last executing test programs: 4m30.741965085s ago: executing program 4 (id=5): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801c}, 0x4000080) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) pipe2(0x0, 0x80000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xa8d1) accept$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') read$alg(r4, &(0x7f0000000e80)=""/4096, 0x1000) 4m27.87867218s ago: executing program 4 (id=11): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8) 4m19.417957682s ago: executing program 4 (id=22): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='htcp', 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) 4m17.367823915s ago: executing program 4 (id=26): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$alg(0x26, 0x5, 0x0) fanotify_init(0x200, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) pipe2(&(0x7f0000000040), 0x0) epoll_create1(0x0) epoll_create1(0x0) epoll_create1(0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4m16.548045997s ago: executing program 4 (id=31): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) io_setup(0x5, &(0x7f0000000080)) clock_gettime(0x1, &(0x7f0000000200)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[], 0x0) 4m2.210487562s ago: executing program 3 (id=49): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x101, 0x259ab454}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4m1.118697028s ago: executing program 32 (id=31): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) io_setup(0x5, &(0x7f0000000080)) clock_gettime(0x1, &(0x7f0000000200)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[], 0x0) 3m59.171792213s ago: executing program 3 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r4 = socket$packet(0x11, 0x2, 0x300) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x40010, 0xffffffffffffffff, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000005f0000006a0a00ff000000002600000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100000b9b99fce2505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) syz_emit_ethernet(0x17b, &(0x7f00000004c0)={@multicast, @empty, @void, {@mpls_uc={0x8847, {[], @ipv4=@igmp={{0x1d, 0x4, 0x1, 0x37, 0x16d, 0x68, 0x0, 0x9, 0x2, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0x4a, 0x3, 0x9, [{@broadcast, 0x80000000}, {@empty, 0x1}, {@empty, 0xc0}]}, @ssrr={0x89, 0x13, 0xce, [@rand_addr=0x64010101, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x40}]}, @lsrr={0x83, 0xb, 0x9, [@remote, @empty]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x75, 0x0, 0x0, [0x9, 0xfffffff9, 0x7fffffff, 0xfe71]}, @generic={0x82, 0xc, "e6830dde26b7468ea190"}, @noop]}}, {0x14, 0x8, 0x0, @broadcast, "9e214cf73e8e58cb7596bf55074283a0a7e0164ec8c3740d0116708ec90fa82d01aaed825e8b84ddf16a4482fb3770180f6e6c1f3ae3c8ca9aaf454b97a1142afede41208040bc0edf55adadd94195061719ca25380625b21c705d2e84849b32eec909b339fe783c0ded3c0b0c0a16cfeb2d85ecab75f92bf8fa102507f1b18c55881b25da7d939a9b026b1f2185dd0d1a7695ed8145e7ea9539c4ee60bb5fe526663484e3c9cc4fdd630ae4148a3a04b211037f2a189ee040e8be2a2fa7549f1ff98e9b90160ff400147a4a0e4d7d43ea0d5612ba5eee40fb8e6580f158aff23cc26e96e95221861d80d39eaab066a3cf"}}}}}}, 0x0) 3m57.963839781s ago: executing program 3 (id=57): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x10001043, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x58) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x2) 3m55.476867888s ago: executing program 3 (id=60): chdir(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, 0x0, 0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r5, 0x0, 0x80, 0x8) 3m42.556540129s ago: executing program 3 (id=80): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x26, 0x0, 0x0, 0x0, 0x1}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 3m39.238612275s ago: executing program 3 (id=85): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000010c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24040094) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44008004) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x1) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r4, 0x0) r5 = epoll_create(0xaa22) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f00000000c0)={0x10000002}) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000180)) 3m23.399398961s ago: executing program 33 (id=85): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000010c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24040094) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44008004) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x1) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r4, 0x0) r5 = epoll_create(0xaa22) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f00000000c0)={0x10000002}) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000180)) 2m28.539651732s ago: executing program 2 (id=160): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000200), 0x10) close(0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x30, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) 2m23.793502207s ago: executing program 2 (id=166): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) unshare(0x20000400) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f0000000040)=0xffffffffffffff23) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f0000000180)=r4, 0xffffff0d) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2102, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r6, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x41) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x1) 2m20.251556624s ago: executing program 2 (id=168): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/fib_triestat\x00') ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x22, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x26e3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = shmget(0x2, 0x1000, 0x1, &(0x7f0000935000/0x1000)=nil) shmctl$IPC_INFO(r5, 0x3, &(0x7f00000000c0)=""/17) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x2e, 0x61]}}, 0x0, 0x1c, 0x0, 0x1, 0x7}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pread64(r1, &(0x7f000004b680)=""/102363, 0x18fdb, 0x2) sendmsg$NFT_BATCH(r0, 0x0, 0x40004) 2m17.656879832s ago: executing program 2 (id=172): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1043, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0), 0x8800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r4 = socket(0x23, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) close_range(r4, r5, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x44, &(0x7f0000000140)=0x2004, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000002940)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000014c0)=')', 0x1}], 0x1}, 0x0) symlinkat(&(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffffff, 0x0) 2m15.134732477s ago: executing program 2 (id=174): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x6d2442) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) pipe(0x0) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gretap0\x00', 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'rr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10000, 0xcd, 0x48}}, 0x44) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x7) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffff, 0x3}, {0xfff1, 0x56e7de01af07971a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/204) 2m14.782947682s ago: executing program 2 (id=175): getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0xfffffffffffffffc, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x24000018) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$sndctrl(0x0, 0x0, 0x8801) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) readv(r4, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x64000600) 1m59.207541859s ago: executing program 34 (id=175): getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0xfffffffffffffffc, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x24000018) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$sndctrl(0x0, 0x0, 0x8801) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) readv(r4, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x64000600) 7.648550877s ago: executing program 5 (id=355): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) getresuid(&(0x7f0000003300), &(0x7f0000003340), &(0x7f0000003380)) 7.101555392s ago: executing program 5 (id=357): r0 = syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6db, &(0x7f0000000d80)="$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") ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x8c7b}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000300)={0x0, 0x9b, "cc56b9df4ee1c5d6a99480b6552f0ccc021392745419bf982542efeba3165cb5e634f2e65ff0fac0f4d9633cba3350166a10f06a29071adee140b9d3d6e32bd8f84f91ae778b7b23b8992f2c780fc6cd70e0a02575a545470a1c9bff89eda761001b5185f7ce31436bf6033f866a4b735f91ba17f7ec9d48e825008eb9108c48ca4cc1969dead31e6d75867259efb6ccc5ce6420861f483656d12d"}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f0000000480)=0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000000)=0x6, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x44, @local, 0xfff}, {0xa, 0x4e22, 0x9, @mcast1, 0x9}, r2, 0x95d}}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0\x00') 6.462655274s ago: executing program 5 (id=359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x20008000) 6.21311616s ago: executing program 5 (id=361): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x10309d, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='./file0\x00') sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1}, 0x48) 5.060676971s ago: executing program 1 (id=365): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdc00, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 4.934416525s ago: executing program 1 (id=366): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)) 4.561794421s ago: executing program 1 (id=369): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x6, 0x12, 0x8, 0xff, 0x6}) ioprio_set$uid(0x3, 0x0, 0x0) 4.224760828s ago: executing program 1 (id=371): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setpriority(0x2, 0xff, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x200440c4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) 2.683464139s ago: executing program 5 (id=375): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000080)={[{@discard}, {@datasum}, {@nospace_cache}, {@nodatasum}, {@discard_async}, {@nobarrier}, {@notreelog}, {@user_subvol_rm}, {@ssd}, {@noenospc_debug}, {@clear_cache}, {@autodefrag}, {@noenospc_debug}, {@compress_force}, {@max_inline={'max_inline', 0x3d, [0x34, 0x33, 0x31, 0x6d, 0x65, 0x32, 0x1]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") utimes(&(0x7f0000000280)='./file1\x00', &(0x7f0000000300)={{}, {0x77359400}}) 2.045162256s ago: executing program 0 (id=377): unshare(0x8040480) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 1.818854288s ago: executing program 0 (id=378): r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000580)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000005c0)) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6e, 0x6e, 0x3, [@datasec={0xa, 0x7, 0x0, 0xf, 0x2, [{0x4, 0xd, 0x1}, {0x4, 0x10, 0x4}, {0x2, 0xf}, {0x5, 0x0, 0x7}, {0x8, 0x3, 0x5}, {0x1ff, 0x8bd, 0xa}, {0x4, 0xbc, 0x3}], "9334"}, @float={0x7, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x30]}}, &(0x7f0000000280)=""/100, 0x8b, 0x64, 0x1, 0x1000}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000300)=0xc) setpgid(r5, r1) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x8000) close(r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 736.442611ms ago: executing program 5 (id=379): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200)={[{@nodiscard}]}, 0x1, 0x97b4, &(0x7f000001c6c0)="$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") r0 = open(&(0x7f0000001e00)='./bus\x00', 0x14d27e, 0x0) fallocate(r0, 0x8, 0x0, 0x7000) 680.59723ms ago: executing program 0 (id=380): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000100)='pagemap\x00', 0x42, 0x4, 0x0) mq_timedsend(r0, 0x0, 0x20, 0x1, 0x0) 458.551876ms ago: executing program 0 (id=381): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0xc00, 0x32314142, 0x780, 0x1e0, 0x0, @discrete={0x7fff, 0x80}}) 457.60092ms ago: executing program 1 (id=382): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="e0000000150009"], 0xe0}], 0x1, 0x0, 0x0, 0x80}, 0x0) 208.944175ms ago: executing program 0 (id=383): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 46.966462ms ago: executing program 1 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x10309d, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='./file0\x00') sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1}, 0x48) 0s ago: executing program 0 (id=385): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x19, r0, 0xe, 0x0) kernel console output (not intermixed with test programs): of device [ 126.432156][ T6249] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 126.450652][ T6249] syz.1.68: attempt to access beyond end of device [ 126.450652][ T6249] loop1: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 126.469732][ T6249] syz.1.68: attempt to access beyond end of device [ 126.469732][ T6249] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 126.487426][ T6249] syz.1.68: attempt to access beyond end of device [ 126.487426][ T6249] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 126.548742][ T6249] syz.1.68: attempt to access beyond end of device [ 126.548742][ T6249] loop1: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 126.566634][ T6249] syz.1.68: attempt to access beyond end of device [ 126.566634][ T6249] loop1: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 127.131435][ T642] CPU: 1 UID: 0 PID: 642 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 127.131464][ T642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.131478][ T642] Workqueue: writeback wb_workfn (flush-7:1) [ 127.131510][ T642] Call Trace: [ 127.131518][ T642] [ 127.131527][ T642] dump_stack_lvl+0xe8/0x150 [ 127.131561][ T642] f2fs_handle_critical_error+0x37c/0x540 [ 127.131605][ T642] f2fs_write_end_io+0xcdb/0xff0 [ 127.131658][ T642] __submit_merged_bio+0x256/0x700 [ 127.131692][ T642] __submit_merged_write_cond+0x3c9/0x4e0 [ 127.131743][ T642] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 127.131799][ T642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.131838][ T642] f2fs_write_data_pages+0x2975/0x35e0 [ 127.131907][ T642] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 127.131934][ T642] ? cfg80211_inform_single_bss_data+0x13c6/0x1b70 [ 127.132009][ T642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.132048][ T642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.132076][ T642] ? lockdep_hardirqs_on+0x7a/0x110 [ 127.132125][ T642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.132154][ T642] ? __schedule+0x159b/0x5340 [ 127.132226][ T642] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 127.132258][ T642] do_writepages+0x32e/0x550 [ 127.132301][ T642] ? reacquire_held_locks+0x104/0x190 [ 127.132338][ T642] ? writeback_sb_inodes+0x477/0x1a20 [ 127.132367][ T642] ? preempt_schedule_thunk+0x16/0x30 [ 127.132400][ T642] __writeback_single_inode+0x133/0x11a0 [ 127.132442][ T642] writeback_sb_inodes+0x992/0x1a20 [ 127.132496][ T642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.132534][ T642] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 127.132563][ T642] ? do_raw_spin_lock+0x12b/0x2f0 [ 127.132632][ T642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.132661][ T642] ? rcu_is_watching+0x15/0xb0 [ 127.132695][ T642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.132733][ T642] wb_writeback+0x456/0xb70 [ 127.132767][ T642] ? queue_io+0x201/0x4a0 [ 127.132808][ T642] ? __pfx_wb_writeback+0x10/0x10 [ 127.132845][ T642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.132874][ T642] ? preempt_schedule_thunk+0x16/0x30 [ 127.132909][ T642] wb_workfn+0x414/0xf50 [ 127.132937][ T642] ? __pfx___schedule+0x10/0x10 [ 127.132986][ T642] ? __pfx_wb_workfn+0x10/0x10 [ 127.133009][ T642] ? irqentry_exit+0x59e/0x620 [ 127.133046][ T642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.133075][ T642] ? lockdep_hardirqs_on+0x7a/0x110 [ 127.133111][ T642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.133140][ T642] ? irqentry_exit+0x59e/0x620 [ 127.133176][ T642] ? rcu_is_watching+0x15/0xb0 [ 127.133210][ T642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.133261][ T642] ? process_scheduled_works+0xa25/0x1830 [ 127.133298][ T642] ? lock_acquire+0x20b/0x2e0 [ 127.133330][ T642] ? process_scheduled_works+0xa25/0x1830 [ 127.133361][ T642] ? process_scheduled_works+0xa25/0x1830 [ 127.133396][ T642] process_scheduled_works+0xb02/0x1830 [ 127.133461][ T642] ? __pfx_process_scheduled_works+0x10/0x10 [ 127.133500][ T642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.133529][ T642] ? assign_work+0x3d5/0x5e0 [ 127.133567][ T642] worker_thread+0xa50/0xfc0 [ 127.133602][ T642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.133648][ T642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.133688][ T642] kthread+0x388/0x470 [ 127.133713][ T642] ? __pfx_worker_thread+0x10/0x10 [ 127.133744][ T642] ? __pfx_kthread+0x10/0x10 [ 127.133771][ T642] ret_from_fork+0x51e/0xb90 [ 127.133808][ T642] ? __pfx_ret_from_fork+0x10/0x10 [ 127.133838][ T642] ? srso_alias_return_thunk+0x5/0xfbef5 [ 127.133867][ T642] ? __switch_to+0xc7d/0x1450 [ 127.133900][ T642] ? __pfx_kthread+0x10/0x10 [ 127.133925][ T642] ret_from_fork_asm+0x1a/0x30 [ 127.133982][ T642] [ 127.134042][ T642] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 127.647291][ T6189] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.567200][ T6189] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.614348][ T6270] loop2: detected capacity change from 0 to 512 [ 130.624982][ T6172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.648593][ T6275] fuse: Bad value for 'fd' [ 130.655885][ T6273] loop1: detected capacity change from 0 to 1024 [ 130.657802][ T6270] EXT4-fs: Ignoring removed bh option [ 130.675173][ T6172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.720977][ T6270] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 130.771277][ T6273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.781016][ T6270] EXT4-fs (loop2): 1 truncate cleaned up [ 130.820761][ T6189] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.010242][ T6270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.042497][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.076854][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.098595][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.412662][ T6284] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.431740][ T6189] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.758188][ T6172] team0: Port device team_slave_0 added [ 132.795812][ T6172] team0: Port device team_slave_1 added [ 133.648401][ T6172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.246794][ T31] audit: type=1804 audit(1772211543.163:5): pid=6305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.80" name="/newroot/12/file0" dev="tmpfs" ino=85 res=1 errno=0 [ 135.288453][ T6172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.331159][ T6172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.351217][ T6172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.358238][ T6172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.365989][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.454248][ T6172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.646667][ T6172] hsr_slave_0: entered promiscuous mode [ 135.676853][ T6172] hsr_slave_1: entered promiscuous mode [ 135.699378][ T6172] debugfs: 'hsr0' already exists in 'hsr' [ 135.705098][ T6172] Cannot create hsr debugfs directory [ 135.820060][ T6308] loop5: detected capacity change from 0 to 512 [ 136.337849][ T6308] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.82: inode has both inline data and extents flags [ 136.610211][ T6308] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 136.617998][ T6308] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.82: couldn't read orphan inode 15 (err -117) [ 136.627461][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 136.627547][ C1] EXT4-fs (loop5): initial error at time 1772211545: ext4_orphan_get:1391: inode 15 [ 136.627585][ C1] EXT4-fs (loop5): last error at time 1772211545: ext4_orphan_get:1391: inode 15 [ 136.837046][ T6308] loop5: lost filesystem error report for type 5 error -117 [ 136.901157][ T6308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.357650][ T5822] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.413512][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 138.667697][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.814497][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.991381][ T29] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 139.067538][ T6189] bridge_slave_1: left allmulticast mode [ 139.127191][ T6189] bridge_slave_1: left promiscuous mode [ 139.182968][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.267351][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.541249][ T29] usb 3-1: config 0 descriptor?? [ 140.041122][ T6189] bridge_slave_0: left allmulticast mode [ 140.116482][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.125468][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.553563][ T6189] bridge_slave_0: left promiscuous mode [ 140.673114][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.185239][ T29] usbhid 3-1:0.0: can't add hid device: -71 [ 141.293843][ T6331] loop1: detected capacity change from 0 to 64 [ 141.295630][ T29] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 141.353366][ T29] usb 3-1: USB disconnect, device number 2 [ 144.405628][ T6348] kAFS: unable to lookup cell '(' [ 144.785183][ T6348] mmap: syz.2.91 (6348) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 147.638779][ T31] audit: type=1326 audit(1772211556.483:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 147.991425][ T31] audit: type=1326 audit(1772211556.483:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 148.196345][ T31] audit: type=1326 audit(1772211556.483:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 148.348800][ T31] audit: type=1326 audit(1772211556.483:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 148.419054][ T6189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.437432][ T31] audit: type=1326 audit(1772211556.483:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 148.460707][ T31] audit: type=1326 audit(1772211556.483:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 148.486700][ T31] audit: type=1326 audit(1772211556.483:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 148.512497][ T31] audit: type=1326 audit(1772211556.483:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 148.540774][ T31] audit: type=1326 audit(1772211556.483:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 148.576764][ T6189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.598424][ T6189] bond0 (unregistering): Released all slaves [ 148.679453][ T31] audit: type=1326 audit(1772211556.483:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.2.97" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 150.400343][ T9] IPVS: starting estimator thread 0... [ 150.549665][ T6395] IPVS: using max 24 ests per chain, 57600 per kthread [ 151.178152][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.186403][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.582814][ T6398] binder: 6396:6398 ioctl c0306201 0 returned -14 [ 152.807102][ T6408] loop5: detected capacity change from 0 to 512 [ 152.891520][ T6408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.904681][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.943227][ T6354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.958887][ T6408] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.011171][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.022019][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.148997][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.157177][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.164878][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.109597][ T5822] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.137707][ T5136] Bluetooth: hci1: command tx timeout [ 156.395851][ T6426] loop2: detected capacity change from 0 to 8 [ 157.167121][ T122] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.214172][ T122] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.238894][ T5136] Bluetooth: hci1: command tx timeout [ 158.693376][ T122] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.735358][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 159.735375][ T31] audit: type=1326 audit(1772211567.943:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 159.788986][ T122] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.856038][ T6441] netlink: 'syz.1.111': attribute type 4 has an invalid length. [ 159.864770][ T6441] netlink: 152 bytes leftover after parsing attributes in process `syz.1.111'. [ 160.274492][ T31] audit: type=1326 audit(1772211567.943:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 160.372906][ T5136] Bluetooth: hci1: command tx timeout [ 160.443083][ T31] audit: type=1326 audit(1772211567.943:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 160.591830][ T31] audit: type=1326 audit(1772211567.953:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 160.700475][ T31] audit: type=1326 audit(1772211567.953:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 160.813455][ T31] audit: type=1326 audit(1772211567.953:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 160.992995][ T31] audit: type=1326 audit(1772211567.953:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 161.125259][ T31] audit: type=1326 audit(1772211567.953:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 161.229507][ T31] audit: type=1326 audit(1772211567.953:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 161.370843][ T31] audit: type=1326 audit(1772211567.953:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6438 comm="syz.2.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 162.922977][ T6446] syz.0.100 (6446): drop_caches: 2 [ 163.027196][ T5136] Bluetooth: hci1: command tx timeout [ 165.024209][ T29] IPVS: starting estimator thread 0... [ 165.035304][ T6441] .`: renamed from bond0 [ 165.040866][ T6463] IPVS: ip_vs_add_dest(): server weight less than zero [ 165.238791][ T6465] IPVS: using max 25 ests per chain, 60000 per kthread [ 166.120709][ T6458] lo speed is unknown, defaulting to 1000 [ 166.126887][ T6458] lo speed is unknown, defaulting to 1000 [ 166.302947][ T6458] lo speed is unknown, defaulting to 1000 [ 166.313944][ T6458] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 166.329911][ T6458] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 166.368517][ T6458] lo speed is unknown, defaulting to 1000 [ 166.375840][ T6458] lo speed is unknown, defaulting to 1000 [ 166.406286][ T6458] lo speed is unknown, defaulting to 1000 [ 166.990746][ T6458] lo speed is unknown, defaulting to 1000 [ 166.998346][ T6458] lo speed is unknown, defaulting to 1000 [ 167.006703][ T6458] lo speed is unknown, defaulting to 1000 [ 167.014342][ T6458] lo speed is unknown, defaulting to 1000 [ 167.022015][ T6458] lo speed is unknown, defaulting to 1000 [ 168.318778][ T6189] hsr_slave_0: left promiscuous mode [ 169.740167][ T6189] hsr_slave_1: left promiscuous mode [ 169.757332][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.799089][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.864924][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.903584][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.917234][ T6498] loop1: detected capacity change from 0 to 128 [ 169.949586][ T6498] ext4: Unknown parameter 'hash' [ 171.471173][ T6189] veth1_macvtap: left promiscuous mode [ 171.476749][ T6189] veth0_macvtap: left promiscuous mode [ 172.330400][ T6189] veth1_vlan: left promiscuous mode [ 172.335733][ T6189] veth0_vlan: left promiscuous mode [ 173.494624][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 173.494645][ T31] audit: type=1326 audit(1772211582.383:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 174.074361][ T31] audit: type=1326 audit(1772211582.383:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 174.097113][ T31] audit: type=1326 audit(1772211582.573:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 174.135096][ T6520] loop5: detected capacity change from 0 to 8 [ 174.141351][ T31] audit: type=1326 audit(1772211582.573:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 174.283640][ T31] audit: type=1326 audit(1772211582.573:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 174.338973][ T31] audit: type=1326 audit(1772211582.573:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 174.468816][ T31] audit: type=1326 audit(1772211582.573:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 174.533565][ T31] audit: type=1326 audit(1772211582.703:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 174.558968][ T31] audit: type=1326 audit(1772211582.703:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 174.589223][ T31] audit: type=1326 audit(1772211582.703:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6511 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000339c799 code=0x7ffc0000 [ 174.765807][ T6529] SQUASHFS error: lzo decompression failed, data probably corrupt [ 174.774288][ T6529] SQUASHFS error: Failed to read block 0x0: -5 [ 174.781536][ T6529] SQUASHFS error: Failed to read block 0xff: -5 [ 174.790764][ T6529] SQUASHFS error: lzo decompression failed, data probably corrupt [ 174.799414][ T6529] SQUASHFS error: Failed to read block 0x0: -5 [ 174.844467][ T6529] SQUASHFS error: lzo decompression failed, data probably corrupt [ 174.852549][ T6529] SQUASHFS error: Failed to read block 0x0: -5 [ 174.898714][ T6529] SQUASHFS error: Failed to read block 0x6a4: -5 [ 174.905157][ T6529] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 174.912536][ T6529] SQUASHFS error: read_indexes: reading block [6a2:0] [ 174.919717][ T6529] SQUASHFS error: Failed to read block 0x0: -5 [ 174.926392][ T6529] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 174.933767][ T6529] SQUASHFS error: read_indexes: reading block [6a2:0] [ 174.940994][ T6529] SQUASHFS error: Failed to read block 0x0: -5 [ 176.757072][ T5920] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 176.809305][ T6543] loop2: detected capacity change from 0 to 16 [ 176.853300][ T6543] erofs (device loop2): invalid ishare xattr prefix id 0 [ 176.912184][ T6543] xt_l2tp: invalid flags combination: 4 [ 177.144332][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.161424][ T5920] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 177.171123][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.337145][ T6189] team0 (unregistering): Port device team_slave_1 removed [ 177.344828][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.345824][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.362879][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.383369][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.391477][ T5920] usb 6-1: Product: syz [ 177.395636][ T5920] usb 6-1: Manufacturer: syz [ 177.414949][ T6189] team0 (unregistering): Port device team_slave_0 removed [ 177.419157][ T5920] usb 6-1: SerialNumber: syz [ 177.430381][ T5920] usb 6-1: config 0 descriptor?? [ 177.715001][ T5920] hso 6-1:0.0: Failed to find BULK IN ep [ 177.760435][ T5920] usb-storage 6-1:0.0: USB Mass Storage device detected [ 177.997321][ T6536] netlink: 32 bytes leftover after parsing attributes in process `syz.5.128'. [ 178.571725][ T5920] usb 6-1: USB disconnect, device number 2 [ 179.418893][ T5818] Bluetooth: hci2: command tx timeout [ 179.698002][ T6548] lo speed is unknown, defaulting to 1000 [ 180.050772][ T6579] comedi comedi3: comedi_test: 3879 microvolt, 100000 microsecond waveform attached [ 182.217993][ T5818] Bluetooth: hci2: command tx timeout [ 182.542130][ T6587] loop2: detected capacity change from 0 to 1024 [ 183.489197][ T6587] hfsplus: found bad thread record in catalog [ 183.495519][ T6587] hfsplus: found bad thread record in catalog [ 183.514148][ T6412] chnl_net:caif_netlink_parms(): no params data found [ 183.744140][ T642] hfsplus: found bad thread record in catalog [ 183.751892][ T642] hfsplus: found bad thread record in catalog [ 184.005020][ T6548] chnl_net:caif_netlink_parms(): no params data found [ 184.308918][ T5818] Bluetooth: hci2: command tx timeout [ 184.505559][ T6602] loop5: detected capacity change from 0 to 4096 [ 184.617621][ T6602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.967268][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.002458][ T6412] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.027360][ T6412] bridge_slave_0: entered allmulticast mode [ 186.041292][ T6412] bridge_slave_0: entered promiscuous mode [ 187.197959][ T5818] Bluetooth: hci2: command tx timeout [ 188.922092][ T5822] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.970296][ T6412] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.034241][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.841820][ T6412] bridge_slave_1: entered allmulticast mode [ 191.087883][ T6412] bridge_slave_1: entered promiscuous mode [ 194.293293][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.299772][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.420211][ T6412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.491016][ T6412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.628031][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.635722][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.746467][ T6548] bridge_slave_0: entered allmulticast mode [ 195.157552][ T6548] bridge_slave_0: entered promiscuous mode [ 195.217794][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.238823][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.245974][ T6548] bridge_slave_1: entered allmulticast mode [ 195.268490][ T6548] bridge_slave_1: entered promiscuous mode [ 195.395785][ T6412] team0: Port device team_slave_0 added [ 195.504864][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.540959][ T6412] team0: Port device team_slave_1 added [ 195.560677][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.630781][ T6666] loop5: detected capacity change from 0 to 1024 [ 195.827912][ T6669] hfsplus: found bad thread record in catalog [ 195.836728][ T6669] hfsplus: found bad thread record in catalog [ 196.485758][ T74] hfsplus: found bad thread record in catalog [ 196.511359][ T74] hfsplus: found bad thread record in catalog [ 196.520005][ T6548] team0: Port device team_slave_0 added [ 196.526330][ T6412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.552964][ T6412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.679922][ T6412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.723076][ T6412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.741283][ T6412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.452551][ T6412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.472186][ T6548] team0: Port device team_slave_1 added [ 198.888963][ T6683] loop2: detected capacity change from 0 to 32768 [ 199.498389][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.570856][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.646866][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.724784][ T6689] loop0: detected capacity change from 0 to 512 [ 199.772371][ T6689] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 199.862754][ T6689] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 199.885672][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.892657][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.920286][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.964998][ T6689] EXT4-fs (loop0): 1 truncate cleaned up [ 200.003206][ T6412] hsr_slave_0: entered promiscuous mode [ 200.180652][ T6412] hsr_slave_1: entered promiscuous mode [ 200.276335][ T6689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.321885][ T6412] debugfs: 'hsr0' already exists in 'hsr' [ 200.381915][ T6412] Cannot create hsr debugfs directory [ 200.700061][ T6681] Bluetooth: hci5: command 0x0406 tx timeout [ 200.706133][ T6681] Bluetooth: hci3: command 0x0406 tx timeout [ 200.712543][ T6681] Bluetooth: hci0: command 0x0406 tx timeout [ 200.718846][ T6681] Bluetooth: hci4: command 0x0406 tx timeout [ 200.819396][ T6548] hsr_slave_0: entered promiscuous mode [ 200.826116][ T6548] hsr_slave_1: entered promiscuous mode [ 200.832895][ T6548] debugfs: 'hsr0' already exists in 'hsr' [ 200.838619][ T6548] Cannot create hsr debugfs directory [ 201.132341][ T6698] hub 2-0:1.0: USB hub found [ 201.139420][ T6698] hub 2-0:1.0: 1 port detected [ 201.844813][ T6701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.153'. [ 202.282807][ T5815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.907787][ T6712] syz.0.155 uses obsolete (PF_INET,SOCK_PACKET) [ 204.489109][ T5863] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 204.639566][ T6189] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.678760][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 204.755606][ T6722] loop0: detected capacity change from 0 to 65 [ 204.782679][ T6722] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 205.527018][ T5863] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 205.536298][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.544349][ T5863] usb 2-1: Product: syz [ 205.548503][ T5863] usb 2-1: Manufacturer: syz [ 205.553206][ T5863] usb 2-1: SerialNumber: syz [ 205.561288][ T5863] usb 2-1: config 0 descriptor?? [ 205.788336][ T5863] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 003 [ 207.630347][ T6189] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.649474][ T5920] usb 2-1: USB disconnect, device number 3 [ 207.873553][ T6730] loop0: detected capacity change from 0 to 40427 [ 208.002815][ T6730] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 208.188292][ T6730] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 208.924971][ T6745] loop1: detected capacity change from 0 to 1024 [ 210.231903][ T5815] bio_check_eod: 176 callbacks suppressed [ 210.231923][ T5815] syz-executor: attempt to access beyond end of device [ 210.231923][ T5815] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 210.289709][ T5815] CPU: 0 UID: 0 PID: 5815 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 210.289739][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 210.289753][ T5815] Call Trace: [ 210.289762][ T5815] [ 210.289772][ T5815] dump_stack_lvl+0xe8/0x150 [ 210.289811][ T5815] f2fs_handle_critical_error+0x37c/0x540 [ 210.289857][ T5815] f2fs_write_end_io+0xcdb/0xff0 [ 210.289905][ T5815] __submit_merged_bio+0x256/0x700 [ 210.289938][ T5815] __submit_merged_write_cond+0x3c9/0x4e0 [ 210.289986][ T5815] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 210.290037][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.290076][ T5815] f2fs_write_data_pages+0x2975/0x35e0 [ 210.290135][ T5815] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 210.290174][ T5815] ? unwind_get_return_address+0x4d/0x90 [ 210.290208][ T5815] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 210.290231][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.290294][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.290319][ T5815] ? check_noncircular+0xda/0x150 [ 210.290355][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.290384][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.290409][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.290433][ T5815] ? __lock_acquire+0x146e/0x2cf0 [ 210.290485][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.290509][ T5815] ? do_raw_spin_lock+0x12b/0x2f0 [ 210.290537][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.290566][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.290591][ T5815] ? do_raw_spin_unlock+0xf5/0x210 [ 210.290614][ T5815] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 210.290641][ T5815] do_writepages+0x32e/0x550 [ 210.290673][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.290700][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.290729][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.290754][ T5815] ? do_raw_spin_unlock+0xf5/0x210 [ 210.290780][ T5815] filemap_fdatawrite+0x1e9/0x2f0 [ 210.290812][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.290840][ T5815] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 210.290907][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.290934][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.290964][ T5815] ? do_raw_spin_unlock+0xf5/0x210 [ 210.290990][ T5815] f2fs_sync_dirty_inodes+0x30e/0x860 [ 210.291033][ T5815] f2fs_write_checkpoint+0x9df/0x26a0 [ 210.291094][ T5815] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 210.291121][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.291199][ T5815] kill_f2fs_super+0x314/0x720 [ 210.291232][ T5815] ? __pfx_kill_f2fs_super+0x10/0x10 [ 210.291277][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.291302][ T5815] ? lockdep_hardirqs_on+0x7a/0x110 [ 210.291335][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.291374][ T5815] deactivate_locked_super+0xbc/0x130 [ 210.291409][ T5815] cleanup_mnt+0x437/0x4d0 [ 210.291431][ T5815] ? _raw_spin_unlock_irq+0x23/0x50 [ 210.291465][ T5815] task_work_run+0x1d9/0x270 [ 210.291492][ T5815] ? __pfx_task_work_run+0x10/0x10 [ 210.291526][ T5815] exit_to_user_mode_loop+0xed/0x480 [ 210.291551][ T5815] ? rcu_is_watching+0x15/0xb0 [ 210.291586][ T5815] do_syscall_64+0x32d/0xf80 [ 210.291620][ T5815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.291641][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.291671][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.291693][ T5815] RIP: 0033:0x7efdfc79d9d7 [ 210.291712][ T5815] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 210.291729][ T5815] RSP: 002b:00007ffe9c4d00d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 210.291750][ T5815] RAX: 0000000000000000 RBX: 00007efdfc831f90 RCX: 00007efdfc79d9d7 [ 210.291764][ T5815] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9c4d0190 [ 210.291777][ T5815] RBP: 00007ffe9c4d0190 R08: 00007ffe9c4d1190 R09: 00000000ffffffff [ 210.291792][ T5815] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe9c4d1220 [ 210.291805][ T5815] R13: 00007efdfc831f90 R14: 00000000000331c3 R15: 00007ffe9c4d1260 [ 210.291838][ T5815] [ 210.291855][ T5815] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 210.750631][ T5815] CPU: 1 UID: 0 PID: 5815 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 210.750661][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 210.750676][ T5815] Call Trace: [ 210.750685][ T5815] [ 210.750694][ T5815] dump_stack_lvl+0xe8/0x150 [ 210.750734][ T5815] f2fs_handle_critical_error+0x37c/0x540 [ 210.750782][ T5815] f2fs_write_end_io+0xcdb/0xff0 [ 210.750834][ T5815] __submit_merged_bio+0x256/0x700 [ 210.750867][ T5815] __submit_merged_write_cond+0x3c9/0x4e0 [ 210.750918][ T5815] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 210.750974][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.751014][ T5815] f2fs_write_data_pages+0x2975/0x35e0 [ 210.751084][ T5815] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 210.751127][ T5815] ? unwind_get_return_address+0x4d/0x90 [ 210.751167][ T5815] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 210.751193][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.751251][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.751279][ T5815] ? check_noncircular+0xda/0x150 [ 210.751320][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.751354][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.751383][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.751411][ T5815] ? __lock_acquire+0x146e/0x2cf0 [ 210.751469][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.751498][ T5815] ? do_raw_spin_lock+0x12b/0x2f0 [ 210.751533][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.751567][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.751596][ T5815] ? do_raw_spin_unlock+0xf5/0x210 [ 210.751622][ T5815] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 210.751653][ T5815] do_writepages+0x32e/0x550 [ 210.751690][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.751721][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.751754][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.751783][ T5815] ? do_raw_spin_unlock+0xf5/0x210 [ 210.751813][ T5815] filemap_fdatawrite+0x1e9/0x2f0 [ 210.751850][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.751882][ T5815] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 210.751959][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.751991][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.752026][ T5815] ? do_raw_spin_unlock+0xf5/0x210 [ 210.752057][ T5815] f2fs_sync_dirty_inodes+0x30e/0x860 [ 210.752107][ T5815] f2fs_write_checkpoint+0x9df/0x26a0 [ 210.752176][ T5815] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 210.752206][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.752296][ T5815] kill_f2fs_super+0x314/0x720 [ 210.752338][ T5815] ? __pfx_kill_f2fs_super+0x10/0x10 [ 210.752382][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.752411][ T5815] ? lockdep_hardirqs_on+0x7a/0x110 [ 210.752449][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.752493][ T5815] deactivate_locked_super+0xbc/0x130 [ 210.752540][ T5815] cleanup_mnt+0x437/0x4d0 [ 210.752564][ T5815] ? _raw_spin_unlock_irq+0x23/0x50 [ 210.752604][ T5815] task_work_run+0x1d9/0x270 [ 210.752635][ T5815] ? __pfx_task_work_run+0x10/0x10 [ 210.752674][ T5815] exit_to_user_mode_loop+0xed/0x480 [ 210.752702][ T5815] ? rcu_is_watching+0x15/0xb0 [ 210.752743][ T5815] do_syscall_64+0x32d/0xf80 [ 210.752782][ T5815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.752807][ T5815] ? srso_alias_return_thunk+0x5/0xfbef5 [ 210.752842][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.752868][ T5815] RIP: 0033:0x7efdfc79d9d7 [ 210.752890][ T5815] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 210.752909][ T5815] RSP: 002b:00007ffe9c4d00d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 210.752934][ T5815] RAX: 0000000000000000 RBX: 00007efdfc831f90 RCX: 00007efdfc79d9d7 [ 210.752951][ T5815] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9c4d0190 [ 210.752966][ T5815] RBP: 00007ffe9c4d0190 R08: 00007ffe9c4d1190 R09: 00000000ffffffff [ 210.752982][ T5815] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe9c4d1220 [ 210.752998][ T5815] R13: 00007efdfc831f90 R14: 00000000000331c3 R15: 00007ffe9c4d1260 [ 210.753035][ T5815] [ 210.753151][ T5815] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 211.381429][ T6189] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.488106][ T6750] binder: 6747:6750 ioctl 40085874 200000000240 returned -22 [ 212.274153][ T6189] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.259411][ T6758] loop5: detected capacity change from 0 to 1024 [ 215.338885][ T5825] Bluetooth: hci6: command 0x1003 tx timeout [ 215.345064][ T5136] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 215.757407][ T6766] hfsplus: found bad thread record in catalog [ 215.781595][ T6766] hfsplus: found bad thread record in catalog [ 215.971245][ T5825] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.993354][ T5825] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.003959][ T5825] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.012383][ T5825] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.210363][ T5825] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.257817][ T37] hfsplus: found bad thread record in catalog [ 217.848866][ T37] hfsplus: found bad thread record in catalog [ 219.131334][ T6189] bridge_slave_1: left allmulticast mode [ 219.178922][ T6189] bridge_slave_1: left promiscuous mode [ 219.184828][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.518729][ T5863] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 219.898792][ T5136] Bluetooth: hci6: command tx timeout [ 220.619913][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 220.651212][ T6189] bridge_slave_0: left allmulticast mode [ 220.760885][ T6189] bridge_slave_0: left promiscuous mode [ 220.874935][ T5863] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 220.964796][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.053253][ T5863] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 221.094035][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 221.131389][ T6189] bridge_slave_1: left allmulticast mode [ 221.137612][ T5863] usb 2-1: Product: syz [ 221.153838][ T6189] bridge_slave_1: left promiscuous mode [ 221.163969][ T5863] usb 2-1: Manufacturer: syz [ 221.168597][ T5863] usb 2-1: SerialNumber: syz [ 221.188006][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.198167][ T5890] IPVS: starting estimator thread 0... [ 221.242329][ T5863] usb 2-1: config 0 descriptor?? [ 221.268396][ T6189] bridge_slave_0: left allmulticast mode [ 221.287398][ T5863] usb 2-1: can't set config #0, error -71 [ 221.304841][ T6189] bridge_slave_0: left promiscuous mode [ 221.335831][ T6817] IPVS: using max 25 ests per chain, 60000 per kthread [ 221.349172][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.369715][ T5863] usb 2-1: USB disconnect, device number 4 [ 222.694646][ T5136] Bluetooth: hci6: command tx timeout [ 224.181382][ T6189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.212036][ T6189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.237642][ T6189] bond0 (unregistering): Released all slaves [ 224.847163][ T5136] Bluetooth: hci6: command tx timeout [ 226.858864][ T5136] Bluetooth: hci6: command tx timeout [ 228.091376][ T6189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.709905][ T6189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.394494][ T6189] bond0 (unregistering): Released all slaves [ 230.716464][ T6770] lo speed is unknown, defaulting to 1000 [ 230.772799][ T6827] lo speed is unknown, defaulting to 1000 [ 230.994459][ T6548] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 231.044851][ T6548] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 231.076073][ T6548] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 231.112244][ T6548] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 231.432765][ T6189] hsr_slave_0: left promiscuous mode [ 231.489520][ T6189] hsr_slave_1: left promiscuous mode [ 231.518446][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.587311][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.648164][ T6189] hsr_slave_0: left promiscuous mode [ 231.692050][ T6189] hsr_slave_1: left promiscuous mode [ 231.698198][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.766815][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.791973][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.820325][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.048988][ T6189] veth1_macvtap: left promiscuous mode [ 232.054482][ T6189] veth0_macvtap: left promiscuous mode [ 232.734480][ T6189] veth1_vlan: left promiscuous mode [ 232.772154][ T6189] veth0_vlan: left promiscuous mode [ 233.264943][ T6886] Illegal XDP return value 4294967274 on prog (id 10) dev N/A, expect packet loss! [ 234.283427][ T6892] ntfs3(nullb0): Primary boot signature is not NTFS. [ 234.290452][ T6892] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 236.903730][ T6189] team0 (unregistering): Port device team_slave_1 removed [ 237.187527][ T6189] team0 (unregistering): Port device team_slave_0 removed [ 237.254856][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.308839][ T6914] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 237.935537][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.944898][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.957658][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.965299][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.997532][ T5825] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.015553][ T5825] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.031891][ T5825] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.039972][ T5825] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.049334][ T5825] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.118839][ T6189] team0 (unregistering): Port device team_slave_1 removed [ 239.139904][ T6189] team0 (unregistering): Port device team_slave_0 removed [ 239.702550][ T6930] loop5: detected capacity change from 0 to 1024 [ 239.720852][ T6930] EXT4-fs: Invalid commit interval 33554432, must be smaller than 21474836 [ 240.225551][ T5136] Bluetooth: hci1: command tx timeout [ 240.255045][ T6912] lo speed is unknown, defaulting to 1000 [ 240.330215][ T5136] Bluetooth: hci7: command tx timeout [ 242.057109][ T6916] lo speed is unknown, defaulting to 1000 [ 243.323399][ T5136] Bluetooth: hci1: command tx timeout [ 243.328820][ T5136] Bluetooth: hci7: command tx timeout [ 243.967037][ T6770] chnl_net:caif_netlink_parms(): no params data found [ 244.967774][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.014679][ T6770] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.021937][ T6770] bridge_slave_0: entered allmulticast mode [ 245.064017][ T6770] bridge_slave_0: entered promiscuous mode [ 245.103068][ T6770] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.126730][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.151983][ T6770] bridge_slave_1: entered allmulticast mode [ 245.159916][ T6770] bridge_slave_1: entered promiscuous mode [ 245.354249][ T6916] chnl_net:caif_netlink_parms(): no params data found [ 245.397982][ T6912] chnl_net:caif_netlink_parms(): no params data found [ 245.453722][ T6770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.468960][ T6770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.554288][ T5136] Bluetooth: hci7: command tx timeout [ 245.554532][ T5825] Bluetooth: hci1: command tx timeout [ 246.051053][ T6980] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 246.057705][ T6980] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 246.122277][ T6986] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 246.128820][ T6986] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 246.344109][ T6986] vhci_hcd vhci_hcd.0: Device attached [ 246.401674][ T6980] vhci_hcd vhci_hcd.0: Device attached [ 246.411468][ T6991] loop5: detected capacity change from 0 to 1024 [ 246.470874][ T6770] team0: Port device team_slave_0 added [ 246.483115][ T6770] team0: Port device team_slave_1 added [ 246.489777][ T6995] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 246.496357][ T6995] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 246.510819][ T6995] vhci_hcd vhci_hcd.0: Device attached [ 246.746816][ T30] usb 33-2: new low-speed USB device number 2 using vhci_hcd [ 246.996701][ T6979] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(8) [ 247.003235][ T6979] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 247.011731][ T6979] vhci_hcd vhci_hcd.0: Device attached [ 247.028150][ T6979] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 247.338696][ T6998] vhci_hcd: connection closed [ 247.362361][ T7001] hfsplus: found bad thread record in catalog [ 247.376081][ T7001] hfsplus: found bad thread record in catalog [ 247.380125][ T1146] vhci_hcd vhci_hcd.0: stop threads [ 247.492902][ T6982] vhci_hcd: connection closed [ 247.493813][ T6987] vhci_hcd: connection reset by peer [ 247.537060][ T6996] vhci_hcd: connection closed [ 247.549337][ T1146] vhci_hcd vhci_hcd.0: release socket [ 247.571773][ T1146] vhci_hcd vhci_hcd.0: disconnect device [ 247.603557][ T1146] vhci_hcd vhci_hcd.0: stop threads [ 247.616278][ T1146] vhci_hcd vhci_hcd.0: release socket [ 247.631884][ T1146] vhci_hcd vhci_hcd.0: disconnect device [ 247.641277][ T1146] vhci_hcd vhci_hcd.0: stop threads [ 247.649506][ T1146] vhci_hcd vhci_hcd.0: release socket [ 247.658472][ T1146] vhci_hcd vhci_hcd.0: disconnect device [ 247.671218][ T1146] vhci_hcd vhci_hcd.0: stop threads [ 247.699313][ T1146] vhci_hcd vhci_hcd.0: release socket [ 247.709248][ T1146] vhci_hcd vhci_hcd.0: disconnect device [ 247.753660][ T5825] Bluetooth: hci1: command tx timeout [ 247.753697][ T5136] Bluetooth: hci7: command tx timeout [ 247.815231][ T1146] hfsplus: found bad thread record in catalog [ 247.825884][ T1146] hfsplus: found bad thread record in catalog [ 247.851421][ T6770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.877609][ T6770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.925513][ T6770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.570516][ T7011] sd 0:0:1:0: device reset [ 249.612962][ T6912] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.620270][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.658410][ T6912] bridge_slave_0: entered allmulticast mode [ 249.676600][ T6912] bridge_slave_0: entered promiscuous mode [ 249.696089][ T6912] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.703238][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.712344][ T6912] bridge_slave_1: entered allmulticast mode [ 249.749559][ T6912] bridge_slave_1: entered promiscuous mode [ 249.798188][ T6770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.112079][ T6770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.953210][ T6770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.328880][ T7032] overlayfs: overlapping lowerdir path [ 251.373560][ T7032] overlayfs: overlapping lowerdir path [ 251.759857][ T31] kauditd_printk_skb: 65 callbacks suppressed [ 251.759873][ T31] audit: type=1800 audit(1772211659.354:221): pid=7031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.207" name="bus" dev="tmpfs" ino=294 res=0 errno=0 [ 252.379460][ T30] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 253.070366][ T6912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.360873][ T6912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.804053][ T7048] loop5: detected capacity change from 0 to 4096 [ 254.707855][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.742552][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.749762][ T6916] bridge_slave_0: entered allmulticast mode [ 254.777640][ T6916] bridge_slave_0: entered promiscuous mode [ 254.812497][ T6770] hsr_slave_0: entered promiscuous mode [ 254.893591][ T6770] hsr_slave_1: entered promiscuous mode [ 254.912750][ T6770] debugfs: 'hsr0' already exists in 'hsr' [ 254.918482][ T6770] Cannot create hsr debugfs directory [ 254.952765][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.965669][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.991824][ T6916] bridge_slave_1: entered allmulticast mode [ 255.015093][ T6916] bridge_slave_1: entered promiscuous mode [ 255.061351][ T6912] team0: Port device team_slave_0 added [ 255.091156][ T6912] team0: Port device team_slave_1 added [ 255.321128][ T6916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.922506][ T6916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.034574][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.045206][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.121437][ T6912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.590870][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.597281][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.723025][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.750745][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.805185][ T6912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.972690][ T6916] team0: Port device team_slave_0 added [ 256.996157][ T6916] team0: Port device team_slave_1 added [ 257.840216][ T7067] loop0: detected capacity change from 0 to 4096 [ 257.857044][ T7067] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 257.937593][ T7067] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 258.055382][ T7067] ntfs3(loop0): ino=21, The size of extended attributes must not exceed 64KiB [ 258.121369][ T7067] ntfs3(loop0): ino=1e, mi_enum_attr [ 258.141177][ T6912] hsr_slave_0: entered promiscuous mode [ 258.149046][ T7067] ntfs3(loop0): ino=1e, mi_enum_attr [ 258.164380][ T6912] hsr_slave_1: entered promiscuous mode [ 258.175782][ T7067] ntfs3(loop0): ino=1e, "file1" mi_enum_attr [ 258.191289][ T6912] debugfs: 'hsr0' already exists in 'hsr' [ 258.197772][ T7067] ntfs3(loop0): ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 258.213389][ T6912] Cannot create hsr debugfs directory [ 258.229058][ T7067] ntfs3(loop0): ino=21, The size of extended attributes must not exceed 64KiB [ 258.339869][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.353702][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.729414][ T6916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.606562][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.651303][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.905183][ T6916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.074355][ T7092] Bluetooth: MGMT ver 1.23 [ 263.380446][ T7110] loop0: detected capacity change from 0 to 128 [ 263.485714][ T6189] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.553600][ T7110] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 263.890525][ T7110] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.118256][ T7116] loop5: detected capacity change from 0 to 32768 [ 264.127704][ T7116] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.221 (7116) [ 264.392013][ T7116] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 264.402282][ T7116] BTRFS info (device loop5): using crc32c checksum algorithm [ 264.409881][ T7116] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 265.028165][ T6916] hsr_slave_0: entered promiscuous mode [ 265.034874][ T6916] hsr_slave_1: entered promiscuous mode [ 265.069155][ T6916] debugfs: 'hsr0' already exists in 'hsr' [ 265.074910][ T6916] Cannot create hsr debugfs directory [ 265.156288][ T7116] BTRFS info (device loop5): rebuilding free space tree [ 265.190515][ T7116] BTRFS info (device loop5): disabling free space tree [ 265.197500][ T7116] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 265.207290][ T7116] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 265.229770][ T7116] BTRFS info (device loop5): enabling ssd optimizations [ 265.237278][ T7116] BTRFS info (device loop5): turning on async discard [ 265.244651][ T7116] BTRFS info (device loop5): enabling disk space caching [ 265.251860][ T7116] BTRFS info (device loop5): force clearing of disk cache [ 265.258979][ T7116] BTRFS info (device loop5): use zstd compression, level 3 [ 266.150412][ T31] audit: type=1804 audit(1772211672.403:222): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.221" name="/newroot/54/file1/bus" dev="loop5" ino=263 res=1 errno=0 [ 266.209734][ T6189] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.293017][ T5822] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 268.138163][ T7157] loop5: detected capacity change from 0 to 8 [ 270.262717][ T7164] SQUASHFS error: lzo decompression failed, data probably corrupt [ 270.271259][ T7164] SQUASHFS error: Failed to read block 0x0: -5 [ 270.278689][ T7164] SQUASHFS error: Failed to read block 0xff: -5 [ 270.286097][ T7164] SQUASHFS error: lzo decompression failed, data probably corrupt [ 270.294304][ T7164] SQUASHFS error: Failed to read block 0x0: -5 [ 270.337323][ T7164] SQUASHFS error: lzo decompression failed, data probably corrupt [ 270.345407][ T7164] SQUASHFS error: Failed to read block 0x0: -5 [ 270.384848][ T7164] SQUASHFS error: Failed to read block 0x6a4: -5 [ 270.391248][ T7164] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 270.398620][ T7164] SQUASHFS error: read_indexes: reading block [6a2:0] [ 270.405785][ T7164] SQUASHFS error: Failed to read block 0x0: -5 [ 270.412349][ T7164] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 270.419712][ T7164] SQUASHFS error: read_indexes: reading block [6a2:0] [ 270.426814][ T7164] SQUASHFS error: Failed to read block 0x0: -5 [ 270.527933][ T31] audit: type=1800 audit(1772211676.696:223): pid=7164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.224" name="file2" dev="loop5" ino=3 res=0 errno=0 [ 270.641949][ T6189] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.755763][ T31] audit: type=1800 audit(1772211676.743:224): pid=7164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.224" name="file2" dev="loop5" ino=3 res=0 errno=0 [ 271.300177][ T7174] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 271.309269][ T7174] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 272.255709][ T6189] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.563524][ T6770] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 273.300851][ T6770] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 273.635934][ T6770] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 274.990859][ T6770] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 277.490897][ T7224] loop0: detected capacity change from 0 to 512 [ 278.182030][ T7224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.417966][ T6189] bridge_slave_1: left allmulticast mode [ 278.430879][ T7228] loop1: detected capacity change from 0 to 1024 [ 278.445223][ T6189] bridge_slave_1: left promiscuous mode [ 278.450920][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.560884][ T6189] bridge_slave_0: left allmulticast mode [ 278.591907][ T6189] bridge_slave_0: left promiscuous mode [ 278.597698][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.695188][ T5815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.730408][ T7234] loop5: detected capacity change from 0 to 4096 [ 278.738364][ T7234] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 278.804058][ T7228] hfsplus: found bad thread record in catalog [ 278.810856][ T7228] hfsplus: found bad thread record in catalog [ 278.858300][ T7234] ntfs3(loop5): ino=1a, mi_enum_attr [ 278.890991][ T7234] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 278.891926][ T6189] bridge_slave_1: left allmulticast mode [ 278.921215][ T7234] ntfs3(loop5): ino=1a, mi_enum_attr [ 278.934135][ T1146] hfsplus: found bad thread record in catalog [ 278.940265][ T1146] hfsplus: found bad thread record in catalog [ 278.948563][ T6189] bridge_slave_1: left promiscuous mode [ 278.970441][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.987564][ T7234] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 279.033179][ T7239] loop0: detected capacity change from 0 to 8 [ 279.074054][ T6189] bridge_slave_0: left allmulticast mode [ 279.080785][ T6189] bridge_slave_0: left promiscuous mode [ 279.326699][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.341943][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.162524][ T7245] SQUASHFS error: lzo decompression failed, data probably corrupt [ 280.175005][ T7245] SQUASHFS error: Failed to read block 0x0: -5 [ 280.190633][ T7245] SQUASHFS error: Failed to read block 0xff: -5 [ 280.216696][ T7245] SQUASHFS error: lzo decompression failed, data probably corrupt [ 280.227352][ T7245] SQUASHFS error: Failed to read block 0x0: -5 [ 280.375586][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.383609][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.424961][ T7243] SQUASHFS error: lzo decompression failed, data probably corrupt [ 280.433381][ T7243] SQUASHFS error: Failed to read block 0x0: -5 [ 280.444359][ T7243] SQUASHFS error: Failed to read block 0x6a4: -5 [ 280.452267][ T7243] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 280.459801][ T7243] SQUASHFS error: read_indexes: reading block [6a2:0] [ 280.466796][ T7243] SQUASHFS error: Failed to read block 0x0: -5 [ 280.473039][ T7243] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 280.480382][ T7243] SQUASHFS error: read_indexes: reading block [6a2:0] [ 280.487379][ T7243] SQUASHFS error: Failed to read block 0x0: -5 [ 280.604846][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.807622][ T31] audit: type=1800 audit(1772211686.004:225): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.237" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 280.827388][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.950348][ T6189] bridge_slave_1: left allmulticast mode [ 280.954696][ T31] audit: type=1800 audit(1772211686.172:226): pid=7243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.237" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 280.986339][ T6189] bridge_slave_1: left promiscuous mode [ 281.029351][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.327894][ T6189] bridge_slave_0: left allmulticast mode [ 281.349990][ T6189] bridge_slave_0: left promiscuous mode [ 282.030773][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.250122][ T7264] fuse: Unknown parameter '0xffffffffffffffff' [ 282.864484][ T7273] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 282.926276][ T7258] loop1: detected capacity change from 0 to 4096 [ 283.304470][ T5825] Bluetooth: hci2: command tx timeout [ 283.335633][ T7258] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 283.685569][ T7258] ntfs3(loop1): ino=1a, mi_enum_attr [ 283.690934][ T7258] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 283.724363][ T7258] ntfs3(loop1): ino=1a, mi_enum_attr [ 283.729679][ T7258] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 284.555523][ T7278] loop0: detected capacity change from 0 to 131072 [ 284.588714][ T6189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.614622][ T7278] F2FS-fs (loop0): invalid crc value [ 284.815703][ T6189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.489549][ T5136] Bluetooth: hci2: command tx timeout [ 285.507619][ T7278] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 285.532725][ T7278] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 285.569661][ T6189] bond0 (unregistering): Released all slaves [ 286.786645][ T6189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.797898][ T6189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.817483][ T6189] bond0 (unregistering): Released all slaves [ 287.033725][ T6189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.052659][ T6189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.065281][ T6189] bond0 (unregistering): Released all slaves [ 287.621279][ T7240] lo speed is unknown, defaulting to 1000 [ 287.657736][ T6916] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 287.812957][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 287.881188][ T5136] Bluetooth: hci2: command tx timeout [ 288.491735][ T7305] loop1: detected capacity change from 0 to 32768 [ 288.499054][ T7305] btrfs: Deprecated parameter 'usebackuproot' [ 288.505168][ T7305] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 288.517037][ T7305] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.245 (7305) [ 288.556111][ T7305] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 288.569650][ T7305] BTRFS info (device loop1): using crc32c checksum algorithm [ 288.612554][ T6916] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 288.748842][ T6916] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 288.761760][ T7317] loop0: detected capacity change from 0 to 4096 [ 288.774218][ T7317] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 288.815058][ T74] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 288.894929][ T7305] BTRFS error (device loop1): failed to load root extent [ 288.906016][ T7305] BTRFS warning (device loop1): try to load backup roots slot 1 [ 288.924674][ T6794] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 288.940754][ T7317] ntfs3(loop0): ino=1a, mi_enum_attr [ 288.946048][ T7317] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 288.961674][ T7305] BTRFS warning (device loop1): couldn't read tree root [ 288.968652][ T7305] BTRFS warning (device loop1): try to load backup roots slot 2 [ 288.977541][ T37] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 288.994724][ T7317] ntfs3(loop0): ino=1a, mi_enum_attr [ 289.000017][ T7317] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 289.021870][ T7305] BTRFS warning (device loop1): couldn't read tree root [ 289.030741][ T7305] BTRFS warning (device loop1): try to load backup roots slot 3 [ 289.248521][ T7305] BTRFS info (device loop1): rebuilding free space tree [ 289.284593][ T7305] BTRFS info (device loop1): checking UUID tree [ 289.294511][ T7305] BTRFS info (device loop1): setting nodatasum [ 289.300677][ T7305] BTRFS info (device loop1): setting nodatacow [ 289.311591][ T7305] BTRFS info (device loop1): enabling ssd optimizations [ 289.324678][ T7305] BTRFS info (device loop1): disabling tree log [ 289.334280][ T7305] BTRFS info (device loop1): turning on sync discard [ 289.341016][ T7305] BTRFS info (device loop1): enabling free space tree [ 289.347973][ T7305] BTRFS info (device loop1): force clearing of disk cache [ 289.355081][ T7305] BTRFS info (device loop1): enabling auto defrag [ 289.361678][ T7305] BTRFS info (device loop1): trying to use backup root at mount time [ 289.369809][ T7305] BTRFS info (device loop1): max_inline set to 0 [ 290.084386][ T5136] Bluetooth: hci2: command tx timeout [ 290.126355][ T7338] loop5: detected capacity change from 0 to 1024 [ 290.275104][ T6916] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 290.315532][ T7338] hfsplus: found bad thread record in catalog [ 290.325701][ T7338] hfsplus: found bad thread record in catalog [ 290.397023][ T6810] hfsplus: found bad thread record in catalog [ 290.409647][ T6810] hfsplus: found bad thread record in catalog [ 291.660121][ T7354] loop5: detected capacity change from 0 to 2048 [ 291.690319][ T5824] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 291.702572][ T7354] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 292.191455][ T6685] udevd[6685]: incorrect nilfs2 checksum on /dev/loop5 [ 292.253799][ T7361] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.357822][ T6912] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 292.722515][ T6189] hsr_slave_0: left promiscuous mode [ 292.934577][ T6189] hsr_slave_1: left promiscuous mode [ 293.089220][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.240689][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.324587][ T6189] hsr_slave_0: left promiscuous mode [ 293.529260][ T6189] hsr_slave_1: left promiscuous mode [ 293.567902][ T7370] loop5: detected capacity change from 0 to 32768 [ 293.576961][ T7370] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.252 (7370) [ 293.595751][ T7370] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 293.605884][ T7370] BTRFS info (device loop5): using sha256 checksum algorithm [ 293.613076][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.665300][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.682983][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.699817][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.820987][ T7382] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 293.947805][ T6189] hsr_slave_0: left promiscuous mode [ 293.982846][ T6189] hsr_slave_1: left promiscuous mode [ 294.046116][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.262068][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.302522][ T7370] BTRFS info (device loop5): enabling ssd optimizations [ 294.310182][ T7370] BTRFS info (device loop5): turning on async discard [ 294.317419][ T7370] BTRFS info (device loop5): enabling free space tree [ 294.491802][ T6189] veth1_macvtap: left promiscuous mode [ 294.523854][ T6189] veth0_macvtap: left promiscuous mode [ 294.553083][ T6189] veth1_vlan: left promiscuous mode [ 297.824120][ T6189] veth0_vlan: left promiscuous mode [ 298.570144][ T31] audit: type=1800 audit(1772211702.560:227): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.252" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 298.648830][ T5822] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 299.034550][ T7401] netlink: 668 bytes leftover after parsing attributes in process `syz.0.255'. [ 299.844367][ T6189] team0 (unregistering): Port device team_slave_1 removed [ 300.030053][ T6189] team0 (unregistering): Port device team_slave_0 removed [ 300.589609][ T6189] team0 (unregistering): Port device team_slave_1 removed [ 300.657477][ T6189] team0 (unregistering): Port device team_slave_0 removed [ 300.698626][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.257'. [ 300.945999][ T6189] team0 (unregistering): Port device team_slave_1 removed [ 300.961274][ T6189] team0 (unregistering): Port device team_slave_0 removed [ 301.041968][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 301.100134][ T6912] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 301.120870][ T7398] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 301.130219][ T7398] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 301.140541][ T7398] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 301.219369][ T31] audit: type=1800 audit(1772211705.525:228): pid=7398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.255" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 301.309290][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 301.321915][ T9] usb 6-1: config 3 has an invalid interface number: 112 but max is 1 [ 301.351585][ T9] usb 6-1: config 3 has an invalid interface number: 164 but max is 1 [ 301.386330][ T9] usb 6-1: config 3 has no interface number 0 [ 301.470573][ T9] usb 6-1: config 3 has no interface number 1 [ 301.612054][ T9] usb 6-1: config 3 interface 112 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 301.629685][ T9] usb 6-1: config 3 interface 112 has no altsetting 0 [ 301.715466][ T9] usb 6-1: config 3 interface 164 has no altsetting 0 [ 301.737515][ T9] usb 6-1: New USB device found, idVendor=0e41, idProduct=4150, bcdDevice=55.b2 [ 301.750095][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.758126][ T9] usb 6-1: Product: syz [ 301.779589][ T9] usb 6-1: Manufacturer: syz [ 301.784299][ T9] usb 6-1: SerialNumber: syz [ 301.976415][ T6912] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 302.401988][ T9] snd_usb_toneport 6-1:3.112: Line 6 POD Studio UX1 found [ 302.431466][ T9] usb 6-1: selecting invalid altsetting 2 [ 302.445490][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.455494][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.485611][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.487040][ T9] snd_usb_toneport 6-1:3.112: set_interface failed [ 302.512129][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.537173][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.547644][ T9] snd_usb_toneport 6-1:3.112: Line 6 POD Studio UX1 now disconnected [ 302.626791][ T9] snd_usb_toneport 6-1:3.112: probe with driver snd_usb_toneport failed with error -22 [ 302.684082][ T9] snd_usb_toneport 6-1:3.164: Line 6 POD Studio UX1 found [ 302.724598][ T7240] chnl_net:caif_netlink_parms(): no params data found [ 302.760472][ T9] usb 6-1: selecting invalid altsetting 2 [ 302.976795][ T9] snd_usb_toneport 6-1:3.164: set_interface failed [ 302.986022][ T9] snd_usb_toneport 6-1:3.164: Line 6 POD Studio UX1 now disconnected [ 302.995853][ T9] snd_usb_toneport 6-1:3.164: probe with driver snd_usb_toneport failed with error -22 [ 303.037744][ T9] usb 6-1: USB disconnect, device number 3 [ 303.041737][ T7423] lo speed is unknown, defaulting to 1000 [ 303.295926][ T5136] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.364297][ T5136] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.377794][ T5136] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.392942][ T5136] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.416292][ T5136] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.908053][ T7433] loop0: detected capacity change from 0 to 4096 [ 304.854000][ T7441] loop1: detected capacity change from 0 to 32768 [ 304.901268][ T5136] Bluetooth: hci5: command tx timeout [ 304.961276][ T7441] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 304.979717][ T7441] JBD2: Ignoring recovery information on journal [ 305.037932][ T7441] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 305.069060][ T7441] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 305.090268][ T7441] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 305.100657][ T7441] OCFS2: File system is now read-only. [ 305.106258][ T7441] (syz.1.263,7441,1):ocfs2_search_chain:1888 ERROR: status = -30 [ 305.114129][ T7441] (syz.1.263,7441,1):ocfs2_search_chain:2011 ERROR: status = -30 [ 305.122832][ T7441] (syz.1.263,7441,0):ocfs2_claim_suballoc_bits:2098 ERROR: status = -30 [ 305.131395][ T7441] (syz.1.263,7441,1):ocfs2_claim_suballoc_bits:2151 ERROR: status = -30 [ 305.141730][ T7441] (syz.1.263,7441,1):__ocfs2_claim_clusters:2532 ERROR: status = -30 [ 305.150171][ T7441] (syz.1.263,7441,0):__ocfs2_claim_clusters:2540 ERROR: status = -30 [ 305.158382][ T7441] (syz.1.263,7441,1):ocfs2_local_alloc_new_window:1197 ERROR: status = -30 [ 305.167033][ T7441] (syz.1.263,7441,0):ocfs2_local_alloc_new_window:1222 ERROR: status = -30 [ 305.175798][ T7441] (syz.1.263,7441,0):ocfs2_local_alloc_slide_window:1296 ERROR: status = -30 [ 305.185252][ T7441] (syz.1.263,7441,0):ocfs2_local_alloc_slide_window:1315 ERROR: status = -30 [ 305.194832][ T7441] (syz.1.263,7441,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30 [ 305.203531][ T7441] (syz.1.263,7441,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 305.212479][ T7441] (syz.1.263,7441,0):ocfs2_reserve_clusters_with_limit:1241 ERROR: status = -30 [ 305.221546][ T7441] (syz.1.263,7441,0):ocfs2_reserve_clusters_with_limit:1290 ERROR: status = -30 [ 305.230638][ T7441] (syz.1.263,7441,0):ocfs2_symlink:1927 ERROR: status = -30 [ 305.238807][ T7441] (syz.1.263,7441,1):ocfs2_symlink:2081 ERROR: status = -30 [ 305.351275][ T9] libceph: connect (1)[c::]:6789 error -101 [ 305.361755][ T7457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.383031][ T29] libceph: connect (1)[c::]:6789 error -101 [ 305.503984][ T7450] ceph: No mds server is up or the cluster is laggy [ 305.510896][ T7441] ceph: No mds server is up or the cluster is laggy [ 305.555030][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 305.569821][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 305.693142][ T5136] Bluetooth: hci6: command tx timeout [ 306.427930][ T7464] loop5: detected capacity change from 0 to 1024 [ 306.440543][ T7464] hfsplus: Unknown parameter '' [ 306.605164][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 307.018443][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 307.052393][ T7432] lo speed is unknown, defaulting to 1000 [ 307.146281][ T5136] Bluetooth: hci5: command tx timeout [ 307.254887][ T5824] ocfs2: Unmounting device (7,1) on (node local) [ 307.958913][ T5136] Bluetooth: hci6: command tx timeout [ 308.580609][ T7240] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.599012][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.606936][ T7240] bridge_slave_0: entered allmulticast mode [ 308.618619][ T7240] bridge_slave_0: entered promiscuous mode [ 308.629972][ T7240] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.646442][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.664061][ T7240] bridge_slave_1: entered allmulticast mode [ 308.680520][ T7240] bridge_slave_1: entered promiscuous mode [ 309.327202][ T5136] Bluetooth: hci5: command tx timeout [ 309.396084][ T7473] loop0: detected capacity change from 0 to 131072 [ 309.607984][ T7475] loop1: detected capacity change from 0 to 32768 [ 309.638696][ T7473] F2FS-fs (loop0): invalid crc value [ 309.644257][ T7475] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.267 (7475) [ 309.660743][ T7475] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 309.670853][ T7475] BTRFS info (device loop1): using sha256 checksum algorithm [ 309.749471][ T7473] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 309.764378][ T7473] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 309.907781][ T7475] BTRFS info (device loop1): enabling ssd optimizations [ 309.914743][ T7475] BTRFS info (device loop1): turning on async discard [ 309.922254][ T7475] BTRFS info (device loop1): enabling free space tree [ 310.492661][ T5136] Bluetooth: hci6: command tx timeout [ 310.561416][ T7240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.574444][ T7240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.650250][ T7423] chnl_net:caif_netlink_parms(): no params data found [ 310.682138][ T7240] team0: Port device team_slave_0 added [ 310.691672][ T7240] team0: Port device team_slave_1 added [ 310.868648][ T5824] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 310.995191][ T7240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.002160][ T7240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.134148][ T7240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.583493][ T5136] Bluetooth: hci5: command tx timeout [ 312.192282][ T7240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.200102][ T7240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.284710][ T7240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.380031][ T7423] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.477828][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.516817][ T7423] bridge_slave_0: entered allmulticast mode [ 312.570976][ T7423] bridge_slave_0: entered promiscuous mode [ 312.609267][ T7423] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.616375][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.662912][ T5136] Bluetooth: hci6: command tx timeout [ 312.668520][ T7423] bridge_slave_1: entered allmulticast mode [ 312.696248][ T7423] bridge_slave_1: entered promiscuous mode [ 313.097261][ T7423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.379981][ T7423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.785020][ T7240] hsr_slave_0: entered promiscuous mode [ 313.809786][ T7240] hsr_slave_1: entered promiscuous mode [ 313.830222][ T7528] loop1: detected capacity change from 0 to 1024 [ 313.840127][ T7240] debugfs: 'hsr0' already exists in 'hsr' [ 313.870711][ T7240] Cannot create hsr debugfs directory [ 313.964872][ T7423] team0: Port device team_slave_0 added [ 313.982483][ T7528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 314.000423][ T7423] team0: Port device team_slave_1 added [ 314.006095][ T6189] IPVS: stop unused estimator thread 0... [ 314.260877][ T7528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.295729][ T7530] warning: `syz.0.273' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 315.421579][ T7423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.428808][ T7423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.476160][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.725013][ T7423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.856612][ T7549] loop1: detected capacity change from 0 to 128 [ 315.881282][ T7423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.888207][ T7423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.010275][ T7423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.462083][ T7562] loop5: detected capacity change from 0 to 512 [ 316.472522][ T7562] EXT4-fs (loop5): Test dummy encryption mode enabled [ 316.491612][ T7562] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 316.511434][ T5829] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 316.534048][ T7562] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 316.564851][ T7562] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.279: Corrupt directory, running e2fsck is recommended [ 316.627929][ T7423] hsr_slave_0: entered promiscuous mode [ 316.632358][ T7562] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 316.634779][ T7423] hsr_slave_1: entered promiscuous mode [ 316.648238][ T7423] debugfs: 'hsr0' already exists in 'hsr' [ 316.655142][ T7423] Cannot create hsr debugfs directory [ 316.662717][ T7562] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.279: corrupted in-inode xattr: e_name out of bounds [ 316.676844][ T7562] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 316.677294][ T7562] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.279: couldn't read orphan inode 15 (err -117) [ 316.686466][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 316.686487][ C1] EXT4-fs (loop5): initial error at time 1772211720: ext4_iget_extra_inode:5025: inode 15 [ 316.686524][ C1] EXT4-fs (loop5): last error at time 1772211720: ext4_iget_extra_inode:5025: inode 15 [ 316.737320][ T5829] usb 2-1: Using ep0 maxpacket: 8 [ 316.749165][ T7562] loop5: lost filesystem error report for type 5 error -117 [ 316.749809][ T5829] usb 2-1: unable to get BOS descriptor or descriptor too short [ 316.772052][ T7562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.785894][ T5829] usb 2-1: config 4 has an invalid interface number: 251 but max is 0 [ 316.795567][ T5829] usb 2-1: config 4 has no interface number 0 [ 316.802551][ T5829] usb 2-1: config 4 interface 251 altsetting 124 endpoint 0xD has an invalid bInterval 64, changing to 10 [ 316.814245][ T5829] usb 2-1: config 4 interface 251 has no altsetting 0 [ 316.823838][ T5829] usb 2-1: New USB device found, idVendor=17ef, idProduct=a359, bcdDevice=f3.5b [ 316.844449][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.859666][ T7432] chnl_net:caif_netlink_parms(): no params data found [ 316.890225][ T5829] usb 2-1: Product: syz [ 316.894403][ T5829] usb 2-1: Manufacturer: syz [ 316.911414][ T5829] usb 2-1: SerialNumber: syz [ 317.000407][ T5822] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.035424][ T5829] r8152-cfgselector 2-1: Unknown version 0x0000 [ 317.161116][ T7579] loop5: detected capacity change from 0 to 1024 [ 317.386989][ T7579] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 317.572976][ T5829] r8152 2-1:4.251: Expected endpoints are not found [ 317.789154][ T7579] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 2: comm syz.5.282: lblock 2 mapped to illegal pblock 2 (length 1) [ 317.804446][ T5829] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 317.847578][ T7579] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 317.858247][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 317.873878][ C1] EXT4-fs (loop5): initial error at time 1772211721: ext4_map_blocks:776: inode 3: block 2 [ 317.883906][ C1] EXT4-fs (loop5): last error at time 1772211721: ext4_map_blocks:776: inode 3: block 2 [ 317.901187][ T7579] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 317.926758][ T7579] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 48: comm syz.5.282: lblock 0 mapped to illegal pblock 48 (length 1) [ 318.000132][ T7579] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 318.000402][ T7579] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 318.033889][ T7579] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.282: Failed to acquire dquot type 0 [ 318.045769][ T7579] loop5: lost filesystem error report for type 5 error -117 [ 318.048970][ T7579] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 318.079960][ T7579] loop5: lost filesystem error report for type 5 error -117 [ 318.081572][ T7579] EXT4-fs error (device loop5): ext4_evict_inode:255: inode #11: comm syz.5.282: mark_inode_dirty error [ 318.116460][ T7579] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 319.662765][ T7579] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 319.874593][ T7579] EXT4-fs (loop5): 1 orphan inode deleted [ 319.919443][ T7579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.243862][ T7594] loop1: detected capacity change from 0 to 32768 [ 320.262125][ T642] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 320.316200][ T7594] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 320.324904][ T7594] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 320.349041][ T7594] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 320.382488][ T642] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 320.391480][ T642] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:6: Failed to release dquot type 0 [ 320.883841][ T5829] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 320.927668][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.934806][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.948187][ T7432] bridge_slave_0: entered allmulticast mode [ 320.959252][ T7432] bridge_slave_0: entered promiscuous mode [ 320.995700][ T5829] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 321.125343][ T5822] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.144059][ T50] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 321.207113][ T50] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 321.207841][ T7432] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.224306][ T50] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 321.234104][ T5829] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 223ms [ 321.243238][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.253023][ T7432] bridge_slave_1: entered allmulticast mode [ 321.259116][ T50] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 0 [ 321.261002][ T5829] gfs2: fsid=syz:syz.0: jid=0: Done [ 321.278863][ T7432] bridge_slave_1: entered promiscuous mode [ 321.288376][ T7594] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 321.324976][ T50] loop5: lost filesystem error report for type 5 error -117 [ 321.333541][ T5822] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 321.409122][ T7594] gfs2: fsid=syz:syz.0: found 1 quota changes [ 321.424304][ T5822] loop5: lost filesystem error report for type 5 error -117 [ 321.451758][ T5822] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 321.519452][ T5822] loop5: lost filesystem error report for type 5 error -117 [ 321.519795][ T5822] EXT4-fs error (device loop5): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 321.593043][ T5822] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 322.332720][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.352110][ T7432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.361624][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.404739][ T7432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.440447][ T5824] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 322.475739][ T5824] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 322.781612][ T5824] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5824 [syz-executor] gfs2_quota_sync+0x370/0x470 [ 323.022964][ T5824] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 323.031171][ T5824] CPU: 0 UID: 0 PID: 5824 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 323.031197][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 323.031211][ T5824] Call Trace: [ 323.031221][ T5824] [ 323.031230][ T5824] dump_stack_lvl+0xe8/0x150 [ 323.031268][ T5824] gfs2_withdraw+0xc3/0x1b0 [ 323.031305][ T5824] inode_go_instantiate+0xdd8/0x1220 [ 323.031342][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.031371][ T5824] ? preempt_schedule_common+0x82/0xd0 [ 323.031414][ T5824] ? __pfx_inode_go_instantiate+0x10/0x10 [ 323.031451][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.031489][ T5824] gfs2_instantiate+0x168/0x220 [ 323.031529][ T5824] gfs2_glock_wait+0x1d4/0x2a0 [ 323.031574][ T5824] do_sync+0x49a/0xcb0 [ 323.031600][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.031628][ T5824] ? _raw_spin_unlock+0x28/0x50 [ 323.031660][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.031688][ T5824] ? gfs2_quota_sync+0x370/0x470 [ 323.031728][ T5824] ? __pfx_do_sync+0x10/0x10 [ 323.031767][ T5824] ? gfs2_quota_sync+0x370/0x470 [ 323.031797][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.031830][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.031858][ T5824] ? do_raw_spin_unlock+0xf5/0x210 [ 323.031889][ T5824] gfs2_quota_sync+0x370/0x470 [ 323.031929][ T5824] gfs2_sync_fs+0x4c/0xb0 [ 323.031956][ T5824] sync_filesystem+0xee/0x230 [ 323.031999][ T5824] generic_shutdown_super+0x77/0x2d0 [ 323.032040][ T5824] kill_block_super+0x44/0x90 [ 323.032066][ T5824] deactivate_locked_super+0xbc/0x130 [ 323.032105][ T5824] cleanup_mnt+0x437/0x4d0 [ 323.032130][ T5824] ? _raw_spin_unlock_irq+0x23/0x50 [ 323.032168][ T5824] task_work_run+0x1d9/0x270 [ 323.032199][ T5824] ? __pfx_task_work_run+0x10/0x10 [ 323.032237][ T5824] exit_to_user_mode_loop+0xed/0x480 [ 323.032265][ T5824] ? rcu_is_watching+0x15/0xb0 [ 323.032305][ T5824] do_syscall_64+0x32d/0xf80 [ 323.032341][ T5824] ? trace_irq_disable+0x3b/0x150 [ 323.032378][ T5824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.032409][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.032433][ T5824] RIP: 0033:0x7f3ad7b9d9d7 [ 323.032455][ T5824] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 323.032477][ T5824] RSP: 002b:00007ffc339d19b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 323.032502][ T5824] RAX: 0000000000000000 RBX: 00007f3ad7c31f90 RCX: 00007f3ad7b9d9d7 [ 323.032519][ T5824] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc339d1a70 [ 323.032535][ T5824] RBP: 00007ffc339d1a70 R08: 00007ffc339d2a70 R09: 00000000ffffffff [ 323.032553][ T5824] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc339d2b00 [ 323.032573][ T5824] R13: 00007f3ad7c31f90 R14: 000000000004d2f6 R15: 00007ffc339d2b40 [ 323.032610][ T5824] [ 323.321325][ T5824] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 325.056512][ T7432] team0: Port device team_slave_0 added [ 325.086638][ T7432] team0: Port device team_slave_1 added [ 325.259493][ T5136] Bluetooth: Wrong link type (-71) [ 325.426280][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.455308][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.502510][ T7432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.691178][ T7635] loop5: detected capacity change from 0 to 1024 [ 326.201805][ T7633] loop0: detected capacity change from 0 to 4096 [ 326.284406][ T7633] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 326.369377][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.376353][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.402885][ T7432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.944001][ T7240] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 327.302455][ T7240] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 327.338048][ T7240] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 327.354548][ T7432] hsr_slave_0: entered promiscuous mode [ 327.361053][ T7432] hsr_slave_1: entered promiscuous mode [ 327.371861][ T7432] debugfs: 'hsr0' already exists in 'hsr' [ 327.377922][ T7432] Cannot create hsr debugfs directory [ 327.388291][ T7240] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 327.790992][ T6189] bridge_slave_1: left allmulticast mode [ 327.821948][ T6189] bridge_slave_1: left promiscuous mode [ 327.827728][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.847309][ T6189] bridge_slave_0: left allmulticast mode [ 327.854101][ T6189] bridge_slave_0: left promiscuous mode [ 327.859835][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.873986][ T6189] bridge_slave_1: left allmulticast mode [ 328.466620][ T6189] bridge_slave_1: left promiscuous mode [ 328.472402][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.503656][ T6189] bridge_slave_0: left allmulticast mode [ 328.514586][ T6189] bridge_slave_0: left promiscuous mode [ 328.527794][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.551632][ T6189] bridge_slave_1: left allmulticast mode [ 328.582106][ T6189] bridge_slave_1: left promiscuous mode [ 328.599094][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.622666][ T6189] bridge_slave_0: left allmulticast mode [ 328.636112][ T5136] Bluetooth: hci0: Malformed Event: 0x13 [ 328.648388][ T6189] bridge_slave_0: left promiscuous mode [ 328.654122][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.828541][ T5824] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566 [ 328.880483][ T5824] CPU: 1 UID: 0 PID: 5824 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 328.880517][ T5824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 328.880532][ T5824] Call Trace: [ 328.880541][ T5824] [ 328.880551][ T5824] dump_stack_lvl+0xe8/0x150 [ 328.880591][ T5824] gfs2_assert_warn_i+0x194/0x2c0 [ 328.880637][ T5824] gfs2_make_fs_ro+0x30d/0x320 [ 328.880667][ T5824] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 328.880690][ T5824] ? do_raw_spin_lock+0x12b/0x2f0 [ 328.880717][ T5824] ? __pfx_autoremove_wake_function+0x10/0x10 [ 328.880744][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.880776][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.880810][ T5824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.880839][ T5824] ? do_raw_spin_unlock+0xf5/0x210 [ 328.880870][ T5824] gfs2_put_super+0x220/0x860 [ 328.880904][ T5824] ? __pfx_gfs2_put_super+0x10/0x10 [ 328.880930][ T5824] generic_shutdown_super+0x13d/0x2d0 [ 328.880973][ T5824] kill_block_super+0x44/0x90 [ 328.881000][ T5824] deactivate_locked_super+0xbc/0x130 [ 328.881041][ T5824] cleanup_mnt+0x437/0x4d0 [ 328.881065][ T5824] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.881106][ T5824] task_work_run+0x1d9/0x270 [ 328.881137][ T5824] ? __pfx_task_work_run+0x10/0x10 [ 328.881176][ T5824] exit_to_user_mode_loop+0xed/0x480 [ 328.881207][ T5824] ? rcu_is_watching+0x15/0xb0 [ 328.881249][ T5824] do_syscall_64+0x32d/0xf80 [ 328.881287][ T5824] ? trace_irq_disable+0x3b/0x150 [ 328.881332][ T5824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.881364][ T5824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.881390][ T5824] RIP: 0033:0x7f3ad7b9d9d7 [ 328.881413][ T5824] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 328.881433][ T5824] RSP: 002b:00007ffc339d19b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 328.881459][ T5824] RAX: 0000000000000000 RBX: 00007f3ad7c31f90 RCX: 00007f3ad7b9d9d7 [ 328.881476][ T5824] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc339d1a70 [ 328.881492][ T5824] RBP: 00007ffc339d1a70 R08: 00007ffc339d2a70 R09: 00000000ffffffff [ 328.881509][ T5824] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc339d2b00 [ 328.881525][ T5824] R13: 00007f3ad7c31f90 R14: 000000000004d2f6 R15: 00007ffc339d2b40 [ 328.881563][ T5824] [ 329.863695][ T6189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.307281][ T7683] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 331.140482][ T6189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.156124][ T6189] bond0 (unregistering): Released all slaves [ 332.709013][ T7693] loop5: detected capacity change from 0 to 1024 [ 332.716462][ T7693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 332.723276][ T7693] EXT4-fs: inline encryption not supported [ 332.803476][ T7693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.897062][ T6189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.907926][ T6189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.918340][ T6189] bond0 (unregistering): Released all slaves [ 332.961797][ T7690] ALSA: mixer_oss: invalid OSS volume '' [ 333.088311][ T5822] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.119439][ T6189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.133279][ T6189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.150646][ T6189] bond0 (unregistering): Released all slaves [ 333.454573][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.306'. [ 333.598495][ T7704] : entered promiscuous mode [ 333.736842][ T6189] hsr_slave_0: left promiscuous mode [ 333.762139][ T6189] hsr_slave_1: left promiscuous mode [ 333.786255][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.821538][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.864298][ T6189] hsr_slave_0: left promiscuous mode [ 333.894595][ T6189] hsr_slave_1: left promiscuous mode [ 333.904252][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.927413][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.970502][ T6189] hsr_slave_0: left promiscuous mode [ 333.983503][ T7721] comedi comedi1: dt2801: a I/O base address must be specified [ 333.991943][ T6189] hsr_slave_1: left promiscuous mode [ 333.997900][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.013933][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.370779][ T7723] loop1: detected capacity change from 0 to 32768 [ 334.378336][ T7723] btrfs: Deprecated parameter 'usebackuproot' [ 334.384404][ T7723] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 334.410842][ T7723] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.310 (7723) [ 334.443784][ T7723] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 334.453956][ T7723] BTRFS info (device loop1): using crc32c checksum algorithm [ 334.461415][ T7723] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 334.594314][ T642] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 334.630733][ T7723] BTRFS warning (device loop1): couldn't read tree root [ 334.640630][ T7723] BTRFS warning (device loop1): try to load backup roots slot 1 [ 334.648643][ T642] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 334.669109][ T7723] BTRFS warning (device loop1): couldn't read tree root [ 334.678758][ T7723] BTRFS warning (device loop1): try to load backup roots slot 2 [ 334.686931][ T37] BTRFS warning (device loop1): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 334.701480][ T7723] BTRFS warning (device loop1): couldn't read tree root [ 334.710506][ T7723] BTRFS warning (device loop1): try to load backup roots slot 3 [ 334.739606][ T7723] BTRFS info (device loop1): rebuilding free space tree [ 334.740912][ T6189] team0 (unregistering): Port device team_slave_1 removed [ 334.765802][ T7723] BTRFS info (device loop1): disabling free space tree [ 334.772767][ T7723] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 334.782472][ T7723] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 334.798157][ T7723] BTRFS info (device loop1): enabling ssd optimizations [ 334.805176][ T7723] BTRFS info (device loop1): turning off barriers [ 334.811608][ T7723] BTRFS info (device loop1): turning on sync discard [ 334.818341][ T7723] BTRFS info (device loop1): enabling disk space caching [ 334.825386][ T7723] BTRFS info (device loop1): force clearing of disk cache [ 334.832478][ T7723] BTRFS info (device loop1): enabling auto defrag [ 334.838915][ T7723] BTRFS info (device loop1): trying to use backup root at mount time [ 334.847003][ T7723] BTRFS info (device loop1): max_inline set to 0 [ 334.876394][ T6189] team0 (unregistering): Port device team_slave_0 removed [ 335.250932][ T5824] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 335.858556][ T6189] team0 (unregistering): Port device team_slave_1 removed [ 335.916400][ T6189] team0 (unregistering): Port device team_slave_0 removed [ 336.421633][ T6189] team0 (unregistering): Port device team_slave_1 removed [ 336.437195][ T6189] team0 (unregistering): Port device team_slave_0 removed [ 336.770889][ T7240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.027350][ T7753] loop1: detected capacity change from 0 to 32768 [ 337.109433][ T7753] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 337.218633][ T7240] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.439236][ T7753] XFS (loop1): Starting recovery (logdev: internal) [ 337.465949][ T7756] sch_fq: defrate 8 ignored. [ 337.481891][ T7753] XFS (loop1): Ending recovery (logdev: internal) [ 337.553224][ T642] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.560355][ T642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.612226][ T642] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.619401][ T642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.927587][ T7772] ./file0: Can't lookup blockdev [ 337.944624][ T7772] capability: warning: `syz.1.315' uses 32-bit capabilities (legacy support in use) [ 338.589612][ T5824] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 338.979767][ T7432] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 339.021608][ T7432] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 339.128588][ T7432] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 339.228428][ T7432] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 339.326751][ T7787] loop0: detected capacity change from 0 to 4096 [ 339.357072][ T7787] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 339.406065][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.318'. [ 339.427252][ T7787] ntfs3(loop0): ino=1a, mi_enum_attr [ 339.442699][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.318'. [ 339.450099][ T7787] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 339.476655][ T7787] ntfs3(loop0): ino=1a, mi_enum_attr [ 339.485740][ T7791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.318'. [ 339.486111][ T7787] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 339.622895][ T7240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.798576][ T7423] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 339.858448][ T7803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.321'. [ 339.880819][ T7803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.321'. [ 339.912858][ T7423] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 340.599241][ T7783] loop5: detected capacity change from 0 to 32768 [ 340.603807][ T7423] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 340.730822][ T7783] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 340.898546][ T7423] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 340.982193][ T7783] XFS (loop5): Ending clean mount [ 341.624019][ T7783] XFS (loop5): Quotacheck needed: Please wait. [ 341.689037][ T7783] XFS (loop5): Quotacheck: Done. [ 341.969587][ T5822] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 342.066794][ T7432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.390487][ T7432] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.465655][ T7849] siw: device registration error -23 [ 342.482755][ T7849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.327'. [ 343.111672][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.118847][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.273882][ T122] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.281059][ T122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.397736][ T7423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.491442][ T7423] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.259073][ T6794] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.266249][ T6794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.467790][ T6794] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.474929][ T6794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.545019][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.584943][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.599044][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.638708][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.666853][ T7432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.681185][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.726217][ T7850] loop0: detected capacity change from 0 to 32768 [ 344.863891][ T7850] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 344.897954][ T7869] lo speed is unknown, defaulting to 1000 [ 345.109232][ T7891] loop1: detected capacity change from 0 to 256 [ 345.137345][ T7891] exfat: Deprecated parameter 'utf8' [ 345.144927][ T7891] exfat: Deprecated parameter 'namecase' [ 345.172375][ T7850] XFS (loop0): Ending clean mount [ 345.177930][ T7891] exfat: Deprecated parameter 'namecase' [ 345.193388][ T7891] exfat: Deprecated parameter 'utf8' [ 345.268201][ T7891] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 345.358662][ T7891] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 345.402455][ T5815] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 345.708825][ T7904] random: crng reseeded on system resumption [ 346.090689][ T7918] usb usb7: usbfs: process 7918 (syz.1.343) did not claim interface 0 before use [ 346.110833][ T7918] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 346.230892][ T7432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.517180][ T7423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.660255][ T7869] chnl_net:caif_netlink_parms(): no params data found [ 346.841366][ T7946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.873230][ T5825] Bluetooth: hci1: command tx timeout [ 346.939258][ T7949] comedi comedi0: Minor 2 could not be opened [ 347.236139][ T29] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 347.455002][ T29] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 347.696632][ T29] usb 1-1: config 0 has no interface number 0 [ 347.702735][ T29] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 347.749445][ T29] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 347.759554][ T29] usb 1-1: config 0 interface 113 has no altsetting 0 [ 347.775660][ T7963] process 'syz.5.353' launched './file0' with NULL argv: empty string added [ 347.874766][ T7963] loop5: detected capacity change from 0 to 16 [ 347.934478][ T7963] erofs (device loop5): invalid ishare xattr prefix id 0 [ 348.498561][ T29] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 348.529658][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.537640][ T29] usb 1-1: Product: syz [ 348.551816][ T29] usb 1-1: Manufacturer: syz [ 348.572414][ T29] usb 1-1: SerialNumber: syz [ 348.580343][ T29] usb 1-1: config 0 descriptor?? [ 348.657710][ C1] usb 1-1: NFC: Urb failure (status -71) [ 348.723014][ T29] usb 1-1: NFC: Unable to get FW version [ 348.743150][ T29] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -90 [ 348.941792][ T7869] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.958618][ T7869] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.973859][ T7869] bridge_slave_0: entered allmulticast mode [ 349.003579][ T7972] usb 1-1: USB disconnect, device number 2 [ 349.038192][ T7869] bridge_slave_0: entered promiscuous mode [ 349.080306][ T7869] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.098162][ T5825] Bluetooth: hci1: command tx timeout [ 349.134373][ T7869] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.147349][ T7869] bridge_slave_1: entered allmulticast mode [ 349.174896][ T7869] bridge_slave_1: entered promiscuous mode [ 349.196830][ T7977] loop5: detected capacity change from 0 to 1024 [ 349.468541][ T7977] hfsplus: found bad thread record in catalog [ 349.475787][ T7977] hfsplus: found bad thread record in catalog [ 349.598317][ T7869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.638897][ T6189] hfsplus: found bad thread record in catalog [ 349.660317][ T6189] hfsplus: found bad thread record in catalog [ 349.669206][ T7869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.830544][ T6810] bridge_slave_1: left allmulticast mode [ 349.841459][ T6810] bridge_slave_1: left promiscuous mode [ 349.858787][ T6810] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.899460][ T6810] bridge_slave_0: left allmulticast mode [ 349.905751][ T7989] loop1: detected capacity change from 0 to 128 [ 349.911161][ T6810] bridge_slave_0: left promiscuous mode [ 349.926039][ T6810] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.987720][ T7989] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 350.115073][ T7989] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 350.285188][ T5824] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 350.661215][ T6810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.680788][ T6810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.701420][ T6810] bond0 (unregistering): Released all slaves [ 350.715036][ T8006] netlink: 92 bytes leftover after parsing attributes in process `syz.1.363'. [ 350.752210][ T7869] team0: Port device team_slave_0 added [ 350.805810][ T7869] team0: Port device team_slave_1 added [ 350.973074][ T7869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.996119][ T7869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.051859][ T7869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.071410][ T8012] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 351.120325][ T6810] hsr_slave_0: left promiscuous mode [ 351.144754][ T6810] hsr_slave_1: left promiscuous mode [ 351.278196][ T6810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.313609][ T6810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.320891][ T5825] Bluetooth: hci1: command tx timeout [ 351.457591][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 351.624983][ T8021] loop0: detected capacity change from 0 to 512 [ 351.632264][ T8023] capability: warning: `syz.1.369' uses deprecated v2 capabilities in a way that may be insecure [ 351.645050][ T8021] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 351.693280][ T8021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.734663][ T8021] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 351.920944][ T5815] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.991557][ T6810] team0 (unregistering): Port device team_slave_1 removed [ 353.059751][ T6810] team0 (unregistering): Port device team_slave_0 removed [ 353.510069][ T7869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.522061][ T7869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.543569][ T5825] Bluetooth: hci1: command tx timeout [ 353.549043][ T7869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.668299][ T8037] loop0: detected capacity change from 0 to 32768 [ 353.860931][ T7869] hsr_slave_0: entered promiscuous mode [ 353.879380][ T7869] hsr_slave_1: entered promiscuous mode [ 353.900667][ T7869] debugfs: 'hsr0' already exists in 'hsr' [ 353.915588][ T7869] Cannot create hsr debugfs directory [ 353.934086][ T5136] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 353.968217][ T7432] veth0_vlan: entered promiscuous mode [ 354.125750][ T7432] veth1_vlan: entered promiscuous mode [ 354.146200][ T7423] veth0_vlan: entered promiscuous mode [ 354.169174][ T8039] loop5: detected capacity change from 0 to 32768 [ 354.206693][ T8039] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.375 (8039) [ 354.236404][ T8039] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 354.250287][ T8039] BTRFS info (device loop5): using crc32c checksum algorithm [ 354.275445][ T7423] veth1_vlan: entered promiscuous mode [ 354.398060][ T8039] BTRFS info (device loop5): rebuilding free space tree [ 354.436330][ T8039] BTRFS info (device loop5): disabling free space tree [ 354.451136][ T8039] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 354.477002][ T8039] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 354.512482][ T8039] BTRFS info (device loop5): enabling ssd optimizations [ 354.527544][ T8039] BTRFS info (device loop5): turning off barriers [ 354.542018][ T8039] BTRFS info (device loop5): disabling tree log [ 354.592384][ T8039] BTRFS info (device loop5): turning on async discard [ 354.600121][ T8039] BTRFS info (device loop5): force clearing of disk cache [ 354.616549][ T8039] BTRFS info (device loop5): enabling auto defrag [ 354.623108][ T8039] BTRFS info (device loop5): force zlib compression, level 3 [ 354.850133][ T8039] BTRFS info (device loop5): max_inline set to 4096 [ 355.093036][ T7423] veth0_macvtap: entered promiscuous mode [ 355.292370][ T7432] veth0_macvtap: entered promiscuous mode [ 355.384771][ T7423] veth1_macvtap: entered promiscuous mode [ 355.395338][ T7432] veth1_macvtap: entered promiscuous mode [ 355.434845][ T5822] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 355.721158][ T7423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.819862][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.857072][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.880621][ T7423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.990580][ T1146] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.018797][ T1146] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.112985][ T5825] ------------[ cut here ]------------ [ 356.118633][ T5825] refcnt < 0 [ 356.118648][ T5825] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0xff/0x2c0, CPU#0: kworker/u9:3/5825 [ 356.133029][ T5825] Modules linked in: [ 356.137034][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 356.148245][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 356.158823][ T5825] Workqueue: hci0 hci_conn_timeout [ 356.164429][ T5825] RIP: 0010:hci_conn_timeout+0xff/0x2c0 [ 356.170481][ T5825] Code: 48 89 df e8 83 99 09 00 eb 07 e8 dc 1f 25 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 87 a8 fe ff e8 c2 1f 25 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 356.191120][ T5825] RSP: 0018:ffffc90003067ad0 EFLAGS: 00010293 [ 356.198087][ T5825] RAX: ffffffff8aa06c0e RBX: ffff888051ad8000 RCX: ffff88807dce9e40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 356.206883][ T5825] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 356.215583][ T5825] RBP: 00000000ffffffff R08: ffff888051ad8013 R09: 1ffff1100a35b002 [ 356.223898][ T5825] R10: dffffc0000000000 R11: ffffed100a35b003 R12: dffffc0000000000 [ 356.232322][ T5825] R13: ffff88801b73ab18 R14: ffff888051ad8a40 R15: ffff888051ad8010 [ 356.240954][ T5825] FS: 0000000000000000(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 356.250259][ T5825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.257311][ T5825] CR2: 00007f69a0b0b2f9 CR3: 00000000816af000 CR4: 0000000000350ef0 [ 356.266752][ T5825] Call Trace: [ 356.271124][ T5825] [ 356.274419][ T5825] ? process_scheduled_works+0xa25/0x1830 [ 356.280178][ T5825] process_scheduled_works+0xb02/0x1830 [ 356.286012][ T5825] ? __pfx_process_scheduled_works+0x10/0x10 [ 356.292080][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.297777][ T5825] ? assign_work+0x3d5/0x5e0 [ 356.302436][ T5825] worker_thread+0xa50/0xfc0 [ 356.307091][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.312901][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.319544][ T5825] kthread+0x388/0x470 [ 356.324096][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 356.324571][ T1146] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.329326][ T5825] ? __pfx_kthread+0x10/0x10 [ 356.342538][ T5825] ret_from_fork+0x51e/0xb90 [ 356.347266][ T5825] ? __pfx_ret_from_fork+0x10/0x10 [ 356.352420][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.358183][ T5825] ? __switch_to+0xc7d/0x1450 [ 356.362899][ T5825] ? __pfx_kthread+0x10/0x10 [ 356.367668][ T5825] ret_from_fork_asm+0x1a/0x30 [ 356.372496][ T5825] [ 356.375516][ T5825] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 356.382789][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 356.392243][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 356.402297][ T5825] Workqueue: hci0 hci_conn_timeout [ 356.407432][ T5825] Call Trace: [ 356.410700][ T5825] [ 356.413623][ T5825] vpanic+0x56c/0xa60 [ 356.417612][ T5825] ? __pfx__printk+0x10/0x10 [ 356.422200][ T5825] ? __pfx_vpanic+0x10/0x10 [ 356.426712][ T5825] ? is_bpf_text_address+0x292/0x2b0 [ 356.431996][ T5825] ? is_bpf_text_address+0x26/0x2b0 [ 356.437206][ T5825] panic+0xc5/0xd0 [ 356.440935][ T5825] ? __pfx_panic+0x10/0x10 [ 356.445372][ T5825] ? ret_from_fork_asm+0x1a/0x30 [ 356.450328][ T5825] __warn+0x315/0x4f0 [ 356.454320][ T5825] ? hci_conn_timeout+0xff/0x2c0 [ 356.459278][ T5825] ? hci_conn_timeout+0xff/0x2c0 [ 356.464236][ T5825] __report_bug+0x29a/0x540 [ 356.468745][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.474370][ T5825] ? rcu_is_watching+0x15/0xb0 [ 356.479137][ T5825] ? hci_conn_timeout+0xff/0x2c0 [ 356.484074][ T5825] ? __pfx___report_bug+0x10/0x10 [ 356.489107][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.494731][ T5825] ? register_lock_class+0x31/0x2e0 [ 356.499928][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.505550][ T5825] ? __lock_acquire+0x6b5/0x2cf0 [ 356.510490][ T5825] ? hci_conn_timeout+0xff/0x2c0 [ 356.515424][ T5825] report_bug+0x16a/0x220 [ 356.519757][ T5825] ? hci_conn_timeout+0xff/0x2c0 [ 356.524690][ T5825] ? hci_conn_timeout+0x101/0x2c0 [ 356.529710][ T5825] handle_bug+0x98/0x200 [ 356.533945][ T5825] exc_invalid_op+0x1a/0x50 [ 356.538441][ T5825] asm_exc_invalid_op+0x1a/0x20 [ 356.543281][ T5825] RIP: 0010:hci_conn_timeout+0xff/0x2c0 [ 356.548828][ T5825] Code: 48 89 df e8 83 99 09 00 eb 07 e8 dc 1f 25 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 87 a8 fe ff e8 c2 1f 25 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 356.568422][ T5825] RSP: 0018:ffffc90003067ad0 EFLAGS: 00010293 [ 356.574484][ T5825] RAX: ffffffff8aa06c0e RBX: ffff888051ad8000 RCX: ffff88807dce9e40 [ 356.582448][ T5825] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 356.590408][ T5825] RBP: 00000000ffffffff R08: ffff888051ad8013 R09: 1ffff1100a35b002 [ 356.598366][ T5825] R10: dffffc0000000000 R11: ffffed100a35b003 R12: dffffc0000000000 [ 356.606325][ T5825] R13: ffff88801b73ab18 R14: ffff888051ad8a40 R15: ffff888051ad8010 [ 356.614302][ T5825] ? hci_conn_timeout+0xfe/0x2c0 [ 356.619253][ T5825] ? process_scheduled_works+0xa25/0x1830 [ 356.624970][ T5825] process_scheduled_works+0xb02/0x1830 [ 356.630540][ T5825] ? __pfx_process_scheduled_works+0x10/0x10 [ 356.636522][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.642150][ T5825] ? assign_work+0x3d5/0x5e0 [ 356.646751][ T5825] worker_thread+0xa50/0xfc0 [ 356.651348][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.656986][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.662620][ T5825] kthread+0x388/0x470 [ 356.666676][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 356.671786][ T5825] ? __pfx_kthread+0x10/0x10 [ 356.676366][ T5825] ret_from_fork+0x51e/0xb90 [ 356.680955][ T5825] ? __pfx_ret_from_fork+0x10/0x10 [ 356.686056][ T5825] ? srso_alias_return_thunk+0x5/0xfbef5 [ 356.691679][ T5825] ? __switch_to+0xc7d/0x1450 [ 356.696364][ T5825] ? __pfx_kthread+0x10/0x10 [ 356.700944][ T5825] ret_from_fork_asm+0x1a/0x30 [ 356.705728][ T5825] [ 356.709005][ T5825] Kernel Offset: disabled [ 356.713313][ T5825] Rebooting in 86400 seconds..