last executing test programs: 3m50.920896321s ago: executing program 4 (id=105): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$UHID_CREATE2(r0, &(0x7f0000002740)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0, 0xfff8, 0x6, 0x1, 0xfffffff8}}, 0x118) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50}, 0xffd3) write$fb(r0, &(0x7f00000006c0)='3', 0x1) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) 3m49.448962239s ago: executing program 4 (id=111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 3m48.324184513s ago: executing program 4 (id=113): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000280)={0x0, 0x19, r3, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, r1, r4, 0x0, 0x100, 0x0, 0x2, {0x9, 0x9, 0x9, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40000003, "0e19cd431c1d8bdffb00a310364ef87b48499c76277e5c2e365300"}}) 3m47.519640617s ago: executing program 4 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000200)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@lastblock={'lastblock', 0x3d, 0x5}}, {@nostrict}, {}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@mode={'mode', 0x3d, 0x8}}, {@fileset={'fileset', 0x3d, 0xd9}}, {@adinicb}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0xa}}, {@adinicb}, {@adinicb}]}, 0x1, 0xc4d, &(0x7f0000001bc0)="$eJzs3U9sHNd9B/DfGy3FldxWTJwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQwWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xr546nTaZsOhh9AYAOCBuDz2tVNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+/LzQ+e7eak98wH199pn49WxKxcbL83enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvnZr8vr1hcaZ585u2nx74L3+J44PXBh65uTT3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORopnv/+z1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnz32Fq6mt/6UZ2HL1UDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/ijilUjx87dPxLV8n6nuNV+MeKXMH0a8WeaLEan8YpyLeHeb7xGPploU8efl9b+wliar+0H3vnLp642vzlyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcRnIsXL//ZH1bjiqMalH7sw9PsDv9w7ZvypD9lPWfa5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vv2wGwMAAAAAAAAAAAAAAAAAAPCxVsRPI8UL75xIy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIt6PFN/55lqKFBHNiIno5Er/w24dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDqT0X8IFI0/qB5Z10tIlL1b8eJ8pdz0Txc5iejOVTmi9G8mLNVZa357YfQfnanLxXxk0jRX3/rzgXP17+v8+nO1yDe/NbGp8/WOnmou3Hgvf4njh+7MDTy+ad2Wk7bNWDwUnvm1u3G+PDIyFjP6lo++id71g3k4xZ703UiYuH1N15rTU9Pzd//QvkVuM/q3Su5i6M/yIVUe2SaamEvFqJ2IJrxcPq+Sf1h3JzYd+Xz/91I8dvv/Hv3gd95/tfjlzqf7jzh4xd/svH8f2Hrju7x+V/bWi8//8snwXbP/yd71r2QfzfSV4uoL96c6zseUV94/Y2T7ZutG1M3pmbOnTr1laGhr5w91Xc4on69PT3Vs7QnpwsAAAAAAAAAAAAAAADgwUlF/G6kaP1kLTUi4nY1XmvgwtAzJ58+FIeq8Vabxm2/OnblYuOl2Ztz81MLC1OTjfGZ9rXZyal7PVy9Gu41PjyyL535UEf2uf1H6i/Nzr0+377xh4vbbj9av3h1YXG+dW37zXEkiohm75rBqsHjwyNVo6fbrZmq6ui2g+k/ur5UxH9EimvnGukLeV0e/791hP+m8f9LW3e0h+P/P390Y/zfJ3qKlsdMqYhfRIrf+oun4gtVO4/GXecsl/ubSDF4/nO5XBwuy3Xb0HmvQGdkYFn2fyLFP7y/uWx3POSTG2VPf6ST+wgor/+xSPGDP/te/Hpet/n9D9tf/6Nbd7RP73/4VM+6o5veV7DrrpOv/8lI8eKTb8VvVGv+7wPf/9F9Y8OJTuGN93Ps0/X/1Z51A/m4v7lXnQcAAAAAAAAAAHiE9aUi/jZS/Giklp7P6+7l7/9Nbt3RPv39r0/3rJvcm/mKPnRh1ycVAAAAAA6IvlTETyPFjcW37oyh3jz+u2f85+9sjP8cTlu2Vn/O9yvVewP28s//eg3k407svtsAAAAAAAAAAAAAAAAAAABwoKRUxPN5PvWJajz/5I7zqa9Eipf/69lcLh0vy3XngR+ofq1fnp05eXF6erYei62r01ONsbnWtamy7qcixdpffy7XLar51bvzzXfmeN+Yi30+Uoz8XbdsZy727tzknfnA6+vrEafLsp+IFP/595vL5qmp89zR1X7PlGX/KlJ845+2L3t8o+zZsuz3IsWPv9Holj1alu2+H/XTG2WfuzZb7MNVAQAAAAAAAAAAAAAAAAAA4OOmLxXxp5Hiv28u3xnLn+f/7+v5WHnzWz3z/W9xu5rnf6Ca/3+n5fuZ/796r8DSTkcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHU4oi3ogUc5fX0kp/+bmjfqk9c+v2+PDI9tWOpKrmoap8+VM/febsuS8/P3S+mx9cf699Jl4du3Kx8dLszbn5qYWFqcnG+Ez72uzk1D3vYbf1txqsTkDj5mu3Jq9fX2icee7sps23B97rf+L4wIWhZ04+3S07PjwyMtZTptZ330e/S9ph/eEo4i8jxbPf/1n6UX9EEbs/Fx/y3dlvR6pODFadGB8eqToy3W7NLJYbR7snooho9FRqds/RA7gWu9KMWCqbXzZ4sOze2FxrvnV1eqox2ppfbC+2Z2dGU6e1ZX8aUcT5FLEcEav9d++uL4p4LVJ899ha+uf+iEPd8/Cly2NfO3Vm53YU+9jHe1C2s9EXsVw8AtfsAOuPIv4xUvz87RPxL/0Rtej8xBcjXinzhxFvRud6p/KLcS7i3W2+RzyaalHE/5bX/8Jaeru/vB907yuXvt746sz12Z6y3fvKI/98eJAO+L2pHkX8uLrjr6V/9d81AAAAAAAAAAAAAAAAwAFSxK9FihfeOZGq8cF3xhS3Z240rrSuTneG9XXH/nXHTK+vr683UiebOSdyLuVczrmSczVnFLl+zmaZ9fX1ifx5KedyzpWcqznjUK6fs5lzIudSzuWcKzlXc0Yt18/ZzDmRcynncs6VnKs544CM3QMAAAAAAAAAAAAAAAAAAB4vRfVPiu98cy2t93fml56ITq6YD/Sx9/8BAAD//9kg9g0=") 3m46.290645583s ago: executing program 4 (id=120): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3m45.48397802s ago: executing program 4 (id=125): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 3m42.6725669s ago: executing program 32 (id=125): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 2m47.697684602s ago: executing program 2 (id=309): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xfa61, 0x400, 0x3, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffff7ff, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000001) 2m46.040216727s ago: executing program 2 (id=313): r0 = syz_io_uring_setup(0x117b, &(0x7f00000000c0)={0x0, 0x29d8, 0x10100, 0x200003, 0x60}, &(0x7f0000000140)=0x0, &(0x7f00000006c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0, 0xffffffffffffffed, 0x0, 0x300}, {0x0, 0x0, 0xfffd}, {0x0, 0x0, 0x4}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0x56, 0x200440c0, 0x1}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 2m45.579300477s ago: executing program 2 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b00)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32=0x0, @ANYBLOB="6cdf8f7961c86375815dbf554896386de6c42a145b2da8d8d2daaefa62b863b75227f708353389612d2e675103dbdcbbc133e9792b1044c601e4aea785ed055e46400be76c7e7b12021c9eddb8badf499b592d77bc5817a2d52020c2"], 0x1, 0x5505, &(0x7f0000000340)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0x8f7004, 0x4000000, 0x4) 2m43.879810757s ago: executing program 2 (id=320): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x6, 0x4cd, &(0x7f0000000c80)="$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") r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1200002, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000bc0)=""/4096) 2m39.861624721s ago: executing program 2 (id=336): unshare(0x2040400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(r2, 0x0, r1, 0x0, 0x100000000, 0x5) 2m38.977716484s ago: executing program 2 (id=339): chroot(0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001c00)={0x3, &(0x7f0000000180)=[{0x4, 0x0, 0x0, 0xfffff034}, {0x84, 0x0, 0x70}, {0x6, 0x4}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0xfffffffb, @remote, 0x4}], 0x1c) 2m36.141701063s ago: executing program 33 (id=339): chroot(0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001c00)={0x3, &(0x7f0000000180)=[{0x4, 0x0, 0x0, 0xfffff034}, {0x84, 0x0, 0x70}, {0x6, 0x4}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0xfffffffb, @remote, 0x4}], 0x1c) 16.6972007s ago: executing program 3 (id=885): open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b, 0x0, 0xffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x1}}, 0x50) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0x3}) creat(&(0x7f0000000100)='./file0\x00', 0x0) 15.515854867s ago: executing program 3 (id=891): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x34, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.030863965s ago: executing program 3 (id=894): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x4e14, 0x912a, 0x41, 0x0, 0x0) io_uring_enter(r0, 0x255d, 0x5a55, 0x30, 0x0, 0x0) 14.217601843s ago: executing program 3 (id=895): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340), 0x0, 0x29f, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 13.301899191s ago: executing program 3 (id=898): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) 12.498207014s ago: executing program 3 (id=901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0x1c}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 10.582861996s ago: executing program 34 (id=901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0x1c}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 5.66965102s ago: executing program 6 (id=926): timer_create(0x0, &(0x7f0000000200)={0x0, 0x33, 0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = semget$private(0x0, 0x7, 0x195) semtimedop(r0, &(0x7f0000000200)=[{0x4, 0x3, 0x1800}, {0x0, 0xffbf, 0x2000}], 0x2, 0x0) semop(r0, &(0x7f0000000180)=[{0x4, 0x4, 0x1000}], 0x1) semop(r0, &(0x7f0000000240)=[{0x1, 0xce95}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 5.115851386s ago: executing program 6 (id=929): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nouid32}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioperm(0x7, 0x1, 0xfffffffffffffffc) creat(&(0x7f0000000340)='./file1\x00', 0xd0) sync() setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 3.825750636s ago: executing program 5 (id=932): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000100)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3, 0xffffffffffffffff}) close_range(r0, r1, 0x0) ioctl$SYNC_IOC_FILE_INFO(r4, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.461269431s ago: executing program 5 (id=935): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x6}, @IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 3.379538672s ago: executing program 6 (id=936): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) getdents64(r1, &(0x7f0000002f40)=""/4091, 0xffb) 3.325998632s ago: executing program 0 (id=937): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.287374766s ago: executing program 1 (id=938): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x22905a40, 0x0, 0x401, 0x1, 0x8000004, 0x0, 0x0, 0x10, 0xfffffffd}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x400, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 2.790194608s ago: executing program 1 (id=939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x894, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r3, {0x0, 0xfffc}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x7, 0x4, 0xc, 0x9, {0xd, 0x2, 0x4, 0x4, 0x7, 0x401}, {0x4, 0x1, 0x5, 0x10, 0xfff7, 0x4b2}, 0x6, 0x14ff, 0x3ff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x38, 0x1, 0x1, 0x8, 0x7f, 0x6, 0x3, 0x6, 0x10000, 0x86, 0x9, 0x6, 0x5, 0x9, 0x5f, 0x0, 0x0, 0x13f, 0xfffffffe, 0x0, 0xd31, 0xf54, 0x9, 0x4, 0x4, 0x6, 0x9, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0x8, 0x0, 0xfffffffe, 0x5, 0x5dbd0fd8, 0x8, 0x1887, 0x2, 0x95f, 0x7, 0x6, 0xa, 0x7f, 0xfffffffe, 0x8, 0x2, 0x6, 0x4, 0x6, 0x402f, 0xd, 0x5, 0x6f9d, 0x0, 0x800, 0x3ff, 0x8, 0xa, 0x9, 0x4, 0xd, 0x3, 0xb8f, 0x6, 0x0, 0xffffffff, 0x8000, 0xffffffff, 0x8, 0xfffffffc, 0xee, 0x4, 0x9, 0x2, 0x54eef174, 0xc, 0x9, 0x5, 0xe2, 0x20004, 0x1, 0xffff, 0x5, 0x5, 0x7, 0x5, 0x7, 0x4, 0x4, 0x7, 0x100, 0x8, 0x2, 0x9, 0x0, 0x0, 0xe32, 0x6, 0x8, 0x6, 0x66, 0x7, 0x7, 0x8, 0x5b, 0x7625, 0x51, 0x6, 0xfffffffe, 0x0, 0xa4d, 0x2, 0x10001, 0x7, 0x8, 0x3, 0x8, 0x3, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x400000, 0xc55b, 0x8000, 0xf943, 0x4, 0x3000000, 0x2, 0x10000, 0xd, 0xffffffff, 0x9, 0xd3, 0xfffffffb, 0x4, 0x9, 0x401, 0x82baa23, 0xd, 0x0, 0x6, 0x21a, 0xe, 0x1, 0x1430, 0x8, 0x4, 0x7, 0xe, 0x7dab, 0x4, 0x5, 0x4, 0x3, 0xfffffffe, 0x7, 0x6, 0x8ef6, 0x7239, 0x80000001, 0x0, 0xd41, 0x6, 0x2, 0x4, 0x200, 0x8, 0x5, 0xc14, 0x7324, 0x4, 0x50f6, 0x5, 0x4, 0x3, 0x2, 0x7, 0x4, 0x6, 0x5, 0x3, 0x7767, 0x8, 0xe0ba, 0x4f, 0x3, 0x4, 0x7, 0x7fffffff, 0x3, 0x3, 0x5, 0x8, 0x4, 0x80, 0x401, 0x7, 0x1, 0x0, 0x8, 0x7c4, 0x3, 0x6, 0x6, 0xe8, 0x0, 0x6, 0x6, 0x3, 0x8a4, 0x1, 0x9, 0x9, 0x9, 0x200, 0x7, 0xd235, 0x9, 0x7fffffff, 0xf7d, 0x8001, 0x2, 0x7fff, 0x9f7c, 0x7, 0x4, 0xf, 0x1, 0x2, 0x6, 0x400, 0x5, 0x80, 0x400, 0x5, 0xc, 0xff, 0xffff7002, 0x63c, 0x9, 0x1ff, 0xfff, 0x8, 0x8c, 0x40, 0x8, 0xed6, 0xf6, 0x0, 0x3, 0x9, 0x10, 0x9, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x8, 0x8000, 0x8, 0x2, 0x9, 0x5, 0xfff, 0x3, 0x101, 0xbf7, 0x8, 0xff, 0x6, 0x113, 0xffff, 0x1, 0x8, 0x7fffffff, 0x6, 0x9, 0x33, 0x5, 0x2f7, 0x100, 0x21, 0x4, 0x7, 0xff, 0x6, 0xfffffffe, 0x7, 0x8, 0x1, 0x8, 0xf33c, 0x3, 0x1, 0x80000000, 0x62e, 0x3, 0xdb2, 0x0, 0xe00, 0x1, 0x2, 0x3, 0x2, 0xfffffff6, 0x5, 0x3, 0x7, 0x8, 0x1, 0x7f, 0x8, 0x6, 0x4, 0x3, 0x0, 0x803, 0x1, 0x5, 0x0, 0x8000, 0xfffffffa, 0xb7, 0xc8b6f5a2, 0x6, 0x2f, 0x7ff, 0x9, 0x8, 0x6, 0x0, 0x8, 0x9, 0x0, 0x5, 0x8b34, 0x2, 0x7e, 0x4, 0x4, 0xfeffffff, 0x1, 0xa, 0xfffffffb, 0x3, 0xffffffff, 0x0, 0x4, 0xd6, 0x7, 0x4, 0x3, 0x8, 0x9, 0x8, 0x2de0, 0x5191, 0x6, 0x401, 0x7, 0x9, 0x7, 0x3, 0x6, 0x1, 0xfffffffb, 0xb839, 0xfffffffa, 0x4, 0x768, 0x7, 0x7f, 0x6, 0x7, 0x4, 0x8b, 0x4, 0x0, 0x5, 0xf0, 0x42490, 0xd, 0x3, 0x5c, 0x80, 0x2, 0x800, 0x8, 0x6, 0xff, 0xffff0000, 0x3, 0x10000, 0x80000001, 0x5, 0xffffffff, 0x4be24694, 0x2, 0x2, 0x100, 0x5, 0x1, 0x5, 0x4, 0xffffff95, 0x5, 0x0, 0xc, 0x6, 0x1000, 0xa, 0x7, 0x4, 0x340, 0x2, 0x0, 0x7, 0x101, 0x2, 0x7ce2352, 0x7fffffff, 0x5e, 0x8e5b, 0x3, 0x8, 0x9, 0x1, 0x80000000, 0x7, 0x301, 0x91, 0x3, 0x80000001, 0x9, 0x1, 0x3e79, 0xffffffff, 0x8, 0x525, 0x7, 0x6, 0x2470a614, 0xe, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4, 0x1, 0x1, 0xfffffc1f, 0x6, 0x2, 0x1, 0x9, 0x7fff, 0xffffffff, 0x4, 0xffff2b7d, 0x4, 0xcdff, 0x9, 0x0, 0x49, 0x6, 0x0, 0x5, 0x9, 0x7, 0x8, 0x7, 0xea, 0x7, 0x7, 0x2, 0x5, 0xff, 0x6, 0xffff, 0x4cd, 0x7, 0x3, 0x3, 0x10001, 0x0, 0x6, 0x7, 0xffffffff, 0xe000000, 0x1, 0x4, 0x7, 0x8, 0xb, 0x7, 0x0, 0xcb65, 0x6, 0xe, 0x240000, 0x9, 0x8, 0x8, 0xfffffff8, 0x9, 0xf, 0x8, 0x5, 0x9, 0x100]}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x10}}]}, 0x894}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) 2.739192033s ago: executing program 0 (id=940): r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0xe8a, 0x80, 0x0, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r0, 0x46bc, 0x3, 0x20, 0x0, 0x0) 2.605361056s ago: executing program 5 (id=941): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x3, 0x5, 0x0, {0xfffffffffffffffc, 0x5e2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa000, 0x8, 0x0, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1000) 1.933858985s ago: executing program 6 (id=942): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={r2}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x27c0, 0xfffd}, 0x90) 1.836690974s ago: executing program 5 (id=943): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x5c, r2, 0x1, 0x70bd28, 0x25dfcbff, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x4040004) 1.665237895s ago: executing program 1 (id=944): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) r0 = fanotify_init(0x20, 0x2) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000340)=0x1000, 0xfffffffffffffff7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.517232698s ago: executing program 0 (id=945): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.324540532s ago: executing program 5 (id=946): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) 1.123995434s ago: executing program 1 (id=947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000a00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) 992.889692ms ago: executing program 0 (id=948): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/uts\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000180)=0x2, 0x9, 0x1) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 735.243025ms ago: executing program 5 (id=949): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4a4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f00002b7000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) 558.070684ms ago: executing program 1 (id=950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 549.516648ms ago: executing program 6 (id=951): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x80) lseek(r2, 0x104, 0x0) getdents64(r2, 0x0, 0x4f) 491.74134ms ago: executing program 0 (id=952): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x20) 124.471779ms ago: executing program 6 (id=953): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x8818) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 15.010493ms ago: executing program 1 (id=954): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000003480)=ANY=[@ANYBLOB="1300000065ffff001000000600395032303030"], 0x13) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x7, 0x0, 0x7, 0x0, 0x0, 0x100, 0x7}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 0s ago: executing program 0 (id=955): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x290, 0x4) kernel console output (not intermixed with test programs): problem. [ 304.716784][ T7161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.773624][ T5816] Bluetooth: hci0: command tx timeout [ 304.827376][ T7161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.840120][ T7161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.867778][ T7161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.129166][ T7161] hsr_slave_0: entered promiscuous mode [ 305.147375][ T7161] hsr_slave_1: entered promiscuous mode [ 305.229347][ T7211] loop3: detected capacity change from 0 to 2048 [ 305.323315][ T7211] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.441413][ T7211] overlayfs: upper fs needs to support d_type. [ 305.453647][ T7211] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 305.460801][ T7211] overlayfs: failed to set xattr on upper [ 305.467194][ T7211] overlayfs: ...falling back to redirect_dir=nofollow. [ 305.474336][ T7211] overlayfs: ...falling back to index=off. [ 305.480279][ T7211] overlayfs: ...falling back to uuid=null. [ 305.486385][ T7211] overlayfs: ...falling back to xino=off. [ 305.492282][ T7211] overlayfs: conflicting lowerdir path [ 306.170373][ T7161] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 306.227466][ T7161] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 306.284252][ T7161] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 306.331039][ T7161] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 306.851702][ T5816] Bluetooth: hci0: command tx timeout [ 307.351376][ T7161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.521327][ T7161] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.565985][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.573569][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.649726][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.657411][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.238731][ T7249] cgroup: fork rejected by pids controller in /syz1 [ 308.748827][ T5450] IPVS: starting estimator thread 0... [ 308.863533][ T7263] IPVS: using max 240 ests per chain, 12000 per kthread [ 308.923913][ T5816] Bluetooth: hci0: command tx timeout [ 309.355884][ T2232] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 309.391154][ T3607] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.489596][ T7161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.549986][ T2232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.560780][ T2232] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 309.568965][ T3607] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.573987][ T2232] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 309.593505][ T2232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.704658][ T2232] usb 1-1: config 0 descriptor?? [ 309.844077][ T3607] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.065299][ T3607] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.210281][ T2232] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 310.218864][ T2232] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 310.228149][ T2232] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 310.236309][ T2232] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 310.243777][ T2232] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 310.322783][ T2232] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 310.493651][ T3607] bridge_slave_1: left allmulticast mode [ 310.499494][ T3607] bridge_slave_1: left promiscuous mode [ 310.506401][ T3607] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.594357][ T3607] bridge_slave_0: left allmulticast mode [ 310.600197][ T3607] bridge_slave_0: left promiscuous mode [ 310.611282][ T3607] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.125725][ T2232] kovaplus 0003:1E7D:2D50.0005: couldn't init struct kovaplus_device [ 311.136292][ T2232] kovaplus 0003:1E7D:2D50.0005: couldn't install mouse [ 311.176732][ T2232] kovaplus 0003:1E7D:2D50.0005: probe with driver kovaplus failed with error -71 [ 311.224469][ T2232] usb 1-1: USB disconnect, device number 5 [ 311.295096][ T3607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.344679][ T3607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.368340][ T3607] bond0 (unregistering): Released all slaves [ 312.132664][ T3607] hsr_slave_0: left promiscuous mode [ 312.161602][ T3607] hsr_slave_1: left promiscuous mode [ 312.169494][ T3607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.177790][ T3607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.201187][ T3607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.214747][ T3607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.355520][ T3607] veth1_macvtap: left promiscuous mode [ 312.361221][ T3607] veth0_macvtap: left promiscuous mode [ 312.367277][ T3607] veth1_vlan: left promiscuous mode [ 312.372771][ T3607] veth0_vlan: left promiscuous mode [ 312.730324][ T7293] loop5: detected capacity change from 0 to 764 [ 312.794553][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.804132][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.813412][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.833793][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.849643][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 313.182036][ T3607] team0 (unregistering): Port device team_slave_1 removed [ 313.255848][ T3607] team0 (unregistering): Port device team_slave_0 removed [ 313.974986][ T3607] IPVS: stop unused estimator thread 0... [ 314.089334][ T7161] veth0_vlan: entered promiscuous mode [ 314.364165][ T7161] veth1_vlan: entered promiscuous mode [ 314.572435][ T7291] chnl_net:caif_netlink_parms(): no params data found [ 314.615223][ T3082] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 314.722012][ T7161] veth0_macvtap: entered promiscuous mode [ 314.773451][ T5450] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 314.805197][ T3082] usb 1-1: Using ep0 maxpacket: 16 [ 314.824780][ T7161] veth1_macvtap: entered promiscuous mode [ 314.828841][ T3082] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 314.842644][ T3082] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 314.914810][ T3082] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.925085][ T3082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.933456][ T3082] usb 1-1: Product: syz [ 314.937780][ T3082] usb 1-1: Manufacturer: syz [ 314.942529][ T3082] usb 1-1: SerialNumber: syz [ 314.952096][ T5806] Bluetooth: hci2: command tx timeout [ 314.957728][ T7161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.984721][ T5450] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 314.996205][ T5450] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.006353][ T5450] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 315.016247][ T5450] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.037809][ T7161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.086371][ T5450] usb 6-1: config 0 descriptor?? [ 315.177956][ T3607] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.253955][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.263308][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.370199][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.525125][ T5450] samsung 0003:0419:0001.0006: unbalanced collection at end of report description [ 315.544508][ T3082] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 315.580806][ T5450] samsung 0003:0419:0001.0006: parse failed [ 315.592595][ T5450] samsung 0003:0419:0001.0006: probe with driver samsung failed with error -22 [ 315.752287][ T5450] usb 6-1: USB disconnect, device number 6 [ 315.972740][ T7291] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.980773][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.990308][ T7291] bridge_slave_0: entered allmulticast mode [ 316.003254][ T7291] bridge_slave_0: entered promiscuous mode [ 316.058720][ T7291] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.066459][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.075800][ T7291] bridge_slave_1: entered allmulticast mode [ 316.085151][ T7291] bridge_slave_1: entered promiscuous mode [ 316.252186][ T7291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.309657][ T7291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.375611][ T3082] usb 1-1: 2:1: cannot get freq at ep 0x82 [ 316.513906][ T3082] usb 1-1: USB disconnect, device number 6 [ 316.585955][ T7291] team0: Port device team_slave_0 added [ 316.653745][ T7291] team0: Port device team_slave_1 added [ 316.963930][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.971039][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.997469][ T7291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.004684][ T5806] Bluetooth: hci2: command tx timeout [ 317.270794][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.278424][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.304792][ T7291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.866526][ T7291] hsr_slave_0: entered promiscuous mode [ 317.876470][ T7291] hsr_slave_1: entered promiscuous mode [ 317.885164][ T7291] debugfs: 'hsr0' already exists in 'hsr' [ 317.891054][ T7291] Cannot create hsr debugfs directory [ 318.117077][ T7337] loop0: detected capacity change from 0 to 256 [ 318.417916][ T7337] FAT-fs (loop0): Directory bread(block 64) failed [ 318.424924][ T7337] FAT-fs (loop0): Directory bread(block 65) failed [ 318.431773][ T7337] FAT-fs (loop0): Directory bread(block 66) failed [ 318.438709][ T7337] FAT-fs (loop0): Directory bread(block 67) failed [ 318.445932][ T7337] FAT-fs (loop0): Directory bread(block 68) failed [ 318.455422][ T7337] FAT-fs (loop0): Directory bread(block 69) failed [ 318.462282][ T7337] FAT-fs (loop0): Directory bread(block 70) failed [ 318.470055][ T7337] FAT-fs (loop0): Directory bread(block 71) failed [ 318.477007][ T7337] FAT-fs (loop0): Directory bread(block 72) failed [ 318.483872][ T7337] FAT-fs (loop0): Directory bread(block 73) failed [ 318.689182][ T7337] syz.0.399: attempt to access beyond end of device [ 318.689182][ T7337] loop0: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 318.710991][ T30] audit: type=1804 audit(1758495506.865:5): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.399" name="/newroot/86/file0/bus" dev="loop0" ino=1048610 res=1 errno=0 [ 318.812794][ T7337] syz.0.399: attempt to access beyond end of device [ 318.812794][ T7337] loop0: rw=524288, sector=1224, nr_sectors = 4 limit=256 [ 318.827363][ T7337] syz.0.399: attempt to access beyond end of device [ 318.827363][ T7337] loop0: rw=0, sector=1224, nr_sectors = 4 limit=256 [ 319.083767][ T5806] Bluetooth: hci2: command tx timeout [ 319.325881][ T7291] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 319.347925][ T7291] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 319.438726][ T7291] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 319.551696][ T7291] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 319.934212][ T7358] loop3: detected capacity change from 0 to 512 [ 320.021023][ T7358] EXT4-fs: Ignoring removed orlov option [ 320.122035][ T7358] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 320.333909][ T7358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 320.429210][ T7358] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.406: corrupted in-inode xattr: e_value size too large [ 320.440574][ T7291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.555876][ T7291] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.573435][ T7358] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.406: couldn't read orphan inode 15 (err -117) [ 320.624286][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.631761][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.674606][ T7358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.684145][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.694273][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.930851][ T5806] Bluetooth: hci3: unexpected event for opcode 0x080d [ 321.168605][ T5806] Bluetooth: hci2: command tx timeout [ 321.567504][ T5814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.669266][ T3607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.677516][ T3607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.013328][ T7376] loop5: detected capacity change from 0 to 32768 [ 322.277931][ T7376] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 322.278069][ T7376] allowing incompatible features above 0.0: (unknown version) [ 322.278151][ T7376] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 322.323446][ T7376] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 322.331823][ T7376] bcachefs (loop5): initializing new filesystem [ 322.355750][ T7376] bcachefs (loop5): going read-write [ 322.434539][ T7376] bcachefs (loop5): marking superblocks [ 322.489952][ T7376] bcachefs (loop5): initializing freespace [ 322.516351][ T7376] bcachefs (loop5): done initializing freespace [ 322.535873][ T7376] bcachefs (loop5): reading snapshots table [ 322.542139][ T7376] bcachefs (loop5): reading snapshots done [ 322.815657][ T7376] bcachefs (loop5): done starting filesystem [ 322.835013][ T3607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.843326][ T3607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.108995][ T7291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.182130][ T6425] bcachefs (loop5): shutting down [ 323.188428][ T6425] bcachefs (loop5): going read-only [ 323.195129][ T6425] bcachefs (loop5): finished waiting for writes to stop [ 323.335346][ T6425] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3 [ 323.558940][ T6425] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3 [ 323.645603][ T6425] bcachefs (loop5): clean shutdown complete, journal seq 4 [ 323.688046][ T6425] bcachefs (loop5): marking filesystem clean [ 323.710539][ T7291] veth0_vlan: entered promiscuous mode [ 323.780220][ T6425] bcachefs (loop5): shutdown complete [ 323.817421][ T7395] loop6: detected capacity change from 0 to 1024 [ 323.841339][ T7291] veth1_vlan: entered promiscuous mode [ 324.158187][ T7291] veth0_macvtap: entered promiscuous mode [ 324.256826][ T7291] veth1_macvtap: entered promiscuous mode [ 324.408281][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.521344][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.565006][ T57] hfsplus: b-tree write err: -5, ino 4 [ 324.591117][ T7398] input: syz0 as /devices/virtual/input/input11 [ 324.625752][ T3758] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.668807][ T3758] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.761038][ T3758] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.780561][ T3758] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.014510][ T5816] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 325.023158][ T5816] Bluetooth: hci3: Injecting HCI hardware error event [ 325.034784][ T5816] Bluetooth: hci3: hardware error 0x00 [ 325.635976][ T7413] capability: warning: `syz.6.421' uses deprecated v2 capabilities in a way that may be insecure [ 326.449180][ T7425] loop0: detected capacity change from 0 to 128 [ 327.083747][ T5816] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 327.466778][ T30] audit: type=1326 audit(1758495515.635:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.0.426" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f157678ec29 code=0x0 [ 327.615214][ T7436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 327.622587][ T7436] IPv6: NLM_F_CREATE should be set when creating new route [ 327.686849][ T7436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.334140][ T24] IPVS: starting estimator thread 0... [ 328.380186][ T7447] tipc: Started in network mode [ 328.389006][ T7447] tipc: Node identity ac1414aa, cluster identity 4711 [ 328.399359][ T7447] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.406709][ T7447] tipc: Enabled bearer , priority 10 [ 328.423344][ T7449] IPVS: using max 240 ests per chain, 12000 per kthread [ 328.533326][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.673154][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.813215][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.953162][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.093186][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.186019][ T7463] loop6: detected capacity change from 0 to 2048 [ 329.233128][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.250681][ T7463] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 329.268576][ T7463] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 329.276756][ T7463] UDF-fs: Scanning with blocksize 512 failed [ 329.334052][ T7463] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.373241][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.513847][ T5450] tipc: Node number set to 2886997162 [ 329.653147][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.706355][ T30] audit: type=1800 audit(1758495517.865:7): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.435" name="file1" dev="loop6" ino=838 res=0 errno=0 [ 329.923235][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 330.323823][ T7482] vivid-000: disconnect [ 330.396012][ T3758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.404827][ T3758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.513361][ T5450] vivid-000: reconnect [ 330.641251][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.649508][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.482648][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.450'. [ 331.508699][ T7506] vlan0: entered promiscuous mode [ 331.514239][ T7506] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 331.618780][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 331.803733][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 332.241776][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 333.096463][ T7521] loop1: detected capacity change from 0 to 40427 [ 333.111172][ T24] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 333.119322][ T24] usb 7-1: can't read configurations, error -71 [ 333.140468][ T7521] F2FS-fs (loop1): build fault injection rate: 14 [ 333.147298][ T7521] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 333.171920][ T7521] F2FS-fs (loop1): invalid crc value [ 333.219741][ C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of bio_endio+0xeb1/0x1010 [ 333.240208][ C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of bio_endio+0xeb1/0x1010 [ 333.509957][ T7521] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 333.520460][ T7521] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 333.537557][ T7521] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 333.563207][ C0] net_ratelimit: 3 callbacks suppressed [ 333.563279][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 333.678860][ T7521] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0 [ 333.704905][ T7521] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x30c/0x2fc0 [ 333.722167][ T7521] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 333.763597][ T7521] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0 [ 333.837900][ T7528] sctp: failed to load transform for md5: -2 [ 333.862215][ T7291] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x129f/0x2fc0 [ 333.874705][ T7291] F2FS-fs (loop1): inconsistent node block, node_type:0, nid:16, node_footer[nid:16,ino:3,ofs:145721,cpver:0,blkaddr:0] [ 333.909216][ C1] F2FS-fs (loop1): inject write IO error in f2fs_write_end_io of bio_endio+0xeb1/0x1010 [ 333.919359][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(none) [ 333.919493][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 333.919581][ C1] Call Trace: [ 333.919637][ C1] [ 333.919685][ C1] __dump_stack+0x26/0x30 [ 333.919869][ C1] dump_stack_lvl+0x1df/0x270 [ 333.920039][ C1] dump_stack+0x1e/0x25 [ 333.920185][ C1] f2fs_handle_critical_error+0xa6f/0xc20 [ 333.920407][ C1] f2fs_stop_checkpoint+0x65/0x80 [ 333.920595][ C1] f2fs_write_end_io+0x101c/0x1bc0 [ 333.920774][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 333.920904][ C1] bio_endio+0xeb1/0x1010 [ 333.921057][ C1] blk_update_request+0xf4c/0x1a90 [ 333.921240][ C1] blk_mq_end_request+0x50/0xb0 [ 333.921381][ C1] blk_flush_complete_seq+0xb1d/0x1940 [ 333.921540][ C1] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 333.921705][ C1] flush_end_io+0x12c3/0x17b0 [ 333.921887][ C1] ? __pfx_flush_end_io+0x10/0x10 [ 333.922025][ C1] __blk_mq_end_request+0x600/0x9e0 [ 333.922173][ C1] blk_mq_end_request+0x6e/0xb0 [ 333.922302][ C1] lo_complete_rq+0x188/0x3a0 [ 333.922464][ C1] ? __pfx_lo_complete_rq+0x10/0x10 [ 333.922625][ C1] blk_done_softirq+0x112/0x1f0 [ 333.922805][ C1] ? __pfx_blk_done_softirq+0x10/0x10 [ 333.922981][ C1] handle_softirqs+0x166/0x6e0 [ 333.923130][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 333.923273][ C1] run_ksoftirqd+0x29/0x50 [ 333.923413][ C1] smpboot_thread_fn+0x56c/0xa30 [ 333.923613][ C1] kthread+0xd59/0xf00 [ 333.923738][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 333.923945][ C1] ? __pfx_kthread+0x10/0x10 [ 333.924073][ C1] ret_from_fork+0x233/0x380 [ 333.924204][ C1] ? __pfx_kthread+0x10/0x10 [ 333.924335][ C1] ret_from_fork_asm+0x1a/0x30 [ 333.924532][ C1] [ 333.924581][ C1] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 334.110109][ T7291] F2FS-fs (loop1): do_checkpoint failed err:-5, stop checkpoint [ 334.300605][ T7547] warning: `syz.0.463' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 334.604763][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 334.755477][ T7553] loop6: detected capacity change from 0 to 128 [ 334.814725][ T7553] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 334.894292][ T7553] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 335.643165][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.366754][ T7575] loop5: detected capacity change from 0 to 1024 [ 336.683810][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.952119][ T7571] loop0: detected capacity change from 0 to 40427 [ 336.965456][ T3607] hfsplus: b-tree write err: -5, ino 4 [ 336.996681][ T7571] F2FS-fs (loop0): invalid crc value [ 337.271252][ T7571] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 337.308962][ T7571] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 337.382447][ T30] audit: type=1800 audit(1758495525.555:8): pid=7571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.473" name="file2" dev="loop0" ino=10 res=0 errno=0 [ 337.405876][ T7571] syz.0.473: attempt to access beyond end of device [ 337.405876][ T7571] loop0: rw=2049, sector=77824, nr_sectors = 408 limit=40427 [ 337.482238][ T5805] syz-executor: attempt to access beyond end of device [ 337.482238][ T5805] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 337.504154][ T5805] CPU: 0 UID: 0 PID: 5805 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 337.504287][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 337.504359][ T5805] Call Trace: [ 337.504405][ T5805] [ 337.504450][ T5805] __dump_stack+0x26/0x30 [ 337.504613][ T5805] dump_stack_lvl+0x1df/0x270 [ 337.504784][ T5805] dump_stack+0x1e/0x25 [ 337.504927][ T5805] f2fs_handle_critical_error+0xa6f/0xc20 [ 337.505147][ T5805] f2fs_stop_checkpoint+0x65/0x80 [ 337.505330][ T5805] f2fs_write_end_io+0x101c/0x1bc0 [ 337.505502][ T5805] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 337.505633][ T5805] bio_endio+0xeb1/0x1010 [ 337.505790][ T5805] submit_bio_noacct+0x213/0x2750 [ 337.505993][ T5805] submit_bio+0x57c/0x630 [ 337.506151][ T5805] f2fs_submit_write_bio+0x92/0x250 [ 337.506327][ T5805] __submit_merged_bio+0x16f/0x6a0 [ 337.506498][ T5805] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 337.506661][ T5805] __submit_merged_write_cond+0x458/0x9a0 [ 337.506859][ T5805] f2fs_write_data_pages+0x4bb2/0x5480 [ 337.507176][ T5805] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 337.507335][ T5805] ? folios_put_refs+0x21/0xb10 [ 337.507498][ T5805] ? filter_irq_stacks+0x49/0x190 [ 337.507622][ T5805] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 337.507788][ T5805] ? stack_depot_save_flags+0x35/0x7b0 [ 337.507918][ T5805] ? kmsan_get_metadata+0xfb/0x160 [ 337.508075][ T5805] ? kmsan_get_metadata+0xfb/0x160 [ 337.508220][ T5805] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 337.508372][ T5805] ? kmsan_get_metadata+0xfb/0x160 [ 337.508518][ T5805] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 337.508669][ T5805] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 337.508854][ T5805] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 337.509019][ T5805] do_writepages+0x3f2/0x860 [ 337.509150][ T5805] ? _raw_spin_unlock+0x30/0x50 [ 337.509301][ T5805] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 337.509491][ T5805] filemap_fdatawrite+0x207/0x260 [ 337.509703][ T5805] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 337.509869][ T5805] f2fs_write_checkpoint+0xfe2/0x2b00 [ 337.510119][ T5805] kill_f2fs_super+0x2ff/0x970 [ 337.510267][ T5805] ? __pfx_kill_f2fs_super+0x10/0x10 [ 337.510397][ T5805] deactivate_locked_super+0xcb/0x3c0 [ 337.510547][ T5805] deactivate_super+0x12f/0x140 [ 337.510681][ T5805] cleanup_mnt+0x6fb/0x780 [ 337.510839][ T5805] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 337.510983][ T5805] ? __pfx___cleanup_mnt+0x10/0x10 [ 337.511145][ T5805] __cleanup_mnt+0x22/0x30 [ 337.511300][ T5805] task_work_run+0x206/0x2b0 [ 337.511447][ T5805] exit_to_user_mode_loop+0x2a6/0x330 [ 337.511595][ T5805] do_syscall_64+0x1e3/0x210 [ 337.511712][ T5805] ? irqentry_exit+0x16/0x60 [ 337.511866][ T5805] ? clear_bhb_loop+0x40/0x90 [ 337.511996][ T5805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.512136][ T5805] RIP: 0033:0x7f157678ff57 [ 337.512227][ T5805] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 337.512328][ T5805] RSP: 002b:00007ffea03652d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 337.512442][ T5805] RAX: 0000000000000000 RBX: 00007f1576811c2d RCX: 00007f157678ff57 [ 337.512523][ T5805] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea0365390 [ 337.512599][ T5805] RBP: 00007ffea0365390 R08: 0000000000000000 R09: 0000000000000000 [ 337.512675][ T5805] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffea0366420 [ 337.512759][ T5805] R13: 00007f1576811c2d R14: 0000000000052602 R15: 00007ffea0366460 [ 337.512871][ T5805] [ 337.858329][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.866237][ T5805] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 337.873843][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 337.975769][ T7589] loop6: detected capacity change from 0 to 256 [ 337.984440][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 338.413187][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 338.429600][ T24] usb 6-1: config 0 has no interfaces? [ 338.435591][ T24] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 338.450189][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.465362][ T24] usb 6-1: config 0 descriptor?? [ 338.468975][ T7589] FAT-fs (loop6): Directory bread(block 64) failed [ 338.477497][ T7589] FAT-fs (loop6): Directory bread(block 65) failed [ 338.484662][ T7589] FAT-fs (loop6): Directory bread(block 66) failed [ 338.491428][ T7589] FAT-fs (loop6): Directory bread(block 67) failed [ 338.498575][ T7589] FAT-fs (loop6): Directory bread(block 68) failed [ 338.505490][ T7589] FAT-fs (loop6): Directory bread(block 69) failed [ 338.512393][ T7589] FAT-fs (loop6): Directory bread(block 70) failed [ 338.519279][ T7589] FAT-fs (loop6): Directory bread(block 71) failed [ 338.531525][ T7589] FAT-fs (loop6): Directory bread(block 72) failed [ 338.540202][ T7589] FAT-fs (loop6): Directory bread(block 73) failed [ 338.618744][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.483'. [ 338.620891][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 338.635851][ T7595] bridge_slave_0: default FDB implementation only supports local addresses [ 338.674443][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.483'. [ 338.683942][ T7595] bridge_slave_0: default FDB implementation only supports local addresses [ 338.704748][ T7589] process 'syz.6.479' launched './file0' with NULL argv: empty string added [ 338.719587][ T7589] syz.6.479: attempt to access beyond end of device [ 338.719587][ T7589] loop6: rw=524288, sector=1128, nr_sectors = 32 limit=256 [ 338.737793][ T7589] syz.6.479: attempt to access beyond end of device [ 338.737793][ T7589] loop6: rw=0, sector=1128, nr_sectors = 8 limit=256 [ 338.798560][ T5450] usb 6-1: USB disconnect, device number 7 [ 338.923135][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 339.040436][ T35] kworker/u8:2: attempt to access beyond end of device [ 339.040436][ T35] loop6: rw=1, sector=1160, nr_sectors = 4 limit=256 [ 339.159576][ T7599] loop3: detected capacity change from 0 to 64 [ 339.735952][ T7605] loop1: detected capacity change from 0 to 512 [ 339.811574][ T7605] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.497: bad orphan inode 13 [ 339.903924][ T7605] ext4_test_bit(bit=12, block=4) = 1 [ 339.909561][ T7605] is_bad_inode(inode)=0 [ 339.914194][ T7605] NEXT_ORPHAN(inode)=0 [ 339.918401][ T7605] max_ino=32 [ 339.921725][ T7605] i_nlink=1 [ 339.927097][ T7605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.963387][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 340.013928][ T7605] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.497: Unrecognised inode hash code 20 [ 340.025841][ T7605] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.497: Corrupt directory, running e2fsck is recommended [ 340.123982][ T7605] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.497: corrupted in-inode xattr: e_value out of bounds [ 340.197460][ T7621] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.497: Unrecognised inode hash code 20 [ 340.209135][ T7621] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.497: Corrupt directory, running e2fsck is recommended [ 340.285742][ T7621] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.497: corrupted in-inode xattr: e_value out of bounds [ 340.328219][ T7605] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.497: Unrecognised inode hash code 20 [ 340.340338][ T7605] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.497: Corrupt directory, running e2fsck is recommended [ 340.388171][ T7605] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.497: corrupted in-inode xattr: e_value out of bounds [ 340.441696][ T7629] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.497: Unrecognised inode hash code 20 [ 340.453692][ T7629] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.497: Corrupt directory, running e2fsck is recommended [ 340.510758][ T7629] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.497: corrupted in-inode xattr: e_value out of bounds [ 340.547222][ T7621] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.497: Unrecognised inode hash code 20 [ 340.559164][ T7621] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.497: Corrupt directory, running e2fsck is recommended [ 340.581822][ T7621] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 13: comm syz.1.497: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 340.632476][ T7627] loop6: detected capacity change from 0 to 4096 [ 340.724139][ T7635] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 340.871811][ T7291] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.003140][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 341.049388][ T7637] loop3: detected capacity change from 0 to 1024 [ 341.296223][ T4654] hfsplus: b-tree write err: -5, ino 4 [ 341.625973][ T5816] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 342.043125][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 342.512290][ T7653] loop0: detected capacity change from 0 to 4096 [ 342.848997][ T7664] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 343.083130][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 343.149780][ T7659] loop6: detected capacity change from 0 to 40427 [ 343.170146][ T7659] F2FS-fs (loop6): invalid crc value [ 343.184136][ T30] audit: type=1800 audit(1758495531.365:9): pid=7653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.505" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 343.477689][ T7659] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 343.485318][ T7668] loop3: detected capacity change from 0 to 2048 [ 343.488343][ T7659] F2FS-fs (loop6): Start checkpoint disabled! [ 343.528835][ T7659] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 343.598925][ T7668] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 343.654286][ T7659] F2FS-fs (loop6): Stopped filesystem due to reason: 0 [ 343.734441][ T7663] loop5: detected capacity change from 0 to 8192 [ 343.752179][ T7668] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.123113][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 344.160827][ T7675] loop0: detected capacity change from 0 to 2048 [ 344.244448][ T7675] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 344.265223][ T7675] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 344.389256][ T7675] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.649828][ T7673] loop1: detected capacity change from 0 to 32768 [ 344.841692][ T7673] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 345.060840][ T7680] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 345.160969][ T7291] ocfs2: Unmounting device (7,1) on (node local) [ 345.167799][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 345.309217][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020ecf800: rx timeout, send abort [ 345.721210][ T7688] loop6: detected capacity change from 0 to 128 [ 345.760717][ T7688] affs: Unknown parameter '€-3DzÉÆê<–¨sÌò—bç»p6tTî¼ËÂ6™Ò4é¯ôšñØr[^•ÞGÓšD€þà›„1æbð) k’™CŒÌ”Ç~( [ 345.760717][ T7688] (1QY³eaÆ©kÞÕ7>Í' [ 345.809846][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020ecee00: rx timeout, send abort [ 345.820546][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020ecf800: abort rx timeout. Force session deactivation [ 345.853484][ T7690] 9pnet: p9_errstr2errno: server reported unknown error n$Ž[ [ 345.853484][ T7690] Q& [ 346.204059][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 346.318591][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020ecee00: abort rx timeout. Force session deactivation [ 346.538008][ T5450] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 346.683919][ T3082] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 346.723561][ T5450] usb 7-1: Using ep0 maxpacket: 8 [ 346.752232][ T5450] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 346.761924][ T5450] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.771863][ T5450] usb 7-1: Product: syz [ 346.776416][ T5450] usb 7-1: Manufacturer: syz [ 346.781175][ T5450] usb 7-1: SerialNumber: syz [ 346.882382][ T5450] usb 7-1: config 0 descriptor?? [ 346.923609][ T3082] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 346.933355][ T3082] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.988593][ T3082] usb 6-1: config 0 descriptor?? [ 347.018263][ T3082] cp210x 6-1:0.0: cp210x converter detected [ 347.127427][ T5450] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 347.243121][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 347.427998][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.437432][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.471115][ T3082] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 347.553798][ T3082] usb 6-1: cp210x converter now attached to ttyUSB0 [ 347.731859][ T2232] usb 6-1: USB disconnect, device number 8 [ 347.781462][ T2232] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 347.826450][ T2232] cp210x 6-1:0.0: device disconnected [ 347.866507][ T7718] IPVS: sed: FWM 3 0x00000003 - no destination available [ 347.875056][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 347.890333][ T7721] cgroup: fork rejected by pids controller in /syz3 [ 347.891620][ T7719] vivid-003: disconnect [ 347.958190][ T7717] vivid-003: reconnect [ 348.129453][ T5450] gspca_sunplus: reg_w_riv err -71 [ 348.135205][ T5450] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 348.198119][ T5450] usb 7-1: USB disconnect, device number 4 [ 348.283136][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 348.724285][ T7730] loop5: detected capacity change from 0 to 2048 [ 348.798963][ T7730] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.891622][ T7733] netlink: 32 bytes leftover after parsing attributes in process `syz.0.539'. [ 348.928907][ T7733] netlink: 32 bytes leftover after parsing attributes in process `syz.0.539'. [ 349.222837][ T30] audit: type=1326 audit(1758495537.395:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7734 comm="syz.6.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d8b8ec29 code=0x7fc00000 [ 349.325191][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 349.873183][ T30] audit: type=1326 audit(1758495538.035:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7734 comm="syz.6.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa7d8b8ec29 code=0x7fc00000 [ 350.020858][ T7744] loop0: detected capacity change from 0 to 1024 [ 350.180400][ T7748] loop5: detected capacity change from 0 to 512 [ 350.191036][ T7748] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 350.192281][ T7744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.343862][ T7744] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 350.356621][ T7744] EXT4-fs (loop0): This should not happen!! Data will be lost [ 350.356621][ T7744] [ 350.366850][ T7744] EXT4-fs (loop0): Total free blocks count 0 [ 350.373100][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.373150][ T7744] EXT4-fs (loop0): Free/Dirty block details [ 350.373240][ T7744] EXT4-fs (loop0): free_blocks=0 [ 350.391297][ T7744] EXT4-fs (loop0): dirty_blocks=0 [ 350.396678][ T7744] EXT4-fs (loop0): Block reservation details [ 350.406539][ T7744] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 350.450038][ T7748] EXT4-fs (loop5): 1 truncate cleaned up [ 350.458119][ T7748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.856132][ T5805] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.890117][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 350.902695][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.919370][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 350.941005][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 350.965035][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 351.349878][ T6425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.403137][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 351.754032][ T7760] chnl_net:caif_netlink_parms(): no params data found [ 352.293802][ T7785] loop0: detected capacity change from 0 to 256 [ 352.443075][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 352.513721][ T7785] FAT-fs (loop0): Directory bread(block 64) failed [ 352.520570][ T7785] FAT-fs (loop0): Directory bread(block 65) failed [ 352.527682][ T7785] FAT-fs (loop0): Directory bread(block 66) failed [ 352.534548][ T7785] FAT-fs (loop0): Directory bread(block 67) failed [ 352.541382][ T7785] FAT-fs (loop0): Directory bread(block 68) failed [ 352.554371][ T7785] FAT-fs (loop0): Directory bread(block 69) failed [ 352.561218][ T7785] FAT-fs (loop0): Directory bread(block 70) failed [ 352.570867][ T7785] FAT-fs (loop0): Directory bread(block 71) failed [ 352.577893][ T7785] FAT-fs (loop0): Directory bread(block 72) failed [ 352.584723][ T7785] FAT-fs (loop0): Directory bread(block 73) failed [ 353.003691][ T5806] Bluetooth: hci3: command tx timeout [ 353.219703][ T7797] IPVS: stopping master sync thread 7799 ... [ 353.385055][ T7760] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.392795][ T7760] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.401632][ T7760] bridge_slave_0: entered allmulticast mode [ 353.411233][ T7760] bridge_slave_0: entered promiscuous mode [ 353.460583][ T7760] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.468400][ T7760] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.480680][ T7760] bridge_slave_1: entered allmulticast mode [ 353.490807][ T7760] bridge_slave_1: entered promiscuous mode [ 353.493088][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 353.723696][ T7760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.745629][ T7760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.038566][ T7760] team0: Port device team_slave_0 added [ 354.094633][ T7760] team0: Port device team_slave_1 added [ 354.404274][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.411403][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.439003][ T7760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.517491][ T7760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.524797][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.531892][ T7760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.558866][ T7760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.780732][ T7760] hsr_slave_0: entered promiscuous mode [ 354.790711][ T7760] hsr_slave_1: entered promiscuous mode [ 354.799303][ T7760] debugfs: 'hsr0' already exists in 'hsr' [ 354.808819][ T7760] Cannot create hsr debugfs directory [ 355.003371][ T5450] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 355.083707][ T5806] Bluetooth: hci3: command tx timeout [ 355.199220][ T5450] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.209718][ T5450] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.259575][ T5450] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.269508][ T5450] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.278435][ T5450] usb 1-1: Product: syz [ 355.282768][ T5450] usb 1-1: Manufacturer: syz [ 355.287661][ T5450] usb 1-1: SerialNumber: syz [ 355.350704][ T7828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.563122][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 355.623881][ T7832] loop5: detected capacity change from 0 to 256 [ 356.057307][ T7760] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.059507][ T5450] usb 1-1: 0:2 : does not exist [ 356.102416][ T5450] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 356.153959][ T7832] FAT-fs (loop5): Directory bread(block 64) failed [ 356.160859][ T7832] FAT-fs (loop5): Directory bread(block 65) failed [ 356.167928][ T7832] FAT-fs (loop5): Directory bread(block 66) failed [ 356.175181][ T7832] FAT-fs (loop5): Directory bread(block 67) failed [ 356.182009][ T7832] FAT-fs (loop5): Directory bread(block 68) failed [ 356.188943][ T7832] FAT-fs (loop5): Directory bread(block 69) failed [ 356.195919][ T7832] FAT-fs (loop5): Directory bread(block 70) failed [ 356.202598][ T7832] FAT-fs (loop5): Directory bread(block 71) failed [ 356.210572][ T7832] FAT-fs (loop5): Directory bread(block 72) failed [ 356.217373][ T7832] FAT-fs (loop5): Directory bread(block 73) failed [ 356.320433][ T5450] usb 1-1: USB disconnect, device number 7 [ 356.415513][ T7760] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.517350][ T7760] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.603093][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.698564][ T7760] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.164739][ T7844] input: syz0 as /devices/virtual/input/input13 [ 357.173237][ T5806] Bluetooth: hci3: command tx timeout [ 357.215480][ T7760] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 357.265749][ T7760] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 357.310744][ T7760] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 357.342848][ T7760] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 357.645935][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.092510][ T7760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.213834][ T7760] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.262759][ T4654] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.270339][ T4654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.385106][ T4654] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.392569][ T4654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.555472][ T7859] block device autoloading is deprecated and will be removed. [ 358.683126][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.888249][ T7866] netlink: 204 bytes leftover after parsing attributes in process `syz.1.585'. [ 359.245373][ T5816] Bluetooth: hci3: command tx timeout [ 359.723100][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 359.736384][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 360.669272][ T7883] loop0: detected capacity change from 0 to 32768 [ 360.763085][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.784792][ T7883] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 361.054212][ T7883] XFS (loop0): Ending clean mount [ 361.131669][ T7760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.249009][ T5805] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 361.512333][ T7760] veth0_vlan: entered promiscuous mode [ 361.613919][ T7760] veth1_vlan: entered promiscuous mode [ 361.803090][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 361.978155][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.597'. [ 362.197662][ T7910] input: syz0 as /devices/virtual/input/input14 [ 362.555888][ T7906] loop1: detected capacity change from 0 to 32768 [ 362.590569][ T7760] veth0_macvtap: entered promiscuous mode [ 362.703778][ T7760] veth1_macvtap: entered promiscuous mode [ 362.760793][ T7906] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 362.843070][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.857167][ T7906] (syz.1.596,7906,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 362.865892][ T7906] (syz.1.596,7906,0):ocfs2_get_suballoc_slot_bit:2812 ERROR: read block 124554051584 failed -12 [ 362.876723][ T7906] (syz.1.596,7906,0):ocfs2_get_suballoc_slot_bit:2844 ERROR: status = -12 [ 362.885564][ T7906] (syz.1.596,7906,0):ocfs2_test_inode_bit:2926 ERROR: get alloc slot and bit failed -12 [ 362.901594][ T7906] (syz.1.596,7906,0):ocfs2_test_inode_bit:2967 ERROR: status = -12 [ 362.909872][ T7906] (syz.1.596,7906,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 363.060294][ T7760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.139939][ T7760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.185003][ T7291] ocfs2: Unmounting device (7,1) on (node local) [ 363.275491][ T4654] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.320822][ T4654] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.395403][ T3607] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.482685][ T3607] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.883241][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.705420][ T2232] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 364.906147][ T2232] usb 1-1: Using ep0 maxpacket: 32 [ 364.923083][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.967110][ T2232] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 364.976702][ T2232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.985063][ T2232] usb 1-1: Product: syz [ 364.989409][ T2232] usb 1-1: Manufacturer: syz [ 364.994425][ T2232] usb 1-1: SerialNumber: syz [ 365.061676][ T2232] usb 1-1: config 0 descriptor?? [ 365.089901][ T2232] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 365.607673][ T2232] gspca_ov534_9: reg_w failed -110 [ 365.827352][ T7952] netlink: 'syz.6.609': attribute type 1 has an invalid length. [ 365.836083][ T7952] netlink: 'syz.6.609': attribute type 2 has an invalid length. [ 365.844189][ T7952] netlink: 244 bytes leftover after parsing attributes in process `syz.6.609'. [ 365.969965][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 366.045685][ T2232] gspca_ov534_9: Unknown sensor 0000 [ 366.046034][ T2232] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 366.322003][ T2232] usb 1-1: USB disconnect, device number 8 [ 366.595744][ T7967] loop0: detected capacity change from 0 to 16 [ 366.630705][ T7967] erofs (device loop0): mounted with root inode @ nid 36. [ 366.661334][ T7967] syz.0.614: attempt to access beyond end of device [ 366.661334][ T7967] loop0: rw=524288, sector=128, nr_sectors = 8 limit=16 [ 366.691813][ T7967] syz.0.614: attempt to access beyond end of device [ 366.691813][ T7967] loop0: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 366.847494][ T7967] erofs (device loop0): read error -95 @ 0 of nid 89 [ 366.863286][ T30] audit: type=1800 audit(1758495555.035:12): pid=7967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.614" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 367.003100][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.053095][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.083151][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.509522][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.521347][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.679860][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.624'. [ 369.844269][ T5450] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 370.036509][ T5450] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.046836][ T5450] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 370.064609][ T5450] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 370.075326][ T5450] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.133097][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.147150][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.155756][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.174834][ T7991] loop5: detected capacity change from 0 to 4096 [ 370.202449][ T5450] usb 7-1: config 0 descriptor?? [ 370.793699][ T5450] kovaplus 0003:1E7D:2D50.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 370.947191][ T5450] kovaplus 0003:1E7D:2D50.0007: couldn't init struct kovaplus_device [ 370.955864][ T5450] kovaplus 0003:1E7D:2D50.0007: couldn't install mouse [ 371.039722][ T5450] kovaplus 0003:1E7D:2D50.0007: probe with driver kovaplus failed with error -71 [ 371.109730][ T5450] usb 7-1: USB disconnect, device number 5 [ 371.122051][ T8009] loop1: detected capacity change from 0 to 64 [ 371.163123][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 371.467175][ T8007] loop3: detected capacity change from 0 to 32768 [ 371.634492][ T8007] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 371.634608][ T8007] allowing incompatible features above 0.0: (unknown version) [ 371.634696][ T8007] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 371.671823][ T8007] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 371.680397][ T8007] bcachefs (loop3): initializing new filesystem [ 371.697005][ T8007] bcachefs (loop3): going read-write [ 371.738483][ T8007] bcachefs (loop3): marking superblocks [ 371.788412][ T8007] bcachefs (loop3): initializing freespace [ 371.820672][ T8007] bcachefs (loop3): done initializing freespace [ 371.840138][ T8007] bcachefs (loop3): reading snapshots table [ 371.846550][ T8007] bcachefs (loop3): reading snapshots done [ 371.938720][ T8007] bcachefs (loop3): loop3: Superblock write was silently dropped! (seq 0 expected 42) [ 371.961463][ T8007] bcachefs (loop3): done starting filesystem [ 372.074248][ T8023] nbd: nbd0 already in use [ 372.214594][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 372.408752][ T7760] bcachefs (loop3): shutting down [ 372.419540][ T7760] bcachefs (loop3): going read-only [ 372.426372][ T7760] bcachefs (loop3): finished waiting for writes to stop [ 372.505041][ T7760] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 372.629325][ T8032] loop6: detected capacity change from 0 to 128 [ 372.764111][ T7760] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 373.035498][ T7760] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 373.056104][ T7760] bcachefs (loop3): marking filesystem clean [ 373.083941][ T8032] syz.6.636: attempt to access beyond end of device [ 373.083941][ T8032] loop6: rw=34817, sector=102, nr_sectors = 32 limit=128 [ 373.229410][ T7760] bcachefs (loop3): shutdown complete [ 373.243150][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 373.604307][ T3607] kworker/u8:10: attempt to access beyond end of device [ 373.604307][ T3607] loop6: rw=1, sector=137, nr_sectors = 25 limit=128 [ 373.722118][ T8042] loop1: detected capacity change from 0 to 164 [ 374.134792][ T8046] netlink: 'syz.6.641': attribute type 1 has an invalid length. [ 374.142715][ T8046] netlink: 'syz.6.641': attribute type 4 has an invalid length. [ 374.150692][ T8046] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.641'. [ 374.298751][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.544816][ T8047] loop5: detected capacity change from 0 to 4096 [ 375.323151][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 376.363278][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.403279][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.836031][ T8082] loop3: detected capacity change from 0 to 32768 [ 377.863013][ T8082] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 377.871364][ T8082] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 377.889818][ T8082] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 378.044785][ T8082] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 378.053556][ T5892] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 378.213774][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 378.262573][ T5892] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 378.272024][ T5892] usb 1-1: config 0 has no interface number 0 [ 378.359778][ T5892] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 378.369271][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.377684][ T5892] usb 1-1: Product: syz [ 378.382015][ T5892] usb 1-1: Manufacturer: syz [ 378.386966][ T5892] usb 1-1: SerialNumber: syz [ 378.443168][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 378.508818][ T5892] usb 1-1: config 0 descriptor?? [ 378.553955][ T5892] smsc95xx v2.0.0 [ 378.719756][ T8103] loop5: detected capacity change from 0 to 512 [ 379.039875][ T5892] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 379.051427][ T5892] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 379.094781][ T8107] netlink: 'syz.1.665': attribute type 39 has an invalid length. [ 379.122340][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.248740][ T8107] bridge_slave_0 (unregistering): left allmulticast mode [ 379.256210][ T8107] bridge_slave_0 (unregistering): left promiscuous mode [ 379.263625][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.485727][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.707911][ T5892] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 379.720000][ T5892] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 379.733436][ T2232] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 379.798489][ T5892] usb 1-1: USB disconnect, device number 9 [ 379.940555][ T2232] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.951286][ T2232] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.017815][ T2232] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 380.027327][ T2232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.036044][ T2232] usb 6-1: Product: syz [ 380.040368][ T2232] usb 6-1: Manufacturer: syz [ 380.046100][ T2232] usb 6-1: SerialNumber: syz [ 380.334016][ T2232] usb 6-1: 0:2 : does not exist [ 380.395676][ T2232] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 380.522397][ T2232] usb 6-1: USB disconnect, device number 9 [ 380.533150][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.255166][ T8123] loop6: detected capacity change from 0 to 32768 [ 381.555888][ T8126] loop0: detected capacity change from 0 to 32768 [ 381.563108][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.683109][ T8123] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 381.683249][ T8123] allowing incompatible features above 0.0: (unknown version) [ 381.683332][ T8123] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 381.728756][ T8123] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 381.742318][ T8123] bcachefs (loop6): initializing new filesystem [ 381.762379][ T8123] bcachefs (loop6): going read-write [ 381.817715][ T8123] bcachefs (loop6): marking superblocks [ 381.843176][ T8126] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 381.874409][ T8123] bcachefs (loop6): initializing freespace [ 381.899738][ T8123] bcachefs (loop6): done initializing freespace [ 381.919172][ T8123] bcachefs (loop6): reading snapshots table [ 381.925630][ T8123] bcachefs (loop6): reading snapshots done [ 382.061680][ T8123] bcachefs (loop6): done starting filesystem [ 382.311762][ T8126] XFS (loop0): Ending clean mount [ 382.415287][ T8126] XFS (loop0): Quotacheck needed: Please wait. [ 382.600871][ T8126] XFS (loop0): Quotacheck: Done. [ 382.607715][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 382.878681][ T8149] loop3: detected capacity change from 0 to 32768 [ 383.124855][ T5805] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 383.144650][ T8149] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 383.144799][ T8149] allowing incompatible features above 0.0: (unknown version) [ 383.144872][ T8149] features: lz4 [ 383.186521][ T8149] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 383.194987][ T8149] bcachefs (loop3): initializing new filesystem [ 383.215199][ T8149] bcachefs (loop3): going read-write [ 383.306350][ T7161] bcachefs (loop6): shutting down [ 383.311551][ T7161] bcachefs (loop6): going read-only [ 383.317069][ T7161] bcachefs (loop6): finished waiting for writes to stop [ 383.417093][ T8149] bcachefs (loop3): marking superblocks [ 383.517078][ T8149] bcachefs (loop3): initializing freespace [ 383.551884][ T8149] bcachefs (loop3): done initializing freespace [ 383.590928][ T8149] bcachefs (loop3): reading snapshots table [ 383.600152][ T8149] bcachefs (loop3): reading snapshots done [ 383.643119][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 383.670288][ T7161] bcachefs (loop6): flushing journal and stopping allocators, journal seq 4 [ 383.740580][ T8149] bcachefs (loop3): done starting filesystem [ 383.927122][ T7161] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 4 [ 384.108418][ T7161] bcachefs (loop6): clean shutdown complete, journal seq 5 [ 384.145918][ T7161] bcachefs (loop6): marking filesystem clean [ 384.375505][ T7760] bcachefs (loop3): shutting down [ 384.380770][ T7760] bcachefs (loop3): going read-only [ 384.387168][ T7760] bcachefs (loop3): finished waiting for writes to stop [ 384.445245][ T7760] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2 [ 384.472612][ T7161] bcachefs (loop6): shutdown complete [ 384.683181][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 384.724172][ T8171] netlink: 'syz.1.683': attribute type 39 has an invalid length. [ 384.923090][ T7760] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 385.008946][ T7760] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 385.077125][ T7760] bcachefs (loop3): marking filesystem clean [ 385.093514][ T2232] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 385.212128][ T7760] bcachefs (loop3): shutdown complete [ 385.283458][ T2232] usb 6-1: Using ep0 maxpacket: 8 [ 385.307311][ T2232] usb 6-1: config 0 has no interfaces? [ 385.359258][ T2232] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 385.368756][ T2232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.377133][ T2232] usb 6-1: Product: syz [ 385.381497][ T2232] usb 6-1: Manufacturer: syz [ 385.386395][ T2232] usb 6-1: SerialNumber: syz [ 385.446094][ T2232] usb 6-1: config 0 descriptor?? [ 385.723186][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 385.786428][ T5873] usb 6-1: USB disconnect, device number 10 [ 386.763169][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 387.781670][ T8194] loop0: detected capacity change from 0 to 32768 [ 387.803170][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 387.825746][ T8194] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 387.927237][ T8194] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 388.483316][ T5805] ocfs2: Unmounting device (7,0) on (node local) [ 388.843175][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 389.410603][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 389.863455][ T8214] loop6: detected capacity change from 0 to 128 [ 389.883348][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 389.948477][ T8214] EXT4-fs: Ignoring removed nobh option [ 390.014853][ T8215] loop5: detected capacity change from 0 to 512 [ 390.070873][ T8214] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 390.113493][ T8214] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 390.227708][ T8215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.245179][ T8215] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.596081][ T6425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.854534][ T7161] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.924164][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.115012][ T5450] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 391.337673][ T5450] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 391.347110][ T5450] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.415814][ T5450] usb 6-1: config 0 descriptor?? [ 391.432423][ T5450] cp210x 6-1:0.0: cp210x converter detected [ 391.883599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 391.922951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 391.942933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 391.953201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 391.963207][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.977820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 392.043208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 392.073452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 392.309952][ T8244] loop3: detected capacity change from 0 to 32768 [ 392.318719][ T8244] XFS: noikeep mount option is deprecated. [ 392.374044][ T5450] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 392.411782][ T8244] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 392.480194][ T5450] usb 6-1: cp210x converter now attached to ttyUSB0 [ 392.559505][ T30] audit: type=1326 audit(1758495580.735:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.6.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d8b8ec29 code=0x7ffc0000 [ 392.612723][ T5450] usb 6-1: USB disconnect, device number 11 [ 392.657955][ T5450] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 392.702718][ T30] audit: type=1326 audit(1758495580.775:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.6.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d8b8ec29 code=0x7ffc0000 [ 392.710849][ T8244] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 392.725820][ T30] audit: type=1326 audit(1758495580.775:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.6.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d8b8ec29 code=0x7ffc0000 [ 392.759823][ T30] audit: type=1326 audit(1758495580.775:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.6.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7d8b2ae09 code=0x7ffc0000 [ 392.782091][ T30] audit: type=1326 audit(1758495580.775:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.6.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7d8b2ae09 code=0x7ffc0000 [ 392.807513][ T30] audit: type=1326 audit(1758495580.775:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.6.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7d8b2ae09 code=0x7ffc0000 [ 392.830964][ T30] audit: type=1326 audit(1758495580.775:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.6.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7d8b2ae09 code=0x7ffc0000 [ 392.855613][ T30] audit: type=1326 audit(1758495580.775:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.6.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d8b8ec29 code=0x7ffc0000 [ 392.905696][ T5450] cp210x 6-1:0.0: device disconnected [ 392.917883][ T8256] loop0: detected capacity change from 0 to 128 [ 393.003155][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 393.049724][ T8244] XFS (loop3): Starting recovery (logdev: internal) [ 393.126803][ T30] audit: type=1326 audit(1758495581.055:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.6.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7d8b2ae09 code=0x7ffc0000 [ 393.128834][ T8244] XFS (loop3): Ending recovery (logdev: internal) [ 393.149634][ T30] audit: type=1326 audit(1758495581.055:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8237 comm="syz.6.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7d8b2ae09 code=0x7ffc0000 [ 393.221197][ T8256] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 393.288074][ T8256] ext4 filesystem being mounted at /158/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 393.434379][ T8256] netlink: 'syz.0.705': attribute type 29 has an invalid length. [ 393.481960][ T8260] netlink: 'syz.0.705': attribute type 29 has an invalid length. [ 393.507657][ T8244] XFS (loop3): Metadata corruption detected at xfs_btree_lookup_get_block+0x698/0x7c0, xfs_bnobt block 0x8 [ 393.523465][ T8244] XFS (loop3): Unmount and run xfs_repair [ 393.544708][ T8256] netlink: 500 bytes leftover after parsing attributes in process `syz.0.705'. [ 393.574455][ T8244] XFS (loop3): Metadata corruption detected at xfs_inobt_verify+0x113/0x330, xfs_finobt block 0x8 [ 393.585854][ T8244] XFS (loop3): Unmount and run xfs_repair [ 393.591752][ T8244] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 393.600112][ T8244] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 393.609294][ T8244] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 393.623282][ T8244] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 393.632341][ T8244] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 393.643078][ T8244] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 393.652127][ T8244] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 393.662000][ T8244] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 393.671503][ T8244] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 393.680627][ T8244] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x8 len 8 error 117 [ 393.853594][ T7760] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 393.863189][ T8254] XFS (loop3): Metadata corruption detected at xfs_inobt_verify+0x113/0x330, xfs_finobt block 0x8 [ 393.874463][ T8254] XFS (loop3): Unmount and run xfs_repair [ 393.880339][ T8254] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 393.888066][ T8254] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 393.897176][ T8254] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 393.906313][ T8254] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 393.915461][ T8254] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 393.928393][ T8254] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 393.939353][ T8254] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 393.948597][ T8254] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 393.957813][ T8254] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 393.967031][ T8254] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_buf_submit+0x32f/0x1150 (fs/xfs/xfs_buf.c:1463). Shutting down filesystem. [ 393.981920][ T8254] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 394.043202][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.155615][ T5805] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 394.745327][ T8267] netlink: 'syz.6.711': attribute type 10 has an invalid length. [ 395.083192][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 395.685206][ T8284] batadv_slave_0: entered allmulticast mode [ 395.748981][ T8284] dvmrp1: entered allmulticast mode [ 395.849855][ T8288] dvmrp1: left allmulticast mode [ 396.033575][ T8281] batadv_slave_0: left allmulticast mode [ 396.123188][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 397.015829][ T8290] loop0: detected capacity change from 0 to 40427 [ 397.051839][ T8290] F2FS-fs (loop0): invalid crc value [ 397.163154][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 397.367743][ T8290] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 397.380331][ T8290] F2FS-fs (loop0): Start checkpoint disabled! [ 397.453733][ T8290] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 397.655071][ T3758] kworker/u8:17: attempt to access beyond end of device [ 397.655071][ T3758] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 397.746172][ T3758] kworker/u8:17: attempt to access beyond end of device [ 397.746172][ T3758] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 397.760679][ T3758] CPU: 1 UID: 0 PID: 3758 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(none) [ 397.760813][ T3758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 397.760934][ T3758] Workqueue: writeback wb_workfn (flush-7:0) [ 397.761144][ T3758] Call Trace: [ 397.761200][ T3758] [ 397.761247][ T3758] __dump_stack+0x26/0x30 [ 397.761403][ T3758] dump_stack_lvl+0x1df/0x270 [ 397.761570][ T3758] dump_stack+0x1e/0x25 [ 397.761714][ T3758] f2fs_handle_critical_error+0xa6f/0xc20 [ 397.761938][ T3758] f2fs_stop_checkpoint+0x65/0x80 [ 397.762124][ T3758] f2fs_write_end_io+0x101c/0x1bc0 [ 397.762305][ T3758] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 397.762433][ T3758] bio_endio+0xeb1/0x1010 [ 397.762590][ T3758] submit_bio_noacct+0x213/0x2750 [ 397.762797][ T3758] submit_bio+0x57c/0x630 [ 397.762954][ T3758] f2fs_submit_write_bio+0x92/0x250 [ 397.763129][ T3758] __submit_merged_bio+0x16f/0x6a0 [ 397.763308][ T3758] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 397.763475][ T3758] __submit_merged_write_cond+0x458/0x9a0 [ 397.763669][ T3758] f2fs_write_data_pages+0x4bb2/0x5480 [ 397.763977][ T3758] ? module_trace_bprintk_format_notify+0x2b0/0xc30 [ 397.764175][ T3758] ? kmsan_get_metadata+0xfb/0x160 [ 397.764325][ T3758] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 397.764486][ T3758] ? __update_load_avg_cfs_rq+0xd7f/0x1010 [ 397.764674][ T3758] ? kmsan_get_metadata+0xfb/0x160 [ 397.764823][ T3758] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 397.764985][ T3758] ? kmsan_get_metadata+0xfb/0x160 [ 397.765133][ T3758] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 397.765294][ T3758] ? kmsan_get_metadata+0xfb/0x160 [ 397.765444][ T3758] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 397.765599][ T3758] ? kmsan_get_metadata+0xfb/0x160 [ 397.765745][ T3758] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 397.765899][ T3758] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 397.766085][ T3758] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 397.766274][ T3758] do_writepages+0x3f2/0x860 [ 397.766410][ T3758] ? stack_depot_save_flags+0x35/0x7b0 [ 397.766540][ T3758] ? kmsan_get_metadata+0xfb/0x160 [ 397.766697][ T3758] ? kmsan_get_metadata+0xfb/0x160 [ 397.766864][ T3758] __writeback_single_inode+0x101/0x1190 [ 397.767019][ T3758] ? kmsan_get_metadata+0xfb/0x160 [ 397.767187][ T3758] writeback_sb_inodes+0xac1/0x1cb0 [ 397.767466][ T3758] wb_writeback+0x4ce/0xc00 [ 397.767619][ T3758] ? queue_io+0x431/0x790 [ 397.767758][ T3758] wb_workfn+0x397/0x1910 [ 397.767934][ T3758] ? kmsan_get_metadata+0xfb/0x160 [ 397.768100][ T3758] ? __pfx_wb_workfn+0x10/0x10 [ 397.768274][ T3758] process_scheduled_works+0xb8e/0x1d80 [ 397.768498][ T3758] worker_thread+0xedf/0x1590 [ 397.768707][ T3758] kthread+0xd59/0xf00 [ 397.768834][ T3758] ? __pfx_worker_thread+0x10/0x10 [ 397.769031][ T3758] ? __pfx_kthread+0x10/0x10 [ 397.769167][ T3758] ret_from_fork+0x233/0x380 [ 397.769293][ T3758] ? __pfx_kthread+0x10/0x10 [ 397.769427][ T3758] ret_from_fork_asm+0x1a/0x30 [ 397.769621][ T3758] [ 398.067366][ T3758] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 398.132591][ T8301] loop3: detected capacity change from 0 to 1024 [ 398.141836][ T8301] EXT4-fs: Ignoring removed nobh option [ 398.147757][ T8301] EXT4-fs: Ignoring removed bh option [ 398.153447][ T8301] EXT4-fs: Ignoring removed nobh option [ 398.203073][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 398.320305][ T8301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.715148][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 398.715222][ T30] audit: type=1800 audit(1758495586.895:71): pid=8300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.708" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 399.247691][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 399.364904][ T7760] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.249334][ T8328] loop1: detected capacity change from 0 to 1024 [ 400.283307][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 400.303845][ T8328] EXT4-fs: Ignoring removed oldalloc option [ 400.310465][ T8328] EXT4-fs: Ignoring removed orlov option [ 400.393647][ T8328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.658522][ T8328] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.732: Allocating blocks 497-513 which overlap fs metadata [ 400.746014][ T8326] EXT4-fs (loop1): pa ffff888123bd0230: logic 64, phys. 449, len 4 [ 400.754462][ T8326] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 401.143747][ T7291] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.323318][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 402.363103][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 402.597336][ T8361] loop0: detected capacity change from 0 to 1024 [ 402.658048][ T8361] EXT4-fs: Ignoring removed orlov option [ 402.747448][ T8361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.947594][ T8361] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 403.403136][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 403.580327][ T5805] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.793134][ T2232] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 403.965175][ T2232] usb 2-1: Using ep0 maxpacket: 16 [ 404.016644][ T2232] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 404.026213][ T2232] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.042512][ T2232] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 404.168079][ T2232] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 404.178289][ T2232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.186572][ T2232] usb 2-1: Product: syz [ 404.190900][ T2232] usb 2-1: Manufacturer: syz [ 404.195876][ T2232] usb 2-1: SerialNumber: syz [ 404.443086][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 404.482194][ T8382] loop3: detected capacity change from 0 to 256 [ 404.539952][ T8382] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 404.653705][ T8382] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 404.700613][ T2232] usb 2-1: 0:2 : does not exist [ 405.483092][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 405.546618][ T8389] loop0: detected capacity change from 0 to 1024 [ 405.565038][ T2232] usb 2-1: USB disconnect, device number 5 [ 405.629440][ T8389] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 405.759230][ T8389] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.750: Invalid block bitmap block 0 in block_group 0 [ 405.834614][ T8389] EXT4-fs (loop0): Remounting filesystem read-only [ 405.842291][ T8389] Quota error (device loop0): write_blk: dquota write failed [ 405.850367][ T8389] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 405.861009][ T8389] EXT4-fs (loop0): 1 orphan inode deleted [ 405.868859][ T8389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.126343][ T5805] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.529581][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 406.576991][ T8397] loop0: detected capacity change from 0 to 2048 [ 406.661766][ T8397] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 406.669949][ T8397] UDF-fs: Scanning with blocksize 512 failed [ 406.788888][ T8397] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 407.563113][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 407.752444][ T8418] netlink: 'syz.1.764': attribute type 21 has an invalid length. [ 407.761124][ T8418] netlink: 132 bytes leftover after parsing attributes in process `syz.1.764'. [ 408.488192][ T8426] loop1: detected capacity change from 0 to 256 [ 408.603106][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 408.663260][ T2232] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 408.863612][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.873186][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.953434][ T2232] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 408.962811][ T2232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.016836][ T8426] FAT-fs (loop1): Directory bread(block 64) failed [ 409.023946][ T8426] FAT-fs (loop1): Directory bread(block 65) failed [ 409.030781][ T8426] FAT-fs (loop1): Directory bread(block 66) failed [ 409.037755][ T8426] FAT-fs (loop1): Directory bread(block 67) failed [ 409.044820][ T8426] FAT-fs (loop1): Directory bread(block 68) failed [ 409.051511][ T8426] FAT-fs (loop1): Directory bread(block 69) failed [ 409.058573][ T8426] FAT-fs (loop1): Directory bread(block 70) failed [ 409.065385][ T8426] FAT-fs (loop1): Directory bread(block 71) failed [ 409.072216][ T8426] FAT-fs (loop1): Directory bread(block 72) failed [ 409.083383][ T8426] FAT-fs (loop1): Directory bread(block 73) failed [ 409.111054][ T2232] usb 7-1: config 0 descriptor?? [ 409.643100][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 410.294982][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.775'. [ 410.376988][ T2232] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 410.388153][ T2232] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 410.399387][ T2232] asix 7-1:0.0: probe with driver asix failed with error -71 [ 410.450988][ T2232] usb 7-1: USB disconnect, device number 6 [ 410.683062][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 411.372384][ T8460] loop6: detected capacity change from 0 to 1024 [ 411.723110][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 412.438648][ T8465] loop0: detected capacity change from 0 to 32768 [ 412.506071][ T8465] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 412.530025][ T30] audit: type=1800 audit(1758495600.705:72): pid=8465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.782" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 412.706045][ T5805] ocfs2: Unmounting device (7,0) on (node local) [ 412.767276][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 413.236886][ T8480] Invalid ELF header magic: != ELF [ 413.803108][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 413.951569][ T8490] loop3: detected capacity change from 0 to 256 [ 414.076722][ T8490] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 414.087962][ T8490] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 414.396902][ T8490] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 414.843789][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 415.842175][ T8515] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 415.884121][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 416.923118][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 417.963115][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 418.587440][ T8549] binder: 8547:8549 ioctl c0306201 200000000080 returned -14 [ 418.693725][ T8550] binder: 8547:8550 ioctl c0306201 200000000180 returned -22 [ 418.787276][ T8544] loop1: detected capacity change from 0 to 40427 [ 418.800963][ T8544] F2FS-fs (loop1): invalid crc value [ 419.003078][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 419.079178][ T8544] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 419.094908][ T8559] netlink: 240 bytes leftover after parsing attributes in process `syz.6.817'. [ 419.114675][ T8544] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 419.209710][ T30] audit: type=1800 audit(1758495607.335:73): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.813" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 419.233096][ T30] audit: type=1804 audit(1758495607.335:74): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.813" name="/newroot/94/file0/bus" dev="loop1" ino=10 res=1 errno=0 [ 419.335998][ T7291] syz-executor: attempt to access beyond end of device [ 419.335998][ T7291] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 419.350689][ T7291] CPU: 0 UID: 0 PID: 7291 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 419.350827][ T7291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 419.350904][ T7291] Call Trace: [ 419.350952][ T7291] [ 419.350999][ T7291] __dump_stack+0x26/0x30 [ 419.351161][ T7291] dump_stack_lvl+0x1df/0x270 [ 419.351330][ T7291] dump_stack+0x1e/0x25 [ 419.351474][ T7291] f2fs_handle_critical_error+0xa6f/0xc20 [ 419.351702][ T7291] f2fs_stop_checkpoint+0x65/0x80 [ 419.351889][ T7291] f2fs_write_end_io+0x101c/0x1bc0 [ 419.352065][ T7291] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 419.352195][ T7291] bio_endio+0xeb1/0x1010 [ 419.352351][ T7291] submit_bio_noacct+0x213/0x2750 [ 419.352556][ T7291] submit_bio+0x57c/0x630 [ 419.352722][ T7291] f2fs_submit_write_bio+0x92/0x250 [ 419.352898][ T7291] __submit_merged_bio+0x16f/0x6a0 [ 419.353065][ T7291] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 419.353235][ T7291] __submit_merged_write_cond+0x458/0x9a0 [ 419.353430][ T7291] f2fs_write_data_pages+0x4bb2/0x5480 [ 419.353763][ T7291] ? module_trace_bprintk_format_notify+0x2b0/0xc30 [ 419.353957][ T7291] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 419.354123][ T7291] ? __update_load_avg_se+0xa96/0x11c0 [ 419.354297][ T7291] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 419.354455][ T7291] ? kmsan_get_metadata+0xfb/0x160 [ 419.354592][ T7291] ? kmsan_get_metadata+0xfb/0x160 [ 419.354762][ T7291] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 419.354905][ T7291] ? kmsan_get_metadata+0xfb/0x160 [ 419.355048][ T7291] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 419.355207][ T7291] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 419.355393][ T7291] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 419.355576][ T7291] do_writepages+0x3f2/0x860 [ 419.355724][ T7291] ? _raw_spin_unlock+0x30/0x50 [ 419.355877][ T7291] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 419.356082][ T7291] filemap_fdatawrite+0x207/0x260 [ 419.356304][ T7291] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 419.356479][ T7291] f2fs_write_checkpoint+0xfe2/0x2b00 [ 419.356748][ T7291] kill_f2fs_super+0x2ff/0x970 [ 419.356909][ T7291] ? __pfx_kill_f2fs_super+0x10/0x10 [ 419.357045][ T7291] deactivate_locked_super+0xcb/0x3c0 [ 419.357201][ T7291] deactivate_super+0x12f/0x140 [ 419.357342][ T7291] cleanup_mnt+0x6fb/0x780 [ 419.357509][ T7291] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 419.357658][ T7291] ? __pfx___cleanup_mnt+0x10/0x10 [ 419.357839][ T7291] __cleanup_mnt+0x22/0x30 [ 419.358000][ T7291] task_work_run+0x206/0x2b0 [ 419.358158][ T7291] exit_to_user_mode_loop+0x2a6/0x330 [ 419.358313][ T7291] do_syscall_64+0x1e3/0x210 [ 419.358437][ T7291] ? irqentry_exit+0x16/0x60 [ 419.358598][ T7291] ? clear_bhb_loop+0x40/0x90 [ 419.358745][ T7291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.358885][ T7291] RIP: 0033:0x7efc3038ff57 [ 419.358983][ T7291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 419.359096][ T7291] RSP: 002b:00007ffeb7b22398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 419.359220][ T7291] RAX: 0000000000000000 RBX: 00007efc30411c2d RCX: 00007efc3038ff57 [ 419.359308][ T7291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb7b22450 [ 419.359391][ T7291] RBP: 00007ffeb7b22450 R08: 0000000000000000 R09: 0000000000000000 [ 419.359476][ T7291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeb7b234e0 [ 419.359563][ T7291] R13: 00007efc30411c2d R14: 000000000006653f R15: 00007ffeb7b23520 [ 419.359691][ T7291] [ 419.716225][ T7291] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 420.043087][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 420.634898][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.822'. [ 421.083107][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 421.642216][ T8576] loop0: detected capacity change from 0 to 40427 [ 421.662375][ T8576] F2FS-fs (loop0): build fault injection rate: 690 [ 421.697824][ T8576] F2FS-fs (loop0): invalid crc value [ 422.004076][ T8576] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 422.020938][ T8576] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 422.065742][ T8576] syz.0.825: attempt to access beyond end of device [ 422.065742][ T8576] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 422.083510][ T8576] CPU: 1 UID: 0 PID: 8576 Comm: syz.0.825 Not tainted syzkaller #0 PREEMPT(none) [ 422.083651][ T8576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 422.083727][ T8576] Call Trace: [ 422.083781][ T8576] [ 422.083830][ T8576] __dump_stack+0x26/0x30 [ 422.083998][ T8576] dump_stack_lvl+0x1df/0x270 [ 422.084160][ T8576] dump_stack+0x1e/0x25 [ 422.084301][ T8576] f2fs_handle_critical_error+0xa6f/0xc20 [ 422.084520][ T8576] f2fs_stop_checkpoint+0x65/0x80 [ 422.084716][ T8576] f2fs_write_end_io+0x101c/0x1bc0 [ 422.084898][ T8576] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 422.085032][ T8576] bio_endio+0xeb1/0x1010 [ 422.085192][ T8576] submit_bio_noacct+0x213/0x2750 [ 422.085407][ T8576] submit_bio+0x57c/0x630 [ 422.085569][ T8576] f2fs_submit_write_bio+0x92/0x250 [ 422.085745][ T8576] __submit_merged_bio+0x16f/0x6a0 [ 422.085922][ T8576] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 422.086094][ T8576] __submit_merged_write_cond+0x458/0x9a0 [ 422.086299][ T8576] f2fs_write_data_pages+0x4bb2/0x5480 [ 422.086629][ T8576] ? kmsan_get_metadata+0xfb/0x160 [ 422.086785][ T8576] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 422.086951][ T8576] ? folios_put_refs+0x21/0xb10 [ 422.087127][ T8576] ? filter_irq_stacks+0x49/0x190 [ 422.087267][ T8576] ? stack_depot_save_flags+0x35/0x7b0 [ 422.087396][ T8576] ? lru_gen_add_folio+0xd66/0x1190 [ 422.087593][ T8576] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 422.087748][ T8576] ? kmsan_get_metadata+0xfb/0x160 [ 422.087907][ T8576] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 422.088062][ T8576] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 422.088252][ T8576] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 422.088443][ T8576] do_writepages+0x3f2/0x860 [ 422.088586][ T8576] ? _raw_spin_unlock+0x30/0x50 [ 422.088739][ T8576] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 422.088954][ T8576] filemap_fdatawrite+0x207/0x260 [ 422.089185][ T8576] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 422.089363][ T8576] f2fs_write_checkpoint+0xfe2/0x2b00 [ 422.089633][ T8576] f2fs_issue_checkpoint+0x491/0x700 [ 422.089778][ T8576] ? kmsan_get_metadata+0xfb/0x160 [ 422.089928][ T8576] ? kmsan_get_metadata+0xfb/0x160 [ 422.090077][ T8576] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 422.090241][ T8576] f2fs_sync_fs+0x1ee/0x440 [ 422.090414][ T8576] f2fs_do_sync_file+0xdcd/0x31c0 [ 422.090673][ T8576] f2fs_sync_file+0x107/0x180 [ 422.090824][ T8576] ? __pfx_f2fs_sync_file+0x10/0x10 [ 422.090977][ T8576] __x64_sys_fdatasync+0x129/0x260 [ 422.091158][ T8576] x64_sys_call+0x3d70/0x3e20 [ 422.091330][ T8576] do_syscall_64+0xd9/0x210 [ 422.091455][ T8576] ? irqentry_exit+0x16/0x60 [ 422.091619][ T8576] ? clear_bhb_loop+0x40/0x90 [ 422.091763][ T8576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.091908][ T8576] RIP: 0033:0x7f157678ec29 [ 422.092007][ T8576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.092124][ T8576] RSP: 002b:00007f1577627038 EFLAGS: 00000246 ORIG_RAX: 000000000000004b [ 422.092252][ T8576] RAX: ffffffffffffffda RBX: 00007f15769d5fa0 RCX: 00007f157678ec29 [ 422.092351][ T8576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 422.092431][ T8576] RBP: 00007f1576811e41 R08: 0000000000000000 R09: 0000000000000000 [ 422.092517][ T8576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.092599][ T8576] R13: 00007f15769d6038 R14: 00007f15769d5fa0 R15: 00007ffea0366048 [ 422.092725][ T8576] [ 422.092783][ T8576] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 422.123111][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 422.468734][ T8576] CPU: 1 UID: 0 PID: 8576 Comm: syz.0.825 Not tainted syzkaller #0 PREEMPT(none) [ 422.468879][ T8576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 422.468958][ T8576] Call Trace: [ 422.469006][ T8576] [ 422.469057][ T8576] __dump_stack+0x26/0x30 [ 422.469227][ T8576] dump_stack_lvl+0x1df/0x270 [ 422.469402][ T8576] dump_stack+0x1e/0x25 [ 422.469552][ T8576] f2fs_handle_critical_error+0xa6f/0xc20 [ 422.469783][ T8576] f2fs_stop_checkpoint+0x65/0x80 [ 422.469976][ T8576] f2fs_write_end_io+0x101c/0x1bc0 [ 422.470146][ T8576] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 422.470277][ T8576] bio_endio+0xeb1/0x1010 [ 422.470438][ T8576] submit_bio_noacct+0x213/0x2750 [ 422.470643][ T8576] submit_bio+0x57c/0x630 [ 422.470813][ T8576] f2fs_submit_write_bio+0x92/0x250 [ 422.470991][ T8576] __submit_merged_bio+0x16f/0x6a0 [ 422.471166][ T8576] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 422.471334][ T8576] __submit_merged_write_cond+0x458/0x9a0 [ 422.471519][ T8576] f2fs_write_data_pages+0x4bb2/0x5480 [ 422.471825][ T8576] ? kmsan_get_metadata+0xfb/0x160 [ 422.471972][ T8576] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 422.472124][ T8576] ? folios_put_refs+0x21/0xb10 [ 422.472284][ T8576] ? filter_irq_stacks+0x49/0x190 [ 422.472415][ T8576] ? stack_depot_save_flags+0x35/0x7b0 [ 422.472541][ T8576] ? lru_gen_add_folio+0xd66/0x1190 [ 422.472729][ T8576] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 422.472875][ T8576] ? kmsan_get_metadata+0xfb/0x160 [ 422.473023][ T8576] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 422.473177][ T8576] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 422.473362][ T8576] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 422.473563][ T8576] do_writepages+0x3f2/0x860 [ 422.473705][ T8576] ? _raw_spin_unlock+0x30/0x50 [ 422.473868][ T8576] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 422.474080][ T8576] filemap_fdatawrite+0x207/0x260 [ 422.474324][ T8576] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 422.474501][ T8576] f2fs_write_checkpoint+0xfe2/0x2b00 [ 422.474778][ T8576] f2fs_issue_checkpoint+0x491/0x700 [ 422.474921][ T8576] ? kmsan_get_metadata+0xfb/0x160 [ 422.475075][ T8576] ? kmsan_get_metadata+0xfb/0x160 [ 422.475230][ T8576] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 422.475397][ T8576] f2fs_sync_fs+0x1ee/0x440 [ 422.475579][ T8576] f2fs_do_sync_file+0xdcd/0x31c0 [ 422.475847][ T8576] f2fs_sync_file+0x107/0x180 [ 422.476000][ T8576] ? __pfx_f2fs_sync_file+0x10/0x10 [ 422.476153][ T8576] __x64_sys_fdatasync+0x129/0x260 [ 422.476335][ T8576] x64_sys_call+0x3d70/0x3e20 [ 422.476514][ T8576] do_syscall_64+0xd9/0x210 [ 422.476640][ T8576] ? irqentry_exit+0x16/0x60 [ 422.476807][ T8576] ? clear_bhb_loop+0x40/0x90 [ 422.476951][ T8576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.477092][ T8576] RIP: 0033:0x7f157678ec29 [ 422.477189][ T8576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.477305][ T8576] RSP: 002b:00007f1577627038 EFLAGS: 00000246 ORIG_RAX: 000000000000004b [ 422.477431][ T8576] RAX: ffffffffffffffda RBX: 00007f15769d5fa0 RCX: 00007f157678ec29 [ 422.477530][ T8576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 422.477611][ T8576] RBP: 00007f1576811e41 R08: 0000000000000000 R09: 0000000000000000 [ 422.477695][ T8576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.477780][ T8576] R13: 00007f15769d6038 R14: 00007f15769d5fa0 R15: 00007ffea0366048 [ 422.477900][ T8576] [ 422.779527][ T8588] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 422.787615][ T8576] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 422.791951][ T8588] overlayfs: failed to set xattr on upper [ 422.847407][ T8588] overlayfs: ...falling back to redirect_dir=nofollow. [ 422.854610][ T8588] overlayfs: ...falling back to index=off. [ 422.860553][ T8588] overlayfs: ...falling back to xino=off. [ 422.867467][ T8588] overlayfs: conflicting lowerdir path [ 423.163098][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 424.207122][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 425.108293][ T8609] netlink: 'syz.6.835': attribute type 9 has an invalid length. [ 425.117692][ T8609] netlink: 32 bytes leftover after parsing attributes in process `syz.6.835'. [ 425.243092][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 425.559279][ T8614] evm: overlay not supported [ 425.818482][ T8618] netlink: 'syz.3.837': attribute type 12 has an invalid length. [ 425.826784][ T8618] netlink: 'syz.3.837': attribute type 29 has an invalid length. [ 425.834961][ T8618] netlink: 148 bytes leftover after parsing attributes in process `syz.3.837'. [ 426.285094][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 426.285130][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 427.323068][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 427.491748][ T8634] loop0: detected capacity change from 0 to 40427 [ 427.544275][ T8634] F2FS-fs (loop0): invalid crc value [ 427.835922][ T8634] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 427.854700][ T8634] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 427.975163][ T8634] syz.0.844: attempt to access beyond end of device [ 427.975163][ T8634] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 427.990501][ T8634] syz.0.844: attempt to access beyond end of device [ 427.990501][ T8634] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 428.092181][ T5805] syz-executor: attempt to access beyond end of device [ 428.092181][ T5805] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 428.107578][ T5805] CPU: 1 UID: 0 PID: 5805 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 428.107705][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 428.107781][ T5805] Call Trace: [ 428.107826][ T5805] [ 428.107870][ T5805] __dump_stack+0x26/0x30 [ 428.108028][ T5805] dump_stack_lvl+0x1df/0x270 [ 428.108193][ T5805] dump_stack+0x1e/0x25 [ 428.108337][ T5805] f2fs_handle_critical_error+0xa6f/0xc20 [ 428.108560][ T5805] f2fs_stop_checkpoint+0x65/0x80 [ 428.108733][ T5805] f2fs_write_end_io+0x101c/0x1bc0 [ 428.108906][ T5805] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 428.109036][ T5805] bio_endio+0xeb1/0x1010 [ 428.109187][ T5805] submit_bio_noacct+0x213/0x2750 [ 428.109404][ T5805] submit_bio+0x57c/0x630 [ 428.109560][ T5805] f2fs_submit_write_bio+0x92/0x250 [ 428.109737][ T5805] __submit_merged_bio+0x16f/0x6a0 [ 428.109905][ T5805] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 428.110060][ T5805] __submit_merged_write_cond+0x458/0x9a0 [ 428.110246][ T5805] f2fs_write_data_pages+0x4bb2/0x5480 [ 428.110571][ T5805] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 428.110735][ T5805] ? folios_put_refs+0x21/0xb10 [ 428.110901][ T5805] ? filter_irq_stacks+0x49/0x190 [ 428.111027][ T5805] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 428.111189][ T5805] ? stack_depot_save_flags+0x35/0x7b0 [ 428.111322][ T5805] ? kmsan_get_metadata+0xfb/0x160 [ 428.111481][ T5805] ? kmsan_get_metadata+0xfb/0x160 [ 428.111630][ T5805] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 428.111782][ T5805] ? kmsan_get_metadata+0xfb/0x160 [ 428.111932][ T5805] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 428.112085][ T5805] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 428.112272][ T5805] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 428.112463][ T5805] do_writepages+0x3f2/0x860 [ 428.112605][ T5805] ? _raw_spin_unlock+0x30/0x50 [ 428.112760][ T5805] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 428.112962][ T5805] filemap_fdatawrite+0x207/0x260 [ 428.113204][ T5805] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 428.113383][ T5805] f2fs_write_checkpoint+0xfe2/0x2b00 [ 428.113652][ T5805] kill_f2fs_super+0x2ff/0x970 [ 428.113809][ T5805] ? __pfx_kill_f2fs_super+0x10/0x10 [ 428.113942][ T5805] deactivate_locked_super+0xcb/0x3c0 [ 428.114097][ T5805] deactivate_super+0x12f/0x140 [ 428.114234][ T5805] cleanup_mnt+0x6fb/0x780 [ 428.114394][ T5805] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 428.114550][ T5805] ? __pfx___cleanup_mnt+0x10/0x10 [ 428.114717][ T5805] __cleanup_mnt+0x22/0x30 [ 428.114876][ T5805] task_work_run+0x206/0x2b0 [ 428.115033][ T5805] exit_to_user_mode_loop+0x2a6/0x330 [ 428.115192][ T5805] do_syscall_64+0x1e3/0x210 [ 428.115316][ T5805] ? irqentry_exit+0x16/0x60 [ 428.115478][ T5805] ? clear_bhb_loop+0x40/0x90 [ 428.115621][ T5805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.115762][ T5805] RIP: 0033:0x7f157678ff57 [ 428.115861][ T5805] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 428.115977][ T5805] RSP: 002b:00007ffea03652d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 428.116102][ T5805] RAX: 0000000000000000 RBX: 00007f1576811c2d RCX: 00007f157678ff57 [ 428.116192][ T5805] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea0365390 [ 428.116277][ T5805] RBP: 00007ffea0365390 R08: 0000000000000000 R09: 0000000000000000 [ 428.116366][ T5805] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffea0366420 [ 428.116452][ T5805] R13: 00007f1576811c2d R14: 00000000000687df R15: 00007ffea0366460 [ 428.116575][ T5805] [ 428.363093][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 428.372243][ T5805] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 428.397530][ T8663] fuse: Bad value for 'fd' [ 428.620507][ T58] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 429.403131][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 430.003727][ T8672] loop5: detected capacity change from 0 to 512 [ 430.093880][ T8668] loop6: detected capacity change from 0 to 32768 [ 430.105812][ T8672] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 430.178415][ T8674] netlink: 152 bytes leftover after parsing attributes in process `syz.1.858'. [ 430.203983][ T8668] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 430.327548][ T8668] XFS (loop6): Ending clean mount [ 430.338798][ T8668] XFS (loop6): Quotacheck needed: Please wait. [ 430.410373][ T8668] XFS (loop6): Quotacheck: Done. [ 430.432642][ T30] audit: type=1800 audit(1758495618.605:75): pid=8668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.855" name="file1" dev="loop6" ino=6150 res=0 errno=0 [ 430.443098][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 430.626668][ T7161] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 431.470623][ T8693] loop0: detected capacity change from 0 to 128 [ 431.483086][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 431.519971][ T8689] loop3: detected capacity change from 0 to 32768 [ 431.580953][ T8693] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 431.643990][ T8693] hpfs: filesystem error: improperly stopped [ 431.650231][ T8693] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 431.658422][ T8693] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 431.668977][ T8693] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000003 [ 431.786003][ T8689] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 432.031232][ T7760] ocfs2: Unmounting device (7,3) on (node local) [ 432.533087][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 432.999694][ T8701] loop5: detected capacity change from 0 to 32768 [ 433.019032][ T8701] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.863 (8701) [ 433.097042][ T8701] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 433.107753][ T8701] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 433.385196][ T8701] BTRFS info (device loop5): rebuilding free space tree [ 433.485965][ T8701] BTRFS info (device loop5): setting nodatasum [ 433.492345][ T8701] BTRFS info (device loop5): enabling ssd optimizations [ 433.499749][ T8701] BTRFS info (device loop5): enabling free space tree [ 433.506826][ T8701] BTRFS info (device loop5): force clearing of disk cache [ 433.514237][ T8701] BTRFS info (device loop5): enabling auto defrag [ 433.520835][ T8701] BTRFS info (device loop5): force zlib compression, level 3 [ 433.563098][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 433.918490][ T6425] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 434.603056][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 435.794665][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 436.398732][ T8752] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 436.527617][ T5806] Bluetooth: hci2: command 0x0406 tx timeout [ 436.843100][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 437.724393][ T5873] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 437.883191][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 437.902731][ T5873] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 437.912386][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.938159][ T8773] binder: 8771:8773 ioctl c0306201 200000000080 returned -14 [ 437.956292][ T5873] usb 2-1: config 0 descriptor?? [ 438.224063][ T5873] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 438.348003][ T8777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.923141][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 439.034038][ T5450] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 439.126917][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'. [ 439.213707][ T5450] usb 1-1: Using ep0 maxpacket: 32 [ 439.249553][ T5450] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.261495][ T5450] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.271758][ T5450] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 439.286211][ T5450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.963063][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.281391][ T8789] loop5: detected capacity change from 0 to 40427 [ 440.288738][ T5873] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 440.299182][ T5873] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 440.317773][ T5873] asix 2-1:0.0: probe with driver asix failed with error -71 [ 440.338564][ T5450] usb 1-1: config 0 descriptor?? [ 440.347789][ T5873] usb 2-1: USB disconnect, device number 6 [ 440.361929][ T5450] hub 1-1:0.0: USB hub found [ 440.368259][ T8789] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 440.377565][ T8789] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 440.419576][ T8789] F2FS-fs (loop5): invalid crc value [ 440.554979][ T8800] loop3: detected capacity change from 0 to 128 [ 440.763582][ T5450] hub 1-1:0.0: 1 port detected [ 440.773943][ T8789] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 440.808139][ T8789] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 440.815770][ T8789] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 440.870208][ T8789] syz.5.893: attempt to access beyond end of device [ 440.870208][ T8789] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 441.003163][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 441.269364][ T8805] loop6: detected capacity change from 0 to 8192 [ 441.600576][ T5450] hub 1-1:0.0: activate --> -90 [ 441.888005][ T5873] usb 1-1: USB disconnect, device number 10 [ 441.951743][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.043088][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.136843][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.279636][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.453000][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.884221][ T35] bridge_slave_1: left allmulticast mode [ 442.890144][ T35] bridge_slave_1: left promiscuous mode [ 442.897079][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.942541][ T35] bridge_slave_0: left allmulticast mode [ 442.948475][ T35] bridge_slave_0: left promiscuous mode [ 442.955170][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.083102][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 443.554937][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.588353][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.605151][ T35] bond0 (unregistering): Released all slaves [ 443.974130][ T35] hsr_slave_0: left promiscuous mode [ 444.003369][ T35] hsr_slave_1: left promiscuous mode [ 444.011398][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.019280][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.123059][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 444.139665][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.147662][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.265494][ T30] audit: type=1326 audit(1758495632.445:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.6.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d8b8ec29 code=0x7fc00000 [ 444.269114][ T35] veth1_macvtap: left promiscuous mode [ 444.294613][ T35] veth0_macvtap: left promiscuous mode [ 444.306384][ T35] veth1_vlan: left promiscuous mode [ 444.311935][ T35] veth0_vlan: left promiscuous mode [ 444.443667][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 444.748337][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.759897][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.770202][ T24] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 444.779654][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.873121][ T30] audit: type=1326 audit(1758495633.005:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8818 comm="syz.6.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa7d8b8ec29 code=0x7fc00000 [ 444.955095][ T24] usb 6-1: config 0 descriptor?? [ 445.163072][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 445.313462][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 445.315710][ T35] team0 (unregistering): Port device team_slave_1 removed [ 445.356166][ T35] team0 (unregistering): Port device team_slave_0 removed [ 445.405267][ T5806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 445.480260][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 445.493638][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 445.504964][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 445.814193][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 445.820722][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 446.030659][ T24] usb 6-1: USB disconnect, device number 12 [ 446.066185][ T8839] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 446.188553][ T8845] Bluetooth: MGMT ver 1.23 [ 446.203071][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 446.586050][ T8839] bridge_slave_0: left allmulticast mode [ 446.591922][ T8839] bridge_slave_0: left promiscuous mode [ 446.598739][ T8839] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.687566][ T8839] bridge_slave_1: left allmulticast mode [ 446.693674][ T8839] bridge_slave_1: left promiscuous mode [ 446.700275][ T8839] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.845868][ T8839] bond0: (slave bond_slave_0): Releasing backup interface [ 446.913927][ T8839] bond0: (slave bond_slave_1): Releasing backup interface [ 446.989887][ T8839] team0: Port device team_slave_0 removed [ 447.049194][ T8839] team0: Port device team_slave_1 removed [ 447.060089][ T8839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.072349][ T8839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.126102][ T8839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.134722][ T8839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.243145][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 447.613743][ T5816] Bluetooth: hci3: command tx timeout [ 448.283148][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 448.461765][ T8878] netlink: 24 bytes leftover after parsing attributes in process `syz.5.924'. [ 448.555285][ T8870] loop0: detected capacity change from 0 to 32768 [ 448.566117][ T8870] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.920 (8870) [ 448.593551][ T8870] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 448.611590][ T8870] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 448.683217][ T8835] chnl_net:caif_netlink_parms(): no params data found [ 448.899759][ T8870] BTRFS info (device loop0): setting nodatasum [ 448.914323][ T8870] BTRFS info (device loop0): setting nodatacow [ 448.920692][ T8870] BTRFS info (device loop0): enabling free space tree [ 448.927889][ T8870] BTRFS info (device loop0): enabling auto defrag [ 448.934717][ T8870] BTRFS info (device loop0): max_inline set to 0 [ 449.208949][ T5805] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 449.323139][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 449.586883][ T8910] loop6: detected capacity change from 0 to 1024 [ 449.603306][ T8910] EXT4-fs: Ignoring removed nomblk_io_submit option [ 449.644581][ T5816] Bluetooth: hci3: command tx timeout [ 449.661999][ T8835] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.670105][ T8835] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.677928][ T8835] bridge_slave_0: entered allmulticast mode [ 449.687415][ T8835] bridge_slave_0: entered promiscuous mode [ 449.798712][ T8910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.808781][ T8835] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.838967][ T8835] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.846827][ T8835] bridge_slave_1: entered allmulticast mode [ 449.856221][ T8835] bridge_slave_1: entered promiscuous mode [ 449.991719][ T8835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.076244][ T8835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.363037][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 450.376003][ T8835] team0: Port device team_slave_0 added [ 450.411048][ T8835] team0: Port device team_slave_1 added [ 450.602702][ T8835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.610224][ T8835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.636519][ T8835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.746455][ T8835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.757276][ T8835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.785285][ T8835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.110553][ T7161] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.170695][ T8835] hsr_slave_0: entered promiscuous mode [ 451.180621][ T8835] hsr_slave_1: entered promiscuous mode [ 451.189209][ T8835] debugfs: 'hsr0' already exists in 'hsr' [ 451.195184][ T8835] Cannot create hsr debugfs directory [ 451.403338][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 451.723595][ T5816] Bluetooth: hci3: command tx timeout [ 451.798389][ T8937] loop6: detected capacity change from 0 to 2048 [ 451.896483][ T8937] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 452.443084][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 452.829942][ T8835] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 452.943217][ T8835] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 453.011999][ T5816] Bluetooth: hci2: unexpected event for opcode 0x041b [ 453.048997][ T8835] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 453.060725][ T8953] input: syz0 as /devices/virtual/input/input15 [ 453.124689][ T8835] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 453.483105][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 453.807636][ T5816] Bluetooth: hci3: command tx timeout [ 453.959125][ T8835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.100291][ T8835] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.168278][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.175927][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.247193][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.254837][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.523124][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 454.619093][ C1] ===================================================== [ 454.626560][ C1] BUG: KMSAN: uninit-value in can_receive+0x12c/0x4a0 [ 454.633547][ C1] can_receive+0x12c/0x4a0 [ 454.638109][ C1] can_rcv+0x1ff/0x3b0 [ 454.642324][ C1] __netif_receive_skb+0x474/0xac0 [ 454.647697][ C1] process_backlog+0x485/0xa00 [ 454.652589][ C1] __napi_poll+0xda/0x8a0 [ 454.657170][ C1] net_rx_action+0xa59/0x1ac0 [ 454.662089][ C1] handle_softirqs+0x166/0x6e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 454.667072][ C1] __do_softirq+0x14/0x1b [ 454.671638][ C1] do_softirq+0x99/0x100 [ 454.676092][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 454.681251][ C1] _raw_spin_unlock_bh+0x2d/0x40 [ 454.686445][ C1] release_sock+0x21d/0x270 [ 454.691123][ C1] j1939_sk_sendmsg+0xeb/0x2760 [ 454.696223][ C1] __sock_sendmsg+0x333/0x3d0 [ 454.701050][ C1] ____sys_sendmsg+0x893/0xd80 [ 454.706071][ C1] ___sys_sendmsg+0x271/0x3b0 [ 454.710923][ C1] __sys_sendmmsg+0x2d9/0x7c0 [ 454.715871][ C1] __x64_sys_sendmmsg+0xc6/0x150 [ 454.720984][ C1] x64_sys_call+0x21de/0x3e20 [ 454.725910][ C1] do_syscall_64+0xd9/0x210 [ 454.730542][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.736666][ C1] [ 454.739054][ C1] Uninit was created at: [ 454.743564][ C1] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 454.750244][ C1] kmalloc_reserve+0x22f/0x4b0 [ 454.755234][ C1] pskb_expand_head+0x1fc/0x1610 [ 454.760353][ C1] do_xdp_generic+0xa79/0x1690 [ 454.765368][ C1] __netif_receive_skb_core+0x2524/0x6df0 [ 454.771277][ C1] __netif_receive_skb+0xcc/0xac0 [ 454.776557][ C1] process_backlog+0x485/0xa00 [ 454.781457][ C1] __napi_poll+0xda/0x8a0 [ 454.786033][ C1] net_rx_action+0xa59/0x1ac0 [ 454.790856][ C1] handle_softirqs+0x166/0x6e0 [ 454.795833][ C1] __do_softirq+0x14/0x1b [ 454.800325][ C1] [ 454.802724][ C1] CPU: 1 UID: 0 PID: 8978 Comm: syz.0.955 Not tainted syzkaller #0 PREEMPT(none) [ 454.812153][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 454.822404][ C1] ===================================================== [ 454.829506][ C1] Disabling lock debugging due to kernel taint [ 454.835830][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 454.842367][ C1] CPU: 1 UID: 0 PID: 8978 Comm: syz.0.955 Tainted: G B syzkaller #0 PREEMPT(none) [ 454.853314][ C1] Tainted: [B]=BAD_PAGE [ 454.857647][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 454.867813][ C1] Call Trace: [ 454.871177][ C1] [ 454.874095][ C1] __dump_stack+0x26/0x30 [ 454.878602][ C1] dump_stack_lvl+0x53/0x270 [ 454.883384][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 454.889371][ C1] dump_stack+0x1e/0x25 [ 454.893692][ C1] vpanic+0x361/0xc50 [ 454.897895][ C1] panic+0x15d/0x160 [ 454.901985][ C1] kmsan_report+0x31c/0x320 [ 454.906631][ C1] ? __msan_warning+0x1b/0x30 [ 454.911430][ C1] ? can_receive+0x12c/0x4a0 [ 454.916141][ C1] ? can_rcv+0x1ff/0x3b0 [ 454.920491][ C1] ? __netif_receive_skb+0x474/0xac0 [ 454.925950][ C1] ? process_backlog+0x485/0xa00 [ 454.931018][ C1] ? __napi_poll+0xda/0x8a0 [ 454.935689][ C1] ? net_rx_action+0xa59/0x1ac0 [ 454.940664][ C1] ? handle_softirqs+0x166/0x6e0 [ 454.945721][ C1] ? __do_softirq+0x14/0x1b [ 454.950378][ C1] ? do_softirq+0x99/0x100 [ 454.954913][ C1] ? __local_bh_enable_ip+0xa1/0xb0 [ 454.960234][ C1] ? _raw_spin_unlock_bh+0x2d/0x40 [ 454.965517][ C1] ? release_sock+0x21d/0x270 [ 454.970350][ C1] ? j1939_sk_sendmsg+0xeb/0x2760 [ 454.975524][ C1] ? __sock_sendmsg+0x333/0x3d0 [ 454.980506][ C1] ? ____sys_sendmsg+0x893/0xd80 [ 454.985604][ C1] ? ___sys_sendmsg+0x271/0x3b0 [ 454.990607][ C1] ? __sys_sendmmsg+0x2d9/0x7c0 [ 454.995606][ C1] ? __x64_sys_sendmmsg+0xc6/0x150 [ 455.000871][ C1] ? x64_sys_call+0x21de/0x3e20 [ 455.005884][ C1] ? do_syscall_64+0xd9/0x210 [ 455.010676][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.016903][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 455.022155][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 455.028111][ C1] ? __netif_receive_skb_core+0x6670/0x6df0 [ 455.034183][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 455.039431][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 455.045397][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 455.050643][ C1] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 455.057109][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 455.062372][ C1] __msan_warning+0x1b/0x30 [ 455.066998][ C1] can_receive+0x12c/0x4a0 [ 455.071553][ C1] can_rcv+0x1ff/0x3b0 [ 455.075735][ C1] ? __pfx_can_rcv+0x10/0x10 [ 455.080437][ C1] __netif_receive_skb+0x474/0xac0 [ 455.085716][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 455.090994][ C1] process_backlog+0x485/0xa00 [ 455.095920][ C1] ? __pfx_process_backlog+0x10/0x10 [ 455.101320][ C1] __napi_poll+0xda/0x8a0 [ 455.105813][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 455.111060][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 455.117025][ C1] net_rx_action+0xa59/0x1ac0 [ 455.121816][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 455.127061][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 455.133064][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 455.138302][ C1] handle_softirqs+0x166/0x6e0 [ 455.143225][ C1] __do_softirq+0x14/0x1b [ 455.147713][ C1] do_softirq+0x99/0x100 [ 455.152069][ C1] [ 455.155062][ C1] [ 455.158064][ C1] __local_bh_enable_ip+0xa1/0xb0 [ 455.163226][ C1] _raw_spin_unlock_bh+0x2d/0x40 [ 455.168354][ C1] release_sock+0x21d/0x270 [ 455.173021][ C1] j1939_sk_sendmsg+0xeb/0x2760 [ 455.178062][ C1] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 455.183561][ C1] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 455.189094][ C1] __sock_sendmsg+0x333/0x3d0 [ 455.193901][ C1] ____sys_sendmsg+0x893/0xd80 [ 455.198851][ C1] ___sys_sendmsg+0x271/0x3b0 [ 455.203706][ C1] ? __rcu_read_unlock+0x6d/0xd0 [ 455.208769][ C1] ? __fget_files+0x3b4/0x4a0 [ 455.213600][ C1] ? __fget_files+0x3b9/0x4a0 [ 455.218435][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 455.223714][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 455.229675][ C1] __sys_sendmmsg+0x2d9/0x7c0 [ 455.234516][ C1] ? do_futex+0x3a1/0x480 [ 455.238988][ C1] ? kmsan_get_metadata+0xfb/0x160 [ 455.244260][ C1] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 455.250746][ C1] __x64_sys_sendmmsg+0xc6/0x150 [ 455.255861][ C1] x64_sys_call+0x21de/0x3e20 [ 455.260712][ C1] do_syscall_64+0xd9/0x210 [ 455.265332][ C1] ? irqentry_exit+0x16/0x60 [ 455.270079][ C1] ? clear_bhb_loop+0x40/0x90 [ 455.274890][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.280909][ C1] RIP: 0033:0x7f157678ec29 [ 455.285499][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.305233][ C1] RSP: 002b:00007f1577627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 455.313779][ C1] RAX: ffffffffffffffda RBX: 00007f15769d5fa0 RCX: 00007f157678ec29 [ 455.321850][ C1] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000003 [ 455.329917][ C1] RBP: 00007f1576811e41 R08: 0000000000000000 R09: 0000000000000000 [ 455.337978][ C1] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000000 [ 455.346045][ C1] R13: 00007f15769d6038 R14: 00007f15769d5fa0 R15: 00007ffea0366048 [ 455.354177][ C1] [ 455.357648][ C1] Kernel Offset: disabled [ 455.362039][ C1] Rebooting in 86400 seconds..