last executing test programs: 1m33.770286623s ago: executing program 0 (id=393): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) 1m32.235081886s ago: executing program 0 (id=420): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8b}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r1}, 0x18) r2 = epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) 1m32.154631265s ago: executing program 0 (id=423): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) shmctl$IPC_INFO(0x0, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x7a28, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) accept(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r5}, 0x18) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1m31.03357946s ago: executing program 0 (id=447): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x150) fcntl$notify(r0, 0x402, 0xae6559fe5489bffb) 1m30.896936679s ago: executing program 0 (id=452): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004000, &(0x7f00000001c0)={[{@errors_remount}, {@resuid}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@nobarrier}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000001740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2) 1m25.554679422s ago: executing program 2 (id=532): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) shmctl$IPC_INFO(0x0, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x7a28, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x3) accept(r2, 0x0, 0x0) 1m24.97643594s ago: executing program 0 (id=538): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)}}], 0x1, 0x4400c800) write(r0, &(0x7f0000000440)='}y', 0x2) 1m24.976242579s ago: executing program 32 (id=538): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000005c0)}}], 0x1, 0x4400c800) write(r0, &(0x7f0000000440)='}y', 0x2) 1m24.69886674s ago: executing program 2 (id=545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000009"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) 1m24.519856542s ago: executing program 2 (id=547): gettid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="3e7ec592fb6f366451", 0x9}], 0x1}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m24.290792202s ago: executing program 2 (id=549): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) 1m24.235652766s ago: executing program 2 (id=550): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c000000180000000400000000000000"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1m24.104488429s ago: executing program 2 (id=551): sync() 1m9.097151008s ago: executing program 33 (id=551): sync() 6.616663487s ago: executing program 3 (id=1088): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 6.545903503s ago: executing program 3 (id=1089): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) shmctl$IPC_INFO(0x0, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x7a28, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x3) accept(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 5.403695735s ago: executing program 3 (id=1098): syz_mount_image$ext4(&(0x7f0000000440)='ext3\x00', &(0x7f00000000c0)='./file1\x00', 0x2808093, &(0x7f0000000340)={[{@noacl}], [], 0x22}, 0x82, 0x461, &(0x7f0000000900)="$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") 5.278045665s ago: executing program 3 (id=1103): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000240)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x46, r9}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @empty}, 0x7e, r9}) dup(r0) 4.394511236s ago: executing program 3 (id=1106): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) 4.338772526s ago: executing program 1 (id=1107): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) 4.33805998s ago: executing program 3 (id=1108): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) shmctl$IPC_INFO(0x0, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x7a28, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x3) accept(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.032138143s ago: executing program 1 (id=1120): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000000)={0xffffffff, 0x4, 0x5, 0xaeff, 0x7, 0x7}) syz_clone(0x60100100, &(0x7f0000000440), 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000480)) 2.91792761s ago: executing program 4 (id=1123): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c01", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c0130"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 2.901851173s ago: executing program 4 (id=1124): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) close(0xffffffffffffffff) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/89, 0x59) 2.812352425s ago: executing program 4 (id=1125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 2.059227221s ago: executing program 1 (id=1131): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) bind$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x43084) 1.638742108s ago: executing program 5 (id=1132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xfffd}, @generic={0x0, 0x2}]}}}}}}, 0x46) 1.558038635s ago: executing program 5 (id=1133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0xe0, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xc4, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x4}]}]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.527230697s ago: executing program 5 (id=1134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c01", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c0130"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 1.511338493s ago: executing program 5 (id=1135): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[], 0x2, 0x5515, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000001b80)=ANY=[], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r4, r0, 0x0, 0x3ffff) sendfile(r4, r0, 0x0, 0x7ffff000) 1.250976887s ago: executing program 5 (id=1139): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 1.193547657s ago: executing program 1 (id=1140): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c020000020000000800", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="710502060202d8ed887c07256d035801810706024815"], 0x14) 1.100307675s ago: executing program 1 (id=1141): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000000)={0xffffffff, 0x4, 0x5, 0xaeff, 0x7, 0x7}) syz_clone(0x60100100, &(0x7f0000000440), 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000480)) 497.52782ms ago: executing program 4 (id=1142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0xd81, &(0x7f0000002000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x2, 0x6, "d85cd2", 0xd4b, 0x3a, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x3, 0x1a8, "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"}]}}}}}}, 0x0) 438.924237ms ago: executing program 4 (id=1143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xfffd}, @generic={0x0, 0x2}]}}}}}}, 0x46) 388.034287ms ago: executing program 6 (id=1145): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c01", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c0130"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 363.327931ms ago: executing program 6 (id=1146): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) 277.123788ms ago: executing program 5 (id=1147): mknodat(0xffffffffffffffff, 0x0, 0x10, 0xe) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x6b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000385353608f20446b76e8e01022601090259000104f2000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f9090907"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x575, &(0x7f0000000180)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 276.191435ms ago: executing program 6 (id=1148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xd769, 0x400000000000002, 0x49b, 0x7, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4010004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 253.011996ms ago: executing program 1 (id=1149): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[], 0x2, 0x5515, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000001b80)=ANY=[], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r4, r0, 0x0, 0x3ffff) sendfile(r4, r0, 0x0, 0x7ffff000) 168.598505ms ago: executing program 4 (id=1150): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 50.3516ms ago: executing program 6 (id=1151): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c020000020000000800", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="710502060202d8ed887c07256d035801810706024815"], 0x14) 2.954704ms ago: executing program 6 (id=1152): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x2c, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x4, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x1d8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 6 (id=1153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0xd81, &(0x7f0000002000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x2, 0x6, "d85cd2", 0xd4b, 0x3a, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x3, 0x1a8, "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"}]}}}}}}, 0x0) kernel console output (not intermixed with test programs): 31] audit: type=1326 audit(56.520:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7512 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4d5c0a8 code=0x7ffc0000 [ 56.543791][ T31] audit: type=1326 audit(56.520:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7512 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4d5c0a8 code=0x7ffc0000 [ 56.548157][ T31] audit: type=1326 audit(56.520:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7512 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa4d5c0a8 code=0x7ffc0000 [ 56.548367][ T31] audit: type=1326 audit(56.520:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7512 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4d5c0a8 code=0x7ffc0000 [ 56.548440][ T31] audit: type=1326 audit(56.520:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7512 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4d5c0a8 code=0x7ffc0000 [ 56.548593][ T31] audit: type=1326 audit(56.520:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7512 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa4d5c0a8 code=0x7ffc0000 [ 56.548657][ T31] audit: type=1326 audit(56.520:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7512 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4d5c0a8 code=0x7ffc0000 [ 57.042796][ T7527] loop2: detected capacity change from 0 to 4096 [ 57.066494][ T7527] EXT4-fs (loop2): Test dummy encryption mode enabled [ 57.066521][ T7527] EXT4-fs (loop2): unsupported descriptor size 255 [ 57.686389][ T6557] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 57.788382][ T6557] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.380194][ T7547] lo speed is unknown, defaulting to 1000 [ 58.405464][ T7555] fido_id[7555]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 58.697685][ T7571] loop4: detected capacity change from 0 to 512 [ 58.765631][ T7571] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.766471][ T7571] EXT4-fs (loop4): mount failed [ 58.814502][ T7579] loop3: detected capacity change from 0 to 4096 [ 58.885191][ T7579] EXT4-fs (loop3): Test dummy encryption mode enabled [ 58.885243][ T7579] EXT4-fs (loop3): unsupported descriptor size 255 [ 58.900166][ T26] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 58.902006][ T26] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.288027][ T7597] loop1: detected capacity change from 0 to 512 [ 59.297832][ T7597] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.305534][ T7597] EXT4-fs (loop1): 1 truncate cleaned up [ 59.305983][ T7597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.379260][ T6548] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.417902][ T7615] loop3: detected capacity change from 0 to 512 [ 59.419591][ T7615] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.439659][ T7615] EXT4-fs (loop3): 1 orphan inode deleted [ 59.439681][ T7615] EXT4-fs (loop3): 1 truncate cleaned up [ 59.440118][ T7615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.478610][ T7624] loop2: detected capacity change from 0 to 512 [ 59.560294][ T7633] loop4: detected capacity change from 0 to 4096 [ 59.562805][ T7633] EXT4-fs (loop4): Test dummy encryption mode enabled [ 59.562840][ T7633] EXT4-fs (loop4): unsupported descriptor size 255 [ 59.567304][ T7624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.455286][ T6560] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.455930][ T6555] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.470442][ T7640] netlink: 240 bytes leftover after parsing attributes in process `syz.0.337'. [ 60.512707][ T7644] loop3: detected capacity change from 0 to 128 [ 60.541722][ T7647] lo speed is unknown, defaulting to 1000 [ 60.582001][ T7648] syz.3.339: attempt to access beyond end of device [ 60.582001][ T7648] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 60.585512][ T7648] syz.3.339: attempt to access beyond end of device [ 60.585512][ T7648] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 60.589183][ T7648] syz.3.339: attempt to access beyond end of device [ 60.589183][ T7648] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 60.591648][ T7648] syz.3.339: attempt to access beyond end of device [ 60.591648][ T7648] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 60.595427][ T7648] syz.3.339: attempt to access beyond end of device [ 60.595427][ T7648] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 60.598113][ T7648] syz.3.339: attempt to access beyond end of device [ 60.598113][ T7648] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 60.600602][ T7648] syz.3.339: attempt to access beyond end of device [ 60.600602][ T7648] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 60.602983][ T7648] syz.3.339: attempt to access beyond end of device [ 60.602983][ T7648] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 60.605566][ T7648] syz.3.339: attempt to access beyond end of device [ 60.605566][ T7648] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 60.605619][ T7648] syz.3.339: attempt to access beyond end of device [ 60.605619][ T7648] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 60.636693][ T7643] loop2: detected capacity change from 0 to 32768 [ 60.641629][ T7645] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.642194][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 60.665209][ T7652] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 60.665238][ T7652] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 60.679665][ T7645] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.698965][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 60.741909][ T6541] loop2: p1 p3 < > [ 60.749019][ T7643] loop2: p1 p3 < > [ 60.821894][ T7645] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.938990][ T7645] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.014268][ T7673] loop1: detected capacity change from 0 to 512 [ 61.016345][ T7673] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.036282][ T7673] EXT4-fs (loop1): 1 orphan inode deleted [ 61.036310][ T7673] EXT4-fs (loop1): 1 truncate cleaned up [ 61.037962][ T7673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.041161][ T6541] udevd[6541]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 61.047241][ T6662] udevd[6662]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 61.308541][ T6541] udevd[6541]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 61.311551][ T6662] udevd[6662]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 61.361466][ T15] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.361522][ T15] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.366462][ T15] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.371243][ T15] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.415275][ T7682] netlink: 'syz.3.352': attribute type 12 has an invalid length. [ 61.636849][ T7690] lo speed is unknown, defaulting to 1000 [ 61.852055][ T7687] syz_tun: entered promiscuous mode [ 61.853045][ T6548] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.857326][ T7687] batadv_slave_0: entered promiscuous mode [ 61.859502][ T7687] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 61.861539][ T7687] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.863861][ T7687] hsr1: entered allmulticast mode [ 61.865038][ T7687] syz_tun: entered allmulticast mode [ 61.866254][ T7687] batadv_slave_0: entered allmulticast mode [ 62.036335][ T31] kauditd_printk_skb: 84 callbacks suppressed [ 62.036373][ T31] audit: type=1326 audit(62.010:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 62.036399][ T31] audit: type=1326 audit(62.010:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 62.046806][ T31] audit: type=1326 audit(62.020:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=26 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 62.052558][ T31] audit: type=1326 audit(62.030:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 62.056716][ T31] audit: type=1326 audit(62.030:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 62.062788][ T31] audit: type=1326 audit(62.040:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=180 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 62.064465][ T31] audit: type=1326 audit(62.040:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 62.064693][ T31] audit: type=1326 audit(62.040:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=183 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 62.064792][ T31] audit: type=1326 audit(62.040:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 62.064857][ T31] audit: type=1326 audit(62.040:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 62.119255][ T7717] loop4: detected capacity change from 0 to 512 [ 62.134154][ T7717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.158217][ T6549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.255840][ T7733] loop2: detected capacity change from 0 to 512 [ 62.286314][ T7733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.534139][ T7685] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 62.537635][ T6555] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.571951][ T7740] loop3: detected capacity change from 0 to 512 [ 62.574747][ T7740] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.371: bg 0: block 5: invalid block bitmap [ 62.576449][ T7740] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 62.576684][ T7740] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.371: invalid indirect mapped block 3 (level 2) [ 62.577231][ T7740] EXT4-fs (loop3): 2 truncates cleaned up [ 62.580218][ T7740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.595631][ T6560] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.654358][ T7751] loop0: detected capacity change from 0 to 1024 [ 62.676638][ T7751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.717422][ T6554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.342746][ T7799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.343711][ T7799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.603324][ T7810] tipc: Enabled bearer , priority 0 [ 63.603635][ T7810] syzkaller0: entered promiscuous mode [ 63.603646][ T7810] syzkaller0: entered allmulticast mode [ 63.605729][ T7810] tipc: Resetting bearer [ 63.609899][ T7809] tipc: Resetting bearer [ 63.616679][ T7809] tipc: Disabling bearer [ 63.712395][ T7812] loop2: detected capacity change from 0 to 736 [ 63.774104][ T7812] rock: directory entry would overflow storage [ 63.774127][ T7812] rock: sig=0x4f50, size=4, remaining=3 [ 63.774162][ T7812] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 64.099859][ T7838] tipc: Started in network mode [ 64.099891][ T7838] tipc: Node identity 9a04e7116f25, cluster identity 4711 [ 64.099937][ T7838] tipc: Enabled bearer , priority 0 [ 64.100301][ T7838] syzkaller0: entered promiscuous mode [ 64.100309][ T7838] syzkaller0: entered allmulticast mode [ 64.107061][ T7838] tipc: Resetting bearer [ 64.118183][ T7837] tipc: Resetting bearer [ 64.131620][ T7837] tipc: Disabling bearer [ 64.256407][ T7842] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 64.417352][ T7850] loop1: detected capacity change from 0 to 1024 [ 64.421179][ T7850] EXT4-fs: Ignoring removed bh option [ 64.423392][ T7850] EXT4-fs: inline encryption not supported [ 64.426075][ T7850] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.430161][ T7850] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 64.434333][ T7850] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.418: lblock 2 mapped to illegal pblock 2 (length 1) [ 64.443470][ T7850] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.418: lblock 0 mapped to illegal pblock 48 (length 1) [ 64.446317][ T7850] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.418: Failed to acquire dquot type 0 [ 64.451120][ T7850] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 64.457067][ T7850] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.418: mark_inode_dirty error [ 64.461606][ T7850] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 64.463651][ T7850] EXT4-fs (loop1): 1 orphan inode deleted [ 64.465710][ T7850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.488776][ T7853] pim6reg: entered allmulticast mode [ 64.490261][ T2414] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.490299][ T2414] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.492580][ T7853] pim6reg: left allmulticast mode [ 64.506230][ T7793] Set syz1 is full, maxelem 65536 reached [ 64.652339][ T6733] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 64.666048][ T6733] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 64.679792][ T7864] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.681667][ T7850] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 64.694550][ T6548] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.738147][ T7864] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.789557][ T7870] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 64.797605][ T7869] tipc: Enabled bearer , priority 0 [ 64.802903][ T7864] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.806700][ T7869] syzkaller0: entered promiscuous mode [ 64.806745][ T7869] syzkaller0: entered allmulticast mode [ 64.812499][ T7869] tipc: Resetting bearer [ 64.814531][ T7868] tipc: Resetting bearer [ 64.831460][ T7868] tipc: Disabling bearer [ 64.866250][ T7864] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.903493][ T7884] loop4: detected capacity change from 0 to 512 [ 64.943941][ T7887] loop1: detected capacity change from 0 to 1024 [ 64.961904][ T7884] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 64.963527][ T7884] EXT4-fs (loop4): orphan cleanup on readonly fs [ 64.980068][ T7887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 65.006390][ T7887] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.432: Freeing blocks not in datazone - block = 0, count = 16 [ 65.025621][ T7884] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.431: corrupted inode contents [ 65.040275][ T7884] EXT4-fs (loop4): Remounting filesystem read-only [ 65.041528][ T7884] EXT4-fs (loop4): 1 truncate cleaned up [ 65.044253][ T6683] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 65.044282][ T6683] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 65.044321][ T6683] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 65.051740][ T7884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.076985][ T6548] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 65.089482][ T6549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.117629][ T7910] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 65.194891][ T7918] loop1: detected capacity change from 0 to 512 [ 65.211664][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 65.211693][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 65.224646][ T7918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.229654][ T7918] /dev/loop1: Can't open blockdev [ 65.257066][ T6548] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.290071][ T7933] loop2: detected capacity change from 0 to 512 [ 65.298795][ T7934] loop1: detected capacity change from 0 to 2048 [ 65.305815][ T7933] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.443: Failed to acquire dquot type 1 [ 65.310143][ T7933] EXT4-fs (loop2): 1 truncate cleaned up [ 65.310672][ T7933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.320902][ T7934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.328683][ T7933] EXT4-fs (loop2): shut down requested (1) [ 65.509539][ T6555] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.513899][ T6548] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.527618][ T15] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.529250][ T15] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.529304][ T15] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.534510][ T15] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.751311][ T7950] loop0: detected capacity change from 0 to 1024 [ 65.800382][ T7950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.814857][ T7952] loop2: detected capacity change from 0 to 4096 [ 65.828298][ T7952] ntfs3(loop2): It is recommened to use chkdsk. [ 65.831118][ T7952] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 65.831136][ T7952] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 65.831148][ T7952] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 65.831167][ T7952] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 65.831178][ T7952] ntfs3(loop2): try to read out of volume at offset 0x3fffffc1c00 [ 65.831188][ T7952] ntfs3(loop2): try to read out of volume at offset 0x3fffffc2c00 [ 65.831199][ T7952] ntfs3(loop2): try to read out of volume at offset 0x3fffffc4c00 [ 65.831216][ T7952] ntfs3(loop2): try to read out of volume at offset 0x3fffffc8c00 [ 65.831226][ T7952] ntfs3(loop2): try to read out of volume at offset 0x3fffffd0c00 [ 65.874498][ T7960] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 65.880662][ T7962] loop3: detected capacity change from 0 to 512 [ 65.882359][ T7962] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.883615][ T7962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.890247][ T7962] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.890285][ T7962] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.890862][ T6554] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 65.898337][ T6554] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 65.932458][ T7962] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.451: Allocating blocks 41-42 which overlap fs metadata [ 65.933456][ T7962] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.451: Allocating blocks 41-42 which overlap fs metadata [ 65.934016][ T7962] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.451: Failed to acquire dquot type 1 [ 65.934194][ T7962] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 65.951887][ T7962] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.451: corrupted inode contents [ 65.959386][ T7962] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #12: comm syz.3.451: mark_inode_dirty error [ 65.962615][ T7962] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.451: corrupted inode contents [ 65.962803][ T7962] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.451: mark_inode_dirty error [ 65.962928][ T7962] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.451: corrupted inode contents [ 65.965123][ T7962] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 65.965289][ T7962] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.451: corrupted inode contents [ 65.965399][ T7962] EXT4-fs error (device loop3): ext4_truncate:4666: inode #12: comm syz.3.451: mark_inode_dirty error [ 65.965506][ T7962] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 65.965689][ T7962] EXT4-fs (loop3): 1 truncate cleaned up [ 65.966111][ T7962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.007153][ T6560] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.035152][ T7976] loop1: detected capacity change from 0 to 2048 [ 66.044520][ T7976] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 66.057022][ T6541] udevd[6541]: incorrect nilfs2 checksum on /dev/loop1 [ 66.071726][ T6541] udevd[6541]: incorrect nilfs2 checksum on /dev/loop1 [ 66.087036][ T7977] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.130471][ T7984] loop3: detected capacity change from 0 to 512 [ 66.281093][ T26] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 66.356362][ T26] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 66.940214][ T7990] fido_id[7990]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 66.944838][ T7984] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.461: Failed to acquire dquot type 1 [ 66.964269][ T7984] EXT4-fs (loop3): 1 truncate cleaned up [ 66.966179][ T7984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.980702][ T7994] loop1: detected capacity change from 0 to 1024 [ 67.020016][ T7994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 67.042653][ T7998] loop4: detected capacity change from 0 to 4096 [ 67.083284][ T7998] EXT4-fs (loop4): Test dummy encryption mode enabled [ 67.084599][ T7998] EXT4-fs (loop4): unsupported descriptor size 255 [ 67.085486][ T6560] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.098053][ T42] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 67.099235][ T42] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 44 with max blocks 8 with error 28 [ 67.099257][ T42] EXT4-fs (loop1): This should not happen!! Data will be lost [ 67.099257][ T42] [ 67.099267][ T42] EXT4-fs (loop1): Total free blocks count 0 [ 67.099276][ T42] EXT4-fs (loop1): Free/Dirty block details [ 67.099289][ T42] EXT4-fs (loop1): free_blocks=4293918720 [ 67.099301][ T42] EXT4-fs (loop1): dirty_blocks=32 [ 67.099309][ T42] EXT4-fs (loop1): Block reservation details [ 67.099316][ T42] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 67.117016][ T6548] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 67.470957][ T8004] loop2: detected capacity change from 0 to 32768 [ 67.508305][ T8004] jfs: Unknown parameter '000000000000000000000xffffffffffffffffÿÿ' [ 67.641853][ T8016] loop1: detected capacity change from 0 to 1024 [ 67.702162][ T8016] hfsplus: failed to load root directory [ 67.712507][ T8008] loop3: detected capacity change from 0 to 32768 [ 67.733973][ T8004] loop2: detected capacity change from 0 to 40427 [ 67.776478][ T8004] F2FS-fs (loop2): invalid crc value [ 67.812685][ T8004] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 67.814592][ T8004] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 67.823389][ T8004] bio_check_eod: 9881 callbacks suppressed [ 67.823916][ T8004] syz.2.469: attempt to access beyond end of device [ 67.823916][ T8004] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 67.832306][ T8008] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 67.835832][ T8004] syz.2.469: attempt to access beyond end of device [ 67.835832][ T8004] loop2: rw=2049, sector=53256, nr_sectors = 136 limit=40427 [ 67.845962][ T6555] syz-executor: attempt to access beyond end of device [ 67.845962][ T6555] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 67.852642][ T6555] CPU: 0 UID: 0 PID: 6555 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 67.852672][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 67.852678][ T6555] Call trace: [ 67.852682][ T6555] show_stack+0x2c/0x3c (C) [ 67.852698][ T6555] __dump_stack+0x30/0x40 [ 67.852709][ T6555] dump_stack_lvl+0xd8/0x12c [ 67.852715][ T6555] dump_stack+0x1c/0x28 [ 67.852721][ T6555] f2fs_handle_critical_error+0x34c/0x4b8 [ 67.852729][ T6555] f2fs_stop_checkpoint+0x5c/0x70 [ 67.852736][ T6555] f2fs_write_end_io+0x768/0xa70 [ 67.852743][ T6555] bio_endio+0x804/0x840 [ 67.852750][ T6555] submit_bio_noacct+0x158/0x176c [ 67.852755][ T6555] submit_bio+0x3b4/0x550 [ 67.852759][ T6555] f2fs_submit_write_bio+0x13c/0x324 [ 67.852765][ T6555] __submit_merged_bio+0x254/0x704 [ 67.852770][ T6555] __submit_merged_write_cond+0x23c/0x4ac [ 67.852776][ T6555] f2fs_write_data_pages+0x1d28/0x2634 [ 67.852782][ T6555] do_writepages+0x270/0x468 [ 67.852789][ T6555] filemap_fdatawrite+0x14c/0x1f4 [ 67.852796][ T6555] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 67.852801][ T6555] f2fs_write_checkpoint+0x690/0x16a0 [ 67.852806][ T6555] kill_f2fs_super+0x21c/0x584 [ 67.852812][ T6555] deactivate_locked_super+0xc4/0x12c [ 67.852819][ T6555] deactivate_super+0xe0/0x100 [ 67.852826][ T6555] cleanup_mnt+0x31c/0x3ac [ 67.852831][ T6555] __cleanup_mnt+0x20/0x30 [ 67.852836][ T6555] task_work_run+0x1dc/0x260 [ 67.852842][ T6555] do_notify_resume+0x174/0x1f4 [ 67.852848][ T6555] el0_svc+0xb8/0x180 [ 67.852855][ T6555] el0t_64_sync_handler+0x84/0x12c [ 67.852860][ T6555] el0t_64_sync+0x198/0x19c [ 67.852892][ T6555] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 67.916926][ T8029] overlay: Unknown parameter '\{\' [ 68.276041][ T8034] loop2: detected capacity change from 0 to 256 [ 68.429777][ T6560] ocfs2: Unmounting device (7,3) on (node local) [ 68.455469][ T8034] loop2: detected capacity change from 0 to 32768 [ 68.462814][ T8034] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.475 (8034) [ 68.470443][ T8034] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.472423][ T8034] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 68.474071][ T8034] BTRFS info (device loop2): using free-space-tree [ 68.550366][ T8055] loop3: detected capacity change from 0 to 256 [ 68.554010][ T8055] exfat: Deprecated parameter 'namecase' [ 68.562480][ T6555] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.565278][ T8056] loop4: detected capacity change from 0 to 1024 [ 68.566836][ T8056] EXT4-fs: Ignoring removed oldalloc option [ 68.572716][ T8056] EXT4-fs: Ignoring removed bh option [ 68.593521][ T8055] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 68.602337][ T8056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.622907][ T8056] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 68.624693][ T8056] overlayfs: missing 'lowerdir' [ 68.666169][ T8061] loop1: detected capacity change from 0 to 4096 [ 68.683893][ T8061] EXT4-fs (loop1): Test dummy encryption mode enabled [ 68.683932][ T8061] EXT4-fs (loop1): unsupported descriptor size 255 [ 68.699408][ T6549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.790791][ T8066] loop3: detected capacity change from 0 to 4096 [ 68.792882][ T8066] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 68.794890][ T8066] ntfs3(loop3): ino=3, mi_enum_attr [ 68.800334][ T8070] loop4: detected capacity change from 0 to 256 [ 69.126668][ T8076] loop1: detected capacity change from 0 to 1024 [ 69.145596][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'. [ 69.261102][ T12] hfsplus: b-tree write err: -5, ino 4 [ 69.347071][ T8095] netlink: 'syz.1.492': attribute type 1 has an invalid length. [ 69.561063][ T8107] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.712565][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'. [ 69.738109][ T8116] nbd0: detected capacity change from 0 to 127 [ 69.743525][ T6551] block nbd0: Receive control failed (result -104) [ 69.766443][ T31] kauditd_printk_skb: 403 callbacks suppressed [ 69.768151][ T31] audit: type=1326 audit(69.740:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 69.772467][ T31] audit: type=1326 audit(69.750:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=195 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 69.776796][ T31] audit: type=1326 audit(69.750:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 69.783041][ T31] audit: type=1326 audit(69.760:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 69.786840][ T31] audit: type=1326 audit(69.760:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 69.791026][ T31] audit: type=1326 audit(69.770:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 69.795641][ T31] audit: type=1326 audit(69.770:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 69.800302][ T31] audit: type=1326 audit(69.780:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 69.803931][ T31] audit: type=1326 audit(69.780:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 69.807764][ T31] audit: type=1326 audit(69.780:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.1.502" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffff9395e568 code=0x7ffc0000 [ 69.885105][ T8127] warning: `syz.3.505' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.084247][ T8141] loop4: detected capacity change from 0 to 512 [ 70.097601][ T6557] IPVS: starting estimator thread 0... [ 70.103061][ T8141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.160941][ T6549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.187867][ T8145] IPVS: using max 68 ests per chain, 163200 per kthread [ 70.202087][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.516'. [ 70.301505][ T8160] netlink: 16 bytes leftover after parsing attributes in process `syz.4.519'. [ 70.479099][ T8169] Set syz1 is full, maxelem 65536 reached [ 70.883532][ T6656] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 70.884487][ T6656] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 71.602739][ T8201] loop1: detected capacity change from 0 to 512 [ 71.604430][ T8201] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.621868][ T8201] EXT4-fs (loop1): 1 orphan inode deleted [ 71.621888][ T8201] EXT4-fs (loop1): 1 truncate cleaned up [ 71.622326][ T8201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.636876][ T6548] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.675315][ T8208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.675487][ T8208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.721964][ T6554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.793948][ T8166] Set syz1 is full, maxelem 65536 reached [ 71.831488][ T6128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.832897][ T6128] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.834980][ T6128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.837401][ T6128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.839116][ T6128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.934246][ T42] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.965332][ T8212] lo speed is unknown, defaulting to 1000 [ 72.018934][ T42] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.033201][ T8212] chnl_net:caif_netlink_parms(): no params data found [ 72.063566][ T42] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.089249][ T8212] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.090770][ T8212] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.092506][ T8212] bridge_slave_0: entered allmulticast mode [ 72.094388][ T8212] bridge_slave_0: entered promiscuous mode [ 72.096338][ T8212] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.099954][ T8212] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.101666][ T8212] bridge_slave_1: entered allmulticast mode [ 72.103634][ T8212] bridge_slave_1: entered promiscuous mode [ 72.113508][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 72.125486][ T8212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.130790][ T8212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.143175][ T8212] team0: Port device team_slave_0 added [ 72.145188][ T8212] team0: Port device team_slave_1 added [ 72.156435][ T8212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.158967][ T8212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.163663][ T8212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.166484][ T8212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.170389][ T8212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.175261][ T8212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.196463][ T8212] hsr_slave_0: entered promiscuous mode [ 72.199815][ T8212] hsr_slave_1: entered promiscuous mode [ 72.201296][ T8212] debugfs: 'hsr0' already exists in 'hsr' [ 72.202869][ T8212] Cannot create hsr debugfs directory [ 72.294292][ T8240] loop1: detected capacity change from 0 to 512 [ 72.298478][ T8240] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.314711][ T8240] EXT4-fs (loop1): 1 orphan inode deleted [ 72.314734][ T8240] EXT4-fs (loop1): 1 truncate cleaned up [ 72.315163][ T8240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.343976][ T6548] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.393828][ T9] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 72.401002][ T42] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.519631][ T8212] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 72.526140][ T8212] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 72.543653][ T8212] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 72.556835][ T8212] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 72.647926][ T42] bridge_slave_1: left allmulticast mode [ 72.647976][ T42] bridge_slave_1: left promiscuous mode [ 72.648632][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.671911][ T42] bridge_slave_0: left allmulticast mode [ 72.673331][ T42] bridge_slave_0: left promiscuous mode [ 72.677576][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.953208][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.980607][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.019046][ T42] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 73.059343][ T42] bond0 (unregistering): Released all slaves [ 73.100291][ T42] bond1 (unregistering): Released all slaves [ 73.111584][ T8257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.116464][ T8260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.116673][ T8260] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 73.117228][ T8260] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 73.125012][ T8261] gretap1: entered allmulticast mode [ 73.126808][ T8261] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 73.143933][ T8212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.152339][ T8212] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.162508][ T6733] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.162728][ T6733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.171740][ T6733] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.171781][ T6733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.181335][ T8212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.183182][ T8212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.233297][ T8277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.233475][ T8277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.335805][ T8212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.435321][ T8212] veth0_vlan: entered promiscuous mode [ 73.437702][ T8212] veth1_vlan: entered promiscuous mode [ 73.443789][ T8212] veth0_macvtap: entered promiscuous mode [ 73.444996][ T8212] veth1_macvtap: entered promiscuous mode [ 73.449226][ T8212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.450142][ T8212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.495847][ T42] hsr_slave_0: left promiscuous mode [ 73.496992][ T42] hsr_slave_1: left promiscuous mode [ 73.497280][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.497296][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.503479][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.503509][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.509934][ T42] veth0_macvtap: left promiscuous mode [ 73.510011][ T42] veth1_vlan: left promiscuous mode [ 73.510415][ T42] veth0_vlan: left promiscuous mode [ 73.666415][ T42] team0 (unregistering): Port device team_slave_1 removed [ 73.677547][ T42] team0 (unregistering): Port device team_slave_0 removed [ 73.812708][ T8318] loop3: detected capacity change from 0 to 512 [ 73.820563][ T8318] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.841824][ T8318] EXT4-fs (loop3): 1 orphan inode deleted [ 73.842862][ T8318] EXT4-fs (loop3): 1 truncate cleaned up [ 73.844943][ T8318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.921287][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 73.927853][ T6551] Bluetooth: hci2: command tx timeout [ 73.956252][ T8324] loop4: detected capacity change from 0 to 4096 [ 73.966757][ T8324] ntfs3(loop4): It is recommened to use chkdsk. [ 73.969055][ T8324] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 73.969086][ T8324] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 73.969110][ T8324] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 73.969129][ T8324] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 73.969145][ T8324] ntfs3(loop4): try to read out of volume at offset 0x3fffffc1c00 [ 73.969161][ T8324] ntfs3(loop4): try to read out of volume at offset 0x3fffffc2c00 [ 73.969176][ T8324] ntfs3(loop4): try to read out of volume at offset 0x3fffffc4c00 [ 73.969190][ T8324] ntfs3(loop4): try to read out of volume at offset 0x3fffffc8c00 [ 73.969206][ T8324] ntfs3(loop4): try to read out of volume at offset 0x3fffffd0c00 [ 74.017080][ T2130] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.017152][ T2130] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.017188][ T2130] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.017212][ T2130] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.031488][ T8317] vlan2: entered promiscuous mode [ 74.034929][ T8317] vlan2: entered allmulticast mode [ 74.036142][ T8317] hsr_slave_1: entered allmulticast mode [ 74.177530][ T6682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.179513][ T6682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.194831][ T6682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.196809][ T6682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.817254][ T8375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.821069][ T8375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.174221][ T26] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 75.178832][ T26] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.207894][ T8320] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 75.217858][ T8320] EXT4-fs (loop3): Remounting filesystem read-only [ 75.233320][ T8411] fido_id[8411]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 75.245531][ T6656] IPVS: starting estimator thread 0... [ 75.293414][ T6560] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.348844][ T8416] IPVS: using max 48 ests per chain, 115200 per kthread [ 75.366363][ T8432] loop3: detected capacity change from 0 to 512 [ 75.376866][ T8432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.555201][ T6557] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 75.557061][ T6557] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.576798][ T8463] fido_id[8463]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 75.709480][ T8477] loop4: detected capacity change from 0 to 512 [ 75.712285][ T8477] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.714953][ T8477] EXT4-fs (loop4): 1 orphan inode deleted [ 75.714979][ T8477] EXT4-fs (loop4): 1 truncate cleaned up [ 75.715413][ T8477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.937955][ T8492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.938162][ T8492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.017844][ T6128] Bluetooth: hci2: command tx timeout [ 76.219113][ T6560] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.543287][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.5.597'. [ 76.947104][ T6549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.043794][ T8544] netlink: 256 bytes leftover after parsing attributes in process `syz.4.605'. [ 77.272651][ T8552] tipc: Failed to remove unknown binding: 66,1,1/0:1263112921/1263112923 [ 77.274248][ T8552] tipc: Failed to remove unknown binding: 66,1,1/0:1263112921/1263112923 [ 77.438920][ T15] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xd8 [ 77.765069][ T8566] netlink: 40 bytes leftover after parsing attributes in process `syz.5.613'. [ 78.058052][ T8595] loop4: detected capacity change from 0 to 4096 [ 78.065357][ T8595] ntfs3(loop4): It is recommened to use chkdsk. [ 78.065863][ T8595] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 78.065887][ T8595] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 78.065899][ T8595] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 78.065910][ T8595] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 78.065921][ T8595] ntfs3(loop4): try to read out of volume at offset 0x3fffffc1c00 [ 78.065939][ T8595] ntfs3(loop4): try to read out of volume at offset 0x3fffffc2c00 [ 78.065949][ T8595] ntfs3(loop4): try to read out of volume at offset 0x3fffffc4c00 [ 78.065959][ T8595] ntfs3(loop4): try to read out of volume at offset 0x3fffffc8c00 [ 78.065970][ T8595] ntfs3(loop4): try to read out of volume at offset 0x3fffffd0c00 [ 78.087929][ T6551] Bluetooth: hci2: command 0x040f tx timeout [ 78.129147][ T8600] netlink: 'syz.4.617': attribute type 3 has an invalid length. [ 78.129176][ T8600] netlink: 'syz.4.617': attribute type 1 has an invalid length. [ 78.131901][ T8600] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.617'. [ 78.167663][ T31] kauditd_printk_skb: 671 callbacks suppressed [ 78.167700][ T31] audit: type=1326 audit(78.140:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8602 comm="syz.5.619" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 78.170936][ T31] audit: type=1326 audit(78.140:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8602 comm="syz.5.619" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 78.170958][ T31] audit: type=1326 audit(78.140:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8602 comm="syz.5.619" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=195 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 78.170973][ T31] audit: type=1326 audit(78.140:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8602 comm="syz.5.619" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 78.172304][ T31] audit: type=1326 audit(78.150:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8602 comm="syz.5.619" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 78.174606][ T31] audit: type=1326 audit(78.150:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8602 comm="syz.5.619" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 78.174725][ T31] audit: type=1326 audit(78.150:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8602 comm="syz.5.619" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 78.175011][ T31] audit: type=1326 audit(78.150:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8602 comm="syz.5.619" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 78.175077][ T31] audit: type=1326 audit(78.150:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8602 comm="syz.5.619" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 78.175140][ T31] audit: type=1326 audit(78.150:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8602 comm="syz.5.619" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 78.205557][ T8609] loop4: detected capacity change from 0 to 512 [ 78.247693][ T8609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.323270][ T6549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.424142][ T8646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.622'. [ 78.426466][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.622'. [ 78.430618][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.622'. [ 78.513191][ T8662] tipc: Started in network mode [ 78.513223][ T8662] tipc: Node identity c6fc64d5dbe5, cluster identity 4711 [ 78.516008][ T8662] tipc: Enabled bearer , priority 0 [ 78.519468][ T8662] syzkaller0: entered promiscuous mode [ 78.520520][ T8662] syzkaller0: entered allmulticast mode [ 78.524328][ T8662] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 78.543337][ T8662] tipc: Resetting bearer [ 78.549427][ T8661] tipc: Resetting bearer [ 78.556626][ T8661] tipc: Disabling bearer [ 78.617561][ T8677] loop3: detected capacity change from 0 to 512 [ 78.623238][ T8677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.644963][ T6560] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.889200][ T8705] netlink: 60 bytes leftover after parsing attributes in process `syz.3.636'. [ 78.889432][ T8701] netlink: 60 bytes leftover after parsing attributes in process `syz.3.636'. [ 78.891140][ T8701] netlink: 60 bytes leftover after parsing attributes in process `syz.3.636'. [ 79.016734][ T8713] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 79.058977][ T8717] loop5: detected capacity change from 0 to 4096 [ 79.062448][ T8717] ntfs3(loop5): It is recommened to use chkdsk. [ 79.065709][ T8717] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 79.067407][ T8717] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 79.069558][ T8717] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 79.071216][ T8717] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00 [ 79.073106][ T8717] ntfs3(loop5): try to read out of volume at offset 0x3fffffc1c00 [ 79.074740][ T8717] ntfs3(loop5): try to read out of volume at offset 0x3fffffc2c00 [ 79.076478][ T8717] ntfs3(loop5): try to read out of volume at offset 0x3fffffc4c00 [ 79.079492][ T8717] ntfs3(loop5): try to read out of volume at offset 0x3fffffc8c00 [ 79.080943][ T8717] ntfs3(loop5): try to read out of volume at offset 0x3fffffd0c00 [ 79.102000][ T8721] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 80.045136][ T8749] bridge_slave_0: left allmulticast mode [ 80.045846][ T8749] bridge_slave_0: left promiscuous mode [ 80.045983][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.052972][ T8749] bridge_slave_1: left allmulticast mode [ 80.052994][ T8749] bridge_slave_1: left promiscuous mode [ 80.053052][ T8749] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.137861][ T6673] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.141261][ T6673] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 80.218656][ T6551] Bluetooth: hci2: command 0x040f tx timeout [ 80.823998][ T8749] bond0: (slave bond_slave_0): Releasing backup interface [ 80.843826][ T8752] fido_id[8752]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 80.897908][ T8749] bond0: (slave bond_slave_1): Releasing backup interface [ 80.989754][ T8749] team0: Port device team_slave_0 removed [ 80.994594][ T8749] team0: Port device team_slave_1 removed [ 80.997110][ T8749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.999158][ T8749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.001084][ T8749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.002445][ T8749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.084798][ T8775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.086050][ T8775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.117085][ T8777] lo: entered promiscuous mode [ 81.117109][ T8777] lo: entered allmulticast mode [ 81.118404][ T8777] tunl0: entered promiscuous mode [ 81.118417][ T8777] tunl0: entered allmulticast mode [ 81.118852][ T8777] gre0: entered promiscuous mode [ 81.118862][ T8777] gre0: entered allmulticast mode [ 81.119667][ T8777] gretap0: entered promiscuous mode [ 81.119676][ T8777] gretap0: entered allmulticast mode [ 81.120641][ T8777] erspan0: entered promiscuous mode [ 81.120651][ T8777] erspan0: entered allmulticast mode [ 81.121151][ T8777] ip_vti0: entered promiscuous mode [ 81.121160][ T8777] ip_vti0: entered allmulticast mode [ 81.121537][ T8777] ip6_vti0: entered promiscuous mode [ 81.121546][ T8777] ip6_vti0: entered allmulticast mode [ 81.121970][ T8777] sit0: entered promiscuous mode [ 81.121979][ T8777] sit0: entered allmulticast mode [ 81.123141][ T8777] ip6tnl0: entered promiscuous mode [ 81.123150][ T8777] ip6tnl0: entered allmulticast mode [ 81.123514][ T8777] ip6gre0: entered promiscuous mode [ 81.123524][ T8777] ip6gre0: entered allmulticast mode [ 81.123903][ T8777] syz_tun: entered promiscuous mode [ 81.123911][ T8777] syz_tun: entered allmulticast mode [ 81.124305][ T8777] ip6gretap0: entered promiscuous mode [ 81.124314][ T8777] ip6gretap0: entered allmulticast mode [ 81.124886][ T8777] bridge0: entered promiscuous mode [ 81.124895][ T8777] bridge0: entered allmulticast mode [ 81.125211][ T8777] vcan0: entered promiscuous mode [ 81.125220][ T8777] vcan0: entered allmulticast mode [ 81.125441][ T8777] bond0: entered promiscuous mode [ 81.125451][ T8777] bond0: entered allmulticast mode [ 81.125594][ T8777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.125932][ T8777] team0: entered promiscuous mode [ 81.125941][ T8777] team0: entered allmulticast mode [ 81.126079][ T8777] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.126421][ T8777] dummy0: entered promiscuous mode [ 81.126430][ T8777] dummy0: entered allmulticast mode [ 81.126833][ T8777] nlmon0: entered promiscuous mode [ 81.126841][ T8777] nlmon0: entered allmulticast mode [ 81.148367][ T8777] caif0: entered promiscuous mode [ 81.148385][ T8777] caif0: entered allmulticast mode [ 81.148406][ T8777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.152623][ T26] lo speed is unknown, defaulting to 1000 [ 81.152640][ T26] syz0: Port: 1 Link ACTIVE [ 82.017354][ T8805] bond1: (slave gretap1): Releasing backup interface [ 82.107954][ T6557] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.111070][ T6557] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 82.248059][ T6551] Bluetooth: hci2: command 0x040f tx timeout [ 82.806962][ T8807] fido_id[8807]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 82.842045][ T8805] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 82.982085][ T26] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 82.983900][ T26] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.096909][ T8832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.105357][ T8832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.633416][ T8846] loop5: detected capacity change from 0 to 256 [ 83.702369][ T8848] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 83.936739][ T6557] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 83.964515][ T6557] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.643512][ T8857] fido_id[8857]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.790383][ T8870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.790552][ T8870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.058986][ T8875] loop4: detected capacity change from 0 to 512 [ 85.063819][ T8875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.073974][ T6549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.094056][ T8879] bridge_slave_0: left allmulticast mode [ 85.094080][ T8879] bridge_slave_0: left promiscuous mode [ 85.094501][ T8879] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.096790][ T8879] bridge_slave_1: left allmulticast mode [ 85.096803][ T8879] bridge_slave_1: left promiscuous mode [ 85.096864][ T8879] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.102484][ T8879] bond0: (slave bond_slave_0): Releasing backup interface [ 85.119581][ T8879] bond0: (slave bond_slave_1): Releasing backup interface [ 85.148971][ T8879] team0: Port device team_slave_0 removed [ 85.150441][ T8879] team0: Port device team_slave_1 removed [ 85.150572][ T8879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.152993][ T8879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.650836][ T26] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 85.657368][ T26] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.052190][ T8913] loop4: detected capacity change from 0 to 512 [ 86.112189][ T8913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.130806][ T6549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.240664][ T8923] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 87.513016][ T8979] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 87.673018][ T8999] __nla_validate_parse: 2 callbacks suppressed [ 87.674373][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.716'. [ 87.814482][ T6128] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.819867][ T6128] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.821311][ T6128] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.821800][ T6128] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.824534][ T6128] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.065928][ T9014] lo speed is unknown, defaulting to 1000 [ 88.181654][ T9044] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 88.264182][ T9053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.265497][ T9053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.492618][ T9014] chnl_net:caif_netlink_parms(): no params data found [ 88.630273][ T9014] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.630445][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.630534][ T9014] bridge_slave_0: entered allmulticast mode [ 88.630959][ T9014] bridge_slave_0: entered promiscuous mode [ 88.631697][ T9014] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.631738][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.631789][ T9014] bridge_slave_1: entered allmulticast mode [ 88.632163][ T9014] bridge_slave_1: entered promiscuous mode [ 88.717701][ T9014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.726964][ T9014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.765827][ T9014] team0: Port device team_slave_0 added [ 88.770073][ T9014] team0: Port device team_slave_1 added [ 88.784334][ T9014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.786586][ T9014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.789220][ T9014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.792417][ T9014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.792433][ T9014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.792448][ T9014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.825992][ T9014] hsr_slave_0: entered promiscuous mode [ 88.827518][ T9014] hsr_slave_1: entered promiscuous mode [ 88.829925][ T9014] debugfs: 'hsr0' already exists in 'hsr' [ 88.831668][ T9014] Cannot create hsr debugfs directory [ 88.943301][ T9014] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 88.946434][ T9014] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 88.950008][ T9014] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 88.952486][ T9014] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 88.967637][ T9014] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.967673][ T9014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.967786][ T9014] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.967817][ T9014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.996075][ T9014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.006561][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.009450][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.014823][ T9014] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.023162][ T1940] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.023202][ T1940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.023556][ T1940] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.023577][ T1940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.053303][ T9116] loop5: detected capacity change from 0 to 512 [ 89.056213][ T9116] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 89.105228][ T9116] EXT4-fs (loop5): 1 orphan inode deleted [ 89.109464][ T9116] EXT4-fs (loop5): 1 truncate cleaned up [ 89.109924][ T9116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.207872][ T8877] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 89.237940][ T8877] EXT4-fs (loop5): Remounting filesystem read-only [ 89.423618][ T9014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.590604][ T9014] veth0_vlan: entered promiscuous mode [ 89.605044][ T9137] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 89.717044][ T9014] veth1_vlan: entered promiscuous mode [ 89.731153][ T9014] veth0_macvtap: entered promiscuous mode [ 89.732149][ T9014] veth1_macvtap: entered promiscuous mode [ 89.735349][ T9014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.752659][ T9014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.759737][ T15] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.759832][ T15] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.759851][ T15] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.759863][ T15] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.847876][ T6551] Bluetooth: hci5: command tx timeout [ 89.857298][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.857337][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.916128][ T1940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.916159][ T1940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.752191][ T9159] loop6: detected capacity change from 0 to 32768 [ 90.762921][ T9159] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.742 (9159) [ 90.784933][ T9159] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.785014][ T9159] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 90.785045][ T9159] BTRFS info (device loop6): using free-space-tree [ 90.865326][ T6557] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 90.872345][ T8212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.877648][ T6557] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.922053][ T9181] fido_id[9181]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.924715][ T9014] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.998100][ T9183] veth1_macvtap: left promiscuous mode [ 90.998130][ T9183] macsec0: entered promiscuous mode [ 91.179826][ T9192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.746'. [ 91.218878][ T9192] loop3: detected capacity change from 0 to 2048 [ 91.457484][ T9192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.934535][ T6551] Bluetooth: hci5: command tx timeout [ 92.143046][ T6560] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.610053][ T9218] loop1: detected capacity change from 0 to 512 [ 92.723082][ T9220] loop6: detected capacity change from 0 to 512 [ 92.961716][ T9218] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.966570][ T9220] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 93.010204][ T9220] EXT4-fs (loop6): invalid journal inode [ 93.010583][ T9220] EXT4-fs (loop6): can't get journal size [ 93.127196][ T9220] EXT4-fs (loop6): 1 truncate cleaned up [ 93.132799][ T9220] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.457791][ T9218] EXT4-fs (loop1): 1 orphan inode deleted [ 93.467730][ T9218] EXT4-fs (loop1): 1 truncate cleaned up [ 93.611346][ T9218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.329315][ T6551] Bluetooth: hci5: command tx timeout [ 94.453325][ T9226] loop3: detected capacity change from 0 to 256 [ 94.501333][ T9014] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.881807][ T6621] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 94.885267][ T6621] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.919305][ T6548] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.932044][ T9234] fido_id[9234]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.996554][ T9226] loop3: detected capacity change from 0 to 32768 [ 95.012289][ T9226] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.757 (9226) [ 95.199956][ T9247] binder: 9242:9247 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 95.199993][ T9247] binder: 9242:9247 ioctl c0306201 20000640 returned -22 [ 95.409868][ T9246] evm: overlay not supported [ 95.480366][ T9248] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 95.742158][ T9226] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.742239][ T9226] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 95.742271][ T9226] BTRFS info (device loop3): using free-space-tree [ 95.763720][ T9266] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 95.827337][ T6560] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.262073][ T9280] loop6: detected capacity change from 0 to 512 [ 96.309961][ T9280] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 96.329221][ T9280] EXT4-fs (loop6): 1 orphan inode deleted [ 96.329248][ T9280] EXT4-fs (loop6): 1 truncate cleaned up [ 96.329714][ T9280] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.409385][ T6551] Bluetooth: hci5: command tx timeout [ 97.175020][ T9014] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.261311][ T9307] bridge_slave_0: left allmulticast mode [ 97.265013][ T9307] bridge_slave_0: left promiscuous mode [ 97.266358][ T9307] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.269425][ T9307] bridge_slave_1: left allmulticast mode [ 97.269448][ T9307] bridge_slave_1: left promiscuous mode [ 97.269532][ T9307] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.288625][ T9307] bond0: (slave bond_slave_0): Releasing backup interface [ 97.295700][ T9309] loop3: detected capacity change from 0 to 256 [ 97.323558][ T9307] bond0: (slave bond_slave_1): Releasing backup interface [ 97.348392][ T9307] team0: Port device team_slave_0 removed [ 97.355157][ T9307] team0: Port device team_slave_1 removed [ 97.355909][ T9307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.357208][ T9307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.360958][ T9307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.360976][ T9307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.691913][ T9316] netlink: 300 bytes leftover after parsing attributes in process `syz.5.780'. [ 97.739525][ T9309] loop3: detected capacity change from 0 to 32768 [ 98.011874][ T9309] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.779 (9309) [ 98.048651][ T9309] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.048726][ T9309] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 98.048757][ T9309] BTRFS info (device loop3): using free-space-tree [ 98.127196][ T31] kauditd_printk_skb: 179 callbacks suppressed [ 98.127240][ T31] audit: type=1326 audit(98.100:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9340 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 98.127267][ T31] audit: type=1326 audit(98.100:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9340 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 98.127287][ T31] audit: type=1326 audit(98.100:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9340 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=195 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 98.141952][ T31] audit: type=1326 audit(98.100:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9340 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 98.144048][ T31] audit: type=1326 audit(98.120:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9340 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 98.144606][ T31] audit: type=1326 audit(98.120:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9340 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 98.147185][ T31] audit: type=1326 audit(98.120:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9340 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 98.148975][ T31] audit: type=1326 audit(98.120:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9340 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 98.149272][ T31] audit: type=1326 audit(98.130:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9340 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 98.150412][ T31] audit: type=1326 audit(98.130:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9340 comm="syz.1.784" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 98.252958][ T9343] loop4: detected capacity change from 0 to 512 [ 98.265932][ T9343] EXT4-fs (loop4): Test dummy encryption mode enabled [ 99.155543][ T9343] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.783: corrupted in-inode xattr: invalid ea_ino [ 99.158225][ T9343] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.783: couldn't read orphan inode 15 (err -117) [ 99.160972][ T9343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.196378][ T6560] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.328804][ T9362] loop5: detected capacity change from 0 to 512 [ 99.330577][ T9362] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 99.376730][ T9362] EXT4-fs (loop5): 1 orphan inode deleted [ 99.376762][ T9362] EXT4-fs (loop5): 1 truncate cleaned up [ 99.379897][ T9362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.088514][ T6549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.144970][ T9366] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 100.245416][ T8212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.339960][ T56] block nbd0: Possible stuck request 0000000073a5edb3: control (read@0,1024B). Runtime 30 seconds [ 100.340011][ T56] block nbd0: Possible stuck request 00000000a3c1c2c9: control (read@1024,1024B). Runtime 30 seconds [ 100.340022][ T56] block nbd0: Possible stuck request 0000000078193019: control (read@2048,1024B). Runtime 30 seconds [ 100.340032][ T56] block nbd0: Possible stuck request 0000000005011f3c: control (read@3072,1024B). Runtime 30 seconds [ 100.356111][ T9380] loop6: detected capacity change from 0 to 256 [ 100.376035][ T9380] FAT-fs (loop6): bogus number of FAT sectors [ 100.377419][ T9380] FAT-fs (loop6): Can't find a valid FAT filesystem [ 100.448797][ T9386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.450406][ T9386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.493594][ T9388] loop5: detected capacity change from 0 to 256 [ 100.588149][ T9388] loop5: detected capacity change from 0 to 32768 [ 100.590039][ T9388] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.799 (9388) [ 100.597540][ T9388] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.600705][ T9388] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 100.602217][ T9388] BTRFS info (device loop5): using free-space-tree [ 100.646723][ T8212] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.795911][ T9412] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 101.033151][ T9422] loop1: detected capacity change from 0 to 512 [ 101.092670][ T9422] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.110422][ T9422] EXT4-fs (loop1): 1 orphan inode deleted [ 101.110441][ T9422] EXT4-fs (loop1): 1 truncate cleaned up [ 101.110859][ T9422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.072788][ T9448] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.091281][ T6548] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.204500][ T9457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.204675][ T9457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.210054][ T9448] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.320916][ T9448] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.372573][ T9448] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.520438][ T6682] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.532782][ T15] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.537364][ T9468] loop6: detected capacity change from 0 to 128 [ 102.552125][ T9468] EXT4-fs (loop6): Test dummy encryption mode enabled [ 102.567365][ T9468] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.569747][ T2130] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.572823][ T2130] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.911727][ T9483] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 103.236822][ T9486] loop3: detected capacity change from 0 to 512 [ 103.246161][ T9486] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.263262][ T9486] EXT4-fs (loop3): 1 orphan inode deleted [ 103.263284][ T9486] EXT4-fs (loop3): 1 truncate cleaned up [ 103.263737][ T9486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.547290][ T9014] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.486792][ T9498] lo speed is unknown, defaulting to 1000 [ 104.522667][ T6560] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.586841][ T31] kauditd_printk_skb: 277 callbacks suppressed [ 104.586885][ T31] audit: type=1326 audit(104.560:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 104.586907][ T31] audit: type=1326 audit(104.560:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 104.596815][ T31] audit: type=1326 audit(104.570:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=195 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 104.606160][ T31] audit: type=1326 audit(104.570:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 104.606248][ T31] audit: type=1326 audit(104.580:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 104.614938][ T31] audit: type=1326 audit(104.590:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 104.621256][ T31] audit: type=1326 audit(104.600:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 104.625252][ T31] audit: type=1326 audit(104.600:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 104.625314][ T31] audit: type=1326 audit(104.600:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 104.625357][ T31] audit: type=1326 audit(104.600:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9506 comm="syz.4.834" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb895c0a8 code=0x7ffc0000 [ 104.746771][ T9517] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.759552][ T9521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.761768][ T9521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.880435][ T9517] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.933375][ T9517] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.232975][ T9517] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.347348][ T6682] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.353094][ T6682] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.356366][ T6682] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.361457][ T6682] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.580542][ T9538] loop4: detected capacity change from 0 to 512 [ 105.600762][ T9538] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.616885][ T9538] EXT4-fs (loop4): 1 orphan inode deleted [ 105.616916][ T9538] EXT4-fs (loop4): 1 truncate cleaned up [ 105.617345][ T9538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.652185][ T9566] lo speed is unknown, defaulting to 1000 [ 106.841402][ T6549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.851735][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.849'. [ 106.875762][ T9571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.882440][ T9571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.894471][ T9563] hsr_slave_1 (unregistering): left promiscuous mode [ 107.062102][ T9575] loop6: detected capacity change from 0 to 512 [ 107.232204][ T9575] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent [ 107.952651][ T9575] loop6: detected capacity change from 0 to 512 [ 108.122361][ T9580] loop6: detected capacity change from 0 to 128 [ 108.142931][ T9580] random: crng reseeded on system resumption [ 108.231407][ T9584] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.813538][ T9604] loop4: detected capacity change from 0 to 512 [ 108.815604][ T9604] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.876868][ T9604] EXT4-fs (loop4): 1 orphan inode deleted [ 108.876899][ T9604] EXT4-fs (loop4): 1 truncate cleaned up [ 108.877354][ T9604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.086162][ T9609] lo speed is unknown, defaulting to 1000 [ 109.393968][ T9615] loop6: detected capacity change from 0 to 256 [ 109.402131][ T9615] FAT-fs (loop6): Directory bread(block 64) failed [ 109.403405][ T9615] FAT-fs (loop6): Directory bread(block 65) failed [ 109.404743][ T9615] FAT-fs (loop6): Directory bread(block 66) failed [ 109.406270][ T9615] FAT-fs (loop6): Directory bread(block 67) failed [ 109.407480][ T9615] FAT-fs (loop6): Directory bread(block 68) failed [ 109.409981][ T9615] FAT-fs (loop6): Directory bread(block 69) failed [ 109.411226][ T9615] FAT-fs (loop6): Directory bread(block 70) failed [ 109.419503][ T9615] FAT-fs (loop6): Directory bread(block 71) failed [ 109.419569][ T9615] FAT-fs (loop6): Directory bread(block 72) failed [ 109.419595][ T9615] FAT-fs (loop6): Directory bread(block 73) failed [ 109.699284][ T9348] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 109.829334][ T9348] EXT4-fs (loop4): Remounting filesystem read-only [ 109.844336][ T9619] lo speed is unknown, defaulting to 1000 [ 110.161519][ T9627] loop5: detected capacity change from 0 to 2048 [ 110.202667][ T9627] Alternate GPT is invalid, using primary GPT. [ 110.202725][ T9627] loop5: p1 p2 p3 [ 110.340735][ T6873] udevd[6873]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 110.344602][ T6539] udevd[6539]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 110.348925][ T6662] udevd[6662]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 110.571259][ T9641] binder: 9640:9641 ioctl c018620c 20000000 returned -1 [ 110.640112][ T6549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.398247][ T9653] lo speed is unknown, defaulting to 1000 [ 111.621037][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.880'. [ 113.105625][ T9677] loop6: detected capacity change from 0 to 4096 [ 113.107989][ T9677] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.119754][ T9677] EXT4-fs (loop6): Test dummy encryption mode enabled [ 113.173111][ T9677] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.621675][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 113.631954][ T9014] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.023025][ T9691] loop3: detected capacity change from 0 to 512 [ 115.045464][ T9691] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.093478][ T9691] EXT4-fs (loop3): 1 orphan inode deleted [ 115.094845][ T9691] EXT4-fs (loop3): 1 truncate cleaned up [ 115.097152][ T9691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.164677][ T9706] binder: 9705:9706 ioctl c00c620f 0 returned -14 [ 115.260586][ T9710] lo speed is unknown, defaulting to 1000 [ 115.674680][ T9711] lo speed is unknown, defaulting to 1000 [ 115.809229][ T9679] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 115.815583][ T9679] EXT4-fs (loop3): Remounting filesystem read-only [ 116.040664][ T6621] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 116.043280][ T6621] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.174952][ T9725] netlink: 24 bytes leftover after parsing attributes in process `syz.6.900'. [ 116.335173][ T9729] netlink: 268 bytes leftover after parsing attributes in process `syz.6.902'. [ 116.850286][ T9730] lo speed is unknown, defaulting to 1000 [ 116.947006][ T9736] loop6: detected capacity change from 0 to 512 [ 117.059336][ T9738] loop1: detected capacity change from 0 to 2048 [ 117.134480][ T9736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.141180][ T6662] loop1: p1 < > p4 [ 117.142945][ T6662] loop1: p4 size 8388608 extends beyond EOD, truncated [ 117.157060][ T9738] loop1: p1 < > p4 [ 117.164825][ T9738] loop1: p4 size 8388608 extends beyond EOD, truncated [ 117.171715][ T9744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.173292][ T9744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.243977][ T9014] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.265625][ T6662] udevd[6662]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 117.269316][ T6873] udevd[6873]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 117.912794][ T9751] lo speed is unknown, defaulting to 1000 [ 118.060223][ T9761] lo speed is unknown, defaulting to 1000 [ 118.304809][ T9766] netlink: 268 bytes leftover after parsing attributes in process `syz.4.914'. [ 118.766260][ T9777] loop4: detected capacity change from 0 to 4096 [ 118.768542][ T9777] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.817659][ T9777] EXT4-fs (loop4): Test dummy encryption mode enabled [ 118.870739][ T9777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.676437][ T6656] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 119.677019][ T6656] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.750587][ T6549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.868680][ T9789] loop6: detected capacity change from 0 to 512 [ 120.670233][ T9789] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 120.673824][ T9789] EXT4-fs (loop6): invalid journal inode [ 120.673876][ T9789] EXT4-fs (loop6): can't get journal size [ 120.689612][ T9789] EXT4-fs (loop6): 1 truncate cleaned up [ 120.690227][ T9789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.712680][ T6560] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.805903][ T9795] netlink: 256 bytes leftover after parsing attributes in process `syz.3.924'. [ 121.150304][ T9014] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.196484][ T9803] netlink: 268 bytes leftover after parsing attributes in process `syz.6.927'. [ 121.241524][ T9805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.243921][ T9805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.266210][ T9817] lo speed is unknown, defaulting to 1000 [ 122.769042][ T9835] loop4: detected capacity change from 0 to 1024 [ 122.769643][ T9835] EXT4-fs: Ignoring removed nobh option [ 122.838811][ T9836] sch_fq: defrate 0 ignored. [ 123.694341][ T9837] loop6: detected capacity change from 0 to 512 [ 123.727793][ T9835] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 125.701022][ T9835] EXT4-fs: error -4 creating inode table initialization thread [ 125.701207][ T9835] EXT4-fs (loop4): mount failed [ 125.703712][ T9837] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 126.127940][ T2414] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.129136][ T2414] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.160860][ T9851] loop3: detected capacity change from 0 to 512 [ 126.669732][ T9851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.088463][ T9837] EXT4-fs (loop6): 1 orphan inode deleted [ 127.089680][ T9837] EXT4-fs (loop6): 1 truncate cleaned up [ 127.091401][ T9837] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.159213][ T6560] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.222243][ T9847] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 127.227880][ T9847] EXT4-fs (loop6): Remounting filesystem read-only [ 128.541728][ T6673] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 128.543810][ T6673] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 128.671279][ T9884] lo speed is unknown, defaulting to 1000 [ 129.063692][ T9876] loop1: detected capacity change from 0 to 40427 [ 129.069305][ T9876] F2FS-fs (loop1): invalid crc value [ 129.242647][ T9876] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 129.248406][ T9876] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 130.582443][ T9897] syz.1.949: attempt to access beyond end of device [ 130.582443][ T9897] loop1: rw=2049, sector=40424, nr_sectors = 8 limit=40427 [ 130.586881][ T9897] CPU: 0 UID: 0 PID: 9897 Comm: syz.1.949 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 130.586904][ T9897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 130.586913][ T9897] Call trace: [ 130.586918][ T9897] show_stack+0x2c/0x3c (C) [ 130.586934][ T9897] __dump_stack+0x30/0x40 [ 130.586941][ T9897] dump_stack_lvl+0xd8/0x12c [ 130.586947][ T9897] dump_stack+0x1c/0x28 [ 130.586952][ T9897] f2fs_handle_critical_error+0x34c/0x4b8 [ 130.586960][ T9897] f2fs_stop_checkpoint+0x5c/0x70 [ 130.586968][ T9897] f2fs_write_end_io+0x768/0xa70 [ 130.586975][ T9897] bio_endio+0x804/0x840 [ 130.586981][ T9897] submit_bio_noacct+0x158/0x176c [ 130.586987][ T9897] submit_bio+0x3b4/0x550 [ 130.586992][ T9897] f2fs_submit_write_bio+0x13c/0x324 [ 130.586997][ T9897] __submit_merged_bio+0x254/0x704 [ 130.587003][ T9897] __submit_merged_write_cond+0x2a4/0x4ac [ 130.587009][ T9897] f2fs_submit_merged_write_cond+0x4c/0x64 [ 130.587014][ T9897] f2fs_fsync_node_pages+0x1c50/0x1f34 [ 130.587022][ T9897] f2fs_do_sync_file+0xd0c/0x14ec [ 130.587028][ T9897] f2fs_sync_file+0x110/0x15c [ 130.587034][ T9897] vfs_fsync_range+0x160/0x19c [ 130.587043][ T9897] f2fs_file_write_iter+0x5c0/0x1cf4 [ 130.587049][ T9897] iter_file_splice_write+0x774/0xd20 [ 130.587056][ T9897] direct_splice_actor+0xec/0x14c [ 130.587063][ T9897] splice_direct_to_actor+0x414/0x994 [ 130.587069][ T9897] do_splice_direct+0x130/0x210 [ 130.587076][ T9897] do_sendfile+0x3cc/0x658 [ 130.587083][ T9897] __arm64_sys_sendfile64+0x1b4/0x274 [ 130.587090][ T9897] invoke_syscall+0x98/0x2b8 [ 130.587095][ T9897] el0_svc_common+0x130/0x23c [ 130.587100][ T9897] do_el0_svc+0x48/0x58 [ 130.587105][ T9897] el0_svc+0x58/0x180 [ 130.587112][ T9897] el0t_64_sync_handler+0x84/0x12c [ 130.587118][ T9897] el0t_64_sync+0x198/0x19c [ 130.621895][ T9897] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 130.671196][ T56] block nbd0: Possible stuck request 0000000073a5edb3: control (read@0,1024B). Runtime 60 seconds [ 130.671246][ T56] block nbd0: Possible stuck request 00000000a3c1c2c9: control (read@1024,1024B). Runtime 60 seconds [ 130.671270][ T56] block nbd0: Possible stuck request 0000000078193019: control (read@2048,1024B). Runtime 60 seconds [ 130.671288][ T56] block nbd0: Possible stuck request 0000000005011f3c: control (read@3072,1024B). Runtime 60 seconds [ 131.042536][ T9014] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.433341][ T9920] syzkaller1: entered promiscuous mode [ 131.434612][ T9920] syzkaller1: entered allmulticast mode [ 131.556842][ T9926] lo speed is unknown, defaulting to 1000 [ 131.634513][ T9928] loop3: detected capacity change from 0 to 256 [ 133.015912][ T9928] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 133.140895][ T9934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.141069][ T9934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.205663][ T9936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.965'. [ 133.296656][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 133.301167][ T9945] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 133.428962][ T9952] loop6: detected capacity change from 0 to 512 [ 134.057856][ T26] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 134.076543][ T26] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 134.158723][ T9952] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 134.214893][ T9952] EXT4-fs (loop6): 1 orphan inode deleted [ 134.219443][ T9952] EXT4-fs (loop6): 1 truncate cleaned up [ 134.221203][ T9952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.239680][ T9967] fido_id[9967]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 134.656695][ T9975] syzkaller0: entered promiscuous mode [ 134.656730][ T9975] syzkaller0: entered allmulticast mode [ 135.059468][ T9983] netlink: 24 bytes leftover after parsing attributes in process `syz.5.979'. [ 135.269865][ T9014] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.296646][ T9997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.296807][ T9997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.394062][ T9978] syzkaller1: entered promiscuous mode [ 135.395924][ T9978] syzkaller1: entered allmulticast mode [ 135.399862][ T9988] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 135.400851][ T9993] syzkaller0: entered promiscuous mode [ 135.400862][ T9993] syzkaller0: entered allmulticast mode [ 135.516497][T10014] serio: Serial port ptm0 [ 136.508175][ T2757] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 137.363980][T10017] lo speed is unknown, defaulting to 1000 [ 137.498444][ T2757] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 137.520332][T10024] fido_id[10024]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 137.586693][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.991'. [ 137.678357][T10035] loop3: detected capacity change from 0 to 256 [ 137.773784][T10041] loop5: detected capacity change from 0 to 256 [ 137.790220][T10041] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 138.602418][T10044] loop4: detected capacity change from 0 to 512 [ 138.626090][T10039] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 138.659611][T10044] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 138.673035][T10044] EXT4-fs (loop4): 1 orphan inode deleted [ 138.675408][T10044] EXT4-fs (loop4): 1 truncate cleaned up [ 138.677229][T10044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.710757][T10035] FAT-fs (loop3): Directory bread(block 64) failed [ 138.725552][T10035] FAT-fs (loop3): Directory bread(block 65) failed [ 138.727070][T10035] FAT-fs (loop3): Directory bread(block 66) failed [ 138.727108][T10035] FAT-fs (loop3): Directory bread(block 67) failed [ 138.727140][T10035] FAT-fs (loop3): Directory bread(block 68) failed [ 138.727157][T10035] FAT-fs (loop3): Directory bread(block 69) failed [ 138.727183][T10035] FAT-fs (loop3): Directory bread(block 70) failed [ 138.727197][T10035] FAT-fs (loop3): Directory bread(block 71) failed [ 138.727221][T10035] FAT-fs (loop3): Directory bread(block 72) failed [ 138.727234][T10035] FAT-fs (loop3): Directory bread(block 73) failed [ 139.878164][T10056] syzkaller1: entered promiscuous mode [ 139.879225][T10056] syzkaller1: entered allmulticast mode [ 139.893260][T10060] syzkaller0: entered promiscuous mode [ 139.893290][T10060] syzkaller0: entered allmulticast mode [ 140.643290][T10047] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 140.650280][T10047] EXT4-fs (loop4): Remounting filesystem read-only [ 141.547555][ T6549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.603721][T10078] lo speed is unknown, defaulting to 1000 [ 141.649784][T10086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.651796][T10086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.970272][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 141.983501][T10096] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 142.012092][T10098] loop6: detected capacity change from 0 to 128 [ 142.015491][T10098] EXT4-fs (loop6): Test dummy encryption mode enabled [ 142.026892][T10098] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.854088][T10120] syzkaller0: entered promiscuous mode [ 142.855472][T10120] syzkaller0: entered allmulticast mode [ 142.870455][ T9014] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.909254][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'. [ 142.946452][T10128] vlan2: entered promiscuous mode [ 142.946519][T10128] vlan2: entered allmulticast mode [ 142.946965][T10128] hsr_slave_1: entered allmulticast mode [ 142.954482][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1020'. [ 143.021734][T10122] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 143.066996][T10141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.069301][T10141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.146872][T10147] loop6: detected capacity change from 0 to 4096 [ 143.149271][T10147] EXT4-fs (loop6): Test dummy encryption mode enabled [ 143.149282][T10147] EXT4-fs (loop6): unsupported descriptor size 255 [ 143.996926][T10166] syzkaller0: entered promiscuous mode [ 143.998137][T10166] syzkaller0: entered allmulticast mode [ 144.037579][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 144.050419][T10171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.050597][T10171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.063883][T10169] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 144.344767][T10176] vlan2: entered promiscuous mode [ 144.345761][T10176] vlan2: entered allmulticast mode [ 144.346598][T10176] hsr_slave_1: entered allmulticast mode [ 144.351267][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1036'. [ 144.499344][T10182] lo speed is unknown, defaulting to 1000 [ 144.776214][T10196] loop6: detected capacity change from 0 to 256 [ 144.777917][T10196] exfat: Unknown parameter 'fsmagic' [ 145.571884][T10198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.574473][T10198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.646224][T10205] syzkaller0: entered promiscuous mode [ 145.647367][T10205] syzkaller0: entered allmulticast mode [ 145.720922][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1047'. [ 145.767343][T10207] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 145.776702][T10213] tipc: Started in network mode [ 145.776739][T10213] tipc: Node identity c68ac8c55c91, cluster identity 4711 [ 145.776803][T10213] tipc: Enabled bearer , priority 0 [ 145.810363][T10213] syzkaller0: entered promiscuous mode [ 145.811440][T10213] syzkaller0: entered allmulticast mode [ 146.069327][T10213] tipc: Resetting bearer [ 146.073412][T10212] tipc: Resetting bearer [ 146.082515][T10212] tipc: Disabling bearer [ 146.341832][T10243] syzkaller0: entered promiscuous mode [ 146.341867][T10243] syzkaller0: entered allmulticast mode [ 146.405357][T10246] overlayfs: overlapping lowerdir path [ 146.467537][T10248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1062'. [ 146.490521][T10248] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.509814][T10249] lo speed is unknown, defaulting to 1000 [ 147.503512][T10271] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 147.503602][T10271] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 147.503633][T10271] overlayfs: missing 'lowerdir' [ 147.834586][T10274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.841939][T10274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.924154][T10278] syzkaller0: entered promiscuous mode [ 147.924191][T10278] syzkaller0: entered allmulticast mode [ 147.930052][T10278] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 147.941496][T10280] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1073'. [ 147.956663][T10280] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 148.005675][T10282] syzkaller0: entered promiscuous mode [ 148.005705][T10282] syzkaller0: entered allmulticast mode [ 148.069812][ T31] kauditd_printk_skb: 197 callbacks suppressed [ 148.070085][ T31] audit: type=1326 audit(148.050:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10288 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 148.071140][ T31] audit: type=1326 audit(148.050:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10288 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 148.071347][ T31] audit: type=1326 audit(148.050:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10288 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 148.071417][ T31] audit: type=1326 audit(148.050:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10288 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 148.071487][ T31] audit: type=1326 audit(148.050:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10288 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 148.071616][ T31] audit: type=1326 audit(148.050:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10288 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 148.071677][ T31] audit: type=1326 audit(148.050:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10288 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 148.071737][ T31] audit: type=1326 audit(148.050:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10288 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 148.071855][ T31] audit: type=1326 audit(148.050:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10288 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 148.071910][ T31] audit: type=1326 audit(148.050:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10288 comm="syz.1.1077" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c0a8 code=0x7ffc0000 [ 148.487841][ T6551] Bluetooth: hci3: command 0x0406 tx timeout [ 148.487851][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 148.596840][T10299] lo speed is unknown, defaulting to 1000 [ 149.126200][T10314] loop6: detected capacity change from 0 to 1024 [ 149.128025][T10314] EXT4-fs: Ignoring removed nobh option [ 149.745642][T10314] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.847008][T10314] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.1082: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 149.857871][T10314] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1082: couldn't read orphan inode 11 (err -117) [ 149.862189][T10314] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.952763][T10314] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1082: Invalid block bitmap block 0 in block_group 0 [ 149.960192][T10314] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1082: Failed to acquire dquot type 0 [ 150.172932][T10320] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1086'. [ 150.227083][T10320] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 150.309634][T10329] syzkaller0: entered promiscuous mode [ 150.309667][T10329] syzkaller0: entered allmulticast mode [ 150.335634][T10333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.338268][T10333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.354291][ T9014] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.379227][T10334] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.438403][T10339] lo speed is unknown, defaulting to 1000 [ 150.495213][T10334] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.018640][T10334] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.128355][T10334] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.314249][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.316217][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.320792][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.326270][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.356713][T10353] loop6: detected capacity change from 0 to 512 [ 151.363132][T10353] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 151.365485][T10353] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 151.365563][T10353] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 151.386031][T10355] loop3: detected capacity change from 0 to 512 [ 151.386358][T10355] ext3: Unknown parameter 'noacl' [ 151.492526][T10361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1101'. [ 151.514398][T10361] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 151.854439][T10374] loop6: detected capacity change from 0 to 512 [ 151.858178][T10374] EXT4-fs (loop6): Test dummy encryption mode enabled [ 152.003664][T10374] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.1104: corrupted in-inode xattr: invalid ea_ino [ 152.004777][T10374] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1104: couldn't read orphan inode 15 (err -117) [ 152.008616][T10374] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.605610][T10389] loop5: detected capacity change from 0 to 512 [ 152.672367][T10389] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1111: bg 0: block 248: padding at end of block bitmap is not set [ 152.676038][T10391] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.683059][T10389] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1111: Failed to acquire dquot type 1 [ 152.691133][T10389] EXT4-fs (loop5): 1 truncate cleaned up [ 152.702985][T10389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.743202][ T8212] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.745828][ T9014] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.796557][T10391] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.834109][T10402] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1115'. [ 152.849615][T10402] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 152.915226][T10391] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.294495][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1117'. [ 153.321869][T10391] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.401371][ T31] kauditd_printk_skb: 99 callbacks suppressed [ 153.402761][ T31] audit: type=1326 audit(153.380:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10415 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 153.406465][ T31] audit: type=1326 audit(153.380:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10415 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 153.410130][ T31] audit: type=1326 audit(153.380:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10415 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 153.413872][ T31] audit: type=1326 audit(153.380:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10415 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 153.417440][ T31] audit: type=1326 audit(153.380:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10415 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 153.421450][ T31] audit: type=1326 audit(153.380:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10415 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 153.421498][ T31] audit: type=1326 audit(153.380:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10415 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 153.421520][ T31] audit: type=1326 audit(153.380:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10415 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 153.421541][ T31] audit: type=1326 audit(153.380:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10415 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 153.421558][ T31] audit: type=1326 audit(153.380:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10415 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffafb5c0a8 code=0x7ffc0000 [ 153.764368][T10422] syzkaller1: entered promiscuous mode [ 153.764400][T10422] syzkaller1: entered allmulticast mode [ 153.917377][T10432] lo speed is unknown, defaulting to 1000 [ 154.241790][T10438] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1128'. [ 154.250146][T10440] loop5: detected capacity change from 0 to 128 [ 154.254140][T10440] EXT4-fs (loop5): Test dummy encryption mode enabled [ 154.256187][T10440] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.286121][T10438] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 155.115142][ T8212] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.143818][T10458] syzkaller1: entered promiscuous mode [ 155.144914][T10458] syzkaller1: entered allmulticast mode [ 155.357677][T10466] syzkaller0: entered promiscuous mode [ 155.359859][T10464] loop5: detected capacity change from 0 to 40427 [ 155.361159][T10464] F2FS-fs (loop5): invalid crc value [ 155.363720][T10466] syzkaller0: entered allmulticast mode [ 155.382677][T10464] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 155.384867][T10464] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 155.503132][ T8212] syz-executor: attempt to access beyond end of device [ 155.503132][ T8212] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 155.505105][ T8212] CPU: 1 UID: 0 PID: 8212 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 155.505123][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 155.505129][ T8212] Call trace: [ 155.505132][ T8212] show_stack+0x2c/0x3c (C) [ 155.505146][ T8212] __dump_stack+0x30/0x40 [ 155.505152][ T8212] dump_stack_lvl+0xd8/0x12c [ 155.505158][ T8212] dump_stack+0x1c/0x28 [ 155.505163][ T8212] f2fs_handle_critical_error+0x34c/0x4b8 [ 155.505170][ T8212] f2fs_stop_checkpoint+0x5c/0x70 [ 155.505178][ T8212] f2fs_write_end_io+0x768/0xa70 [ 155.505184][ T8212] bio_endio+0x804/0x840 [ 155.505191][ T8212] submit_bio_noacct+0x158/0x176c [ 155.505196][ T8212] submit_bio+0x3b4/0x550 [ 155.505201][ T8212] f2fs_submit_write_bio+0x13c/0x324 [ 155.505206][ T8212] __submit_merged_bio+0x254/0x704 [ 155.505212][ T8212] __submit_merged_write_cond+0x23c/0x4ac [ 155.505218][ T8212] f2fs_write_data_pages+0x1d28/0x2634 [ 155.505224][ T8212] do_writepages+0x270/0x468 [ 155.505232][ T8212] filemap_fdatawrite+0x14c/0x1f4 [ 155.505239][ T8212] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 155.505244][ T8212] f2fs_write_checkpoint+0x690/0x16a0 [ 155.505249][ T8212] kill_f2fs_super+0x21c/0x584 [ 155.505255][ T8212] deactivate_locked_super+0xc4/0x12c [ 155.505263][ T8212] deactivate_super+0xe0/0x100 [ 155.505269][ T8212] cleanup_mnt+0x31c/0x3ac [ 155.505274][ T8212] __cleanup_mnt+0x20/0x30 [ 155.505279][ T8212] task_work_run+0x1dc/0x260 [ 155.505286][ T8212] do_notify_resume+0x174/0x1f4 [ 155.505292][ T8212] el0_svc+0xb8/0x180 [ 155.505299][ T8212] el0t_64_sync_handler+0x84/0x12c [ 155.505304][ T8212] el0t_64_sync+0x198/0x19c [ 155.505312][ T8212] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 156.168931][T10487] lo speed is unknown, defaulting to 1000 [ 156.180075][ T6564] Bluetooth: hci6: command 0x1003 tx timeout [ 156.200170][ T6128] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 156.375131][T10493] syzkaller1: entered promiscuous mode [ 156.375164][T10493] syzkaller1: entered allmulticast mode [ 156.505727][T10502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.509974][T10502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.514739][T10502] loop5: detected capacity change from 0 to 512 [ 156.529554][T10502] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1147: bad orphan inode 15 [ 156.531434][T10502] ext4_test_bit(bit=14, block=18) = 1 [ 156.532712][T10502] is_bad_inode(inode)=0 [ 156.533627][T10502] NEXT_ORPHAN(inode)=1023 [ 156.534593][T10502] max_ino=32 [ 156.535366][T10502] i_nlink=0 [ 156.536983][T10502] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.1147: corrupted xattr block 19: invalid header [ 156.546825][T10502] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 156.547424][T10502] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 156.568652][T10504] syzkaller0: entered promiscuous mode [ 156.569669][T10504] syzkaller0: entered allmulticast mode [ 156.752594][ T6733] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.756153][T10391] Unable to handle kernel paging request at virtual address ffff7000218bfa04 [ 156.756180][T10391] KASAN: probably wild-memory-access in range [0xffff80010c5fd020-0xffff80010c5fd027] [ 156.756192][T10391] Mem abort info: [ 156.756200][T10391] ESR = 0x0000000096000006 [ 156.756208][T10391] EC = 0x25: DABT (current EL), IL = 32 bits [ 156.756217][T10391] SET = 0, FnV = 0 [ 156.756223][T10391] EA = 0, S1PTW = 0 [ 156.756230][T10391] FSC = 0x06: level 2 translation fault [ 156.756236][T10391] Data abort info: [ 156.756242][T10391] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 [ 156.756248][T10391] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 156.756255][T10391] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 156.756262][T10391] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000206ec9000 [ 156.756270][T10391] [ffff7000218bfa04] pgd=0000000000000000, p4d=000000023ea66003, pud=000000023ea65003, pmd=0000000000000000 [ 156.756369][T10391] Internal error: Oops: 0000000096000006 [#1] SMP [ 156.770425][T10391] Modules linked in: [ 156.770989][T10391] CPU: 1 UID: 0 PID: 10391 Comm: syz.3.1108 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 156.772686][T10391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 156.774223][T10391] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 156.775454][T10391] pc : kasan_check_range+0x78/0x2a4 [ 156.776215][T10391] lr : __kasan_check_write+0x20/0x30 [ 156.777011][T10391] sp : ffff80009c686cd0 [ 156.777658][T10391] x29: ffff80009c686cd0 x28: dfff800000000000 x27: 1fffe0001def308e [ 156.778900][T10391] x26: ffff0000cfbd42c0 x25: ffff0000ef798470 x24: 0000000000000000 [ 156.780297][T10391] x23: 0000000000000000 x22: dfff800000000000 x21: 0000000000000001 [ 156.781557][T10391] x20: ffff80010c5fd020 x19: ffff0000e780e000 x18: 00000000ffffffff [ 156.782844][T10391] x17: ffff800093507000 x16: ffff80008b007340 x15: 0000000000000001 [ 156.784154][T10391] x14: 1ffff000218bfa04 x13: 0000000000000000 x12: ffffffffffffffff [ 156.785437][T10391] x11: ffff7000218bfa04 x10: dfff800000000000 x9 : 1ffff000218bfa04 [ 156.786763][T10391] x8 : ffff80010c5fd027 x7 : ffff8000802310a8 x6 : ffff8000802312a4 [ 156.788099][T10391] x5 : ffff0000d1354490 x4 : ffff80009c686a00 x3 : ffff800086580158 [ 156.789474][T10391] x2 : 0000000000000001 x1 : 0000000000000008 x0 : ffff80010c5fd020 [ 156.790876][T10391] Call trace: [ 156.791400][T10391] kasan_check_range+0x78/0x2a4 (P) [ 156.792216][T10391] __kasan_check_write+0x20/0x30 [ 156.792996][T10391] nsim_queue_free+0xc8/0x164 [ 156.793761][T10391] nsim_create+0xa78/0xd48 [ 156.794459][T10391] __nsim_dev_port_add+0x544/0x898 [ 156.795213][T10391] nsim_dev_port_add_all+0x50/0x114 [ 156.796046][T10391] nsim_dev_reload_up+0x3e0/0x648 [ 156.796859][T10391] devlink_reload+0x428/0x750 [ 156.797705][T10391] devlink_nl_reload_doit+0x930/0xb0c [ 156.798604][T10391] genl_family_rcv_msg_doit+0x1d8/0x2bc [ 156.799452][T10391] genl_rcv_msg+0x450/0x624 [ 156.800228][T10391] netlink_rcv_skb+0x220/0x3fc [ 156.801030][T10391] genl_rcv+0x38/0x50 [ 156.801689][T10391] netlink_unicast+0x694/0x8c4 [ 156.802521][T10391] netlink_sendmsg+0x648/0x930 [ 156.803338][T10391] ____sys_sendmsg+0x490/0x7b8 [ 156.804099][T10391] ___sys_sendmsg+0x204/0x278 [ 156.804900][T10391] __arm64_sys_sendmsg+0x184/0x238 [ 156.805773][T10391] invoke_syscall+0x98/0x2b8 [ 156.806477][T10391] el0_svc_common+0x130/0x23c [ 156.807236][T10391] do_el0_svc+0x48/0x58 [ 156.807854][T10391] el0_svc+0x58/0x180 [ 156.808538][T10391] el0t_64_sync_handler+0x84/0x12c [ 156.809364][T10391] el0t_64_sync+0x198/0x19c [ 156.810109][T10391] Code: 5400014c b4000b8f aa2903ec 8b0e018c (3940016d) [ 156.811279][T10391] ---[ end trace 0000000000000000 ]--- [ 157.037487][T10391] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 157.038733][T10391] SMP: stopping secondary CPUs [ 157.039499][T10391] Kernel Offset: disabled [ 157.040132][T10391] CPU features: 0x40000,00007800,109c1141,5427fea7 [ 157.041163][T10391] Memory Limit: none [ 157.283715][T10391] Rebooting in 86400 seconds..