/0x100 [ 462.763095][ T6533] inet_shutdown+0x6a/0x390 [ 462.768127][ T6533] nbd_mark_nsock_dead+0x2e9/0x560 [ 462.773778][ T6533] sock_shutdown+0x15e/0x260 [ 462.778902][ T6533] nbd_clear_sock+0x24/0x170 [ 462.784036][ T6533] nbd_ioctl+0x337/0xe40 [ 462.788814][ T6533] blkdev_ioctl+0x5e3/0x740 [ 462.793851][ T6533] __se_sys_ioctl+0xfc/0x170 [ 462.798970][ T6533] do_syscall_64+0x15f/0xf80 [ 462.804108][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.810537][ T6533] [ 462.810537][ T6533] -> #4 (&nsock->tx_lock){+.+.}-{4:4}: [ 462.818203][ T6533] __mutex_lock+0x1a3/0x1550 [ 462.823331][ T6533] nbd_queue_rq+0x37b/0x1100 [ 462.828452][ T6533] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 462.834524][ T6533] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 462.841389][ T6533] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 462.847922][ T6533] blk_mq_run_hw_queue+0x348/0x4f0 [ 462.853593][ T6533] blk_mq_dispatch_list+0xd16/0xe10 [ 462.859335][ T6533] blk_mq_flush_plug_list+0x48d/0x570 [ 462.865246][ T6533] __blk_flush_plug+0x3ed/0x4d0 [ 462.870632][ T6533] __submit_bio+0x28d/0x580 [ 462.875675][ T6533] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 462.881863][ T6533] block_read_full_folio+0x599/0x830 [ 462.887755][ T6533] filemap_read_folio+0x137/0x3b0 [ 462.893320][ T6533] do_read_cache_folio+0x358/0x590 [ 462.899222][ T6533] read_part_sector+0xb6/0x2b0 [ 462.904521][ T6533] adfspart_check_ICS+0xb1/0x960 [ 462.910008][ T6533] bdev_disk_changed+0x817/0x1770 [ 462.915564][ T6533] blkdev_get_whole+0x380/0x510 [ 462.920941][ T6533] bdev_open+0x31e/0xd30 [ 462.925719][ T6533] blkdev_open+0x470/0x610 [ 462.930706][ T6533] do_dentry_open+0x785/0x14e0 [ 462.936001][ T6533] vfs_open+0x3b/0x340 [ 462.940598][ T6533] path_openat+0x2e08/0x3860 [ 462.945718][ T6533] do_file_open+0x23e/0x4a0 [ 462.950778][ T6533] do_sys_openat2+0x113/0x200 [ 462.955998][ T6533] __x64_sys_openat+0x138/0x170 [ 462.961383][ T6533] do_syscall_64+0x15f/0xf80 [ 462.966507][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.973025][ T6533] [ 462.973025][ T6533] -> #3 (&cmd->lock){+.+.}-{4:4}: [ 462.980278][ T6533] __mutex_lock+0x1a3/0x1550 [ 462.985416][ T6533] nbd_queue_rq+0xc6/0x1100 [ 462.990456][ T6533] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 462.996561][ T6533] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 463.003430][ T6533] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 463.009959][ T6533] blk_mq_run_hw_queue+0x348/0x4f0 [ 463.015632][ T6533] blk_mq_dispatch_list+0xd16/0xe10 [ 463.021366][ T6533] blk_mq_flush_plug_list+0x48d/0x570 [ 463.027284][ T6533] __blk_flush_plug+0x3ed/0x4d0 [ 463.032673][ T6533] __submit_bio+0x28d/0x580 [ 463.037723][ T6533] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 463.043893][ T6533] block_read_full_folio+0x599/0x830 [ 463.049710][ T6533] filemap_read_folio+0x137/0x3b0 [ 463.055440][ T6533] do_read_cache_folio+0x358/0x590 [ 463.061080][ T6533] read_part_sector+0xb6/0x2b0 [ 463.066379][ T6533] adfspart_check_ICS+0xb1/0x960 [ 463.071868][ T6533] bdev_disk_changed+0x817/0x1770 [ 463.077478][ T6533] blkdev_get_whole+0x380/0x510 [ 463.082863][ T6533] bdev_open+0x31e/0xd30 [ 463.087622][ T6533] blkdev_open+0x470/0x610 [ 463.092558][ T6533] do_dentry_open+0x785/0x14e0 [ 463.097841][ T6533] vfs_open+0x3b/0x340 [ 463.102456][ T6533] path_openat+0x2e08/0x3860 [ 463.107567][ T6533] do_file_open+0x23e/0x4a0 [ 463.112594][ T6533] do_sys_openat2+0x113/0x200 [ 463.117786][ T6533] __x64_sys_openat+0x138/0x170 [ 463.123155][ T6533] do_syscall_64+0x15f/0xf80 [ 463.128268][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.134683][ T6533] [ 463.134683][ T6533] -> #2 (set->srcu){.+.+}-{0:0}: [ 463.141816][ T6533] __synchronize_srcu+0xca/0x300 [ 463.147272][ T6533] elevator_switch+0x1e8/0x7a0 [ 463.152554][ T6533] elevator_change+0x2cc/0x450 [ 463.157830][ T6533] elevator_set_default+0x36c/0x430 [ 463.163656][ T6533] blk_register_queue+0x3e9/0x4e0 [ 463.169208][ T6533] __add_disk+0x677/0xd50 [ 463.174054][ T6533] add_disk_fwnode+0xfb/0x480 [ 463.179251][ T6533] nbd_dev_add+0x72c/0xb50 [ 463.184186][ T6533] nbd_init+0x168/0x1f0 [ 463.188865][ T6533] do_one_initcall+0x250/0x870 [ 463.194156][ T6533] do_initcall_level+0x104/0x190 [ 463.199613][ T6533] do_initcalls+0x59/0xa0 [ 463.204465][ T6533] kernel_init_freeable+0x2a6/0x3e0 [ 463.210186][ T6533] kernel_init+0x1d/0x1d0 [ 463.215039][ T6533] ret_from_fork+0x514/0xb70 [ 463.220148][ T6533] ret_from_fork_asm+0x1a/0x30 [ 463.225438][ T6533] [ 463.225438][ T6533] -> #1 (&q->elevator_lock){+.+.}-{4:4}: [ 463.233262][ T6533] __mutex_lock+0x1a3/0x1550 [ 463.238375][ T6533] elevator_change+0x1b3/0x450 [ 463.243652][ T6533] elevator_set_none+0xb5/0x140 [ 463.249029][ T6533] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 463.255353][ T6533] nbd_start_device+0x17f/0xb10 [ 463.260720][ T6533] nbd_genl_connect+0x165b/0x1cf0 [ 463.266281][ T6533] genl_family_rcv_msg_doit+0x22a/0x330 [ 463.272342][ T6533] genl_rcv_msg+0x61c/0x7a0 [ 463.277356][ T6533] netlink_rcv_skb+0x232/0x4b0 [ 463.282642][ T6533] genl_rcv+0x28/0x40 [ 463.287141][ T6533] netlink_unicast+0x75c/0x8e0 [ 463.292424][ T6533] netlink_sendmsg+0x813/0xb40 [ 463.297709][ T6533] ____sys_sendmsg+0x972/0x9f0 [ 463.303001][ T6533] ___sys_sendmsg+0x2a5/0x360 [ 463.308198][ T6533] __x64_sys_sendmsg+0x1bd/0x2a0 [ 463.313690][ T6533] do_syscall_64+0x15f/0xf80 [ 463.318818][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.325265][ T6533] [ 463.325265][ T6533] -> #0 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 463.333988][ T6533] __lock_acquire+0x15a5/0x2cf0 [ 463.339406][ T6533] lock_acquire+0x106/0x350 [ 463.344571][ T6533] blk_mq_submit_bio+0x6de/0x28e0 [ 463.350362][ T6533] __submit_bio+0x1c0/0x580 [ 463.355487][ T6533] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 463.361657][ T6533] block_read_full_folio+0x599/0x830 [ 463.367484][ T6533] filemap_read_folio+0x137/0x3b0 [ 463.373033][ T6533] filemap_get_pages+0x1744/0x1ef0 [ 463.378696][ T6533] filemap_read+0x447/0x1230 [ 463.383852][ T6533] blkdev_read_iter+0x30a/0x440 [ 463.389248][ T6533] vfs_read+0x582/0xa70 [ 463.393952][ T6533] ksys_read+0x150/0x270 [ 463.398749][ T6533] do_syscall_64+0x15f/0xf80 [ 463.403882][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.410389][ T6533] [ 463.410389][ T6533] other info that might help us debug this: [ 463.410389][ T6533] [ 463.420625][ T6533] Chain exists of: [ 463.420625][ T6533] &q->q_usage_counter(io)#49 --> vm_lock --> mapping.invalidate_lock [ 463.420625][ T6533] [ 463.434750][ T6533] Possible unsafe locking scenario: [ 463.434750][ T6533] [ 463.442212][ T6533] CPU0 CPU1 [ 463.447685][ T6533] ---- ---- [ 463.453061][ T6533] rlock(mapping.invalidate_lock); [ 463.458276][ T6533] lock(vm_lock); [ 463.464526][ T6533] lock(mapping.invalidate_lock); [ 463.472169][ T6533] rlock(&q->q_usage_counter(io)#49); [ 463.477697][ T6533] [ 463.477697][ T6533] *** DEADLOCK *** [ 463.477697][ T6533] [ 463.485844][ T6533] 2 locks held by udevd/6533: [ 463.490528][ T6533] #0: ffff888027144160 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_read_iter+0x2f8/0x440 [ 463.501389][ T6533] #1: ffff8880271442f8 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x991/0x1ef0 [ 463.512068][ T6533] [ 463.512068][ T6533] stack backtrace: [ 463.517980][ T6533] CPU: 1 UID: 0 PID: 6533 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 463.518019][ T6533] Tainted: [L]=SOFTLOCKUP [ 463.518028][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 463.518044][ T6533] Call Trace: [ 463.518058][ T6533] [ 463.518069][ T6533] dump_stack_lvl+0xe8/0x150 [ 463.518112][ T6533] print_circular_bug+0x2e1/0x300 [ 463.518158][ T6533] check_noncircular+0x12e/0x150 [ 463.518242][ T6533] __lock_acquire+0x15a5/0x2cf0 [ 463.518275][ T6533] ? mempool_alloc_noprof+0x1ce/0x300 [ 463.518304][ T6533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.518333][ T6533] ? stack_trace_save+0xa9/0x100 [ 463.518358][ T6533] ? __pfx_stack_trace_save+0x10/0x10 [ 463.518382][ T6533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.518410][ T6533] ? mempool_alloc_noprof+0x1ce/0x300 [ 463.518437][ T6533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.518463][ T6533] ? stack_depot_save_flags+0x33/0x810 [ 463.518504][ T6533] ? __submit_bio+0x1c0/0x580 [ 463.518529][ T6533] lock_acquire+0x106/0x350 [ 463.518559][ T6533] ? __submit_bio+0x1c0/0x580 [ 463.518585][ T6533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.518614][ T6533] ? blk_mq_submit_bio+0x3d1/0x28e0 [ 463.518639][ T6533] ? __submit_bio+0x1c0/0x580 [ 463.518664][ T6533] blk_mq_submit_bio+0x6de/0x28e0 [ 463.518687][ T6533] ? __submit_bio+0x1c0/0x580 [ 463.518714][ T6533] ? blk_mq_submit_bio+0x3d1/0x28e0 [ 463.518740][ T6533] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 463.518765][ T6533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.518791][ T6533] ? __lock_acquire+0x6b5/0x2cf0 [ 463.518829][ T6533] __submit_bio+0x1c0/0x580 [ 463.518856][ T6533] ? __pfx___submit_bio+0x10/0x10 [ 463.518880][ T6533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.518911][ T6533] ? blk_add_trace_bio+0x2e/0x2f0 [ 463.518945][ T6533] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 463.518969][ T6533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.518999][ T6533] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 463.519030][ T6533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.519064][ T6533] block_read_full_folio+0x599/0x830 [ 463.519095][ T6533] ? __pfx_blkdev_get_block+0x10/0x10 [ 463.519125][ T6533] filemap_read_folio+0x137/0x3b0 [ 463.519148][ T6533] ? __pfx_blkdev_read_folio+0x10/0x10 [ 463.519173][ T6533] ? __pfx_filemap_read_folio+0x10/0x10 [ 463.519197][ T6533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.519224][ T6533] ? down_read+0x270/0x2e0 [ 463.519256][ T6533] ? filemap_get_pages+0x987/0x1ef0 [ 463.519293][ T6533] filemap_get_pages+0x1744/0x1ef0 [ 463.519329][ T6533] ? __lock_acquire+0x6b5/0x2cf0 [ 463.519374][ T6533] ? __pfx_filemap_get_pages+0x10/0x10 [ 463.519415][ T6533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.519445][ T6533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.519476][ T6533] filemap_read+0x447/0x1230 [ 463.519511][ T6533] ? aa_file_perm+0x192/0x15e0 [ 463.519556][ T6533] ? __pfx_filemap_read+0x10/0x10 [ 463.519606][ T6533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.519633][ T6533] ? down_read+0x270/0x2e0 [ 463.519663][ T6533] ? blkdev_read_iter+0x177/0x440 [ 463.519690][ T6533] blkdev_read_iter+0x30a/0x440 [ 463.519720][ T6533] vfs_read+0x582/0xa70 [ 463.519762][ T6533] ? __pfx_vfs_read+0x10/0x10 [ 463.519794][ T6533] ? vm_mmap_pgoff+0x373/0x4f0 [ 463.519823][ T6533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.519854][ T6533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.519884][ T6533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.519913][ T6533] ksys_read+0x150/0x270 [ 463.519948][ T6533] ? __pfx_ksys_read+0x10/0x10 [ 463.519981][ T6533] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.520017][ T6533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.520041][ T6533] do_syscall_64+0x15f/0xf80 [ 463.520074][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.520097][ T6533] RIP: 0033:0x7fcfd50a7407 [ 463.520121][ T6533] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 463.520140][ T6533] RSP: 002b:00007ffd93e33d50 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 463.520164][ T6533] RAX: ffffffffffffffda RBX: 00007fcfd5895880 RCX: 00007fcfd50a7407 [ 463.520182][ T6533] RDX: 0000000000000200 RSI: 00007fcfd5894000 RDI: 0000000000000009 [ 463.520196][ T6533] RBP: 0000557e8da033b0 R08: 0000000000000000 R09: 0000000000000000 [ 463.520211][ T6533] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 463.520225][ T6533] R13: 0000000000000000 R14: 0000557e8d9f8748 R15: 00007fcfd59bc39c [ 463.520250][ T6533] [ 464.059282][T13891] loop5: detected capacity change from 0 to 32768 [ 464.095082][ T30] audit: type=1800 audit(1776263288.817:106): pid=13891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2389" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 464.167806][T13867] XFS (loop6): Quotacheck: Done. [ 464.225164][T12235] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 464.707444][ T5481] 8021q: adding VLAN 0 to HW filter on device eth4 [ 471.109447][ T5481] 8021q: adding VLAN 0 to HW filter on device eth5 [ 471.442828][ T5481] 8021q: adding VLAN 0 to HW filter on device eth6 [ 471.800268][ T5481] 8021q: adding VLAN 0 to HW filter on device eth7 [ 472.153561][ T5481] 8021q: adding VLAN 0 to HW filter on device eth8